$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft File: p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json) Hash identifier: uMHBoj6FT29gxL1N76fhPQewoNkFmh7UOthgFkIO8fI= Subject key identifier: A9:50:A4:B6:52:1B:6A:25:ED:E6:35:3D:12:AF:42:82:5C:8E:EC:C9 Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Certificate serial: 0BC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft Manifest number: 0BC0 Signing time: Fri 22 Nov 2024 18:37:49 +0000 Manifest this update: Fri 22 Nov 2024 18:37:49 +0000 Manifest next update: Fri 29 Nov 2024 18:37:49 +0000 Files and hashes: 1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: YMl7vABmR0YHAay+beke2prCOFn2BptMhFaCVJ2wIL8=) 2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: fNKHCrlloZaF6YEqwDlDZ6OwI4uUpNjeaTgxoFN7c8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3017 (0xbc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Validity Not Before: Nov 22 18:37:49 2024 GMT Not After : Nov 29 18:37:49 2024 GMT Subject: CN=6740cf7d-51e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:2a:d7:0e:cc:cf:a6:f0:f0:a4:c5:0e:86: 52:3b:68:87:8d:2f:a5:aa:c7:54:65:3f:f4:dd:63: bd:cb:14:79:4c:48:16:74:89:9a:0f:cc:d3:db:74: 92:4c:cd:0e:8b:62:ed:cf:80:16:e6:ac:1e:25:ca: 7c:c2:e0:5b:e2:2d:cd:3d:a5:fc:1e:d9:83:5f:de: 3c:17:c7:86:94:b7:b5:ee:e3:04:c6:51:35:d3:24: 22:be:af:c7:ca:95:95:56:b0:33:fd:8e:a8:40:8f: 8c:05:66:df:07:cb:1d:b7:4e:5b:85:94:38:ce:31: 44:69:90:9c:47:0b:ee:83:6a:16:b2:bd:a1:17:c8: 97:b0:36:9f:8a:a5:4d:91:a5:cd:c4:4d:b6:57:58: a1:1b:d5:7f:c9:6e:b8:53:27:86:a1:d7:2d:c1:93: 3c:06:7b:b5:fb:84:76:ce:fe:ae:f1:cd:ee:a8:1b: ac:fe:94:17:6e:f8:e8:f1:07:36:01:0b:6e:be:fd: fc:c7:13:84:a3:03:a6:2d:f9:ba:af:55:24:5b:02: be:84:a8:cc:05:d7:77:3e:e7:77:88:79:96:04:5b: f7:9a:08:7b:98:21:a0:ae:fb:dc:82:9a:54:0d:e7: 5d:de:08:c4:00:d9:2c:c5:5b:07:5b:49:5d:0d:11: 06:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:50:A4:B6:52:1B:6A:25:ED:E6:35:3D:12:AF:42:82:5C:8E:EC:C9 X509v3 Authority Key Identifier: keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:bf:a6:d5:be:21:65:7f:d9:36:18:cd:b6:b8:cc:ec:0d:aa: 43:dd:f9:01:b9:f4:bb:1f:0b:7b:6c:09:67:c1:b2:1b:3d:ae: 38:d1:c7:56:2d:40:cd:47:d3:1c:03:87:74:e4:39:c5:41:bb: 0e:e6:93:94:70:01:27:5d:a1:55:5d:b7:5e:af:51:e0:bd:77: 79:f4:36:29:74:15:23:4c:53:35:82:d5:43:ad:75:43:43:b2: 5e:a8:4e:91:18:c0:75:dc:4f:b7:61:41:16:a4:6b:89:36:62: 40:51:26:a4:21:c3:bd:77:62:78:82:ad:32:cb:2f:8d:cc:62: 3b:be:a7:54:8c:35:81:43:74:67:29:c3:a9:7f:92:42:7a:1b: 3a:c2:00:0a:8c:ef:16:d6:65:5d:69:56:3c:a1:94:05:ff:8a: 54:77:00:7f:41:2d:59:67:63:cd:79:24:cc:b6:54:9c:2f:eb: e5:30:62:ba:7d:fe:66:3f:1c:cc:35:8a:31:19:a7:8f:89:5b: 79:98:d2:6f:b4:c6:56:4b:6e:a7:28:90:23:11:e6:40:18:f4: 25:f7:77:1e:cd:4a:db:5e:d7:ec:87:99:e6:b3:44:db:67:90: 51:16:82:05:4c:5d:e1:6b:b3:ba:37:2f:ea:23:83:a2:74:67: 2c:9a:01:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkUxMTAvBgNVBAUTKEE3NDYwNUNCOUQ1MDcxQ0ExNzI5RDkwODc4MzQ0MDdG MTRFQTg1NzAwHhcNMjQxMTIyMTgzNzQ5WhcNMjQxMTI5MTgzNzQ5WjAYMRYwFAYD VQQDEw02NzQwY2Y3ZC01MWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqsq1w7Mz6bw8KTFDoZSO2iHjS+lqsdUZT/03WO9yxR5TEgWdImaD8zT23SS TM0Oi2Ltz4AW5qweJcp8wuBb4i3NPaX8HtmDX948F8eGlLe17uMExlE10yQivq/H ypWVVrAz/Y6oQI+MBWbfB8sdt05bhZQ4zjFEaZCcRwvug2oWsr2hF8iXsDafiqVN kaXNxE22V1ihG9V/yW64UyeGodctwZM8Bnu1+4R2zv6u8c3uqBus/pQXbvjo8Qc2 AQtuvv38xxOEowOmLfm6r1UkWwK+hKjMBdd3Pud3iHmWBFv3mgh7mCGgrvvcgppU Dedd3gjEANksxVsHW0ldDREGnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlQpLZS G2ol7eY1PRKvQoJcjuzJMB8GA1UdIwQYMBaAFKdGBcudUHHKFynZCHg0QH8U6oVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCRS9BM0Y1MDlGMjBD NEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNjb1hLZGtJZURSQWZ4VHFo WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwWUZ5NTFRY2NvWEtka0llRFJBZnhUcWhYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCRS9BM0Y1MDlGMjBDNEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNj b1hLZGtJZURSQWZ4VHFoWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTv6bVviFlf9k2GM22uMzsDapD3fkBufS7Hwt7bAlnwbIbPa440cdW LUDNR9McA4d05DnFQbsO5pOUcAEnXaFVXbder1HgvXd59DYpdBUjTFM1gtVDrXVD Q7JeqE6RGMB13E+3YUEWpGuJNmJAUSakIcO9d2J4gq0yyy+NzGI7vqdUjDWBQ3Rn KcOpf5JCehs6wgAKjO8W1mVdaVY8oZQF/4pUdwB/QS1ZZ2PNeSTMtlScL+vlMGK6 ff5mPxzMNYoxGaePiVt5mNJvtMZWS26nKJAjEeZAGPQl93cezUrbXtfsh5nms0Tb Z5BRFoIFTF3ha7O6Ny/qI4OidGcsmgGq -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org