$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft File: A-8OOQoxXl88RhsKcrIYvuIj4A4.mft (raw, json) Hash identifier: D53J2qy5i5SSN8zx0RPO1MAOOl1nnLzZN4B6Zu4k9a4= Subject key identifier: 5A:60:2E:D2:02:70:38:B4:7C:08:97:B0:FA:49:5F:E5:5A:1D:91:E6 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft Manifest number: 03B4 Signing time: Wed 27 Nov 2024 00:34:51 +0000 Manifest this update: Wed 27 Nov 2024 00:34:51 +0000 Manifest next update: Wed 04 Dec 2024 00:34:51 +0000 Files and hashes: 1: A-8OOQoxXl88RhsKcrIYvuIj4A4.crl (hash: SgpSs68+Yx3dbr7KKuktLDIMrwmLJCV4tuZbD1GLVPQ=) 2: 9190CF9E2E7811EFB7206224C4F9AE02.roa (hash: NisE469y5d348oXLVRF6OR5U4DDqVPlO1GJzigp9ABk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 00:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Validity Not Before: Nov 27 00:34:51 2024 GMT Not After : Dec 4 00:34:51 2024 GMT Subject: CN=6746692b-d3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:38:b6:45:f5:df:f6:13:ca:e9:7d:52:08: bb:2a:5e:69:70:39:f2:4e:6a:f9:9b:15:da:87:cb: ba:6f:ae:57:b6:35:6f:78:59:72:32:48:23:f9:fd: ad:b8:c2:65:43:58:6f:e9:ce:dc:18:ce:02:82:13: 07:d9:b5:a9:93:b4:cf:c1:3e:5f:3c:db:85:29:8e: 24:b6:c1:8b:15:24:fd:5d:a0:8d:37:7a:c2:da:b9: db:ea:1b:46:d7:36:c1:43:5a:f0:e2:c0:a5:fd:d5: 34:e6:7e:1f:f8:9b:ed:ad:31:19:fa:58:5e:a4:8a: e1:74:88:37:8d:c4:5a:e8:e6:c0:59:4d:d0:ad:36: 2a:66:bf:2a:6e:bc:35:f7:08:85:4c:bb:27:06:29: 4e:77:d9:d2:44:5f:af:36:ff:25:67:eb:72:03:db: 16:63:1b:52:90:94:c3:ab:e3:cd:7a:42:be:b6:e7: 35:46:35:4d:09:1a:7e:fd:82:01:61:f5:a0:5e:50: ec:72:52:7e:44:af:d3:e3:b1:63:81:c7:71:90:b7: 1a:b8:53:5e:14:6e:a8:4c:c6:d3:c1:26:9d:31:70: da:2c:73:8d:19:29:f4:a6:46:03:34:aa:03:37:73: 41:9e:59:b6:35:26:f8:29:46:7e:45:85:da:0e:aa: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:60:2E:D2:02:70:38:B4:7C:08:97:B0:FA:49:5F:E5:5A:1D:91:E6 X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:01:91:97:73:4c:30:60:bc:d1:a3:c8:75:e0:27:4f:88:c8: 79:7d:9f:60:e6:9d:6b:0e:21:80:0f:12:ab:0c:ef:36:ad:8e: 93:b7:77:b0:b4:79:f0:98:a4:61:00:66:c9:48:75:32:95:39: 6f:5c:9c:8d:98:5d:c6:52:a0:c9:ac:51:b8:02:5d:90:cc:3a: 6e:14:0d:e3:ab:fc:5c:51:37:cc:2f:f3:aa:60:d4:8a:c8:38: 22:98:a9:02:8a:9a:f3:70:3c:4c:77:11:2e:8c:6c:72:db:b9: c7:97:22:5b:0c:24:71:7c:e6:1c:c2:60:34:33:3d:3e:6f:9d: 29:27:c8:22:ab:7c:ec:bc:d1:21:16:aa:93:23:82:df:b8:80: 1a:51:c0:db:65:31:3f:0f:d1:f4:10:d2:37:83:e4:3b:0f:07: f3:f0:77:a8:0a:a4:10:2f:fd:d2:16:57:0e:44:fd:77:cc:72: 20:39:13:a8:ef:f1:32:55:9f:8f:50:d0:13:82:be:0a:68:1c: 4a:41:74:56:98:b0:0d:c2:34:d6:18:9e:a8:24:2f:17:8f:1a: a8:ae:67:42:ba:86:48:01:99:71:d8:e7:1d:ae:d2:6e:69:19: 38:36:6d:16:67:b8:bb:d7:a2:75:38:d4:52:a5:f9:45:24:68: cf:9f:57:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MEZDMDExMC8GA1UEBRMoMDNFRjBFMzkwQTMxNUU1RjNDNDYxQjBBNzJCMjE4QkVF MjIzRTAwRTAeFw0yNDExMjcwMDM0NTFaFw0yNDEyMDQwMDM0NTFaMBgxFjAUBgNV BAMTDTY3NDY2OTJiLWQzYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwbji2RfXf9hPK6X1SCLsqXmlwOfJOavmbFdqHy7pvrle2NW94WXIySCP5/a24 wmVDWG/pztwYzgKCEwfZtamTtM/BPl8824UpjiS2wYsVJP1doI03esLaudvqG0bX NsFDWvDiwKX91TTmfh/4m+2tMRn6WF6kiuF0iDeNxFro5sBZTdCtNipmvypuvDX3 CIVMuycGKU532dJEX682/yVn63ID2xZjG1KQlMOr4816Qr625zVGNU0JGn79ggFh 9aBeUOxyUn5Er9PjsWOBx3GQtxq4U14UbqhMxtPBJp0xcNosc40ZKfSmRgM0qgM3 c0GeWbY1JvgpRn5FhdoOqgdnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWmAu0gJw OLR8CJew+klf5VodkeYwHwYDVR0jBBgwFoAUA+8OOQoxXl88RhsKcrIYvuIj4A4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwRkMwL0NERTA5ODc2OTU3 ODExRUNBMzJDQ0Y1NUM0RjlBRTAyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRB NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQS04T09Rb3hYbDg4UmhzS2NySVl2dUlqNEE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw RkMwL0NERTA5ODc2OTU3ODExRUNBMzJDQ0Y1NUM0RjlBRTAyL0EtOE9PUW94WGw4 OFJoc0tjcklZdnVJajRBNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJsBkZdzTDBgvNGjyHXgJ0+IyHl9n2DmnWsOIYAPEqsM7zatjpO3d7C0 efCYpGEAZslIdTKVOW9cnI2YXcZSoMmsUbgCXZDMOm4UDeOr/FxRN8wv86pg1IrI OCKYqQKKmvNwPEx3ES6MbHLbuceXIlsMJHF85hzCYDQzPT5vnSknyCKrfOy80SEW qpMjgt+4gBpRwNtlMT8P0fQQ0jeD5DsPB/Pwd6gKpBAv/dIWVw5E/XfMciA5E6jv 8TJVn49Q0BOCvgpoHEpBdFaYsA3CNNYYnqgkLxePGqiuZ0K6hkgBmXHY5x2u0m5p GTg2bRZnuLvXonU41FKl+UUkaM+fV3k= -----END CERTIFICATE-----Generated at Wed Nov 27 02:04:22 2024 by rpki-client on console-ams.rpki-client.org