$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft File: AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft (raw, json) Hash identifier: AW46crOEMLI560s4PhcWdgycj4EPvwVl12Fbdl8wJh0= Subject key identifier: EB:E5:CA:3D:69:1D:8F:71:B0:10:08:45:1B:2C:46:51:6B:2A:09:DA Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft Manifest number: 0226 Signing time: Sat 23 Nov 2024 01:27:03 +0000 Manifest this update: Sat 23 Nov 2024 01:27:03 +0000 Manifest next update: Sat 30 Nov 2024 01:27:03 +0000 Files and hashes: 1: AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl (hash: dO93xQ0In+J3qeMfrxXiejcY0V6ZcykFAZuVRXrokbM=) 2: CBD4FE1208B611EDACE57065C4F9AE02.roa (hash: WXESl+cDjvowOeUJyXhiCBItPAjmmkM/CbjCul3Q7bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Nov 23 01:27:03 2024 GMT Not After : Nov 30 01:27:03 2024 GMT Subject: CN=67412f67-a7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:6a:65:51:85:43:a4:62:5a:d0:24:68:5e: 2d:98:6f:2a:d5:91:75:c5:9e:27:85:8d:26:87:38: 78:b3:42:5f:15:5d:48:53:c3:79:ec:a3:d0:b5:94: 56:fd:2f:a3:1c:c6:6b:98:85:e2:f5:25:6d:c0:9e: 34:a2:77:d4:02:7b:97:8a:04:ee:31:8e:d8:75:7e: 8c:21:f6:cd:32:c0:10:8b:cf:7f:a7:7a:2e:c5:8e: e6:f8:8b:1e:f4:d9:89:83:ee:d9:46:6e:3d:e9:71: 90:37:25:59:5a:c4:c6:0c:be:46:68:a9:9e:dd:00: 60:a8:c7:3b:51:b9:52:29:e7:8c:d2:8b:6c:69:c0: 41:a0:f4:64:9c:f3:d2:bb:7b:db:86:60:97:fa:a2: 66:f0:b8:0d:24:ce:85:12:5f:ae:60:d7:db:bc:1a: cc:98:b7:81:06:52:d0:21:c8:46:1c:ca:d7:e0:42: b0:7e:33:0b:cc:40:71:07:33:f5:a9:82:af:16:51: 88:73:bb:8c:c3:ad:e7:4e:0d:0a:7b:c5:08:ba:ad: 67:32:28:a8:e4:42:1e:0a:08:82:00:16:ba:56:15: f5:d9:06:64:51:0a:66:02:51:d6:0c:77:54:ca:36: 00:f6:0c:84:11:01:36:18:12:1a:53:50:38:d3:a2: 67:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E5:CA:3D:69:1D:8F:71:B0:10:08:45:1B:2C:46:51:6B:2A:09:DA X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:98:7e:3f:05:3f:3a:57:3d:4e:71:d1:ee:fa:f6:8b:09:a9: a5:93:1e:bc:36:b7:73:12:92:cc:da:57:d6:d9:04:d8:d2:f7: b6:05:46:a1:6f:c4:5f:c7:6c:ba:bb:1a:b9:f0:18:e0:ee:99: fa:d8:ac:41:ba:b5:fe:7d:e1:e1:ea:f5:54:31:89:ec:3c:0a: 53:2a:5a:7f:35:97:c4:5a:68:63:a3:a8:4d:45:e9:dc:46:f9: 31:6b:0f:05:6f:a3:55:ec:ae:0f:b3:20:08:29:07:6f:d3:58: 0b:f4:dd:b8:24:2a:0a:be:e4:c4:a4:af:f3:63:8d:b7:c4:61: b0:49:5c:95:29:26:14:f8:1a:56:33:e5:35:2c:a5:0b:dd:1f: 73:94:ed:ef:af:8a:2e:32:4f:78:ee:1b:e7:f0:28:0a:e3:eb: 0e:cf:af:23:84:05:88:b3:90:cb:c2:9c:dc:1d:c5:88:2a:30: a9:a4:34:a8:5a:79:05:39:ec:26:83:7f:0e:05:54:fe:d1:d1: 17:e4:73:0d:ed:3e:4e:43:8d:79:a6:c0:a1:ad:b7:b1:0b:7b: ad:0a:99:73:04:c1:ac:74:72:b4:b9:cd:47:22:d7:43:c3:26: 1a:c2:ed:b2:f1:5f:ed:fe:63:e4:01:9f:af:42:d0:ee:57:4e: 46:9e:b6:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjQxMTIzMDEyNzAzWhcNMjQxMTMwMDEyNzAzWjAYMRYwFAYD VQQDEw02NzQxMmY2Ny1hN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu51qZVGFQ6RiWtAkaF4tmG8q1ZF1xZ4nhY0mhzh4s0JfFV1IU8N57KPQtZRW /S+jHMZrmIXi9SVtwJ40onfUAnuXigTuMY7YdX6MIfbNMsAQi89/p3ouxY7m+Ise 9NmJg+7ZRm496XGQNyVZWsTGDL5GaKme3QBgqMc7UblSKeeM0otsacBBoPRknPPS u3vbhmCX+qJm8LgNJM6FEl+uYNfbvBrMmLeBBlLQIchGHMrX4EKwfjMLzEBxBzP1 qYKvFlGIc7uMw63nTg0Ke8UIuq1nMiio5EIeCgiCABa6VhX12QZkUQpmAlHWDHdU yjYA9gyEEQE2GBIaU1A406JnswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvlyj1p HY9xsBAIRRssRlFrKgnaMB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUNCMS8xMTY3MkMyMDA3RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0Zz TUQxT1laN0dHclpZT0FEU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFmH4/BT86Vz1OcdHu+vaLCamlkx68NrdzEpLM2lfW2QTY0ve2BUah b8Rfx2y6uxq58Bjg7pn62KxBurX+feHh6vVUMYnsPApTKlp/NZfEWmhjo6hNRenc Rvkxaw8Fb6NV7K4PsyAIKQdv01gL9N24JCoKvuTEpK/zY423xGGwSVyVKSYU+BpW M+U1LKUL3R9zlO3vr4ouMk947hvn8CgK4+sOz68jhAWIs5DLwpzcHcWIKjCppDSo WnkFOewmg38OBVT+0dEX5HMN7T5OQ415psChrbexC3utCplzBMGsdHK0uc1HItdD wyYawu2y8V/t/mPkAZ+vQtDuV05GnrYx -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:50 2024 by rpki-client on console-ams.rpki-client.org