$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: iTIgMQzpE6aU4STZyUW7Kdma4sFwccSL/junA5bVa08= Subject key identifier: 49:72:FE:A8:49:12:22:8F:D1:B3:33:07:E1:DC:C2:22:A5:B6:A8:97 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 072D Signing time: Wed 20 Nov 2024 21:15:38 +0000 Manifest this update: Wed 20 Nov 2024 21:15:38 +0000 Manifest next update: Wed 27 Nov 2024 21:15:38 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: 2bOsMcCjFIXswWJYJlJ52TvmceO7CAAvF7E57PjfduI=) 2: 009FA5F0397C11EF9EC42850C4F9AE02.roa (hash: BUdadXM84LZqg6dcPh4b0sJ5Cd4Jg9PJnJrm+wRnwP8=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: GwT8wJjuiJq3ptd4ORrNmt479yde0NY4ozRqZ/YvpGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Nov 20 21:15:38 2024 GMT Not After : Nov 27 21:15:38 2024 GMT Subject: CN=673e517a-7b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:88:ee:ea:c3:f5:6b:5d:5f:ec:e0:cc:f3: b4:63:8b:7d:52:50:bd:59:82:fc:9a:79:8d:b7:53: a9:49:d2:4c:33:63:60:45:fa:69:1e:42:7e:05:d0: 35:77:d2:1d:37:94:7d:40:85:e0:3c:15:5e:e9:e8: 19:d4:3d:a8:43:2e:7a:82:c6:c1:0a:75:ad:17:bf: 4f:25:44:01:64:f3:d9:9a:8c:a2:51:e4:e4:f1:cb: d9:04:af:0e:f7:13:58:6e:f2:60:6b:d1:79:02:de: 66:b7:d7:93:83:55:3b:ee:8f:5d:a8:8d:3a:89:b0: 5f:a2:03:7a:1d:b1:88:36:e7:46:36:a8:38:cc:dd: 61:40:98:bf:68:f8:ca:b1:3a:87:ab:7d:a3:f5:d7: e2:bc:34:66:56:b6:dc:0c:be:94:e5:38:95:c6:6d: a0:5d:c8:75:a8:d0:e9:b7:92:0e:e1:15:41:99:d4: ee:d8:e1:29:24:c7:d4:0e:e8:9f:34:55:3a:a8:7a: cd:8c:39:28:36:85:23:0c:41:96:2d:fe:4f:fa:b7: fc:63:1b:84:af:81:f8:d0:e0:b9:3f:85:e9:34:0d: 58:a6:d5:92:40:ee:1f:d1:d0:2f:47:3a:f0:83:13: 14:71:0e:d8:c0:8b:8f:c5:18:11:31:27:3c:aa:8b: aa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:72:FE:A8:49:12:22:8F:D1:B3:33:07:E1:DC:C2:22:A5:B6:A8:97 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:78:b0:ce:1d:b8:0f:cd:0b:0c:e9:d1:97:cc:ba:4e:d5:8a: 8c:0f:62:a4:d5:cc:78:df:58:2f:25:64:84:fa:65:05:9b:a3: 0d:58:a2:ab:66:1a:75:a7:8d:30:62:b7:73:e0:fb:75:0c:1c: 93:9c:1d:f7:7d:87:b7:6b:3b:50:44:e4:40:0d:95:01:e9:69: 1b:b2:a9:b5:3b:66:8a:65:71:63:bb:9f:81:df:66:73:b8:1c: 6d:d6:b5:ec:3f:9e:22:fe:db:2e:99:34:9d:0a:c8:24:28:a3: a3:b4:d4:2c:e1:2e:7a:c3:aa:69:fe:c2:64:fe:5a:bd:af:6f: 89:72:59:8c:e0:28:3b:1f:5b:3d:a7:84:fb:90:38:d3:30:0a: ac:74:5a:c4:35:4c:04:57:14:a3:c8:5b:01:5e:9f:90:55:f2: 0d:69:0e:4a:da:bb:69:e9:f3:3a:b4:f8:ce:5d:20:2b:e6:37: ce:69:77:ab:bd:fb:67:77:a5:85:8b:97:d1:aa:a3:52:4c:7e: 94:d5:b9:98:82:79:ca:05:82:34:b0:13:be:1b:04:6e:12:86: e0:2e:87:10:4e:21:ae:4a:cd:eb:44:97:05:0b:b4:3d:f4:0f: 78:e6:84:f7:49:03:e8:cf:cd:90:ca:81:61:9b:6c:f2:68:1b: e8:21:b2:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjQxMTIwMjExNTM4WhcNMjQxMTI3MjExNTM4WjAYMRYwFAYD VQQDEw02NzNlNTE3YS03YjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zCI7urD9WtdX+zgzPO0Y4t9UlC9WYL8mnmNt1OpSdJMM2NgRfppHkJ+BdA1 d9IdN5R9QIXgPBVe6egZ1D2oQy56gsbBCnWtF79PJUQBZPPZmoyiUeTk8cvZBK8O 9xNYbvJga9F5At5mt9eTg1U77o9dqI06ibBfogN6HbGINudGNqg4zN1hQJi/aPjK sTqHq32j9dfivDRmVrbcDL6U5TiVxm2gXch1qNDpt5IO4RVBmdTu2OEpJMfUDuif NFU6qHrNjDkoNoUjDEGWLf5P+rf8YxuEr4H40OC5P4XpNA1YptWSQO4f0dAvRzrw gxMUcQ7YwIuPxRgRMSc8qouq5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEly/qhJ EiKP0bMzB+HcwiKltqiXMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6eLDOHbgPzQsM6dGXzLpO1YqMD2Kk1cx431gvJWSE+mUFm6MNWKKr Zhp1p40wYrdz4Pt1DByTnB33fYe3aztQRORADZUB6Wkbsqm1O2aKZXFju5+B32Zz uBxt1rXsP54i/tsumTSdCsgkKKOjtNQs4S56w6pp/sJk/lq9r2+JclmM4Cg7H1s9 p4T7kDjTMAqsdFrENUwEVxSjyFsBXp+QVfINaQ5K2rtp6fM6tPjOXSAr5jfOaXer vftnd6WFi5fRqqNSTH6U1bmYgnnKBYI0sBO+GwRuEobgLocQTiGuSs3rRJcFC7Q9 9A945oT3SQPoz82QyoFhm2zyaBvoIbL7 -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:03 2024 by rpki-client on console-ams.rpki-client.org