$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft File: iTrFeQFBVhhq6vUDS6C0km-S43Q.mft (raw, json) Hash identifier: qQ1qmoTGxU5Ju7AqkSrRjVcPDVZk+Nu1RgPiUe8rDS8= Subject key identifier: 49:64:97:E2:29:2D:42:0D:31:C4:80:8D:0B:CF:4E:46:07:2F:58:E7 Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 Certificate issuer: /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft Manifest number: 10 Signing time: Fri 27 Dec 2024 06:12:30 +0000 Manifest this update: Fri 27 Dec 2024 06:12:30 +0000 Manifest next update: Fri 03 Jan 2025 06:12:30 +0000 Files and hashes: 1: iTrFeQFBVhhq6vUDS6C0km-S43Q.crl (hash: eW8a+021OUJkKIYEqNLf9G8QkZlluyyz0VDlesCFQZk=) 2: FB729544B57F11EF8BDF3346C4F9AE02.roa (hash: wnr7gdAIv5Jdc15Z3sjp6boqd+eAUfOZ3eJD4U6UCSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Jan 2025 05:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374 Validity Not Before: Dec 27 06:12:30 2024 GMT Not After : Jan 3 06:12:30 2025 GMT Subject: CN=676e454e-7a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b0:9c:6d:9f:fd:98:ce:3c:15:f3:7f:e2:bd: 5a:f9:be:8c:9c:53:8a:ce:75:b2:b7:b3:f0:78:76: e6:f0:75:81:a2:c1:37:0d:4b:87:81:41:08:55:8d: bc:41:bb:48:ad:af:73:f7:49:94:a6:5a:5f:56:af: 3f:c0:5d:93:10:94:5c:e8:83:c2:db:9b:f4:c8:9d: 36:83:c8:b8:3e:06:f4:30:46:4a:5a:6f:14:fc:df: 14:2e:f1:7c:15:7a:70:3c:31:cb:cb:4e:fa:4a:6c: 6a:a4:8e:1a:c0:d3:85:fb:be:83:c3:be:7b:c9:e5: b8:db:c3:db:1d:21:77:f2:60:92:25:98:a5:31:32: 01:1d:9e:2a:58:13:43:a1:18:1d:a9:e5:f4:2a:58: b6:90:92:ae:29:f0:68:06:1c:98:ea:f9:d2:22:53: 29:46:8c:cf:18:19:11:cb:bb:0c:df:53:e8:0e:4f: 33:5f:76:63:f7:04:bd:8e:5f:fe:7e:f5:70:d0:92: eb:11:23:45:d5:f8:4c:10:c3:fc:5d:7c:33:e1:92: 90:7b:75:8d:1b:94:ca:de:59:cb:84:f7:61:b0:68: 92:a8:4a:a5:97:6a:00:6d:60:e2:0b:5c:77:cb:5d: 3f:51:41:83:f6:5f:11:b1:ee:70:12:f9:7e:f6:25: 45:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:64:97:E2:29:2D:42:0D:31:C4:80:8D:0B:CF:4E:46:07:2F:58:E7 X509v3 Authority Key Identifier: keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:88:b2:90:cf:2c:26:af:c4:33:81:e9:cf:ee:11:07:32:9d: 49:73:76:4d:8c:8e:df:49:90:ca:dc:2c:4d:ad:bd:76:40:87: 0c:cb:04:62:3e:6f:39:f9:e7:0e:ce:f9:79:e4:17:f4:dd:4a: 09:f4:cd:5f:c7:17:60:55:d2:d4:71:97:22:17:c4:aa:66:82: 73:e4:39:6a:c4:96:5b:cb:5c:50:d2:e5:bc:a8:9f:47:30:d0: b3:66:6c:29:6d:af:16:32:0e:e5:28:d6:2d:b4:88:8a:df:5b: d8:94:9e:1e:eb:78:6f:53:60:14:33:b1:7f:5b:8f:a3:d5:82: 6e:18:f6:f7:ea:db:6c:fb:eb:1f:64:89:81:a2:d1:d7:69:1d: 8a:f7:53:52:12:2f:87:72:97:ca:a7:2e:25:0b:56:49:0c:96: 3f:f2:43:69:8c:f7:a2:e7:39:51:6b:ad:7d:88:34:d1:0d:a1: b4:60:88:f0:32:7e:75:28:74:c1:d6:fe:f7:9b:ff:48:3f:2a: 8b:86:b1:37:41:41:c6:bc:41:2a:6b:c0:e3:27:3d:03:8d:2e: 89:6d:e9:b2:26:27:b0:19:86:b5:1d:b6:00:95:d9:90:36:65: 40:9d:e7:58:91:7d:4c:ec:bc:90:5d:75:43:f0:0a:c6:7d:72: b7:76:8e:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTNDNzExMC8GA1UEBRMoODkzQUM1NzkwMTQxNTYxODZBRUFGNTAzNEJBMEI0OTI2 RjkyRTM3NDAeFw0yNDEyMjcwNjEyMzBaFw0yNTAxMDMwNjEyMzBaMBgxFjAUBgNV BAMTDTY3NmU0NTRlLTdhMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6sJxtn/2YzjwV83/ivVr5voycU4rOdbK3s/B4dubwdYGiwTcNS4eBQQhVjbxB u0itr3P3SZSmWl9Wrz/AXZMQlFzog8Lbm/TInTaDyLg+BvQwRkpabxT83xQu8XwV enA8McvLTvpKbGqkjhrA04X7voPDvnvJ5bjbw9sdIXfyYJIlmKUxMgEdnipYE0Oh GB2p5fQqWLaQkq4p8GgGHJjq+dIiUylGjM8YGRHLuwzfU+gOTzNfdmP3BL2OX/5+ 9XDQkusRI0XV+EwQw/xdfDPhkpB7dY0blMreWcuE92GwaJKoSqWXagBtYOILXHfL XT9RQYP2XxGx7nAS+X72JUVZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSWSX4ikt Qg0xxICNC89ORgcvWOcwHwYDVR0jBBgwFoAUiTrFeQFBVhhq6vUDS6C0km+S43Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFM0M3Lzg2NTg4N0I2QjI2 NzExRUZBNTY1QTg0OUM0RjlBRTAyL2lUckZlUUZCVmhocTZ2VURTNkMwa20tUzQz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaVRyRmVRRkJWaGhxNnZVRFM2QzBrbS1TNDNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF M0M3Lzg2NTg4N0I2QjI2NzExRUZBNTY1QTg0OUM0RjlBRTAyL2lUckZlUUZCVmho cTZ2VURTNkMwa20tUzQzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABmIspDPLCavxDOB6c/uEQcynUlzdk2Mjt9JkMrcLE2tvXZAhwzLBGI+ bzn55w7O+XnkF/TdSgn0zV/HF2BV0tRxlyIXxKpmgnPkOWrEllvLXFDS5byon0cw 0LNmbCltrxYyDuUo1i20iIrfW9iUnh7reG9TYBQzsX9bj6PVgm4Y9vfq22z76x9k iYGi0ddpHYr3U1ISL4dyl8qnLiULVkkMlj/yQ2mM96LnOVFrrX2INNENobRgiPAy fnUodMHW/veb/0g/KouGsTdBQca8QSprwOMnPQONLolt6bImJ7AZhrUdtgCV2ZA2 ZUCd51iRfUzsvJBddUPwCsZ9crd2jhw= -----END CERTIFICATE-----Generated at Fri Dec 27 07:43:19 2024 by rpki-client on console-ams.rpki-client.org