$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft File: 755Sv59IZcr4eHrZXObeT2R2hA0.mft (raw, json) Hash identifier: d4HNLMBPbeSckC/qDKoP1EPADVwb+4RLUfYD1H4XIzQ= Subject key identifier: 84:99:BB:A7:AE:A2:94:8E:95:F5:04:17:A8:27:FA:F7:A3:28:DA:A7 Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D Certificate issuer: /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Certificate serial: 0A2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft Manifest number: 0A22 Signing time: Fri 22 Nov 2024 19:33:29 +0000 Manifest this update: Fri 22 Nov 2024 19:33:29 +0000 Manifest next update: Fri 29 Nov 2024 19:33:28 +0000 Files and hashes: 1: 755Sv59IZcr4eHrZXObeT2R2hA0.crl (hash: maPWlrVhcrxx+3Ww0BgRZ7kgaeAI2bb8mo8zFMOtP44=) 2: 9E1721445CFB11EAA377D527C4F9AE02.roa (hash: DDWfC2SDa6mkLERH2fLjEnqKEWrtJ+AhIE6qZcqqt1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2602 (0xa2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Validity Not Before: Nov 22 19:33:29 2024 GMT Not After : Nov 29 19:33:28 2024 GMT Subject: CN=6740dc89-717b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:da:5c:2f:47:e9:63:fd:ea:4f:e4:fe:fe: 47:7f:9b:10:ca:f2:b6:13:a7:78:18:63:f6:e3:7b: ec:5e:05:b2:b3:34:1b:c8:0d:d0:48:53:3c:9d:0f: 71:29:06:08:e4:3b:0d:f9:03:f4:f0:7e:a9:09:41: e1:81:ce:08:20:8b:46:90:72:f5:f4:99:7b:f3:43: 01:46:ea:5d:7f:95:a5:8b:df:9b:b2:eb:fc:e2:22: 7e:03:54:42:8b:de:c5:a6:a8:c3:04:20:f4:e5:56: 96:87:97:96:f0:5e:4e:a7:c2:95:08:f0:80:a8:dc: 19:fd:22:0e:65:02:22:1f:cd:d4:89:f3:f2:88:94: bf:06:ee:ac:9b:3d:aa:4f:f8:68:de:e2:16:cd:fb: f1:49:8e:24:a0:a1:f6:92:c6:48:65:54:b6:9a:bf: e6:1c:f9:99:a2:bf:69:c2:b7:f1:e7:39:4f:27:81: d3:ba:86:17:5e:32:5f:25:05:5c:18:4c:d6:72:4e: ad:ad:7b:41:aa:17:cc:97:c4:5b:bd:27:82:4c:84: ca:da:ee:73:7f:cc:41:11:9a:4b:8e:4b:8f:d3:67: 1d:21:34:62:79:4b:de:44:2a:88:e5:2e:7a:5c:e4: 82:c3:90:15:80:cd:4d:11:63:76:b2:46:28:81:65: 28:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:99:BB:A7:AE:A2:94:8E:95:F5:04:17:A8:27:FA:F7:A3:28:DA:A7 X509v3 Authority Key Identifier: keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:07:7a:e7:d4:78:52:0c:08:9e:30:72:7b:9c:e7:b3:93:11: d6:7f:5d:38:16:a0:84:f1:a4:f4:ce:49:b0:f8:73:cb:fb:2b: 09:f2:50:90:5e:7d:d6:90:56:4d:d2:f8:e4:38:a0:30:ab:d9: 23:9d:68:32:ca:24:91:bb:96:59:57:70:b6:6d:f7:a6:75:32: ff:6c:36:e3:8c:de:c8:92:d7:8c:8c:f4:f9:7f:57:09:19:44: c7:10:92:e5:4b:b4:79:b9:78:cd:39:cb:7d:74:8c:f5:bd:1f: 9a:84:b2:c8:12:80:a2:8e:1a:db:b4:b8:4e:98:7a:8b:d1:e1: e4:51:12:37:c7:31:76:06:b2:70:3c:ed:d3:29:c3:36:6e:3e: 80:05:cb:59:24:7d:31:64:07:53:5d:c2:a3:b9:3c:a4:82:22: 24:57:2d:c4:86:a1:e1:de:4f:6d:4d:bf:38:8e:36:b0:f4:4c: 54:c5:88:ca:f8:1c:25:f1:4d:8b:bd:8b:2e:db:59:4f:01:fc: bc:04:0b:55:c2:cb:16:92:31:51:0e:07:16:0d:ee:ad:01:0b: 78:1e:9f:07:85:37:12:fc:35:2d:86:dd:26:76:1d:9b:54:2a: 05:0f:df:24:d1:4a:4c:32:9d:97:d6:37:7d:ea:a9:12:7f:58: c1:24:4b:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBNEIxMTAvBgNVBAUTKEVGOUU1MkJGOUY0ODY1Q0FGODc4N0FEOTVDRTZERTRG NjQ3Njg0MEQwHhcNMjQxMTIyMTkzMzI5WhcNMjQxMTI5MTkzMzI4WjAYMRYwFAYD VQQDEw02NzQwZGM4OS03MTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0vaXC9H6WP96k/k/v5Hf5sQyvK2E6d4GGP243vsXgWyszQbyA3QSFM8nQ9x KQYI5DsN+QP08H6pCUHhgc4IIItGkHL19Jl780MBRupdf5Wli9+bsuv84iJ+A1RC i97FpqjDBCD05VaWh5eW8F5Op8KVCPCAqNwZ/SIOZQIiH83UifPyiJS/Bu6smz2q T/ho3uIWzfvxSY4koKH2ksZIZVS2mr/mHPmZor9pwrfx5zlPJ4HTuoYXXjJfJQVc GEzWck6trXtBqhfMl8RbvSeCTITK2u5zf8xBEZpLjkuP02cdITRieUveRCqI5S56 XOSCw5AVgM1NEWN2skYogWUo+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISZu6eu opSOlfUEF6gn+vejKNqnMB8GA1UdIwQYMBaAFO+eUr+fSGXK+Hh62Vzm3k9kdoQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0E0Qi82RTY0QzQxMDVD RUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpjcjRlSHJaWE9iZVQyUjJo QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1NVN2NTlJWmNyNGVIclpYT2JlVDJSMmhBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0E0Qi82RTY0QzQxMDVDRUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpj cjRlSHJaWE9iZVQyUjJoQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfB3rn1HhSDAieMHJ7nOezkxHWf104FqCE8aT0zkmw+HPL+ysJ8lCQ Xn3WkFZN0vjkOKAwq9kjnWgyyiSRu5ZZV3C2bfemdTL/bDbjjN7IkteMjPT5f1cJ GUTHEJLlS7R5uXjNOct9dIz1vR+ahLLIEoCijhrbtLhOmHqL0eHkURI3xzF2BrJw PO3TKcM2bj6ABctZJH0xZAdTXcKjuTykgiIkVy3EhqHh3k9tTb84jjaw9ExUxYjK +Bwl8U2LvYsu21lPAfy8BAtVwssWkjFRDgcWDe6tAQt4Hp8HhTcS/DUtht0mdh2b VCoFD98k0UpMMp2X1jd96qkSf1jBJEsd -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org