$ rpki-client -vvf rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft File: w7gqL3RR5pVsP6OTQNxzItDnjKY.mft (raw, json) Hash identifier: J3k5jKuNgC1/b5ehfGJsSM8GZbNgGG+zf2B12HjE+C8= Subject key identifier: 64:96:2E:27:56:90:BD:09:3E:66:06:49:CE:FB:66:D1:C5:5E:99:5D Authority key identifier: C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 Certificate issuer: /CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft Manifest number: 021A Signing time: Thu 21 Nov 2024 01:32:27 +0000 Manifest this update: Thu 21 Nov 2024 01:32:26 +0000 Manifest next update: Thu 28 Nov 2024 01:32:26 +0000 Files and hashes: 1: w7gqL3RR5pVsP6OTQNxzItDnjKY.crl (hash: KZQj8aSElmiH388SI6k++c766UYIeg8cTwo62daRE9I=) 2: AA9183060FDC11ED9718606AC4F9AE02.roa (hash: esmrf2BFTjhprHyQQ5D38sZ0HfzZ4jtc/m9nB8i0g9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Validity Not Before: Nov 21 01:32:26 2024 GMT Not After : Nov 28 01:32:26 2024 GMT Subject: CN=673e8dab-58bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:4c:2f:65:bb:d1:92:ec:8c:5c:dd:d9:8b: f3:37:08:7c:e5:19:8c:d1:36:56:69:51:34:27:dd: c1:7e:87:1b:f9:56:40:09:8c:31:30:6e:1d:31:f4: c7:25:6b:2a:f3:d5:9c:73:70:2d:5a:37:bf:6a:c9: 75:b7:03:d4:d8:2c:fc:b2:e4:d2:f1:60:4c:59:e8: 19:03:54:23:8b:11:89:a2:89:26:f1:47:36:3a:b3: dd:d5:8e:de:ac:55:4c:d8:d8:25:18:d9:33:03:41: 9d:3a:8f:3c:99:b6:ad:af:ec:1d:27:74:93:63:4e: 3e:28:2f:68:e1:11:ed:7a:a0:93:46:b9:1d:f8:15: da:99:60:25:21:15:4e:57:03:1f:f2:17:78:b7:fa: a4:e0:6a:a5:b2:1b:35:86:34:80:6e:f5:e9:64:2f: 9a:ea:b3:30:a9:32:ed:d9:c0:5d:f9:1a:8b:0c:d9: 27:d2:46:97:23:10:9a:a0:ef:a2:a4:b9:8b:f3:df: 32:1e:4f:16:1b:6f:99:17:a4:0f:e6:f7:0e:1a:08: 5b:97:4f:da:5a:0b:e4:e1:06:c5:e4:78:cc:cf:b3: de:d1:c4:39:87:1c:55:da:0e:0f:29:20:0d:36:b4: f5:64:1d:8e:57:1b:72:7c:30:04:ff:0c:35:f6:0f: 65:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:96:2E:27:56:90:BD:09:3E:66:06:49:CE:FB:66:D1:C5:5E:99:5D X509v3 Authority Key Identifier: keyid:C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b1:17:d9:69:2e:1d:e4:a0:45:cd:1a:7e:62:c7:a2:c8:32: ea:dd:bd:92:2f:a6:7a:07:df:4a:ed:73:12:08:c1:51:99:3b: 37:ae:b8:4a:b3:25:d5:b2:73:dd:a4:02:e7:89:dd:be:17:2a: c9:ed:18:e8:20:b1:59:38:d3:c4:bf:b6:ce:ef:e5:03:a0:1f: f6:d8:f8:3c:d0:e9:5d:65:3c:8c:bb:00:27:a2:72:44:3f:32: dc:5d:f5:30:0d:e2:29:4d:9f:b6:8a:6b:77:e5:1e:df:5a:52: b5:43:ac:84:4f:32:7a:b9:b1:7c:24:1c:ee:04:84:f3:6a:f0: b3:66:25:5e:0b:9c:c2:70:41:31:9b:56:81:5d:6a:42:cd:a0: 7a:dc:62:05:a4:d0:93:1b:96:46:5e:b7:52:3e:f1:62:65:e6: 84:c9:fe:5d:6c:d5:e3:c5:8d:f6:ca:20:2e:de:93:e6:46:67: da:04:12:02:a8:16:b3:b0:f3:af:e6:f3:bc:dc:39:a5:1c:d3: 6f:9a:1c:45:8f:c9:d1:4a:01:0f:27:7e:77:fb:8e:59:67:69: 88:50:44:bf:60:04:6a:33:f5:12:dd:7e:16:ac:57:e8:90:5e: 03:ea:b3:1b:62:8c:6c:a8:d8:2b:82:d8:74:c3:57:f2:69:22: d7:ce:5e:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4MkExMTAvBgNVBAUTKEMzQjgyQTJGNzQ1MUU2OTU2QzNGQTM5MzQwREM3MzIy RDBFNzhDQTYwHhcNMjQxMTIxMDEzMjI2WhcNMjQxMTI4MDEzMjI2WjAYMRYwFAYD VQQDEw02NzNlOGRhYi01OGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniNML2W70ZLsjFzd2YvzNwh85RmM0TZWaVE0J93Bfocb+VZACYwxMG4dMfTH JWsq89Wcc3AtWje/asl1twPU2Cz8suTS8WBMWegZA1QjixGJookm8Uc2OrPd1Y7e rFVM2NglGNkzA0GdOo88mbatr+wdJ3STY04+KC9o4RHteqCTRrkd+BXamWAlIRVO VwMf8hd4t/qk4Gqlshs1hjSAbvXpZC+a6rMwqTLt2cBd+RqLDNkn0kaXIxCaoO+i pLmL898yHk8WG2+ZF6QP5vcOGghbl0/aWgvk4QbF5HjMz7Pe0cQ5hxxV2g4PKSAN NrT1ZB2OVxtyfDAE/ww19g9lswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSWLidW kL0JPmYGSc77ZtHFXpldMB8GA1UdIwQYMBaAFMO4Ki90UeaVbD+jk0DccyLQ54ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDgyQS8yNkRFNjRDODBF NkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVwVnNQNk9UUU54ekl0RG5q S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Z3FMM1JSNXBWc1A2T1RRTnh6SXREbmpLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDgyQS8yNkRFNjRDODBFNkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVw VnNQNk9UUU54ekl0RG5qS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmsRfZaS4d5KBFzRp+YseiyDLq3b2SL6Z6B99K7XMSCMFRmTs3rrhK syXVsnPdpALnid2+FyrJ7RjoILFZONPEv7bO7+UDoB/22Pg80OldZTyMuwAnonJE PzLcXfUwDeIpTZ+2imt35R7fWlK1Q6yETzJ6ubF8JBzuBITzavCzZiVeC5zCcEEx m1aBXWpCzaB63GIFpNCTG5ZGXrdSPvFiZeaEyf5dbNXjxY32yiAu3pPmRmfaBBIC qBazsPOv5vO83DmlHNNvmhxFj8nRSgEPJ353+45ZZ2mIUES/YARqM/US3X4WrFfo kF4D6rMbYoxsqNgrgth0w1fyaSLXzl6d -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:31 2024 by rpki-client on console-ams.rpki-client.org