$ rpki-client -vvf rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft File: 5jLTjFoywhfG7nHVLe-fOMoWbFE.mft (raw, json) Hash identifier: AryJTEn42nbmGhjEPdjX013qGsfd19TcvyBGm4h14vk= Subject key identifier: 75:C8:28:A0:F3:45:1A:C4:97:E1:70:A9:DF:15:BB:C8:CF:F2:A9:57 Authority key identifier: E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 Certificate issuer: /CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft Manifest number: 0172 Signing time: Sat 23 Nov 2024 02:18:43 +0000 Manifest this update: Sat 23 Nov 2024 02:18:42 +0000 Manifest next update: Sat 30 Nov 2024 02:18:42 +0000 Files and hashes: 1: 5jLTjFoywhfG7nHVLe-fOMoWbFE.crl (hash: 90zNNbCUVi17ykgk+cf8q+pCQ04tghXmDFw+qrjGB68=) 2: 32D8E190D0CB11EEAB1CAF34C4F9AE02.roa (hash: XiWcqkDcsvOFFig0n+ygYts/d+AZtwoFOnRQ5BOzYoQ=) 3: 4D554D70D0CA11EE9DCDFA83C4F9AE02.roa (hash: IoymGXpKD2CL70pPUTw2E3zSeo05rJSNZrms/9hf9jQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911486F/serialNumber=E632D38C5A32C217C6EE71D52DEF9F38CA166C51 Validity Not Before: Nov 23 02:18:42 2024 GMT Not After : Nov 30 02:18:42 2024 GMT Subject: CN=67413b82-8a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:aa:27:cf:31:96:80:d9:2c:28:15:c4:88: 5a:59:94:95:87:f8:fe:0e:29:cd:ff:d0:f5:47:a9: 5e:fa:01:2f:e0:5d:22:76:f9:7e:88:1b:48:29:b9: 79:47:ea:10:71:f3:10:13:0c:27:3d:cf:d7:9b:a8: 79:f7:98:e2:8c:6b:ff:16:70:43:37:bc:b2:7a:43: f4:3d:7f:8d:ab:33:6c:bc:14:87:9f:75:60:93:9e: 8f:1f:94:04:62:f4:6b:9e:3a:12:f5:c2:25:da:d6: 39:70:de:04:71:bc:a5:ae:25:e2:5d:dc:73:3e:6d: 34:63:e4:86:50:e9:78:d9:6b:1e:e2:bb:e7:e4:bc: df:d0:87:52:76:17:4f:39:c8:c5:73:77:47:c5:65: 7e:65:6c:41:c2:42:82:ea:ef:d3:71:02:3d:e1:5a: 11:00:07:25:6b:c6:8d:98:ce:b2:2c:0d:07:22:a3: 1c:48:de:3c:d2:ee:4b:4e:35:ad:ba:db:75:a2:a3: a4:78:59:85:7f:7f:51:39:2d:f0:94:77:ae:7b:39: 06:76:1f:f9:46:db:bd:cf:3a:54:a4:8d:28:34:d0: d7:21:a3:04:83:14:1e:99:78:e0:23:82:db:02:76: 5b:0d:09:4e:90:d7:46:a8:46:13:22:39:7b:e8:a7: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C8:28:A0:F3:45:1A:C4:97:E1:70:A9:DF:15:BB:C8:CF:F2:A9:57 X509v3 Authority Key Identifier: keyid:E6:32:D3:8C:5A:32:C2:17:C6:EE:71:D5:2D:EF:9F:38:CA:16:6C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jLTjFoywhfG7nHVLe-fOMoWbFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911486F/22CF3448866C11EDAFA5A471C4F9AE02/5jLTjFoywhfG7nHVLe-fOMoWbFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:8b:73:a4:09:25:83:8c:a3:26:7c:24:ae:13:92:10:f2:56: