$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft File: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft (raw, json) Hash identifier: 9EeZ4q5QQR0MvbWXy4BtkOeWRPWD5fGqdHjkPHAF4V0= Subject key identifier: 9E:1D:12:90:43:4F:40:5C:78:41:EB:37:54:74:C4:06:B0:96:29:D7 Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Certificate serial: 2510 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft Manifest number: 24E1 Signing time: Wed 20 Nov 2024 14:20:30 +0000 Manifest this update: Wed 20 Nov 2024 14:20:30 +0000 Manifest next update: Wed 27 Nov 2024 14:20:30 +0000 Files and hashes: 1: 3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl (hash: yc95Uw/avzgFHYxulwVyaMmOS3pM+M2E6BNP5vKF52Y=) 2: 19FEDB562AB611EC93861F65C4F9AE02.roa (hash: NlVyh3MwFRVpTMK2w6/e2umQLjFvCbYkQLSSmkOcpQ8=) 3: 87B992CE90E211EDB4035D5EC4F9AE02.roa (hash: b9eD5YUOC0GkTQZ3rX1z2ni+yFk2yorAsctaJzuBHI0=) 4: 0171064E1E7511EFA136126DC4F9AE02.roa (hash: nm+kHfyC5pL3nxicILBiWuqSt5lkaYXXN88vKMWBFYo=) 5: C40F099A1E7411EF818FAE6CC4F9AE02.roa (hash: NbSjfhnIQoCqMUNXe0s61U0HN1YFRDhAGjKAb9ngacQ=) 6: E7D3D36A406911EC83A0470DC4F9AE02.roa (hash: +ib6RAEe+5LAGLH6s/8tcu3FX1tLpOFWYX5Ht1EUe74=) 7: 3373DB98902C11EA898EFD7FC4F9AE02.roa (hash: GgHEneQW+UcNt9UHCZR2q5s6m1DGHJXeNPoPIeIFSMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9488 (0x2510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547 Validity Not Before: Nov 20 14:20:30 2024 GMT Not After : Nov 27 14:20:30 2024 GMT Subject: CN=673df02e-22d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c4:40:c1:26:8f:39:18:da:45:82:e3:4e:30: b7:d0:99:4c:da:38:7e:6b:66:6d:86:11:15:9d:2b: f9:41:49:21:04:9c:27:ca:ac:9f:e3:dc:01:a3:b6: e3:43:f3:f2:28:f3:45:a4:09:d6:ad:bd:21:f0:b6: 51:fd:48:1d:ac:4e:84:cc:71:dd:05:ac:37:58:3b: f5:ca:4f:aa:80:10:a5:cd:21:d8:ad:85:16:8f:e9: bd:1e:01:60:a1:32:99:b8:59:44:74:ab:1d:07:f8: 13:a9:9a:a8:88:dc:1f:c7:2f:97:8b:a3:52:9a:e7: cf:7a:7b:e0:b9:6b:ee:30:63:43:e3:b3:52:54:2d: 4f:db:24:5c:45:5c:d8:87:bb:cb:f8:91:7f:74:f7: 5b:00:b0:d4:3f:e7:02:ba:9a:5c:d7:45:17:0c:03: 8e:dc:5b:22:9a:b0:5f:8e:bc:09:a0:38:4f:5e:79: 72:dc:de:74:5b:94:af:9c:92:48:98:9d:3d:21:08: d6:14:ee:58:2a:8d:90:32:80:22:03:0a:e2:3b:ba: 77:45:ea:35:4d:61:40:d1:b7:a4:0b:8f:bd:76:85: e2:49:11:97:c6:20:26:a2:f1:99:9c:37:28:52:d2: 48:ac:b4:f6:33:01:03:bf:89:2e:a4:aa:5a:ba:45: 89:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1D:12:90:43:4F:40:5C:78:41:EB:37:54:74:C4:06:B0:96:29:D7 X509v3 Authority