$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: ybIgM+xajLyAsuOcqtWYW7yWy4K0PcMietfIlCAZBLE= Subject key identifier: 52:90:9A:F3:B8:C9:E9:81:79:2A:3F:22:29:87:A4:AB:9E:A3:86:FF Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 3436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 342E Signing time: Fri 22 Nov 2024 14:45:46 +0000 Manifest this update: Fri 22 Nov 2024 14:45:45 +0000 Manifest next update: Fri 29 Nov 2024 14:45:45 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: B4haQTLUnitzaHuiFLmCZQ8mZ6I4Ddvmyv9cgbtvMmc=) 2: E1F7FE5C091C11EABCF80D55C4F9AE02.roa (hash: UYhXMyZh9NiDN+m3qNskwha0B+/9z8/9niiLaGLyPaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13366 (0x3436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Nov 22 14:45:45 2024 GMT Not After : Nov 29 14:45:45 2024 GMT Subject: CN=6740991a-d31f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5c:92:c8:bf:fc:c7:88:c9:fa:2d:d4:fd:71: ba:a0:ca:19:44:e9:57:6e:81:e0:9d:ba:ca:db:75: 07:fc:c7:f6:2e:c0:cf:86:34:88:4d:bf:f8:d9:1d: a0:c3:2c:58:90:0c:3d:d3:b4:aa:be:01:0e:72:9a: 93:71:6d:17:eb:4c:d2:57:4f:b2:84:a2:1c:48:e9: f9:2e:00:a7:ed:c5:b7:9a:c0:ad:bc:51:41:fa:bd: e8:16:29:ee:91:d5:5a:cf:53:f3:6c:a6:1f:2e:9a: 84:8d:2b:75:1f:71:00:dd:01:46:00:3e:c0:c8:6c: 6c:47:97:14:7d:47:20:60:71:2d:64:ed:27:a3:24: 87:07:81:c1:75:46:31:13:50:e6:82:a7:c1:7b:8a: 93:2e:25:c4:c9:8f:bb:f7:ec:7b:c2:4d:87:77:7e: d3:f2:b7:8b:65:e0:d7:cd:e3:b6:5b:15:a8:51:d7: 3a:2c:df:49:5e:d5:bb:a6:41:45:d0:87:42:7b:25: 87:72:6a:1e:1d:b0:bd:f4:98:78:ca:fc:44:85:2b: a3:55:30:09:da:b2:cf:a5:b5:40:27:86:4c:ae:93: 7b:79:24:7d:c8:8e:0e:64:a9:ae:af:9b:93:4a:e0: 1c:f4:ee:c5:66:40:fc:ec:c3:6d:2f:8e:f2:17:97: 8c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:90:9A:F3:B8:C9:E9:81:79:2A:3F:22:29:87:A4:AB:9E:A3:86:FF X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:1a:ca:de:69:16:af:07:23:b5:71:5c:40:ad:cb:f5:21:6b: 66:b4:9b:8e:82:08:62:c9:8f:12:53:af:e9:b6:d8:c9:9c:a1: f3:42:64:97:fb:6f:51:79:1f:ef:97:0a:aa:ae:6f:79:81:99: 69:3e:65:0d:dc:68:97:72:a3:67:6f:dd:41:ce:e5:2e:58:ea: 1b:a3:c7:a3:9d:b5:4c:2c:61:ac:b6:54:87:38:58:ae:f9:a7: 91:8e:a1:5d:2a:c3:2d:e6:d4:68:a0:a4:1c:70:4c:ca:1e:45: 9b:08:c8:15:10:7a:d3:e9:41:1c:d7:fc:00:b4:42:91:c4:23: 97:75:30:fc:ed:59:e3:53:db:86:4f:01:e1:c5:4b:e9:33:51: c3:68:d1:ec:1a:8e:34:83:05:56:ca:27:af:77:68:be:0c:68: 07:bb:76:b9:c5:f5:61:d8:f3:22:83:06:18:cb:9e:e3:97:d2: fa:7d:f2:11:5b:13:0f:11:9b:48:c1:ed:89:01:cf:50:b9:f0: b1:39:34:a9:cb:f7:f9:09:9e:42:6c:01:d0:58:53:7a:5f:b7: a5:b3:b6:f6:e5:2a:13:00:f8:85:39:72:4a:bb:07:39:78:7c: b5:c3:62:b0:f9:3c:cb:a1:1f:f3:c2:ae:01:c9:e9:9e:8e:75: bd:71:d7:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjQxMTIyMTQ0NTQ1WhcNMjQxMTI5MTQ0NTQ1WjAYMRYwFAYD VQQDEw02NzQwOTkxYS1kMzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFySyL/8x4jJ+i3U/XG6oMoZROlXboHgnbrK23UH/Mf2LsDPhjSITb/42R2g wyxYkAw907SqvgEOcpqTcW0X60zSV0+yhKIcSOn5LgCn7cW3msCtvFFB+r3oFinu kdVaz1PzbKYfLpqEjSt1H3EA3QFGAD7AyGxsR5cUfUcgYHEtZO0noySHB4HBdUYx E1DmgqfBe4qTLiXEyY+79+x7wk2Hd37T8reLZeDXzeO2WxWoUdc6LN9JXtW7pkFF 0IdCeyWHcmoeHbC99Jh4yvxEhSujVTAJ2rLPpbVAJ4ZMrpN7eSR9yI4OZKmur5uT SuAc9O7FZkD87MNtL47yF5eM3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKQmvO4 yemBeSo/IimHpKueo4b/MB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxGsreaRavByO1cVxArcv1IWtmtJuOgghiyY8SU6/pttjJnKHzQmSX +29ReR/vlwqqrm95gZlpPmUN3GiXcqNnb91BzuUuWOobo8ejnbVMLGGstlSHOFiu +aeRjqFdKsMt5tRooKQccEzKHkWbCMgVEHrT6UEc1/wAtEKRxCOXdTD87VnjU9uG TwHhxUvpM1HDaNHsGo40gwVWyievd2i+DGgHu3a5xfVh2PMigwYYy57jl9L6ffIR WxMPEZtIwe2JAc9QufCxOTSpy/f5CZ5CbAHQWFN6X7els7b25SoTAPiFOXJKuwc5 eHy1w2Kw+TzLoR/zwq4ByemejnW9cdfe -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org