$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft File: yoXhM8HiOWFMnFd4ARi9swlSjnY.mft (raw, json) Hash identifier: zrl8dQGpzr5DZI850yU5NLoVOhn+6GMOrKzYug7xaOc= Subject key identifier: CA:8E:D8:F7:7A:60:23:85:3D:02:9F:8B:60:F0:63:F1:06:53:3C:55 Authority key identifier: CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76 Certificate issuer: /CN=A91DC42E/serialNumber=CA85E133C1E239614C9C57780118BDB309528E76 Certificate serial: 0733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft Manifest number: 072D Signing time: Fri 22 Nov 2024 21:15:00 +0000 Manifest this update: Fri 22 Nov 2024 21:15:00 +0000 Manifest next update: Fri 29 Nov 2024 21:15:00 +0000 Files and hashes: 1: yoXhM8HiOWFMnFd4ARi9swlSjnY.crl (hash: m9Bls00R/7jQg7i6D17HC8Ljafh8dM7+mMvLDwefe3w=) 2: 4AAD8CFE0D1E11EB83C9B637C4F9AE02.roa (hash: SKKgbqIxO8h2gMjhNkPa/ZI17L9sik+EpFHik6yG+pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1843 (0x733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC42E/serialNumber=CA85E133C1E239614C9C57780118BDB309528E76 Validity Not Before: Nov 22 21:15:00 2024 GMT Not After : Nov 29 21:15:00 2024 GMT Subject: CN=6740f454-4179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:77:4f:c7:10:65:a2:27:71:91:e8:e2:fc:b0: a5:01:95:3d:cd:63:5d:25:e4:78:0f:9a:a3:e4:bf: f5:78:29:93:24:be:82:85:94:e0:05:32:b0:54:54: 02:d6:5e:ef:af:0f:2b:97:81:eb:55:a4:24:28:71: cd:2d:43:6e:cf:b3:50:41:2a:ed:1b:b3:13:43:f4: 41:ff:da:4f:b4:3c:8a:20:e8:1b:33:b3:bf:83:a5: ec:4c:34:6f:9e:66:6b:64:2d:21:f1:c7:ad:5d:03: 6e:e8:07:27:e3:2b:73:94:fe:36:0b:a6:2b:99:8c: 37:56:05:ed:e4:6b:a2:e8:48:f9:d7:1b:9c:b8:f8: 2b:fb:f2:e1:f3:89:c6:2a:92:a3:f3:3c:47:1f:d7: 10:50:b1:20:32:02:6b:2a:61:ff:7a:62:ab:38:69: 95:48:61:14:b0:02:cd:5a:7c:12:94:8c:d7:61:89: 39:40:de:17:d2:16:1e:f9:6f:4e:a1:e5:4e:8c:5a: 19:60:a7:a3:1d:f1:77:0f:4c:76:0e:ed:0f:07:62: 5b:bb:67:2a:39:9e:94:5f:90:61:91:eb:42:2b:ff: d1:75:d8:4f:87:ae:e4:44:f4:67:4b:ad:51:67:16: 9e:fc:3a:17:ae:94:fc:a5:3c:a8:71:fe:4b:1f:36: 2c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8E:D8:F7:7A:60:23:85:3D:02:9F:8B:60:F0:63:F1:06:53:3C:55 X509v3 Authority Key Identifier: keyid:CA:85:E1:33:C1:E2:39:61:4C:9C:57:78:01:18:BD:B3:09:52:8E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoXhM8HiOWFMnFd4ARi9swlSjnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC42E/D6A7FF480D1711EBA741A50AC4F9AE02/yoXhM8HiOWFMnFd4ARi9swlSjnY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f9:59:fe:ac:c6:73:2d:7c:e3:f9:c8:98:25:30:72:b3:1b: