$ rpki-client -vvf rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft File: i9g61zjcTFeYTcLssh1ekBm7yMo.mft (raw, json) Hash identifier: q4uZlVxmY6OS9lBVO3+6tcKLwnlC426RtY/yxBdTWo8= Subject key identifier: 28:65:37:9E:26:B1:D4:87:0C:08:DE:3D:C8:5B:C5:3D:3B:CA:05:9B Authority key identifier: 8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA Certificate issuer: /CN=A917CC94/serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA Certificate serial: 0A96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft Manifest number: 0A8D Signing time: Fri 22 Nov 2024 19:21:23 +0000 Manifest this update: Fri 22 Nov 2024 19:21:22 +0000 Manifest next update: Fri 29 Nov 2024 19:21:22 +0000 Files and hashes: 1: i9g61zjcTFeYTcLssh1ekBm7yMo.crl (hash: /dv+1/iYFNNoKBynfj7A0usOJ3R1EjbMjibWfG4laiM=) 2: E1CA8E9C1E5F11EFA3C7AD2CC4F9AE02.roa (hash: MWKLZiOc08RILxXpK+iaUMCsApmEE9erpdjwjbLbXdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.crl rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2710 (0xa96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CC94/serialNumber=8BD83AD738DC4C57984DC2ECB21D5E9019BBC8CA Validity Not Before: Nov 22 19:21:22 2024 GMT Not After : Nov 29 19:21:22 2024 GMT Subject: CN=6740d9b3-0bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bd:d7:7e:8f:2e:a2:17:0a:a7:a4:6c:18:28: ff:fa:5f:77:92:10:d8:29:fa:c7:de:74:60:78:2d: 10:dd:81:56:55:42:99:c8:4f:e2:71:c8:ca:61:2a: 22:34:67:98:82:d4:29:df:4a:93:1c:91:5d:09:08: e0:0a:13:7b:ad:df:40:80:1f:97:70:11:3d:24:ff: 6a:78:62:ec:16:30:4c:9a:e8:8f:50:32:6b:df:a8: bf:13:5e:4e:74:44:74:b0:ed:c1:d6:c9:c0:61:fe: aa:14:40:a7:79:03:6f:27:a7:c4:fc:3d:23:d9:ce: 5c:5f:f4:f1:8c:bf:1d:d6:6d:8b:32:9f:98:33:25: cc:57:72:c7:df:57:eb:7a:fb:5d:43:86:1a:2f:99: 8f:ae:1f:33:00:fa:64:8b:30:9f:00:97:27:ae:5c: d9:18:3c:2e:d2:2b:71:c8:0e:a2:e4:08:08:19:a8: a9:46:66:c2:66:d5:36:bd:60:05:ce:45:d0:2c:af: 65:a7:ea:57:10:83:e5:a9:5b:c3:75:2e:21:d0:3b: e8:9e:a8:9b:7f:06:e3:a9:2c:e4:92:22:a9:bd:91: 10:36:05:d8:af:47:84:9c:e4:84:f7:b6:59:7a:56: ba:93:ef:55:b2:06:b3:b8:29:12:ab:d0:fe:43:5f: d8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:65:37:9E:26:B1:D4:87:0C:08:DE:3D:C8:5B:C5:3D:3B:CA:05:9B X509v3 Authority Key Identifier: keyid:8B:D8:3A:D7:38:DC:4C:57:98:4D:C2:EC:B2:1D:5E:90:19:BB:C8:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9g61zjcTFeYTcLssh1ekBm7yMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CC94/66DEBE6447F011EA83E3E71BC4F9AE02/i9g61zjcTFeYTcLssh1ekBm7yMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:bd:87:29:0e:86:2c:3b:77:8d:56:a3:90:39:79:61:dc:e1: 