$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft File: RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json) Hash identifier: JYsjbecC55bO1rvuzlr6jhr/cnHabzJ12yAvhVknR1c= Subject key identifier: 44:D5:D7:E3:EF:9A:12:B6:A5:E4:1C:9E:42:4B:5B:FD:5D:8A:7C:B4 Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Certificate serial: 1234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft Manifest number: 122D Signing time: Fri 22 Nov 2024 17:08:12 +0000 Manifest this update: Fri 22 Nov 2024 17:08:12 +0000 Manifest next update: Fri 29 Nov 2024 17:08:12 +0000 Files and hashes: 1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: U5ciiAyNfnvi41yR7S+3Om0Tav1Ya/3bbLklQWilRr8=) 2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: 4z3M5HiueuxSghgC74Ahy0/LyTUAqKseWIGsOSeClyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4660 (0x1234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3 Validity Not Before: Nov 22 17:08:12 2024 GMT Not After : Nov 29 17:08:12 2024 GMT Subject: CN=6740ba7c-793e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:15:a9:1d:72:22:2f:18:c1:1d:0c:f9:2e:62: 1e:00:2e:b3:25:56:cb:e4:31:79:45:42:39:dc:63: 9c:0c:22:47:18:71:32:d4:a4:4c:ee:e5:7d:0d:05: 4e:84:7a:2f:57:29:b6:eb:85:68:7a:92:10:ec:4b: a7:2f:97:01:bf:a1:c1:bb:f1:23:b0:95:dd:6a:e2: 02:c2:5c:2a:f8:05:b1:f7:12:06:d7:3e:f8:9f:10: 7c:83:37:c7:1d:38:ec:a0:e4:50:27:63:6d:f7:bc: da:46:b5:f5:30:0c:9f:84:7d:4c:e4:20:91:ea:29: 38:49:64:d0:37:d9:04:9d:97:22:82:d7:39:af:44: f1:b9:54:d9:2a:14:a5:c6:66:7c:06:e7:07:84:57: 92:da:9a:03:68:f7:a4:87:8d:b9:0d:8f:7f:ee:7e: cf:98:bb:15:a6:44:3a:2c:d6:bd:6a:80:fe:bf:85: f2:87:26:ec:89:90:ff:d7:44:bb:56:42:79:23:ac: b6:a9:b4:f1:ad:3b:04:e4:df:09:01:6b:a9:28:e6: 0d:a8:96:27:ad:22:f6:36:23:d3:b3:79:4c:c2:c9: a7:6b:c6:12:16:1e:21:54:f2:ef:7b:e0:1d:92:fc: 4e:16:b4:8d:ef:7c:63:01:cd:6d:fe:05:08:0b:6d: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D5:D7:E3:EF:9A:12:B6:A5:E4:1C:9E:42:4B:5B:FD:5D:8A:7C:B4 X509v3 Authority Key Identifier: keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:0b:ff:37:f6:98:59:0c:7f:87:14:fd:61:72:77:d0:b2:55: 4c:f9:09:d0:04:b4:05:2c:da:07:11:2d:2c:79:1f:f0:42:f4: d0:a8:81:a1:d0:97:e4:10:22:5a:bf:88:34:13:6c:e2:09:ab: 6e:6a:da:12:86:c4:fc:54:46:e8:89:62:a8:67:d6:ad:f6:2c: c8:62:2f:ac:e3:4f:36:35:36:d8:89:41:8a:3b:50:7e:81:39: ac:b2:f6:97:bb:5a:18:8a:c5:34:bd:08:eb:17:cc:e6:0d:24: 13:79:92:b2:65:38:43:79:f2:e3:cb:ff:e0:73:19:33:3c:47: 20:b7:7e:06:6e:e5:46:81:6b:7b:b0:3b:3b:d9:40:1e:0e:f8: 74:5b:40:55:20:fd:10:74:88:35:85:24:c1:17:50:9b:e5:7b: 33:f2:ce:09:5a:c7:2e:54:48:a4:5d:c1:f1:f4:63:e7:3b:d6: cb:58:56:a9:e4:ae:3e:a3:33:c3:d4:a8:3d:76:0a:9a:40:f9: 30:ce:fe:51:9a:dc:6a:f4:cd:8d:27:60:60:3a:8e:23:80:bd: 4f:9f:dc:2d:4e:66:d9:ab:d9:7d:c0:ee:6e:d5:8e:41:b0:c3: 31:0e:a1:7b:f6:f1:6c:b0:50:7e:54:e3:27:b7:41:09:45:c6: 99:37:56:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM1RkUxMTAvBgNVBAUTKDQ0QUJFMjRCNzBBMTE2MDQ2Rjc0NDIxMUQxOEQwMjY1 MDVCMEM3QjMwHhcNMjQxMTIyMTcwODEyWhcNMjQxMTI5MTcwODEyWjAYMRYwFAYD VQQDEw02NzQwYmE3Yy03OTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBWpHXIiLxjBHQz5LmIeAC6zJVbL5DF5RUI53GOcDCJHGHEy1KRM7uV9DQVO hHovVym264VoepIQ7EunL5cBv6HBu/EjsJXdauICwlwq+AWx9xIG1z74nxB8gzfH HTjsoORQJ2Nt97zaRrX1MAyfhH1M5CCR6ik4SWTQN9kEnZcigtc5r0TxuVTZKhSl xmZ8BucHhFeS2poDaPekh425DY9/7n7PmLsVpkQ6LNa9aoD+v4XyhybsiZD/10S7 VkJ5I6y2qbTxrTsE5N8JAWupKOYNqJYnrSL2NiPTs3lMwsmna8YSFh4hVPLve+Ad kvxOFrSN73xjAc1t/gUIC23NQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETV1+Pv mhK2peQcnkJLW/1diny0MB8GA1UdIwQYMBaAFESr4ktwoRYEb3RCEdGNAmUFsMez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVGRS9BMDdGQTFDRUM4 NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZnUnZkRUlSMFkwQ1pRV3d4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JLdmlTM0NoRmdSdmRFSVIwWTBDWlFXd3g3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzVGRS9BMDdGQTFDRUM4NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZn UnZkRUlSMFkwQ1pRV3d4N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWC/839phZDH+HFP1hcnfQslVM+QnQBLQFLNoHES0seR/wQvTQqIGh 0JfkECJav4g0E2ziCatuatoShsT8VEboiWKoZ9at9izIYi+s4082NTbYiUGKO1B+ gTmssvaXu1oYisU0vQjrF8zmDSQTeZKyZThDefLjy//gcxkzPEcgt34GbuVGgWt7 sDs72UAeDvh0W0BVIP0QdIg1hSTBF1Cb5Xsz8s4JWscuVEikXcHx9GPnO9bLWFap 5K4+ozPD1Kg9dgqaQPkwzv5Rmtxq9M2NJ2BgOo4jgL1Pn9wtTmbZq9l9wO5u1Y5B sMMxDqF79vFssFB+VOMnt0EJRcaZN1Yt -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:14 2024 by rpki-client on console-ams.rpki-client.org