$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft File: U2uRsXtuG7FjjINYoPpepdDr77c.mft (raw, json) Hash identifier: LcR9KJea+w2FJaLNs1ZTA+yCo3EH6T9w6NHAfbXljG4= Subject key identifier: 2B:54:FD:DF:7B:19:56:A9:0C:49:03:47:0A:25:EA:94:7F:A8:7A:0E Authority key identifier: 53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 Certificate issuer: /CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft Manifest number: 0117 Signing time: Thu 21 Nov 2024 00:44:01 +0000 Manifest this update: Thu 21 Nov 2024 00:44:01 +0000 Manifest next update: Thu 28 Nov 2024 00:44:01 +0000 Files and hashes: 1: U2uRsXtuG7FjjINYoPpepdDr77c.crl (hash: l4B7csorzqIWvqYwP7px8FzMf8hUVd9lz2yRikordi8=) 2: 234074FA00DD11EE95AF6F7CC4F9AE02.roa (hash: h1m9sLre/7LN5ad1i+1GbnT3wM3IJOvLq7MEJkLNy3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C3D/serialNumber=536B91B17B6E1BB1638C8358A0FA5EA5D0EBEFB7 Validity Not Before: Nov 21 00:44:01 2024 GMT Not After : Nov 28 00:44:01 2024 GMT Subject: CN=673e8251-16b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:11:23:65:46:97:95:00:4b:a0:a1:df:d7:8b: 0c:16:6b:c0:96:70:7e:d5:14:b9:37:96:db:3d:1f: c2:08:b3:68:18:23:04:c4:b7:7c:cb:b8:a4:02:e0: 25:ed:72:31:4b:d7:e5:8c:16:90:8a:d9:48:c0:a7: 20:58:5e:6a:56:cc:e7:f6:43:10:54:4a:15:dc:d6: 5c:cc:cc:47:c2:4b:40:86:5b:36:bb:55:47:34:3c: 0e:e3:e4:a7:54:50:93:98:b1:be:cd:45:8c:d5:03: 29:d7:26:41:c0:59:17:73:49:85:35:57:61:53:46: e6:a1:ee:60:e9:11:a3:a9:5d:a7:0a:92:cf:28:7d: 44:68:77:1b:63:80:c6:be:37:87:a3:c0:d7:dc:9b: 0a:80:b0:7d:aa:e9:6a:98:99:e3:9e:26:17:cc:75: 80:02:0d:5d:26:dc:18:72:89:7b:33:fb:e1:22:e5: 5c:b6:ec:d6:27:05:22:6f:b0:18:77:14:d6:46:6e: be:2e:4e:6a:6a:b9:e3:8f:aa:d6:d7:54:fb:51:69: 6e:b2:6e:72:1e:5c:14:97:dd:9c:67:2c:8c:e1:24: 8b:ae:4a:a5:09:8c:c0:58:7b:34:ac:8d:44:2f:ca: 0f:6d:62:7e:f8:64:70:68:43:9e:dd:0d:07:aa:e9: ff:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:54:FD:DF:7B:19:56:A9:0C:49:03:47:0A:25:EA:94:7F:A8:7A:0E X509v3 Authority Key Identifier: keyid:53:6B:91:B1:7B:6E:1B:B1:63:8C:83:58:A0:FA:5E:A5:D0:EB:EF:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U2uRsXtuG7FjjINYoPpepdDr77c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/2323FD8000D711EE93CB0F7EC4F9AE02/U2uRsXtuG7FjjINYoPpepdDr77c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:13:4d:9f:da:fb:0f:51:be:ad:cd:ee:1c:cf:e9:4d:84:a8: 