$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft File: k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft (raw, json) Hash identifier: KZxlK87+rpOX7tADz7ee9h7AaWdEPMku0v/Kp4u3SJg= Subject key identifier: 92:7E:D8:09:4D:BF:6E:E8:09:10:F8:36:AE:F8:AF:39:17:C7:55:9D Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 Certificate issuer: /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Certificate serial: 1362 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft Manifest number: 1348 Signing time: Fri 22 Nov 2024 17:00:31 +0000 Manifest this update: Fri 22 Nov 2024 17:00:31 +0000 Manifest next update: Fri 29 Nov 2024 17:00:31 +0000 Files and hashes: 1: k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl (hash: 6cJokwQ64N/UHjlFmvFQxNnpNCnu6rNLG77DY7vgWtg=) 2: A04E05E42CE911EC8F99F486C4F9AE02.roa (hash: 4Bdu5c7KiVJ8qwTifJfb8PRfm9Z4srlRbM1n/IceWaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4962 (0x1362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Validity Not Before: Nov 22 17:00:31 2024 GMT Not After : Nov 29 17:00:31 2024 GMT Subject: CN=6740b8af-d370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:19:61:f7:c9:ea:1c:0e:3f:01:fc:fd:c8:a6: d8:03:04:00:5e:41:03:c6:67:15:84:28:24:c9:d5: ca:ed:97:73:0e:82:cb:55:1a:f0:8e:ca:82:b2:0d: 7f:c4:c1:41:d8:14:74:9f:32:52:5f:f2:3d:d9:b7: 6b:6f:2b:e5:68:ac:1f:31:8e:b4:9f:73:d2:7b:f7: 95:6a:14:00:3c:c6:2b:0a:29:ca:5b:bb:d9:ae:a5: 4c:1a:88:47:ad:89:5d:5b:23:e0:1f:56:f8:68:52: 39:72:fd:5d:0b:c9:a9:e2:40:f8:30:65:bc:c1:c7: f0:8f:c9:86:92:e8:55:6f:c9:41:20:25:cc:88:07: 7c:75:74:94:e0:fc:f7:ee:d6:b4:d9:72:ab:dd:2f: 90:12:c4:73:90:90:9d:60:18:2d:97:c7:26:59:30: 06:e1:43:44:dd:f4:4c:b3:8c:16:d8:fd:64:72:ba: 5e:10:ed:11:a7:b0:82:1d:12:8b:4c:48:04:83:ee: 7c:2b:6d:bd:61:38:31:ac:59:70:b1:96:28:88:2c: 4b:34:92:05:77:8c:d9:12:f9:c7:16:44:6f:49:62: 41:20:cd:96:b9:40:82:f1:f7:af:9b:c1:27:f6:c2: d0:47:a4:fe:b2:7a:7e:a4:c9:3d:de:a1:dd:fc:54: 09:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:7E:D8:09:4D:BF:6E:E8:09:10:F8:36:AE:F8:AF:39:17:C7:55:9D X509v3 Authority Key Identifier: keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:35:e5:fd:7e:f8:17:71:08:ee:3e:7f:d1:e6:68:32:7e:18: 5f:aa:70:6b:53:a4:ba:bf:8b:93:84:18:3e:d3:19:ef:25:5c: a4:19:62:dd:e0:75:b0:a7:2d:d9:79:fb:f0:eb:b9:a8:bc:ba: f5:d1:eb:4b:02:b7:09:b9:24:29:a0:cc:9b:ec:de:4e:0b:27: 89:e5:e8:cd:ef:d1:5d:c1:8f:36:e9:c5:55:1b:0f:7c:c2:53: f5:1a:0f:11:24:4b:b6:41:4f:69:76:5a:a3:bd:9b:87:11:b8: 73:51:79:e4:3d:7d:e1:9c:a2:60:da:c3:6a:78:85:40:2f:62: c4:cb:85:8a:35:f3:9e:80:da:f9:df:1c:ff:bc:d9:ac:62:ae: 11:12:27:48:1b:ec:fd:88:e8:7d:45:b7:52:91:00:23:8a:ce: 5d:d8:a4:ee:03:cd:21:4b:c2:91:48:69:b2:7f:87:ae:d3:b6: d8:0d:ea:58:83:f2:21:ba:95:de:f6:ec:ef:cf:f3:f9:6a:c2: 08:12:b8:39:e7:ac:03:da:2a:d4:51:c0:c7:7f:13:ac:b7:85: 0c:1d:63:6a:20:0b:53:58:26:8f:df:8c:d6:ad:b0:2f:de:dc: f0:b0:94:8d:ab:ae:f0:9d:b1:a2:cc:85:de:7c:8f:2a:c2:97: d4:bf:a2:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMTUxMTAvBgNVBAUTKDkzQzRENzREMThGNTJDRUE1ODUyODBCQjMzMTJGMzEw RTEyMEMwRTkwHhcNMjQxMTIyMTcwMDMxWhcNMjQxMTI5MTcwMDMxWjAYMRYwFAYD VQQDEw02NzQwYjhhZi1kMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBlh98nqHA4/Afz9yKbYAwQAXkEDxmcVhCgkydXK7ZdzDoLLVRrwjsqCsg1/ xMFB2BR0nzJSX/I92bdrbyvlaKwfMY60n3PSe/eVahQAPMYrCinKW7vZrqVMGohH rYldWyPgH1b4aFI5cv1dC8mp4kD4MGW8wcfwj8mGkuhVb8lBICXMiAd8dXSU4Pz3 7ta02XKr3S+QEsRzkJCdYBgtl8cmWTAG4UNE3fRMs4wW2P1kcrpeEO0Rp7CCHRKL TEgEg+58K229YTgxrFlwsZYoiCxLNJIFd4zZEvnHFkRvSWJBIM2WuUCC8fevm8En 9sLQR6T+snp+pMk93qHd/FQJtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJ+2AlN v27oCRD4Nq74rzkXx1WdMB8GA1UdIwQYMBaAFJPE100Y9SzqWFKAuzMS8xDhIMDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QxNS83QzY4NUE4Mjk1 QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxPcFlVb0M3TXhMekVPRWd3 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4VFhUUmoxTE9wWVVvQzdNeEx6RU9FZ3dPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QxNS83QzY4NUE4Mjk1QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxP cFlVb0M3TXhMekVPRWd3T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJNeX9fvgXcQjuPn/R5mgyfhhfqnBrU6S6v4uThBg+0xnvJVykGWLd 4HWwpy3Zefvw67movLr10etLArcJuSQpoMyb7N5OCyeJ5ejN79FdwY826cVVGw98 wlP1Gg8RJEu2QU9pdlqjvZuHEbhzUXnkPX3hnKJg2sNqeIVAL2LEy4WKNfOegNr5 3xz/vNmsYq4REidIG+z9iOh9RbdSkQAjis5d2KTuA80hS8KRSGmyf4eu07bYDepY g/IhupXe9uzvz/P5asIIErg556wD2irUUcDHfxOst4UMHWNqIAtTWCaP34zWrbAv 3tzwsJSNq67wnbGizIXefI8qwpfUv6KV -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org