$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft File: u5rRr2kxSy7y9klB8Db94PfMTwI.mft (raw, json) Hash identifier: i8NJRUVWcvPQGMxgccKgYUZZ/GH75CLSV5o0T3ZZnls= Subject key identifier: B7:53:00:9A:5B:A2:0E:B8:E3:21:5F:9F:1C:A3:79:49:D7:93:D1:3B Authority key identifier: BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 Certificate issuer: /CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft Manifest number: E7 Signing time: Thu 21 Nov 2024 01:03:00 +0000 Manifest this update: Thu 21 Nov 2024 01:02:59 +0000 Manifest next update: Thu 28 Nov 2024 01:02:59 +0000 Files and hashes: 1: u5rRr2kxSy7y9klB8Db94PfMTwI.crl (hash: mVD4HhuxH+NjX4oB0rx5/OwNHzpli+hSfFUnDm8EdxA=) 2: B6369EA2521711EE899DAC80C4F9AE02.roa (hash: HmUyjBFHI1+/W084EHPJ3tp/TeXvZpxhICsUCVrwFxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C/serialNumber=BB9AD1AF69314B2EF2F64941F036FDE0F7CC4F02 Validity Not Before: Nov 21 01:02:59 2024 GMT Not After : Nov 28 01:02:59 2024 GMT Subject: CN=673e86c3-9db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:00:47:60:5a:8b:c9:fb:54:9e:87:ce:c5: b5:a9:83:a3:d7:fa:e7:3c:f9:4b:c9:7e:c0:25:d6: 71:59:c1:62:8e:9a:67:f8:d0:66:1c:2b:71:2d:35: 8b:a7:9c:3c:4f:dc:d9:66:ab:34:b2:9f:27:b5:68: 02:58:6b:80:e5:4d:0b:39:f5:8d:95:cf:33:83:dc: ae:eb:62:7f:26:5a:25:ca:19:6b:99:20:1c:05:7f: 33:be:b0:a4:4e:ac:1a:90:82:23:9b:4d:03:ce:56: 78:21:20:bd:67:40:80:c2:8e:10:f9:c2:36:18:a3: 17:70:f8:c6:b0:ca:8a:bf:dd:71:d6:ee:b1:80:98: ed:0f:7e:48:b1:42:c9:fd:7b:3d:21:0f:70:be:2d: f5:80:58:44:d5:49:f5:98:5e:93:25:5f:ec:9b:53: e1:2f:67:b7:d9:82:f3:d0:7a:2e:0a:17:b3:d0:bf: 41:fb:cb:59:a3:89:63:dc:1f:5d:f9:e0:e8:bc:e0: fd:9a:4a:dd:1d:c9:6b:89:89:16:d5:4c:4d:d3:ac: db:4e:da:c8:bf:b1:29:0f:ad:a3:8a:02:2e:30:9f: 7a:b5:a4:a5:6a:0e:c6:66:3f:aa:90:e1:35:a3:3e: fd:33:69:6f:60:14:51:ae:71:36:99:14:18:fc:29: f5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:53:00:9A:5B:A2:0E:B8:E3:21:5F:9F:1C:A3:79:49:D7:93:D1:3B X509v3 Authority Key Identifier: keyid:BB:9A:D1:AF:69:31:4B:2E:F2:F6:49:41:F0:36:FD:E0:F7:CC:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u5rRr2kxSy7y9klB8Db94PfMTwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/546EF3BA4B9911EEBB360B55C4F9AE02/u5rRr2kxSy7y9klB8Db94PfMTwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:17:35:4f:37:b7:56:22:7d:e8:56:f3:98:f0:d4:01:63:12: 