$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft File: hsI8F7xNIO4W8JLTWiz2VU_scRk.mft (raw, json) Hash identifier: 2ynV24sWGQ+pbL+6xKvUMDbYLt7Kv/9YabeyNF+YITg= Subject key identifier: C5:3F:31:4C:72:1A:3D:F7:73:34:FF:88:47:71:3A:79:02:D2:C3:6B Authority key identifier: 86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 Certificate issuer: /CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Certificate serial: 0894 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft Manifest number: 088C Signing time: Fri 22 Nov 2024 20:19:48 +0000 Manifest this update: Fri 22 Nov 2024 20:19:48 +0000 Manifest next update: Fri 29 Nov 2024 20:19:48 +0000 Files and hashes: 1: hsI8F7xNIO4W8JLTWiz2VU_scRk.crl (hash: Fg4ImNpOXyrNT466nGMIMYPcyOsU/mzC9JGKZF1QNTw=) 2: E6FD5EBCBA3A11EBA9482F5AC4F9AE02.roa (hash: WsyWU+GSKy4FFCUwRFHUtgnAnZ3p6nz3YhQIgRrWUrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2196 (0x894) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D77/serialNumber=86C23C17BC4D20EE16F092D35A2CF6554FEC7119 Validity Not Before: Nov 22 20:19:48 2024 GMT Not After : Nov 29 20:19:48 2024 GMT Subject: CN=6740e764-d322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:f2:e0:39:58:06:70:53:80:f2:b2:a8:ca: 79:88:a6:75:91:c8:9c:ca:35:91:fd:71:6f:86:d8: e3:6b:6b:ec:0a:f0:d0:30:72:67:15:ce:b5:e9:fe: 94:b0:45:61:37:19:c5:94:23:2c:9b:2f:57:02:d3: a8:a3:fe:88:df:d3:dc:8f:81:0d:4c:d5:3d:33:c3: 0a:a9:8c:2e:16:8a:d5:38:c1:49:34:81:38:31:12: 58:48:14:81:7c:ef:53:e8:54:93:b4:8a:66:7f:c8: 71:b6:65:b0:c3:4d:4b:0e:d7:35:aa:b1:2a:e8:0c: 6c:1a:d3:b2:f6:e5:80:92:fc:a5:f4:8b:07:fb:6a: 27:a6:89:b6:7d:2e:31:4b:b8:b5:0e:95:5c:dc:85: 53:cc:57:25:d9:e0:65:b6:bd:22:a1:8d:d6:40:79: 0a:34:d0:e8:3f:cd:91:e3:73:7f:89:62:34:b2:f3: e4:c0:3b:00:5e:0f:d3:0b:30:34:6c:64:fa:9e:8a: 2c:e4:50:8f:c5:b4:37:56:fa:97:da:aa:3c:4c:31: 13:8a:7b:34:bc:18:87:5c:4a:74:ef:47:0c:33:b3: 5b:b5:68:48:3e:97:a5:88:cd:92:4c:a9:20:b8:67: 9e:9d:f7:86:a2:2b:cf:57:3f:18:8f:fa:2d:d7:a3: 4d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3F:31:4C:72:1A:3D:F7:73:34:FF:88:47:71:3A:79:02:D2:C3:6B X509v3 Authority Key Identifier: keyid:86:C2:3C:17:BC:4D:20:EE:16:F0:92:D3:5A:2C:F6:55:4F:EC:71:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsI8F7xNIO4W8JLTWiz2VU_scRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D77/4B6427E2ABF911EA88AAE32CC4F9AE02/hsI8F7xNIO4W8JLTWiz2VU_scRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:98:7c:3c:12:b6:0f:1f:a9:c2:a7:17:ce:c0:6e:f0:46:75: 