$ rpki-client -vvf rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft File: I4od3rdgPRIBUCNc2vtg1XhWa68.mft (raw, json) Hash identifier: N2f+Y87nIfNi3oG+CigjbAGABTtRZjjIf5AMOINLBDs= Subject key identifier: 04:33:06:30:D5:07:F3:CE:53:36:C5:16:F0:97:1E:88:35:82:3B:49 Authority key identifier: 23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF Certificate issuer: /CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Certificate serial: 0736 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft Manifest number: 072F Signing time: Fri 22 Nov 2024 21:16:41 +0000 Manifest this update: Fri 22 Nov 2024 21:16:40 +0000 Manifest next update: Fri 29 Nov 2024 21:16:40 +0000 Files and hashes: 1: I4od3rdgPRIBUCNc2vtg1XhWa68.crl (hash: hb4munBcEBWswb/TIIFmFeAKItY6efOtrSzHTmFRv2Q=) 2: 1D3589E875AF11EC866EEF53C4F9AE02.roa (hash: dzdiy1DRvArzMHuJm0zK0Ej0qp+73nyVvQe0PUAhct4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1846 (0x736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119ED6/serialNumber=238A1DDEB7603D120150235CDAFB60D578566BAF Validity Not Before: Nov 22 21:16:40 2024 GMT Not After : Nov 29 21:16:40 2024 GMT Subject: CN=6740f4b9-4a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ad:f0:4f:39:c3:7c:ed:db:50:9a:99:8e:6f: b7:77:92:aa:d8:9f:a4:73:84:e7:2b:73:db:4b:52: 98:e9:52:a2:95:31:29:12:38:bc:4f:39:04:4f:33: 7e:2f:1d:0b:1f:33:a1:e2:fa:cd:77:77:54:8b:2b: a1:df:5c:b8:47:0e:c5:c6:80:ae:36:dd:3e:59:d3: 3f:84:07:01:34:e2:a6:56:4b:3d:e4:54:4e:75:ff: 4e:d3:d7:d7:b7:ca:10:1e:49:fe:0b:d3:43:1a:ca: d4:6c:bb:e4:53:fd:9b:9a:41:30:32:6e:51:aa:6a: 34:00:c0:35:86:8a:5e:3d:d1:bb:d2:ab:6c:63:44: b8:17:57:d1:38:a9:1e:44:10:04:d1:c3:95:50:35: 33:47:70:18:3b:7e:ad:01:b4:b1:67:f6:aa:d4:7c: b0:0c:08:94:94:02:1d:32:10:33:f2:ef:5a:c8:68: 74:ee:6e:d0:42:c6:ff:f1:39:96:fd:12:10:9e:2c: 5d:5c:4b:12:54:4d:5e:18:ee:92:a1:0e:9c:d8:c7: fd:11:85:c5:3b:82:d3:81:de:30:0d:61:1d:40:7c: 9c:17:08:00:c3:84:3c:60:d0:a9:f2:27:0f:62:32: 9a:8d:6b:b2:18:4f:67:3d:2e:4a:c8:89:a3:2e:25: 85:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:33:06:30:D5:07:F3:CE:53:36:C5:16:F0:97:1E:88:35:82:3B:49 X509v3 Authority Key Identifier: keyid:23:8A:1D:DE:B7:60:3D:12:01:50:23:5C:DA:FB:60:D5:78:56:6B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I4od3rdgPRIBUCNc2vtg1XhWa68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119ED6/D317092C0E6C11EBB5414D20C4F9AE02/I4od3rdgPRIBUCNc2vtg1XhWa68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:53:42:f2:ab:94:1a:bd:aa:44:2f:2a:e3:a5:21:35:b0:4b: 