f4:12:24:b7:a2:77:f9:b8:08:1a:6b:0d:e4:32:28:dd:b7:54: 3e:47:8c:b6:a5:bc:d2:77:28:f0:08:e7:de:b7:a7:69:77:b1: b4:79:ff:9a:16:1d:1a:d5:f2:fe:c9:86:43:51:9a:d5:5c:6c: 6d:d1:0c:29:50:d7:aa:4b:49:72:54:b0:0e:20:55:11:c7:60: 15:4d:9e:d8:77:6e:19:73:ee:44:df:51:17:1d:4d:dc:54:f7: a1:04:66:e1:ad:60:03:33:12:7f:d1:4d:f5:39:4e:3a:5b:bc: ce:e6:37:f6:b1:5e:22:4f:07:e1:67:dc:e6:41:41:b8:d9:f9: 10:b7:eb:b3:d4:92:c1:a2:88:ca:f6:62:81:d8:7a:57:c2:c4: 39:17:88:5f:cc:84:9b:57:5f:71:d3:71:9f:cc:bf:a6:91:40: a9:5d:e3:1f:1e:e7:60:70:65:59:03:17:33:a0:12:00:f1:b6: ff:3b:f6:95:22:32:b6:42:5e:0e:8a:ec:12:1d:8d:5d:83:4b: f4:f3:1b:6f:9b:60:74:6f:eb:7a:fd:ee:8c:ec:3f:8e:94:d1: 0e:5f:15:f6:51:79:a7:71:eb:22:58:aa:4b:0d:0a:c8:e7:ab: 9b:32:f2:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4NkYxMTAvBgNVBAUTKEU2MzJEMzhDNUEzMkMyMTdDNkVFNzFENTJERUY5RjM4 Q0ExNjZDNTEwHhcNMjQxMTIzMDIxODQyWhcNMjQxMTMwMDIxODQyWjAYMRYwFAYD VQQDEw02NzQxM2I4Mi04YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdWqJ88xloDZLCgVxIhaWZSVh/j+DinN/9D1R6le+gEv4F0idvl+iBtIKbl5 R+oQcfMQEwwnPc/Xm6h595jijGv/FnBDN7yyekP0PX+NqzNsvBSHn3Vgk56PH5QE YvRrnjoS9cIl2tY5cN4EcbylriXiXdxzPm00Y+SGUOl42Wse4rvn5Lzf0IdSdhdP OcjFc3dHxWV+ZWxBwkKC6u/TcQI94VoRAAcla8aNmM6yLA0HIqMcSN480u5LTjWt utt1oqOkeFmFf39ROS3wlHeuezkGdh/5Rtu9zzpUpI0oNNDXIaMEgxQemXjgI4Lb AnZbDQlOkNdGqEYTIjl76Kf+IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXIKKDz RRrEl+Fwqd8Vu8jP8qlXMB8GA1UdIwQYMBaAFOYy04xaMsIXxu5x1S3vnzjKFmxR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg2Ri8yMkNGMzQ0ODg2 NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdoZkc3bkhWTGUtZk9Nb1di RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVqTFRqRm95d2hmRzduSFZMZS1mT01vV2JGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDg2Ri8yMkNGMzQ0ODg2NkMxMUVEQUZBNUE0NzFDNEY5QUUwMi81akxUakZveXdo Zkc3bkhWTGUtZk9Nb1diRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqi3OkCSWDjKMmfCSuE5IQ8lb0EiS3onf5uAgaaw3kMijdt1Q+R4y2 pbzSdyjwCOfet6dpd7G0ef+aFh0a1fL+yYZDUZrVXGxt0QwpUNeqS0lyVLAOIFUR x2AVTZ7Yd24Zc+5E31EXHU3cVPehBGbhrWADMxJ/0U31OU46W7zO5jf2sV4iTwfh Z9zmQUG42fkQt+uz1JLBoojK9mKB2HpXwsQ5F4hfzISbV19x03GfzL+mkUCpXeMf HudgcGVZAxczoBIA8bb/O/aVIjK2Ql4OiuwSHY1dg0v08xtvm2B0b+t6/e6M7D+O lNEOXxX2UXmncesiWKpLDQrI56ubMvKG -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org