$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft File: 84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json) Hash identifier: siKEZm4aoPmcjh7pRZlczXhwKzZQ7hhKeyUjPHYd1Jk= Subject key identifier: F9:3B:BF:70:2D:23:02:7B:D5:FB:AA:D0:4B:DA:88:28:65:AE:C0:18 Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Certificate serial: 03C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft Manifest number: 03C6 Signing time: Sat 23 Nov 2024 00:14:45 +0000 Manifest this update: Sat 23 Nov 2024 00:14:44 +0000 Manifest next update: Sat 30 Nov 2024 00:14:44 +0000 Files and hashes: 1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: DW1H81ibC3m9nwoy78WKyS4CzmpbroMPwThwrmZatQI=) 2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: WMHGc4TE8FcpYDxTVs4AE1cGDwpusyjJzjDGheMW978=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 969 (0x3c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Validity Not Before: Nov 23 00:14:44 2024 GMT Not After : Nov 30 00:14:44 2024 GMT Subject: CN=67411e75-8749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:81:b2:d4:fd:57:e7:a4:d9:b4:06:3e:cd:d3: eb:8b:84:6c:2f:75:76:b6:05:be:9f:2c:b4:68:6e: 88:8a:92:28:ba:32:68:67:0d:29:9d:56:89:fe:78: ef:28:62:2b:e6:03:c4:ac:4c:ff:59:4b:4b:91:d5: a3:29:33:98:14:4b:5d:3d:8d:f5:b6:34:71:f2:04: 04:36:b7:d9:45:12:25:83:b9:2b:57:07:9c:c7:27: e9:ff:a0:f2:d7:91:bb:80:8a:5d:2d:78:4e:0d:b1: 2b:66:b3:9d:69:02:fe:53:05:f6:8c:5e:2a:12:f4: fc:3c:df:70:50:04:0e:b7:97:b5:f4:2d:b4:38:1d: 1a:92:95:47:15:ac:a8:e8:50:56:38:b3:b5:b5:a0: 68:7e:c6:46:e9:9a:04:55:26:91:80:7b:07:c7:b1: ea:1d:07:38:38:48:3f:de:ab:fe:af:ef:2f:cf:0d: b5:f0:00:c1:c5:27:a3:ce:d5:62:7f:21:b9:6b:e8: 8c:44:30:75:74:10:06:60:92:5d:8e:53:37:58:ae: 71:84:62:cc:b5:9b:68:e5:1d:8a:b5:2b:1a:d3:80: c6:5a:92:6b:4c:d1:0f:3b:d4:a3:de:4e:2e:25:e5: 54:2c:b1:37:55:70:ce:83:45:f8:42:60:a4:05:3d: 32:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3B:BF:70:2D:23:02:7B:D5:FB:AA:D0:4B:DA:88:28:65:AE:C0:18 X509v3 Authority Key Identifier: keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:09:83:51:0c:41:72:f4:ba:0b:89:db:10:43:21:33:19:04: 5d:cb:cc:f7:3e:1a:53:dc:13:b3:ce:cd:cf:8e:f4:ca:a5:7e: 80:86:b8:fe:86:b0:51:e0:7d:1c:da:71:46:1e:8e:e2:7e:5d: bc:e9:41:b6:cd:c6:52:c9:3e:e5:21:f9:a5:bc:d0:87:2d:f7: d4:6a:27:18:b2:52:9c:c7:50:c5:9a:e2:a4:af:ab:c3:11:cd: 7a:23:64:cb:e1:2d:77:bd:de:1c:ad:fc:20:b4:77:b2:fa:9b: f6:3a:be:a3:29:12:fc:fb:d9:27:f5:8b:9c:78:6b:e1:fc:7b: 34:f3:52:8d:10:22:39:e1:dc:01:3f:92:d6:00:d8:4a:fc:30: d3:bc:67:e2:eb:a0:1e:5a:59:83:a8:8a:12:45:c8:e2:20:1e: 18:53:43:2a:c3:4d:2d:e4:c7:14:6f:88:8f:c0:71:71:fd:53: 64:5b:e7:6b:0f:50:3c:33:b0:50:1e:16:e9:bc:ab:2e:64:83: 05:4c:0d:1f:35:63:b7:bc:13:75:01:ea:0b:ed:05:f7:72:14: 5a:f0:5f:4e:7f:76:52:c9:44:90:9b:bd:e2:b9:79:b4:ac:de: ec:03:8c:ea:ec:80:fa:4d:df:98:46:24:e2:52:e0:0a:97:5c: e0:7f:46:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBRDUxMTAvBgNVBAUTKEYzODVGMzc5MTc3MDIwRjA4OEJGNzREQTJDMDM0NkQ4 NzlDMjJBMUQwHhcNMjQxMTIzMDAxNDQ0WhcNMjQxMTMwMDAxNDQ0WjAYMRYwFAYD VQQDEw02NzQxMWU3NS04NzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8IGy1P1X56TZtAY+zdPri4RsL3V2tgW+nyy0aG6IipIoujJoZw0pnVaJ/njv KGIr5gPErEz/WUtLkdWjKTOYFEtdPY31tjRx8gQENrfZRRIlg7krVwecxyfp/6Dy 15G7gIpdLXhODbErZrOdaQL+UwX2jF4qEvT8PN9wUAQOt5e19C20OB0akpVHFayo 6FBWOLO1taBofsZG6ZoEVSaRgHsHx7HqHQc4OEg/3qv+r+8vzw218ADBxSejztVi fyG5a+iMRDB1dBAGYJJdjlM3WK5xhGLMtZto5R2KtSsa04DGWpJrTNEPO9Sj3k4u JeVULLE3VXDOg0X4QmCkBT0y7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPk7v3At IwJ71fuq0EvaiChlrsAYMB8GA1UdIwQYMBaAFPOF83kXcCDwiL902iwDRth5wiod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkFENS9GNDc5NTgwRTY0 MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQQ0l2M1RhTEFORzJIbkNL aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0WHplUmR3SVBDSXYzVGFMQU5HMkhuQ0toMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkFENS9GNDc5NTgwRTY0MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQ Q0l2M1RhTEFORzJIbkNLaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgCYNRDEFy9LoLidsQQyEzGQRdy8z3PhpT3BOzzs3PjvTKpX6Ahrj+ hrBR4H0c2nFGHo7ifl286UG2zcZSyT7lIfmlvNCHLffUaicYslKcx1DFmuKkr6vD Ec16I2TL4S13vd4crfwgtHey+pv2Or6jKRL8+9kn9YuceGvh/Hs081KNECI54dwB P5LWANhK/DDTvGfi66AeWlmDqIoSRcjiIB4YU0Mqw00t5McUb4iPwHFx/VNkW+dr D1A8M7BQHhbpvKsuZIMFTA0fNWO3vBN1AeoL7QX3chRa8F9Of3ZSyUSQm73iuXm0 rN7sA4zq7ID6Td+YRiTiUuAKl1zgf0Zp -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org