$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft File: arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json) Hash identifier: o7RnlhARqHZ5su91aQJ1xwowUjWG5A2DvNgG8xKka4U= Subject key identifier: 0D:58:DE:C5:5E:6B:AF:5B:F2:54:A4:8B:70:5A:22:A5:A8:41:BF:8B Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 Certificate issuer: /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft Manifest number: 0201 Signing time: Sat 23 Nov 2024 01:37:39 +0000 Manifest this update: Sat 23 Nov 2024 01:37:39 +0000 Manifest next update: Sat 30 Nov 2024 01:37:39 +0000 Files and hashes: 1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: g5LkINpoHD8b11uRrc7nu0epW8uBklqq2M/hVvp951U=) 2: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: +BIhJACypx0zsQrHiIyMv3oMQE4s/a1ioj17WGV+pqo=) 3: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: eu8Up8zVgwguJ1wXxmQLX74QNPOYJWkhm0tUEDQ741M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4 Validity Not Before: Nov 23 01:37:39 2024 GMT Not After : Nov 30 01:37:39 2024 GMT Subject: CN=674131e3-7be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7b:29:8d:45:44:63:19:b7:99:0e:77:5d:3c: d6:39:fc:66:bd:5a:e4:50:c0:a4:19:77:aa:5c:95: 00:b8:b2:d6:53:b5:c2:1a:e4:7b:6d:52:c7:b0:e3: a2:7f:57:d6:ba:55:63:45:31:3e:b2:b1:b6:39:b1: 27:ef:85:ba:50:18:a7:1a:e2:3a:18:02:b4:6d:e9: dc:e0:8b:a0:be:46:08:43:7d:c6:1f:f9:01:d7:96: a4:b6:8e:7d:d5:e8:ab:e3:67:e5:67:8a:b8:cb:d5: 3e:6d:61:7a:25:8f:cf:63:f6:10:77:90:54:20:6f: f9:9b:66:6d:a3:ba:74:03:c3:e7:d3:b1:6b:b3:b1: 14:1c:aa:0e:4f:18:76:74:05:78:97:b8:13:4f:97: 8c:bb:ac:19:39:99:e9:69:7f:e7:f0:58:ce:bc:e5: b7:78:86:35:ed:a4:09:4b:f4:26:b3:3b:9a:d1:53: 00:14:3c:c6:a6:9f:89:36:26:7a:03:da:27:05:9b: df:9b:7e:35:9c:d8:e8:f0:08:fc:0e:f2:e3:cf:7a: b3:11:5f:d8:5d:02:48:0d:6a:05:c1:85:bc:7d:7a: b9:be:23:8f:cf:d3:f2:c1:78:97:10:0c:d1:d4:40: 14:e0:5a:c3:0d:bd:18:8d:da:16:8f:87:41:db:eb: 66:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:58:DE:C5:5E:6B:AF:5B:F2:54:A4:8B:70:5A:22:A5:A8:41:BF:8B X509v3 Authority Key Identifier: keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:9b:4e:5a:0f:df:75:32:9d:95:9f:19:21:fd:41:73:f2:30: b8:fe:2f:b4:51:ac:e4:35:fe:8d:07:6a:2e:84:96:71:f5:89: 52:d8:2b:f0:90:6c:dc:7f:75:af:dd:cd:37:38:e3:5d:43:09: ce:47:1b:49:91:b8:b8:5e:3a:c5:7b:eb:cb:f2:00:7b:e3:a3: 6e:8f:cd:38:ac:a3:a0:44:41:82:73:2e:ad:f5:95:24:29:60: 1a:b3:61:16:4c:4d:7e:41:20:09:62:dd:bd:24:b7:9a:64:81: 91:ba:79:b9:6e:67:19:fc:34:5f:8b:7f:c1:13:c7:df:c0:9d: ad:09:ca:60:ce:de:90:9f:aa:7b:4d:ff:f0:77:67:9c:c9:4a: 1e:9c:7c:4c:80:59:dd:6c:a3:1c:a9:0a:38:59:59:59:79:a8: 77:13:f1:35:fb:9d:08:3e:4f:0d:01:d1:95:5a:81:93:ca:cc: 32:c9:8e:de:36:bf:b2:54:c6:e9:9b:34:68:be:4f:72:27:4e: 31:65:51:d6:99:bb:dd:92:7c:15:48:41:e3:8d:57:5c:87:de: 06:aa:f4:f4:ee:17:ae:c5:0a:43:10:90:5e:22:18:d5:49:42: 0f:9d:cf:07:f6:23:a1:21:bf:5d:26:2a:f5:b9:1b:21:92:84: 74:e6:9b:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NzYxMTAvBgNVBAUTKDZBQjkwQUZCNkRFNDNERjNDN0NEOEE0RjU5ODdGM0U0 NEIyQ0M3RjQwHhcNMjQxMTIzMDEzNzM5WhcNMjQxMTMwMDEzNzM5WjAYMRYwFAYD VQQDEw02NzQxMzFlMy03YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3spjUVEYxm3mQ53XTzWOfxmvVrkUMCkGXeqXJUAuLLWU7XCGuR7bVLHsOOi f1fWulVjRTE+srG2ObEn74W6UBinGuI6GAK0benc4IugvkYIQ33GH/kB15akto59 1eir42flZ4q4y9U+bWF6JY/PY/YQd5BUIG/5m2Zto7p0A8Pn07Frs7EUHKoOTxh2 dAV4l7gTT5eMu6wZOZnpaX/n8FjOvOW3eIY17aQJS/Qmszua0VMAFDzGpp+JNiZ6 A9onBZvfm341nNjo8Aj8DvLjz3qzEV/YXQJIDWoFwYW8fXq5viOPz9PywXiXEAzR 1EAU4FrDDb0YjdoWj4dB2+tmEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA1Y3sVe a69b8lSki3BaIqWoQb+LMB8GA1UdIwQYMBaAFGq5Cvtt5D3zx82KT1mH8+RLLMf0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU3Ni81MEEwNkFEMDE4 M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1BmUEh6WXBQV1lmejVFc3N4 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fya0stMjNrUGZQSHpZcFBXWWZ6NUVzc3hfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU3Ni81MEEwNkFEMDE4M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1Bm UEh6WXBQV1lmejVFc3N4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBym05aD991Mp2Vnxkh/UFz8jC4/i+0UazkNf6NB2ouhJZx9YlS2Cvw kGzcf3Wv3c03OONdQwnORxtJkbi4XjrFe+vL8gB746Nuj804rKOgREGCcy6t9ZUk KWAas2EWTE1+QSAJYt29JLeaZIGRunm5bmcZ/DRfi3/BE8ffwJ2tCcpgzt6Qn6p7 Tf/wd2ecyUoenHxMgFndbKMcqQo4WVlZeah3E/E1+50IPk8NAdGVWoGTyswyyY7e Nr+yVMbpmzRovk9yJ04xZVHWmbvdknwVSEHjjVdch94GqvT07heuxQpDEJBeIhjV SUIPnc8H9iOhIb9dJir1uRshkoR05pvT -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org