$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft File: Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft (raw, json) Hash identifier: ckMTH/+7yzMmMJNLMmKlw5nyP3TfNSP8McWSmE5AH28= Subject key identifier: 17:03:94:26:F5:98:5C:E2:48:C7:57:2E:B8:C5:4A:F5:CA:C7:1B:B8 Authority key identifier: 52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B Certificate issuer: /CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Certificate serial: 0B54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft Manifest number: 0B4E Signing time: Fri 22 Nov 2024 18:55:22 +0000 Manifest this update: Fri 22 Nov 2024 18:55:22 +0000 Manifest next update: Fri 29 Nov 2024 18:55:22 +0000 Files and hashes: 1: Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl (hash: NEXMAwdiU9ktl4A5Ajqp9E/G13+oY+YpFI26p8ULM0s=) 2: C7F8C83C217311EA93A29F82C4F9AE02.roa (hash: r5uWTU+sYs/vGgm5oMxXApeoTDyzrDhvLimJL0rhlzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2900 (0xb54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9C95/serialNumber=52BF6F62EBCA26B1DC427FBEAFE720FBB097C21B Validity Not Before: Nov 22 18:55:22 2024 GMT Not After : Nov 29 18:55:22 2024 GMT Subject: CN=6740d39a-cf7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2e:0c:e2:a6:97:11:5f:57:ad:56:29:37:0b: a5:43:16:86:cb:85:6b:24:e6:d6:c1:fc:8b:f8:dc: 3b:6d:65:d7:41:52:33:77:08:d0:2f:26:53:25:c0: 18:ab:a1:10:e0:a4:b2:22:69:b9:f1:d2:54:e4:5c: 38:a1:ef:b9:0e:44:c6:65:32:0c:95:1f:f4:c6:8d: 5b:98:80:c5:20:12:77:a3:54:0a:69:35:5a:93:51: e4:40:93:ef:21:01:ea:fa:99:e1:44:bf:a5:46:b5: b1:ed:9b:4e:46:a6:d6:f7:01:3b:ff:8d:6a:55:ab: 4a:28:87:6d:e6:61:b1:74:c5:2f:ea:79:88:c4:89: b1:c8:44:29:be:ab:13:1c:ec:1c:00:fb:4e:30:12: 0d:4a:96:71:28:e5:4c:af:25:e9:08:da:9f:9c:40: f7:ce:ef:8b:d3:9b:e7:68:66:d5:ff:24:61:5b:83: 91:62:7f:c8:d5:c2:44:74:8f:e2:9c:1e:c2:e4:07: 5f:54:ca:8a:98:f1:39:92:90:60:00:a8:b2:75:64: 70:42:70:d7:bd:e1:c8:3d:26:9c:3b:50:67:80:17: de:19:dc:db:8a:f0:bd:ca:7f:fe:66:db:8b:a0:69: c8:ae:bd:81:df:1b:61:06:8f:e4:33:a8:3f:41:3c: d3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:03:94:26:F5:98:5C:E2:48:C7:57:2E:B8:C5:4A:F5:CA:C7:1B:B8 X509v3 Authority Key Identifier: keyid:52:BF:6F:62:EB:CA:26:B1:DC:42:7F:BE:AF:E7:20:FB:B0:97:C2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur9vYuvKJrHcQn--r-cg-7CXwhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C95/BA3EC86E217211EA8B7EF880C4F9AE02/Ur9vYuvKJrHcQn--r-cg-7CXwhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ee:3f:ac:2a:2b:3a:ec:32:dd:cf:d8:91:de:60:6c:25:8d: 87:3e:fb:72:37:49:ac:ae:2e:10:54:36:3c:35:b0:d0:8e:d8: 50:7c:01:86:ca:9e:0c:8c:8e:4b:a6:56:d2:47:01:0b:80:d8: 7d:6c:32:a6:c0:36:95:81:da:15:e2:bc:d5:6e:dc:60:17:4e: b7:91:09:54:f9:e0:e8:12:bd:c9:c2:1a:76:c6:2c:ef:29:62: 4d:52:3e:89:ed:46:3a:96:17:21:f9:7f:e1:5d:8f:00:89:6a: 93:8f:1a:64:16:62:64:f3:58:bf:5e:e2:ed:72:79:50:6c:67: 82:a1:ec:c0:34:81:a4:09:d9:98:74:b8:34:43:10:4b:28:e0: 36:62:ea:5d:25:49:bf:f3:02:1f:81:97:0d:9c:20:05:da:be: 1d:93:3b:ec:8b:3e:a8:35:c6:c3:88:0d:13:78:74:be:fc:93: 8b:91:62:05:41:2c:01:99:a8:83:70:39:82:1e:73:a1:0b:4a: 90:c7:e8:a2:73:71:dd:aa:8a:d5:7b:7b:c8:f3:5d:5c:e4:5a: 3e:db:36:d1:2b:2b:01:e9:f0:fd:75:56:30:45:f5:3a:8a:04: ba:8d:4c:fa:c8:4a:01:9c:c7:8c:39:e4:07:47:06:de:5b:e2: d0:b6:d4:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlDOTUxMTAvBgNVBAUTKDUyQkY2RjYyRUJDQTI2QjFEQzQyN0ZCRUFGRTcyMEZC QjA5N0MyMUIwHhcNMjQxMTIyMTg1NTIyWhcNMjQxMTI5MTg1NTIyWjAYMRYwFAYD VQQDEw02NzQwZDM5YS1jZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8S4M4qaXEV9XrVYpNwulQxaGy4VrJObWwfyL+Nw7bWXXQVIzdwjQLyZTJcAY q6EQ4KSyImm58dJU5Fw4oe+5DkTGZTIMlR/0xo1bmIDFIBJ3o1QKaTVak1HkQJPv IQHq+pnhRL+lRrWx7ZtORqbW9wE7/41qVatKKIdt5mGxdMUv6nmIxImxyEQpvqsT HOwcAPtOMBINSpZxKOVMryXpCNqfnED3zu+L05vnaGbV/yRhW4ORYn/I1cJEdI/i nB7C5AdfVMqKmPE5kpBgAKiydWRwQnDXveHIPSacO1BngBfeGdzbivC9yn/+ZtuL oGnIrr2B3xthBo/kM6g/QTzT2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcDlCb1 mFziSMdXLrjFSvXKxxu4MB8GA1UdIwQYMBaAFFK/b2Lryiax3EJ/vq/nIPuwl8Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUM5NS9CQTNFQzg2RTIx NzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0pySGNRbi0tci1jZy03Q1h3 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyOXZZdXZLSnJIY1FuLS1yLWNnLTdDWHdocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUM5NS9CQTNFQzg2RTIxNzIxMUVBOEI3RUY4ODBDNEY5QUUwMi9Vcjl2WXV2S0py SGNRbi0tci1jZy03Q1h3aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF7j+sKis67DLdz9iR3mBsJY2HPvtyN0msri4QVDY8NbDQjthQfAGG yp4MjI5LplbSRwELgNh9bDKmwDaVgdoV4rzVbtxgF063kQlU+eDoEr3Jwhp2xizv KWJNUj6J7UY6lhch+X/hXY8AiWqTjxpkFmJk81i/XuLtcnlQbGeCoezANIGkCdmY dLg0QxBLKOA2YupdJUm/8wIfgZcNnCAF2r4dkzvsiz6oNcbDiA0TeHS+/JOLkWIF QSwBmaiDcDmCHnOhC0qQx+iic3HdqorVe3vI811c5Fo+2zbRKysB6fD9dVYwRfU6 igS6jUz6yEoBnMeMOeQHRwbeW+LQttS8 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org