13:1f:8b:50:f8:57:9e:a0:31:5a:b7:71:c5:bb:06:dc:70:01: ea:8b:44:e4:35:82:53:36:33:88:94:92:a2:b3:58:c0:a7:f4: dd:94:f7:20:dc:25:0b:81:94:f0:44:ee:f1:de:4a:0f:02:a3: a0:a1:4b:b0:c4:39:f5:4d:7e:8d:4d:20:f7:6c:55:0b:53:d5: a1:4b:6a:f2:1e:e8:da:c8:a1:84:a2:2d:d5:fb:56:d7:0c:7a: a8:8a:0d:cf:3a:95:f3:c8:83:0d:e6:72:ca:f0:dc:41:0d:6a: 7d:4c:b3:16:24:c0:45:71:2c:20:a1:ca:d0:d7:31:b0:99:56: 84:9e:ba:80:3b:8f:1c:87:ff:78:bf:17:07:56:a0:de:4a:c0: 57:78:83:47:9d:43:19:9e:2d:bf:4b:50:78:12:bd:e2:70:57: b0:33:65:9c:23:96:21:66:78:eb:45:49:6c:0e:67:b7:cb:52: 72:75:dd:23:62:c9:10:6d:b2:f2:4c:02:82:bc:f0:1f:53:2c: 77:c0:ae:bd:6f:39:df:44:04:e1:0a:4c:66:97:a4:dc:11:c0: fc:62:e8:0e:80:02:7f:e5:a4:06:6b:65:bd:a7:e7:21:0e:a6: 09:8e:e6:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NDOTQxMTAvBgNVBAUTKDhCRDgzQUQ3MzhEQzRDNTc5ODREQzJFQ0IyMUQ1RTkw MTlCQkM4Q0EwHhcNMjQxMTIyMTkyMTIyWhcNMjQxMTI5MTkyMTIyWjAYMRYwFAYD VQQDEw02NzQwZDliMy0wYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA473Xfo8uohcKp6RsGCj/+l93khDYKfrH3nRgeC0Q3YFWVUKZyE/iccjKYSoi NGeYgtQp30qTHJFdCQjgChN7rd9AgB+XcBE9JP9qeGLsFjBMmuiPUDJr36i/E15O dER0sO3B1snAYf6qFECneQNvJ6fE/D0j2c5cX/TxjL8d1m2LMp+YMyXMV3LH31fr evtdQ4YaL5mPrh8zAPpkizCfAJcnrlzZGDwu0itxyA6i5AgIGaipRmbCZtU2vWAF zkXQLK9lp+pXEIPlqVvDdS4h0DvonqibfwbjqSzkkiKpvZEQNgXYr0eEnOSE97ZZ ela6k+9VsgazuCkSq9D+Q1/Y2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChlN54m sdSHDAjePchbxT07ygWbMB8GA1UdIwQYMBaAFIvYOtc43ExXmE3C7LIdXpAZu8jK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0M5NC82NkRFQkU2NDQ3 RjAxMUVBODNFM0U3MUJDNEY5QUUwMi9pOWc2MXpqY1RGZVlUY0xzc2gxZWtCbTd5 TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5ZzYxempjVEZlWVRjTHNzaDFla0JtN3lNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0M5NC82NkRFQkU2NDQ3RjAxMUVBODNFM0U3MUJDNEY5QUUwMi9pOWc2MXpqY1RG ZVlUY0xzc2gxZWtCbTd5TW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUvYcpDoYsO3eNVqOQOXlh3OETH4tQ+FeeoDFat3HFuwbccAHqi0Tk NYJTNjOIlJKis1jAp/TdlPcg3CULgZTwRO7x3koPAqOgoUuwxDn1TX6NTSD3bFUL U9WhS2ryHujayKGEoi3V+1bXDHqoig3POpXzyIMN5nLK8NxBDWp9TLMWJMBFcSwg ocrQ1zGwmVaEnrqAO48ch/94vxcHVqDeSsBXeINHnUMZni2/S1B4Er3icFewM2Wc I5YhZnjrRUlsDme3y1Jydd0jYskQbbLyTAKCvPAfUyx3wK69bznfRAThCkxml6Tc EcD8YugOgAJ/5aQGa2W9p+chDqYJjuYW -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:31 2024 by rpki-client on console-ams.rpki-client.org