e7:84:82:4b:48:0c:9f:de:cf:db:7c:81:73:62:ec:8e:22:46: 82:35:9c:f9:a2:ae:cb:8b:e0:17:c6:f6:92:39:5d:fb:ed:f1: 2c:57:2b:40:2c:da:45:41:bf:64:ad:65:10:04:7b:0b:d7:05: f8:f9:4d:6f:44:e5:78:95:2b:39:85:4a:9b:17:23:46:0e:59: ea:4d:2c:1a:c1:54:0a:26:9a:6c:b7:c3:3d:bc:4a:b8:7e:51: 7c:ac:f0:c2:4f:24:60:3a:1b:d9:70:52:e7:d4:3f:35:d8:5c: e6:27:fc:a2:f8:ba:94:86:68:17:2d:fd:c7:29:05:bf:39:f2: 69:f1:3a:97:01:7b:56:b0:63:56:8d:f7:35:d2:c2:59:52:3b: e9:a0:0f:bc:84:28:f7:97:30:8f:02:bb:e0:2b:3d:86:a8:c8: 4a:32:7c:77:17:11:f9:04:22:5b:d1:07:51:79:c5:cd:a3:42: 2d:ee:e4:55:59:64:ca:7a:7b:ab:b2:bc:e8:96:7b:3a:80:19: a7:1a:ab:05:53:9d:aa:37:77:e7:d9:65:36:e2:7c:17:f8:69: 26:de:b2:74:31:11:8d:4d:7d:47:3d:cc:fb:bb:61:1f:36:5b: da:92:21:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0MkUxMTAvBgNVBAUTKENBODVFMTMzQzFFMjM5NjE0QzlDNTc3ODAxMThCREIz MDk1MjhFNzYwHhcNMjQxMTIyMjExNTAwWhcNMjQxMTI5MjExNTAwWjAYMRYwFAYD VQQDEw02NzQwZjQ1NC00MTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33dPxxBloidxkeji/LClAZU9zWNdJeR4D5qj5L/1eCmTJL6ChZTgBTKwVFQC 1l7vrw8rl4HrVaQkKHHNLUNuz7NQQSrtG7MTQ/RB/9pPtDyKIOgbM7O/g6XsTDRv nmZrZC0h8cetXQNu6Acn4ytzlP42C6YrmYw3VgXt5Gui6Ej51xucuPgr+/Lh84nG KpKj8zxHH9cQULEgMgJrKmH/emKrOGmVSGEUsALNWnwSlIzXYYk5QN4X0hYe+W9O oeVOjFoZYKejHfF3D0x2Du0PB2Jbu2cqOZ6UX5BhketCK//RddhPh67kRPRnS61R Zxae/DoXrpT8pTyocf5LHzYs+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqO2Pd6 YCOFPQKfi2DwY/EGUzxVMB8GA1UdIwQYMBaAFMqF4TPB4jlhTJxXeAEYvbMJUo52 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzQyRS9ENkE3RkY0ODBE MTcxMUVCQTc0MUE1MEFDNEY5QUUwMi95b1hoTThIaU9XRk1uRmQ0QVJpOXN3bFNq blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvWGhNOEhpT1dGTW5GZDRBUmk5c3dsU2puWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzQyRS9ENkE3RkY0ODBEMTcxMUVCQTc0MUE1MEFDNEY5QUUwMi95b1hoTThIaU9X Rk1uRmQ0QVJpOXN3bFNqblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5+Vn+rMZzLXzj+ciYJTBysxvnhIJLSAyf3s/bfIFzYuyOIkaCNZz5 oq7Li+AXxvaSOV377fEsVytALNpFQb9krWUQBHsL1wX4+U1vROV4lSs5hUqbFyNG DlnqTSwawVQKJppst8M9vEq4flF8rPDCTyRgOhvZcFLn1D812FzmJ/yi+LqUhmgX Lf3HKQW/OfJp8TqXAXtWsGNWjfc10sJZUjvpoA+8hCj3lzCPArvgKz2GqMhKMnx3 FxH5BCJb0QdRecXNo0It7uRVWWTKenursrzolns6gBmnGqsFU52qN3fn2WU24nwX +Gkm3rJ0MRGNTX1HPcz7u2EfNlvakiE/ -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org