$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft File: aK5b6xu35ELO4KfgFAKf9y49tB8.mft (raw, json) Hash identifier: eF459EPZLjutLXCS3VtHx6fvXhWfp9Wjf3LUynQh8Gs= Subject key identifier: 9C:B4:01:B2:99:07:8E:5A:B6:5A:39:A4:7B:42:27:7B:FE:E3:99:09 Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Certificate serial: 0BA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft Manifest number: 0B96 Signing time: Fri 22 Nov 2024 18:44:43 +0000 Manifest this update: Fri 22 Nov 2024 18:44:43 +0000 Manifest next update: Fri 29 Nov 2024 18:44:43 +0000 Files and hashes: 1: aK5b6xu35ELO4KfgFAKf9y49tB8.crl (hash: dfYEHJ7t/p7NKL631IBHF3sTLTwmmW21s1CbV6t/3Rg=) 2: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (hash: 5YnlbFiESO7UmvUP8KNkIgeb7OYcXBskhmx0foLpcp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Validity Not Before: Nov 22 18:44:43 2024 GMT Not After : Nov 29 18:44:43 2024 GMT Subject: CN=6740d11b-b36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:56:ad:e2:3d:63:fe:e7:ca:30:1c:34:cf:4c: e0:b3:e3:db:52:21:f5:a9:3c:5a:ae:63:96:1f:e5: 57:62:24:cf:db:c0:5f:7a:c0:db:d9:a6:87:5c:b2: 17:d2:6d:2b:2d:0b:06:89:3a:6e:89:18:52:7a:e9: bb:e4:76:53:1a:9e:b6:e6:29:bb:35:bd:b7:b0:ee: 11:76:5f:1b:12:16:58:c3:d4:f4:79:ac:c1:3e:de: 12:83:0e:5b:c5:eb:cd:5d:7b:95:6f:c2:9c:81:ac: 76:75:f7:39:78:56:e8:cf:6b:0a:db:a4:8c:37:6b: 61:4e:8e:ef:fd:83:ed:70:12:c3:97:ab:ef:27:fa: c6:61:e4:bf:af:65:dc:53:ff:c3:17:37:93:61:e5: 41:e5:51:a9:e8:df:c2:fa:eb:d0:95:2d:9a:88:e1: c7:c8:4c:01:ec:bf:e1:75:7c:b5:e5:c9:cb:43:8a: 22:2e:b8:df:23:22:d5:20:aa:45:c4:a7:2a:95:46: a3:cb:7d:c4:8b:3d:d7:fb:bb:0a:2c:be:e1:52:4f: 5b:82:81:47:f9:c2:4e:0c:f4:f5:56:ac:59:73:98: 9a:13:a1:1e:0c:fa:f8:ea:db:1b:e6:54:f7:23:ad: f7:b8:71:0d:21:d1:c3:18:74:44:6a:7c:79:4f:cf: 42:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B4:01:B2:99:07:8E:5A:B6:5A:39:A4:7B:42:27:7B:FE:E3:99:09 X509v3 Authority Key Identifier: keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:32:ad:33:ef:4f:b1:57:dc:a6:a2:8b:89:90:9b:3b:a4:b1: ed:47:8e:37:21:c6:dc:f1:d5:6a:62:34:a1:cb:f6:30:c5:e0: 63:d5:6c:a5:f0:9f:bc:fe:bf:b5:2f:16:e1:2f:08:50:49:97: 19:f9:f0:6d:df:6f:cc:71:a6:72:04:51:fd:24:de:4b:a4:d2: ad:20:06:4d:04:1a:27:44:8b:06:4c:32:1c:50:53:dd:c9:c0: 5c:ed:b0:24:9f:e2:be:c4:e6:c5:df:73:05:dd:b4:47:ed:38: de:71:c7:35:35:d5:a1:9c:95:05:de:0c:a2:d7:df:10:43:aa: c4:d3:41:6e:62:b0:1d:07:9d:9a:e8:9a:bd:6b:16:bb:2a:f2: f2:b2:d9:aa:e5:33:60:53:25:17:cd:e0:43:0d:35:c7:81:ad: 8f:3a:29:67:df:d6:bd:9d:5b:08:2d:af:09:76:99:b9:1a:7c: 36:5a:d3:26:fb:81:d7:25:aa:ba:1d:8e:92:18:18:3a:c6:f6: 01:8e:fd:e9:e6:3d:f0:1f:b2:5a:cd:55:59:26:2f:1e:4f:50: 77:4c:c3:a4:e0:03:35:99:23:ed:ea:c8:e0:c7:e9:ec:cf:25: a8:d6:e2:d7:e3:1e:13:66:71:6a:65:c7:bd:04:84:09:b9:9c: c5:54:7d:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdFMDE0MDI5RkY3 MkUzREI0MUYwHhcNMjQxMTIyMTg0NDQzWhcNMjQxMTI5MTg0NDQzWjAYMRYwFAYD VQQDEw02NzQwZDExYi1iMzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFat4j1j/ufKMBw0z0zgs+PbUiH1qTxarmOWH+VXYiTP28BfesDb2aaHXLIX 0m0rLQsGiTpuiRhSeum75HZTGp625im7Nb23sO4Rdl8bEhZYw9T0eazBPt4Sgw5b xevNXXuVb8Kcgax2dfc5eFboz2sK26SMN2thTo7v/YPtcBLDl6vvJ/rGYeS/r2Xc U//DFzeTYeVB5VGp6N/C+uvQlS2aiOHHyEwB7L/hdXy15cnLQ4oiLrjfIyLVIKpF xKcqlUajy33Eiz3X+7sKLL7hUk9bgoFH+cJODPT1VqxZc5iaE6EeDPr46tsb5lT3 I633uHENIdHDGHREanx5T89CMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJy0AbKZ B45atlo5pHtCJ3v+45kJMB8GA1UdIwQYMBaAFGiuW+sbt+RCzuCn4BQCn/cuPbQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRDOS8yQUE4QjM4ODE0 QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVFTE80S2ZnRkFLZjl5NDl0 QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLNWI2eHUzNUVMTzRLZmdGQUtmOXk0OXRCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDRDOS8yQUE4QjM4ODE0QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVF TE80S2ZnRkFLZjl5NDl0QjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0Mq0z70+xV9ymoouJkJs7pLHtR443Icbc8dVqYjShy/YwxeBj1Wyl 8J+8/r+1LxbhLwhQSZcZ+fBt32/McaZyBFH9JN5LpNKtIAZNBBonRIsGTDIcUFPd ycBc7bAkn+K+xObF33MF3bRH7Tjeccc1NdWhnJUF3gyi198QQ6rE00FuYrAdB52a 6Jq9axa7KvLystmq5TNgUyUXzeBDDTXHga2POiln39a9nVsILa8Jdpm5Gnw2WtMm +4HXJaq6HY6SGBg6xvYBjv3p5j3wH7JazVVZJi8eT1B3TMOk4AM1mSPt6sjgx+ns zyWo1uLX4x4TZnFqZce9BIQJuZzFVH0B -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:55 2024 by rpki-client on console-ams.rpki-client.org