06:29:67:4a:97:57:f8:94:d3:3f:f6:17:99:13:02:35:68:73: 9b:da:b3:9d:3a:32:ad:3a:f6:ac:bf:3a:d4:6c:e3:41:f0:7e: 45:85:b3:b8:95:88:c3:3f:32:91:c8:d1:c4:6c:c2:08:d9:76: 62:c2:85:74:b9:b8:dc:e1:7e:77:c0:31:c1:ea:e1:a2:7d:d1: c8:04:98:8a:36:d4:6a:3d:f8:80:20:e7:ca:02:1f:68:13:1c: e1:d1:c6:2e:b3:ca:ca:0d:55:f3:61:cd:b2:33:4c:54:2d:9d: fe:a1:60:c8:b4:4f:f2:44:40:af:0b:fb:bc:ff:6e:5d:7f:3c: 41:b6:bd:4c:a5:d5:e3:4a:5a:ef:c9:4c:d0:6f:b7:0b:2d:fa: 20:48:20:bb:5c:88:57:83:22:8a:55:5b:57:94:4c:f7:43:5e: 5e:0e:38:54:72:ce:2a:dd:4c:b6:fd:c8:95:2e:32:74:6f:ac: df:c5:85:5d:73:05:02:a7:81:4a:1f:77:46:84:92:fa:89:a5: 50:e1:a4:bf:4a:10:ab:90:61:10:88:a0:05:fd:82:4c:a1:eb: 74:a1:8e:74:b8:ed:9a:74:d9:f8:b6:b2:28:35:53:14:fd:84: 33:f0:23:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKEJCOUFEMUFGNjkzMTRCMkVGMkY2NDk0MUYwMzZGREUw RjdDQzRGMDIwHhcNMjQxMTIxMDEwMjU5WhcNMjQxMTI4MDEwMjU5WjAYMRYwFAYD VQQDEw02NzNlODZjMy05ZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWUAR2Bai8n7VJ6HzsW1qYOj1/rnPPlLyX7AJdZxWcFijppn+NBmHCtxLTWL p5w8T9zZZqs0sp8ntWgCWGuA5U0LOfWNlc8zg9yu62J/JlolyhlrmSAcBX8zvrCk TqwakIIjm00DzlZ4ISC9Z0CAwo4Q+cI2GKMXcPjGsMqKv91x1u6xgJjtD35IsULJ /Xs9IQ9wvi31gFhE1Un1mF6TJV/sm1PhL2e32YLz0HouChez0L9B+8tZo4lj3B9d +eDovOD9mkrdHclriYkW1UxN06zbTtrIv7EpD62jigIuMJ96taSlag7GZj+qkOE1 oz79M2lvYBRRrnE2mRQY/Cn1+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdTAJpb og644yFfnxyjeUnXk9E7MB8GA1UdIwQYMBaAFLua0a9pMUsu8vZJQfA2/eD3zE8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy81NDZFRjNCQTRC OTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5N3k5a2xCOERiOTRQZk1U d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U1clJyMmt4U3k3eTlrbEI4RGI5NFBmTVR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy81NDZFRjNCQTRCOTkxMUVFQkIzNjBCNTVDNEY5QUUwMi91NXJScjJreFN5 N3k5a2xCOERiOTRQZk1Ud0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiFzVPN7dWIn3oVvOY8NQBYxIGKWdKl1f4lNM/9heZEwI1aHOb2rOd OjKtOvasvzrUbONB8H5FhbO4lYjDPzKRyNHEbMII2XZiwoV0ubjc4X53wDHB6uGi fdHIBJiKNtRqPfiAIOfKAh9oExzh0cYus8rKDVXzYc2yM0xULZ3+oWDItE/yRECv C/u8/25dfzxBtr1MpdXjSlrvyUzQb7cLLfogSCC7XIhXgyKKVVtXlEz3Q15eDjhU cs4q3Uy2/ciVLjJ0b6zfxYVdcwUCp4FKH3dGhJL6iaVQ4aS/ShCrkGEQiKAF/YJM oet0oY50uO2adNn4trIoNVMU/YQz8CPG -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:31 2024 by rpki-client on console-ams.rpki-client.org