$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: 1WjpelHFuBpcmVQus1WdZfbQxUiebxNgP/D+7if8TI4= Subject key identifier: A3:BF:27:52:A1:EA:95:76:77:5D:E8:CA:9C:15:0B:CF:5A:41:A3:95 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 019D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 0194 Signing time: Sat 23 Nov 2024 01:56:49 +0000 Manifest this update: Sat 23 Nov 2024 01:56:49 +0000 Manifest next update: Sat 30 Nov 2024 01:56:49 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: 31CkCZTaIsi0vEUDdV2QCc8rZBn8WgKigdaliFdHsDU=) 2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: GEtYiWLknMjIUtasCLz3xO+Z9HJ/gkoudL4BFK8Uyb8=) 3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: JJtIODUU0vxeCd16MdkVxGe00rno7Fl7ALBMI2DvnXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Nov 23 01:56:49 2024 GMT Not After : Nov 30 01:56:49 2024 GMT Subject: CN=67413661-00a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:48:97:58:7a:b7:da:46:81:87:9e:ae:f6: fe:a3:48:85:23:17:2f:e0:78:89:3d:36:88:10:8a: c9:67:d9:2e:3e:36:79:74:e9:96:3f:a5:59:b5:7e: 85:42:93:b4:15:f3:87:a6:74:ad:07:01:c1:2e:a1: 8d:09:f0:99:23:9b:30:df:71:61:73:7c:07:cf:76: d1:94:06:d5:15:ae:85:83:10:66:70:6f:a7:1e:df: 16:33:fc:d7:9a:c4:89:87:db:22:61:b1:66:9b:58: 58:87:7f:0c:c2:0b:da:98:ac:89:53:bd:aa:c8:70: 60:e3:df:04:91:3a:f8:8b:a2:53:9c:e3:b4:69:4e: 18:2f:e0:af:11:67:07:68:36:9e:0e:2e:23:cd:b9: e5:68:0c:9e:15:18:1f:af:29:98:bd:e5:7d:b3:ee: 19:df:49:a5:a9:63:ed:3b:1b:16:ad:3c:f4:ce:fd: 9c:ab:be:ae:b2:ef:79:1a:cb:1a:a0:ca:a3:9b:d7: 8a:77:c3:ba:c8:fa:ed:94:34:9c:bb:d9:61:49:15: bc:0a:12:e8:ed:4c:22:58:23:2d:48:69:8c:0c:f5: 3a:1e:c0:82:f9:1c:be:cb:d5:39:67:7e:a2:5d:d9: 13:32:86:5a:d2:59:71:d3:1b:1f:25:c8:10:b4:68: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BF:27:52:A1:EA:95:76:77:5D:E8:CA:9C:15:0B:CF:5A:41:A3:95 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:85:1a:43:13:89:5b:79:63:53:9d:f4:81:8d:d8:64:a9:20: 18:68:69:46:d2:36:e5:7b:e8:a4:d2:23:18:ca:32:5e:78:07: 2f:34:38:a0:30:c7:fe:d7:fe:1f:1b:34:a9:03:69:4e:12:ae: 28:03:09:e8:bb:fc:b8:40:b9:ed:66:51:67:56:30:f2:24:29: 69:33:b1:f0:3d:b6:95:6b:73:32:78:7e:51:ad:35:9e:84:14: 69:10:e9:6d:05:fc:99:44:4c:9e:b5:a9:b5:47:d4:b7:78:de: 92:28:89:26:fb:f0:9f:14:4d:a1:93:dc:aa:f3:40:d3:ce:88: 42:0b:85:c7:af:71:e0:b1:d2:b4:ea:92:fa:51:bc:69:b8:4d: 44:69:d4:db:97:06:c6:bc:e1:72:a2:b1:22:3d:65:61:86:d8: 23:23:a4:e0:53:e4:18:13:5f:85:c5:e8:67:3c:0b:f5:c7:b5: 19:94:60:40:eb:5b:6c:00:51:9e:43:90:98:82:1b:df:b4:24: 8c:06:f3:a1:1d:a0:1d:50:4e:4c:56:5e:f5:4c:7b:93:23:a9: 3c:ed:60:33:24:d4:e8:53:79:89:61:c4:98:94:f2:09:bc:5e: dc:70:2c:b1:56:1b:a2:ef:08:5c:4b:50:87:6a:67:61:d5:f1: 42:68:34:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjQxMTIzMDE1NjQ5WhcNMjQxMTMwMDE1NjQ5WjAYMRYwFAYD VQQDEw02NzQxMzY2MS0wMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D9Il1h6t9pGgYeervb+o0iFIxcv4HiJPTaIEIrJZ9kuPjZ5dOmWP6VZtX6F QpO0FfOHpnStBwHBLqGNCfCZI5sw33Fhc3wHz3bRlAbVFa6FgxBmcG+nHt8WM/zX msSJh9siYbFmm1hYh38MwgvamKyJU72qyHBg498EkTr4i6JTnOO0aU4YL+CvEWcH aDaeDi4jzbnlaAyeFRgfrymYveV9s+4Z30mlqWPtOxsWrTz0zv2cq76usu95Gssa oMqjm9eKd8O6yPrtlDScu9lhSRW8ChLo7UwiWCMtSGmMDPU6HsCC+Ry+y9U5Z36i XdkTMoZa0llx0xsfJcgQtGhKfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKO/J1Kh 6pV2d13oypwVC89aQaOVMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAghRpDE4lbeWNTnfSBjdhkqSAYaGlG0jble+ik0iMYyjJeeAcvNDig MMf+1/4fGzSpA2lOEq4oAwnou/y4QLntZlFnVjDyJClpM7HwPbaVa3MyeH5RrTWe hBRpEOltBfyZREyetam1R9S3eN6SKIkm+/CfFE2hk9yq80DTzohCC4XHr3HgsdK0 6pL6UbxpuE1EadTblwbGvOFyorEiPWVhhtgjI6TgU+QYE1+FxehnPAv1x7UZlGBA 61tsAFGeQ5CYghvftCSMBvOhHaAdUE5MVl71THuTI6k87WAzJNToU3mJYcSYlPIJ vF7ccCyxVhui7whcS1CHamdh1fFCaDTY -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:47 2024 by rpki-client on console-ams.rpki-client.org