1d:41:ce:a4:e6:87:9f:60:62:dc:4c:ac:43:fc:95:ec:8a:71: aa:bb:cb:aa:99:42:46:59:a7:e0:07:e2:3d:65:39:24:ca:0b: 08:5b:68:65:7f:a8:3d:09:bb:87:6e:20:d0:d2:d7:0b:6e:c4: f6:0a:83:e8:41:97:c3:74:81:fe:eb:3a:df:6f:e5:29:e8:b4: 52:43:d6:d4:89:84:ed:f8:68:9c:af:97:f8:62:ec:9d:8c:79: cd:bc:24:83:84:36:36:cb:84:7f:92:db:54:f7:36:93:f4:ed: eb:da:9a:90:ce:82:e1:ad:12:21:72:f5:ff:27:bc:dd:88:9a: 0d:9f:34:4a:10:94:b5:ae:9b:80:85:45:0b:96:c1:ac:b4:21: 67:bd:65:51:97:45:49:0c:aa:e3:23:55:37:f5:6f:4b:a1:e0: a0:c2:36:a2:8f:ca:d7:20:79:e3:4d:77:c6:00:22:f5:32:56: 31:59:ef:2d:bc:ff:32:5c:d4:2f:5d:b8:cd:ce:c0:2b:63:b7: af:ac:49:53:78:7b:6f:10:24:03:9a:5b:0b:91:a7:e2:69:7f: 70:5e:b7:c6:b0:45:8b:37:cf:cd:e6:48:30:f9:9f:fb:c8:b9: 4d:dd:ea:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDM0QxMTAvBgNVBAUTKDUzNkI5MUIxN0I2RTFCQjE2MzhDODM1OEEwRkE1RUE1 RDBFQkVGQjcwHhcNMjQxMTIxMDA0NDAxWhcNMjQxMTI4MDA0NDAxWjAYMRYwFAYD VQQDEw02NzNlODI1MS0xNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5REjZUaXlQBLoKHf14sMFmvAlnB+1RS5N5bbPR/CCLNoGCMExLd8y7ikAuAl 7XIxS9fljBaQitlIwKcgWF5qVszn9kMQVEoV3NZczMxHwktAhls2u1VHNDwO4+Sn VFCTmLG+zUWM1QMp1yZBwFkXc0mFNVdhU0bmoe5g6RGjqV2nCpLPKH1EaHcbY4DG vjeHo8DX3JsKgLB9qulqmJnjniYXzHWAAg1dJtwYcol7M/vhIuVctuzWJwUib7AY dxTWRm6+Lk5qarnjj6rW11T7UWlusm5yHlwUl92cZyyM4SSLrkqlCYzAWHs0rI1E L8oPbWJ++GRwaEOe3Q0Hqun/5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtU/d97 GVapDEkDRwol6pR/qHoOMB8GA1UdIwQYMBaAFFNrkbF7bhuxY4yDWKD6XqXQ6++3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzRC8yMzIzRkQ4MDAw RDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3RmpqSU5Zb1BwZXBkRHI3 N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1UydVJzWHR1RzdGampJTllvUHBlcGREcjc3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzRC8yMzIzRkQ4MDAwRDcxMUVFOTNDQjBGN0VDNEY5QUUwMi9VMnVSc1h0dUc3 RmpqSU5Zb1BwZXBkRHI3N2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFE02f2vsPUb6tze4cz+lNhKgdQc6k5oefYGLcTKxD/JXsinGqu8uq mUJGWafgB+I9ZTkkygsIW2hlf6g9CbuHbiDQ0tcLbsT2CoPoQZfDdIH+6zrfb+Up 6LRSQ9bUiYTt+Gicr5f4YuydjHnNvCSDhDY2y4R/kttU9zaT9O3r2pqQzoLhrRIh cvX/J7zdiJoNnzRKEJS1rpuAhUULlsGstCFnvWVRl0VJDKrjI1U39W9LoeCgwjai j8rXIHnjTXfGACL1MlYxWe8tvP8yXNQvXbjNzsArY7evrElTeHtvECQDmlsLkafi aX9wXrfGsEWLN8/N5kgw+Z/7yLlN3eqL -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:32 2024 by rpki-client on console-ams.rpki-client.org