$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json) Hash identifier: EvwZ1a2L6WibmuTLXA5uw1VYyTzzOywuKDrLeH/lF28= Subject key identifier: 34:4E:A1:38:51:BF:B0:B1:22:37:98:8A:85:34:A2:95:B3:7D:46:77 Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 Certificate issuer: /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Certificate serial: 0303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft Manifest number: 02F9 Signing time: Sat 23 Nov 2024 00:49:44 +0000 Manifest this update: Sat 23 Nov 2024 00:49:43 +0000 Manifest next update: Sat 30 Nov 2024 00:49:43 +0000 Files and hashes: 1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: NyJFoI7sqAPL5R/mxAAZyxYZf5EI9pURcCR0qZ4BirU=) 2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: 3ltUc1MRVqJi3SEeMGw79iaqCBtkg84cqJVUr/o1VYA=) 3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: Amk0fNoLVyq/V0Aumz+LOy4QbvlRWTIXw8dCA9q0zmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Validity Not Before: Nov 23 00:49:43 2024 GMT Not After : Nov 30 00:49:43 2024 GMT Subject: CN=674126a8-dc07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6a:ed:ca:f3:03:2d:22:0a:5a:9c:90:bb:6b: ac:f5:f4:07:a0:9b:28:46:44:a6:51:7a:0f:36:63: 01:6f:72:ec:59:d9:cb:f1:86:45:27:12:aa:eb:16: e6:fe:b9:7a:18:b9:5a:e6:2b:23:2d:a5:ef:13:ef: f4:ce:63:42:a1:05:15:ff:ee:f0:1e:78:c8:2a:b7: 26:15:26:9f:97:a1:13:a1:4a:b6:e3:fb:cc:91:14: 5f:00:bb:2b:8b:f0:b4:8a:ff:be:ad:7d:dd:f4:e7: 11:e3:c6:c5:bb:be:c1:3e:ea:fc:9f:e8:5f:98:a5: f0:b2:a1:41:c4:ba:8a:3c:33:b6:b2:f1:09:57:11: ca:c1:e7:84:0b:9c:50:ea:9f:d8:ae:ac:5a:e0:35: ef:88:2e:0c:72:4b:f0:07:db:32:82:d1:4c:3a:3c: 9f:3e:8b:c8:fd:9b:66:a1:01:38:40:06:c7:11:32: 7b:9f:cf:d2:eb:5f:0f:d6:dd:73:9c:5a:20:6a:2c: 2b:ea:22:97:74:17:9e:19:87:99:63:0a:5b:84:25: 19:24:6f:62:5a:28:2d:51:7a:2e:0d:08:f1:7b:14: a9:2c:37:6a:a9:da:d8:cd:2a:9a:91:fe:69:66:1d: 80:be:33:d8:2f:21:5a:4d:f7:64:f7:77:ee:7f:71: 56:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4E:A1:38:51:BF:B0:B1:22:37:98:8A:85:34:A2:95:B3:7D:46:77 X509v3 Authority Key Identifier: keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:c3:19:51:d2:a0:5c:af:7f:a1:0c:ec:ae:35:b2:dd:4f:6e: 11:a4:37:5e:ba:78:94:86:db:5e:21:d4:a3:49:e0:e5:06:ba: 72:18:83:57:fb:de:f9:d3:af:5d:f8:8e:05:36:9a:5b:4c:23: 2e:47:6f:88:d1:ab:6a:15:e1:75:d7:a3:47:1c:3c:40:30:28: 64:d4:4a:3f:79:1d:21:f7:a7:9e:58:74:66:fa:29:52:1f:76: 9b:e4:e6:d7:ca:7a:27:5e:5a:fc:45:dd:09:59:b4:1f:7b:57: 88:70:23:27:c8:41:28:1f:7b:b1:cb:7e:49:d0:57:e7:87:ea: e2:d6:7b:f4:28:94:7f:44:f7:42:7f:c0:7d:0b:42:a7:9f:54: 09:45:3f:05:b1:f2:a9:7d:3c:6c:c5:7e:40:a8:60:94:25:6d: b1:19:c1:1a:41:25:4d:7b:16:6f:ed:6f:f8:89:56:7c:2d:49: e4:72:bd:b6:54:bf:ba:da:c0:54:12:47:64:2e:30:da:0b:92: 54:ba:24:90:65:6e:2d:15:43:ea:91:51:1f:97:d6:63:88:fd: 60:72:7d:6c:c5:0a:e5:c2:ca:84:69:a5:a5:bf:42:f4:06:60: 56:6b:e8:c1:c2:0f:56:28:4e:eb:59:81:77:6f:e4:d7:13:19: 85:55:58:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQjIxMTAvBgNVBAUTKEM3RTU3OTBCMDVFMEQ0RDIwOURCNDNEQzY4MEZCNzg4 Mjc5ODE0QTkwHhcNMjQxMTIzMDA0OTQzWhcNMjQxMTMwMDA0OTQzWjAYMRYwFAYD VQQDEw02NzQxMjZhOC1kYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8WrtyvMDLSIKWpyQu2us9fQHoJsoRkSmUXoPNmMBb3LsWdnL8YZFJxKq6xbm /rl6GLla5isjLaXvE+/0zmNCoQUV/+7wHnjIKrcmFSafl6EToUq24/vMkRRfALsr i/C0iv++rX3d9OcR48bFu77BPur8n+hfmKXwsqFBxLqKPDO2svEJVxHKweeEC5xQ 6p/Yrqxa4DXviC4MckvwB9sygtFMOjyfPovI/ZtmoQE4QAbHETJ7n8/S618P1t1z nFogaiwr6iKXdBeeGYeZYwpbhCUZJG9iWigtUXouDQjxexSpLDdqqdrYzSqakf5p Zh2AvjPYLyFaTfdk93fuf3FWYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDROoThR v7CxIjeYioU0opWzfUZ3MB8GA1UdIwQYMBaAFMfleQsF4NTSCdtD3GgPt4gnmBSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFCMi82REU5RjQxMEI2 NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFOSUoyMFBjYUEtM2lDZVlG S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtVjVDd1hnMU5JSjIwUGNhQS0zaUNlWUZLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFCMi82REU5RjQxMEI2NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFO SUoyMFBjYUEtM2lDZVlGS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTwxlR0qBcr3+hDOyuNbLdT24RpDdeuniUhtteIdSjSeDlBrpyGINX +975069d+I4FNppbTCMuR2+I0atqFeF116NHHDxAMChk1Eo/eR0h96eeWHRm+ilS H3ab5ObXynonXlr8Rd0JWbQfe1eIcCMnyEEoH3uxy35J0Ffnh+ri1nv0KJR/RPdC f8B9C0Knn1QJRT8FsfKpfTxsxX5AqGCUJW2xGcEaQSVNexZv7W/4iVZ8LUnkcr22 VL+62sBUEkdkLjDaC5JUuiSQZW4tFUPqkVEfl9ZjiP1gcn1sxQrlwsqEaaWlv0L0 BmBWa+jBwg9WKE7rWYF3b+TXExmFVVju -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:54 2024 by rpki-client on console-ams.rpki-client.org