$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json) Hash identifier: m3Cyh/bULA8dIRwCT7odOzUpHB2DBcx+pryRdvSHsvk= Subject key identifier: ED:85:34:9E:0C:F7:C6:60:F6:A0:D7:B8:55:FA:DF:63:84:C7:D4:65 Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft Manifest number: 0436 Signing time: Fri 22 Nov 2024 15:53:30 +0000 Manifest this update: Fri 22 Nov 2024 15:53:30 +0000 Manifest next update: Fri 29 Nov 2024 15:53:30 +0000 Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: dz2gjcGLp5P+UyJ3wtKHGuO80vQkR3lYXW7sRA6VLDU=) 2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: rIHf5i83E1p5Ri/ttyh1R45twa+CCKGykvEfpC6f2Dg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3 Validity Not Before: Nov 22 15:53:30 2024 GMT Not After : Nov 29 15:53:30 2024 GMT Subject: CN=6740a8fa-8bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a1:5c:f6:59:2e:8f:e2:fc:0d:63:d8:db:26: d1:35:83:1e:5f:3b:9a:79:b7:1a:7e:2b:ae:34:74: 30:9a:5c:5c:5d:28:dc:0a:30:a6:4f:70:54:3b:b8: e3:33:21:bd:1c:92:f2:4f:2a:b3:41:29:a5:3c:85: e8:3e:0c:ba:55:02:ca:99:16:0e:46:55:2c:f0:91: 10:66:e4:15:6f:ef:de:92:d9:8b:9e:48:80:e5:dc: 03:fd:4a:d9:59:33:4a:15:5e:47:1c:d0:10:3f:a7: 06:be:56:eb:78:12:e8:62:5a:df:56:b2:21:55:64: 12:40:22:29:41:0b:b3:13:0b:dd:1d:46:8c:cc:8f: e0:31:fe:d3:cc:e0:91:e5:d4:56:1a:07:bb:d5:d7: 86:0e:65:be:a8:72:b8:18:2d:10:c4:c9:a1:a5:ab: f6:53:42:85:51:04:6c:e2:c5:d8:27:0a:bf:c8:94: 6c:33:14:d9:3a:fd:fa:21:45:13:db:67:f5:91:7b: a1:ed:75:60:83:28:35:58:c7:29:c6:5b:19:e5:7b: 13:30:b7:cf:63:b4:38:31:4e:8b:13:6b:f7:44:b6: 01:c6:69:ef:ab:e4:34:1c:dd:70:e8:be:a2:b4:71: 39:47:ed:d2:6c:71:a9:ec:bf:a2:27:05:26:64:06: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:85:34:9E:0C:F7:C6:60:F6:A0:D7:B8:55:FA:DF:63:84:C7:D4:65 X509v3 Authority Key Identifier: keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:1f:3c:3c:9e:e9:3f:ea:bb:ed:0d:44:ee:18:60:db:f2:22: dc:dd:09:59:eb:53:4c:34:df:03:94:08:5a:4f:50:91:5e:c9: 0e:42:a0:91:5b:7f:8c:66:b8:d2:f4:b1:9f:4d:fe:47:a2:48: bd:70:c3:cb:95:21:9a:1b:a7:e1:c8:35:6a:78:96:9f:ea:e2: bf:a9:e3:84:ff:39:04:29:ce:dc:35:e5:0d:db:f5:4f:4e:25: fa:b5:f3:35:72:d9:6c:a5:7b:94:88:e1:70:82:af:3b:c1:91: b1:d0:26:32:7b:02:f4:00:b4:90:b7:2b:ec:9c:6c:ea:32:e9: 91:73:22:d5:1e:d7:f0:cc:25:3f:03:3e:66:8b:0b:c4:9a:43: 5b:93:a3:9c:fa:e5:5c:0a:3e:80:c9:39:18:25:b8:f6:73:f4: 3a:c2:bc:7c:e5:97:e8:1f:d6:19:90:f2:c3:d9:7c:5a:27:52: 91:c9:2e:fa:06:15:24:6e:60:cc:25:c7:fb:bc:4a:df:4e:d7: ac:6e:2d:4f:08:65:25:dc:3a:26:00:03:4c:58:cf:8e:3a:9a: 7e:9a:3a:0e:e8:12:a9:00:0a:e4:eb:55:a4:8e:ab:18:2c:d5: 25:36:58:dd:62:b8:5c:35:bd:d4:44:a8:13:04:40:35:cd:1e: fc:52:f4:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURFMEExMTAvBgNVBAUTKDQ2QjRGRjhEQzkxNjdBNzc3RDk4RDg1RjJGNTIxREQx MzY3MDczQjMwHhcNMjQxMTIyMTU1MzMwWhcNMjQxMTI5MTU1MzMwWjAYMRYwFAYD VQQDEw02NzQwYThmYS04YmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKFc9lkuj+L8DWPY2ybRNYMeXzuaebcafiuuNHQwmlxcXSjcCjCmT3BUO7jj MyG9HJLyTyqzQSmlPIXoPgy6VQLKmRYORlUs8JEQZuQVb+/ektmLnkiA5dwD/UrZ WTNKFV5HHNAQP6cGvlbreBLoYlrfVrIhVWQSQCIpQQuzEwvdHUaMzI/gMf7TzOCR 5dRWGge71deGDmW+qHK4GC0QxMmhpav2U0KFUQRs4sXYJwq/yJRsMxTZOv36IUUT 22f1kXuh7XVggyg1WMcpxlsZ5XsTMLfPY7Q4MU6LE2v3RLYBxmnvq+Q0HN1w6L6i tHE5R+3SbHGp7L+iJwUmZAYyeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2FNJ4M 98Zg9qDXuFX632OEx9RlMB8GA1UdIwQYMBaAFEa0/43JFnp3fZjYXy9SHdE2cHOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS80MzU2N0VFNDNE MjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2VuZDltTmhmTDFJZDBUWndj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JyVF9qY2tXZW5kOW1OaGZMMUlkMFRad2M3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REUwQS80MzU2N0VFNDNEMjgxMUVDQkVGNzdDNzZDNEY5QUUwMi9SclRfamNrV2Vu ZDltTmhmTDFJZDBUWndjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARHzw8nuk/6rvtDUTuGGDb8iLc3QlZ61NMNN8DlAhaT1CRXskOQqCR W3+MZrjS9LGfTf5Hoki9cMPLlSGaG6fhyDVqeJaf6uK/qeOE/zkEKc7cNeUN2/VP TiX6tfM1ctlspXuUiOFwgq87wZGx0CYyewL0ALSQtyvsnGzqMumRcyLVHtfwzCU/ Az5miwvEmkNbk6Oc+uVcCj6AyTkYJbj2c/Q6wrx85ZfoH9YZkPLD2XxaJ1KRyS76 BhUkbmDMJcf7vErfTtesbi1PCGUl3DomAANMWM+OOpp+mjoO6BKpAArk61WkjqsY LNUlNljdYrhcNb3URKgTBEA1zR78UvRL -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org