$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft File: A6PIek8tglWUdvcc-u5ST_URNXk.mft (raw, json) Hash identifier: fr1Glb5GwVvuHU9As2wbR6CmY0/CXMTfuvbSGswPj5E= Subject key identifier: 02:75:98:51:77:5F:E2:01:C5:AF:11:62:DF:84:A0:EF:F7:7E:F8:4C Authority key identifier: 03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 Certificate issuer: /CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Certificate serial: 0A9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft Manifest number: 0A96 Signing time: Fri 22 Nov 2024 19:19:39 +0000 Manifest this update: Fri 22 Nov 2024 19:19:39 +0000 Manifest next update: Fri 29 Nov 2024 19:19:39 +0000 Files and hashes: 1: A6PIek8tglWUdvcc-u5ST_URNXk.crl (hash: EA1/z5Wdv/eTznGHles3qi/A34Tb4Yum+G8aHC1D/Hk=) 2: 6553D6106C2B11EA87ED1160C4F9AE02.roa (hash: BZiEWDD0IL9/iTmQj4cpibFzXusaM/aZuvYBDfGJDK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2718 (0xa9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Validity Not Before: Nov 22 19:19:39 2024 GMT Not After : Nov 29 19:19:39 2024 GMT Subject: CN=6740d94b-dda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:db:10:39:87:61:c4:63:23:c5:34:16:d6:83: 3f:33:9d:ae:a5:9b:39:f5:5c:8f:a9:18:19:a2:8b: 9e:10:9b:18:d8:d9:01:28:ba:4e:dd:98:af:5c:8c: 9f:93:d0:c7:75:7b:03:7d:f8:9d:0b:86:a0:c7:2f: c9:a2:c9:54:80:50:5f:00:37:81:54:45:9e:4e:f9: 5a:8c:2c:f8:32:6c:01:da:55:a3:24:65:61:84:ac: 06:16:08:b5:71:47:e1:7b:87:af:68:2b:e0:f7:55: 3e:3c:4f:99:fc:0b:12:37:4b:30:28:27:94:2d:e5: 91:80:78:a1:3d:d9:f8:ee:1d:a2:be:6d:a4:71:bc: 2b:2a:36:37:6b:14:93:1a:0a:e6:0b:4b:c3:29:74: 8a:c3:96:a4:fe:12:cd:9b:b9:9c:99:15:12:eb:d4: 78:2e:88:e4:8d:d4:fc:d5:36:a8:c6:22:6d:72:c1: 46:22:8c:aa:fd:d8:0e:58:f2:5d:63:f2:34:46:84: f9:2a:51:db:4e:d1:94:fc:16:be:d1:1d:b2:f8:61: 33:46:b1:fa:90:91:93:73:a2:36:85:08:b3:dd:9c: b5:02:3c:94:92:65:9f:0d:4c:c8:00:10:88:ca:12: 54:30:a3:a0:16:8f:18:1a:1a:b4:b8:f0:c2:93:7c: 2f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:75:98:51:77:5F:E2:01:C5:AF:11:62:DF:84:A0:EF:F7:7E:F8:4C X509v3 Authority Key Identifier: keyid:03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:f0:1f:28:89:43:15:6d:43:b7:3b:e0:36:80:6e:cb:f5:9f: b0:b0:40:84:41:be:3c:9f:af:08:c0:5c:3e:69:08:d4:d7:74: e4:d7:ae:0f:a6:38:ca:e9:ea:17:c0:8c:cb:0e:80:9c:a1:89: bf:78:c8:f9:2a:8f:1e:d5:08:af:be:d1:68:c8:37:81:9e:c7: 0a:de:f1:f4:3b:d8:d4:06:cf:77:47:65:cb:71:95:11:86:5d: 39:8f:51:49:29:2e:03:0e:3c:6c:cc:54:ac:34:a3:7f:93:f2: 97:88:36:be:69:81:43:fb:a0:5b:ff:50:69:ac:45:50:33:97: c6:28:3a:82:50:0a:bf:17:a4:ef:c2:af:96:e7:c9:98:1a:51: f4:74:41:ca:a8:82:53:3f:f3:70:ab:06:dd:a6:03:8a:f0:65: 9b:df:d0:d0:28:28:12:86:a5:34:a6:e1:65:45:a0:68:6e:d7: 31:a0:83:75:64:db:5c:f2:d4:c4:55:1d:c2:d1:1d:d1:12:26: ce:ff:02:96:39:0e:a5:be:21:49:79:2c:7c:fc:c3:a2:0d:cf: e1:ca:6e:ff:f0:c1:74:e9:4f:98:24:5f:8b:72:33:7a:1a:f1: 90:1d:37:05:92:b9:24:7f:03:29:f7:cc:be:f2:91:79:a0:07: c3:d8:ca:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDQUQxMTAvBgNVBAUTKDAzQTNDODdBNEYyRDgyNTU5NDc2RjcxQ0ZBRUU1MjRG RjUxMTM1NzkwHhcNMjQxMTIyMTkxOTM5WhcNMjQxMTI5MTkxOTM5WjAYMRYwFAYD VQQDEw02NzQwZDk0Yi1kZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodsQOYdhxGMjxTQW1oM/M52upZs59VyPqRgZooueEJsY2NkBKLpO3ZivXIyf k9DHdXsDffidC4agxy/JoslUgFBfADeBVEWeTvlajCz4MmwB2lWjJGVhhKwGFgi1 cUfhe4evaCvg91U+PE+Z/AsSN0swKCeULeWRgHihPdn47h2ivm2kcbwrKjY3axST GgrmC0vDKXSKw5ak/hLNm7mcmRUS69R4LojkjdT81TaoxiJtcsFGIoyq/dgOWPJd Y/I0RoT5KlHbTtGU/Ba+0R2y+GEzRrH6kJGTc6I2hQiz3Zy1AjyUkmWfDUzIABCI yhJUMKOgFo8YGhq0uPDCk3wvOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJ1mFF3 X+IBxa8RYt+EoO/3fvhMMB8GA1UdIwQYMBaAFAOjyHpPLYJVlHb3HPruUk/1ETV5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNENBRC85RkQ5N0EwODQ1 QzMxMUVBQkVGNUQ0MzlDNEY5QUUwMi9BNlBJZWs4dGdsV1VkdmNjLXU1U1RfVVJO WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2UEllazh0Z2xXVWR2Y2MtdTVTVF9VUk5Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NENBRC85RkQ5N0EwODQ1QzMxMUVBQkVGNUQ0MzlDNEY5QUUwMi9BNlBJZWs4dGds V1VkdmNjLXU1U1RfVVJOWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi8B8oiUMVbUO3O+A2gG7L9Z+wsECEQb48n68IwFw+aQjU13Tk164P pjjK6eoXwIzLDoCcoYm/eMj5Ko8e1QivvtFoyDeBnscK3vH0O9jUBs93R2XLcZUR hl05j1FJKS4DDjxszFSsNKN/k/KXiDa+aYFD+6Bb/1BprEVQM5fGKDqCUAq/F6Tv wq+W58mYGlH0dEHKqIJTP/NwqwbdpgOK8GWb39DQKCgShqU0puFlRaBobtcxoIN1 ZNtc8tTEVR3C0R3REibO/wKWOQ6lviFJeSx8/MOiDc/hym7/8MF06U+YJF+LcjN6 GvGQHTcFkrkkfwMp98y+8pF5oAfD2Mqb -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org