Key Identifier: keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:18:15:ec:d8:7e:81:eb:71:f7:d0:f0:a2:14:eb:a9:9a:49: 0c:a8:3b:b4:8a:4b:a4:2c:f1:bc:b8:11:9f:a4:11:18:6e:23: 77:2b:ea:b7:f4:7e:d9:71:80:de:c2:6f:46:e8:de:c1:46:63: 7e:ef:95:14:3c:2c:31:70:eb:ca:c9:51:d5:0e:7d:f8:25:48: 3b:c9:73:d0:b5:33:3d:07:17:57:0b:a4:61:23:dd:56:eb:00: c8:d9:5b:83:9d:bf:82:1c:f2:5e:62:53:23:0b:97:7f:ed:00: 6b:75:cd:87:77:44:2b:0e:e9:68:9d:5e:5f:d0:31:29:af:88: 68:e8:06:c8:58:fe:5a:d7:2c:9b:84:73:dd:9c:34:ef:b0:cf: 64:9d:b0:49:e5:c6:f7:b3:aa:91:84:46:62:23:87:00:ee:95: 99:55:51:8b:3c:58:f0:43:5f:4f:de:aa:f7:3f:8b:26:23:1a: cf:2b:88:b1:45:c7:75:c7:f0:72:7e:ff:0a:f4:92:fb:22:8a: 1c:64:7e:84:46:8b:0a:ed:d5:8e:55:94:34:66:1e:4f:43:43: 89:d5:ea:04:c6:9a:17:f7:2a:df:13:52:e7:d6:9c:ae:5c:9a: 64:10:d2:70:2f:30:c9:e3:ad:42:41:04:29:ab:ae:e9:47:b9: 3d:71:52:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU0NzUxMTAvBgNVBAUTKERFOUQ2NDAxNjI5MUVBMkExNkYzQjc5NTZBMEY0MDM1 QjcwOUU1NDcwHhcNMjQxMTIwMTQyMDMwWhcNMjQxMTI3MTQyMDMwWjAYMRYwFAYD VQQDEw02NzNkZjAyZS0yMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8RAwSaPORjaRYLjTjC30JlM2jh+a2ZthhEVnSv5QUkhBJwnyqyf49wBo7bj Q/PyKPNFpAnWrb0h8LZR/UgdrE6EzHHdBaw3WDv1yk+qgBClzSHYrYUWj+m9HgFg oTKZuFlEdKsdB/gTqZqoiNwfxy+Xi6NSmufPenvguWvuMGND47NSVC1P2yRcRVzY h7vL+JF/dPdbALDUP+cCuppc10UXDAOO3FsimrBfjrwJoDhPXnly3N50W5SvnJJI mJ09IQjWFO5YKo2QMoAiAwriO7p3Reo1TWFA0bekC4+9doXiSRGXxiAmovGZnDco UtJIrLT2MwEDv4kupKpaukWJ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4dEpBD T0BceEHrN1R0xAawlinXMB8GA1UdIwQYMBaAFN6dZAFikeoqFvO3lWoPQDW3CeVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS84RDk0NzFGNjI5 MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZpb1c4N2VWYWc5QU5iY0o1 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNwMWtBV0tSNmlvVzg3ZVZhZzlBTmJjSjVVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTQ3NS84RDk0NzFGNjI5MDYxMUU1OTNCRkM2MjZDNEY5QUUwMi8zcDFrQVdLUjZp b1c4N2VWYWc5QU5iY0o1VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8GBXs2H6B63H30PCiFOupmkkMqDu0ikukLPG8uBGfpBEYbiN3K+q3 9H7ZcYDewm9G6N7BRmN+75UUPCwxcOvKyVHVDn34JUg7yXPQtTM9BxdXC6RhI91W 6wDI2VuDnb+CHPJeYlMjC5d/7QBrdc2Hd0QrDulonV5f0DEpr4ho6AbIWP5a1yyb hHPdnDTvsM9knbBJ5cb3s6qRhEZiI4cA7pWZVVGLPFjwQ19P3qr3P4smIxrPK4ix Rcd1x/Byfv8K9JL7IoocZH6ERosK7dWOVZQ0Zh5PQ0OJ1eoExpoX9yrfE1Ln1pyu XJpkENJwLzDJ461CQQQpq67pR7k9cVK9 -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:06 2024 by rpki-client on console-ams.rpki-client.org