34:42:70:5d:64:35:4d:c5:95:4d:49:48:69:c5:bd:24:24:45: 79:69:d1:ca:82:0e:34:7a:79:2b:28:9f:92:f3:7b:3e:4c:e7: e4:d2:d3:bc:04:e0:c6:4e:07:a5:30:85:92:75:03:85:cf:63: a8:bc:65:59:5f:98:c6:81:2d:27:2d:a2:0d:35:f4:e9:f4:0e: 12:2f:c0:8d:7b:d8:82:4d:1e:b5:43:d8:8e:25:a6:a7:9b:b1: af:7d:dd:8a:83:91:13:65:bd:1a:e6:07:f9:ab:37:9c:25:c6: 69:93:6e:48:11:19:da:10:c0:4a:27:cd:ea:eb:1a:b7:23:4f: 3c:fb:17:94:b5:c6:83:23:89:19:21:56:cf:a8:cf:a6:76:e3: a2:28:a8:d3:30:31:a1:1b:37:05:05:5f:67:57:87:86:d0:6d: 2c:5f:48:55:cb:94:06:4a:db:a4:23:45:41:49:71:06:89:fd: 18:3b:d9:d7:ef:7b:e9:48:2c:f2:25:a3:ea:90:8f:4b:c1:2a: 20:13:9e:9c:91:ff:50:c7:2a:89:7d:66:2c:b1:f2:de:81:de: 14:3c:b6:9e:65:ee:9a:33:8f:2a:79:ee:60:75:d6:40:88:d5: 1f:88:eb:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFENzcxMTAvBgNVBAUTKDg2QzIzQzE3QkM0RDIwRUUxNkYwOTJEMzVBMkNGNjU1 NEZFQzcxMTkwHhcNMjQxMTIyMjAxOTQ4WhcNMjQxMTI5MjAxOTQ4WjAYMRYwFAYD VQQDEw02NzQwZTc2NC1kMzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyH3y4DlYBnBTgPKyqMp5iKZ1kcicyjWR/XFvhtjja2vsCvDQMHJnFc616f6U sEVhNxnFlCMsmy9XAtOoo/6I39Pcj4ENTNU9M8MKqYwuForVOMFJNIE4MRJYSBSB fO9T6FSTtIpmf8hxtmWww01LDtc1qrEq6AxsGtOy9uWAkvyl9IsH+2onpom2fS4x S7i1DpVc3IVTzFcl2eBltr0ioY3WQHkKNNDoP82R43N/iWI0svPkwDsAXg/TCzA0 bGT6noos5FCPxbQ3VvqX2qo8TDETins0vBiHXEp070cMM7NbtWhIPpeliM2STKkg uGeenfeGoivPVz8Yj/ot16NNRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMU/MUxy Gj33czT/iEdxOnkC0sNrMB8GA1UdIwQYMBaAFIbCPBe8TSDuFvCS01os9lVP7HEZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ3Ny80QjY0MjdFMkFC RjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklPNFc4SkxUV2l6MlZVX3Nj UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hzSThGN3hOSU80VzhKTFRXaXoyVlVfc2NSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ3Ny80QjY0MjdFMkFCRjkxMUVBODhBQUUzMkNDNEY5QUUwMi9oc0k4Rjd4TklP NFc4SkxUV2l6MlZVX3NjUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvmHw8ErYPH6nCpxfOwG7wRnU0QnBdZDVNxZVNSUhpxb0kJEV5adHK gg40enkrKJ+S83s+TOfk0tO8BODGTgelMIWSdQOFz2OovGVZX5jGgS0nLaINNfTp 9A4SL8CNe9iCTR61Q9iOJaanm7Gvfd2Kg5ETZb0a5gf5qzecJcZpk25IERnaEMBK J83q6xq3I088+xeUtcaDI4kZIVbPqM+mduOiKKjTMDGhGzcFBV9nV4eG0G0sX0hV y5QGStukI0VBSXEGif0YO9nX73vpSCzyJaPqkI9LwSogE56ckf9QxyqJfWYssfLe gd4UPLaeZe6aM48qee5gddZAiNUfiOsJ -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:48 2024 by rpki-client on console-ams.rpki-client.org