$ rpki-client -vvf rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft File: 8n_4duRl5zyaUv04SNvXZb-yNdQ.mft (raw, json) Hash identifier: 3N5dkOHjvpCBEu1cAMZIsWqXuzDjUeR5uSwtHr/rzhI= Subject key identifier: 7D:86:7E:BA:EC:3B:81:2D:75:12:75:5B:86:49:DB:7E:32:72:B4:6E Authority key identifier: F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 Certificate issuer: /CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Certificate serial: 0CFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft Manifest number: 0CEE Signing time: Fri 22 Nov 2024 18:00:27 +0000 Manifest this update: Fri 22 Nov 2024 18:00:26 +0000 Manifest next update: Fri 29 Nov 2024 18:00:26 +0000 Files and hashes: 1: 8n_4duRl5zyaUv04SNvXZb-yNdQ.crl (hash: Nc66a20Q8zg1TDkigLJaqFtgXWZneDkgq2XR4sEgtUI=) 2: 3833FD20D09711E987F73A60C4F9AE02.roa (hash: IUQ+m8jWqnf3vf6hcCuC0VogjthEOWb1ceqBAZq2VPM=) 3: 8A00E9284FB111EDBE702516C4F9AE02.roa (hash: s8FViwNwbQunitwqHzsjUNkNGV0Mlz+MOgwlD5JB+Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Validity Not Before: Nov 22 18:00:26 2024 GMT Not After : Nov 29 18:00:26 2024 GMT Subject: CN=6740c6ba-0f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7d:33:c9:6d:16:5d:e8:e1:9e:7e:ab:94:a6: 79:f9:75:a5:10:61:41:e9:e1:46:8b:d4:6e:8c:51: 0f:43:f0:58:53:e8:3b:74:9c:f4:47:65:aa:89:5a: b1:f9:5b:65:86:12:a9:f6:11:d8:f0:44:54:14:a4: 74:71:3c:54:df:85:01:9b:e4:a0:6e:b3:cd:56:1c: 12:51:57:82:f2:10:42:2d:65:21:7c:f9:f6:d4:c6: 35:c3:13:f8:22:35:a7:13:17:1a:ee:ea:de:41:71: e1:f6:ee:b0:7a:2e:7f:b6:c8:b3:eb:39:15:94:f8: 1b:25:de:62:1b:17:5c:4d:bb:04:4d:27:a3:ae:d6: 3e:d1:6d:f0:9b:8e:17:de:10:c9:35:4b:9f:8a:fc: c2:cf:e0:8a:77:8b:46:9a:d9:d0:22:37:22:c6:33: d3:de:19:88:da:45:1b:8a:8f:3c:85:e4:b9:46:32: 12:14:98:1a:19:56:73:7e:74:69:c6:d8:69:fc:3b: 7c:12:db:4b:35:01:a4:16:ea:aa:fc:e8:ac:9d:2b: 4d:b7:16:59:f4:38:76:fe:f9:59:b2:eb:1a:34:54: 28:01:96:84:8a:ae:b6:9a:d5:87:7c:26:9a:2f:6d: 8a:cd:5f:56:e4:8f:99:72:97:4d:4d:aa:22:4e:cf: e3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:86:7E:BA:EC:3B:81:2D:75:12:75:5B:86:49:DB:7E:32:72:B4:6E X509v3 Authority Key Identifier: keyid:F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:99:43:7a:fc:f3:2d:91:a8:cc:70:9a:4c:63:7c:4c:6c:d3: f9:50:31:8e:33:26:5a:a4:1a:5a:91:7f:d3:0c:39:3f:2a:98: 2e:a1:63:14:56:3f:27:1f:d9:f2:1c:de:b9:d2:ce:37:7c:76: 85:33:ee:d6:95:fa:c1:ed:48:8e:21:04:66:b5:af:5a:c3:68: 80:5f:5f:17:7a:f2:f9:35:23:2a:c0:92:92:b9:37:ab:ea:f4: 6b:e5:0e:11:e6:c7:1f:8f:f0:58:b8:16:95:0b:56:88:fc:06: f6:69:5e:96:21:f7:c0:d0:3b:32:d1:01:a9:2e:e6:a2:cc:17: 86:43:93:2e:dd:4d:d3:cc:a1:b3:56:0c:dc:6a:7a:98:0e:37: 91:98:72:36:af:98:1b:04:ab:65:87:93:25:88:87:79:1d:a6: e0:c8:31:df:6a:3c:c5:db:2a:4c:f3:ee:07:3c:3f:a1:21:5f: 16:ce:99:0c:10:55:62:8d:4b:34:8f:76:81:0b:e0:50:30:f7: 78:15:83:87:c8:77:e3:ae:e7:09:a8:ac:5d:fa:a5:0b:59:4c: a6:fe:d9:74:9f:45:d3:9c:cd:40:2f:9d:bc:d0:51:e5:4e:cb: dc:89:e8:a6:b4:b8:3e:1c:c6:33:3d:da:e5:09:ee:29:61:f0: 7b:50:be:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RkYxMTAvBgNVBAUTKEYyN0ZGODc2RTQ2NUU3M0M5QTUyRkQzODQ4REJENzY1 QkZCMjM1RDQwHhcNMjQxMTIyMTgwMDI2WhcNMjQxMTI5MTgwMDI2WjAYMRYwFAYD VQQDEw02NzQwYzZiYS0wZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0X0zyW0WXejhnn6rlKZ5+XWlEGFB6eFGi9RujFEPQ/BYU+g7dJz0R2WqiVqx +VtlhhKp9hHY8ERUFKR0cTxU34UBm+SgbrPNVhwSUVeC8hBCLWUhfPn21MY1wxP4 IjWnExca7ureQXHh9u6wei5/tsiz6zkVlPgbJd5iGxdcTbsETSejrtY+0W3wm44X 3hDJNUufivzCz+CKd4tGmtnQIjcixjPT3hmI2kUbio88heS5RjISFJgaGVZzfnRp xthp/Dt8EttLNQGkFuqq/OisnStNtxZZ9Dh2/vlZsusaNFQoAZaEiq62mtWHfCaa L22KzV9W5I+ZcpdNTaoiTs/j+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2Gfrrs O4EtdRJ1W4ZJ234ycrRuMB8GA1UdIwQYMBaAFPJ/+HbkZec8mlL9OEjb12W/sjXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGRi9FMTc2RDY3QUQw OTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6eWFVdjA0U052WFpiLXlO ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuXzRkdVJsNXp5YVV2MDRTTnZYWmIteU5kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVGRi9FMTc2RDY3QUQwOTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6 eWFVdjA0U052WFpiLXlOZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDlmUN6/PMtkajMcJpMY3xMbNP5UDGOMyZapBpakX/TDDk/KpguoWMU Vj8nH9nyHN650s43fHaFM+7WlfrB7UiOIQRmta9aw2iAX18XevL5NSMqwJKSuTer 6vRr5Q4R5scfj/BYuBaVC1aI/Ab2aV6WIffA0Dsy0QGpLuaizBeGQ5Mu3U3TzKGz VgzcanqYDjeRmHI2r5gbBKtlh5MliId5HabgyDHfajzF2ypM8+4HPD+hIV8WzpkM EFVijUs0j3aBC+BQMPd4FYOHyHfjrucJqKxd+qULWUym/tl0n0XTnM1AL5280FHl TsvcieimtLg+HMYzPdrlCe4pYfB7UL6E -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:56 2024 by rpki-client on console-ams.rpki-client.org