11:03:3d:e1:18:86:c3:27:8c:42:bf:42:95:86:0d:56:5a:3f: e5:17:51:d4:a0:f2:94:9e:8e:78:ca:b9:8d:a4:83:0e:37:96: 81:82:49:30:04:32:d5:64:28:28:95:65:71:f6:44:1e:cc:d3: c3:40:f5:b5:d6:62:5c:3f:79:b9:04:03:34:f0:74:c0:a3:16: 53:6f:ef:6f:a3:44:3f:d8:b5:b9:3f:b1:b4:1d:3d:55:de:1e: 7e:f9:12:56:a2:7e:ae:63:4f:bf:fd:b1:e4:91:bb:2a:89:8d: de:22:49:60:c1:34:2d:fb:1b:05:3f:fd:f6:92:da:81:9a:7d: bd:56:bf:3a:6c:f4:98:3f:f9:fb:03:c2:f8:e5:18:9e:48:c6: b2:56:a6:c3:a0:f1:ed:39:55:32:8a:58:c7:88:9a:4a:57:0f: 9e:18:52:4f:fd:68:7b:86:4b:cd:e4:0a:e3:ec:ed:c3:fb:73: c9:29:a1:c6:93:a4:f2:9b:44:e7:26:39:bc:17:40:55:49:97: a2:b2:a8:0d:94:77:1e:83:59:93:50:fe:fd:b1:17:f5:6c:c0: 17:ab:ea:47:17:7b:6b:01:e3:3f:b3:e1:fc:5d:74:e2:2e:56: 6d:fd:ce:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlFRDYxMTAvBgNVBAUTKDIzOEExRERFQjc2MDNEMTIwMTUwMjM1Q0RBRkI2MEQ1 Nzg1NjZCQUYwHhcNMjQxMTIyMjExNjQwWhcNMjQxMTI5MjExNjQwWjAYMRYwFAYD VQQDEw02NzQwZjRiOS00YTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA263wTznDfO3bUJqZjm+3d5Kq2J+kc4TnK3PbS1KY6VKilTEpEji8TzkETzN+ Lx0LHzOh4vrNd3dUiyuh31y4Rw7FxoCuNt0+WdM/hAcBNOKmVks95FROdf9O09fX t8oQHkn+C9NDGsrUbLvkU/2bmkEwMm5Rqmo0AMA1hopePdG70qtsY0S4F1fROKke RBAE0cOVUDUzR3AYO36tAbSxZ/aq1HywDAiUlAIdMhAz8u9ayGh07m7QQsb/8TmW /RIQnixdXEsSVE1eGO6SoQ6c2Mf9EYXFO4LTgd4wDWEdQHycFwgAw4Q8YNCp8icP YjKajWuyGE9nPS5KyImjLiWFnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQzBjDV B/POUzbFFvCXHog1gjtJMB8GA1UdIwQYMBaAFCOKHd63YD0SAVAjXNr7YNV4Vmuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUVENi9EMzE3MDkyQzBF NkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BSSUJVQ05jMnZ0ZzFYaFdh NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k0b2QzcmRnUFJJQlVDTmMydnRnMVhoV2E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUVENi9EMzE3MDkyQzBFNkMxMUVCQjU0MTREMjBDNEY5QUUwMi9JNG9kM3JkZ1BS SUJVQ05jMnZ0ZzFYaFdhNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBU0Lyq5QavapELyrjpSE1sEsRAz3hGIbDJ4xCv0KVhg1WWj/lF1HU oPKUno54yrmNpIMON5aBgkkwBDLVZCgolWVx9kQezNPDQPW11mJcP3m5BAM08HTA oxZTb+9vo0Q/2LW5P7G0HT1V3h5++RJWon6uY0+//bHkkbsqiY3eIklgwTQt+xsF P/32ktqBmn29Vr86bPSYP/n7A8L45RieSMayVqbDoPHtOVUyiljHiJpKVw+eGFJP /Wh7hkvN5Arj7O3D+3PJKaHGk6Tym0TnJjm8F0BVSZeisqgNlHceg1mTUP79sRf1 bMAXq+pHF3trAeM/s+H8XXTiLlZt/c5l -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:21 2024 by rpki-client on console-ams.rpki-client.org