$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json) Hash identifier: hliid8vA7Y2WNPIj4EB7QmfkA/UqMo2QNTS++NWttA0= Subject key identifier: 8D:96:AC:68:6B:9F:AA:22:0F:37:4F:1D:23:0C:A2:01:60:94:9D:F0 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 0408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft Manifest number: 0399 Signing time: Thu 21 Nov 2024 00:40:21 +0000 Manifest this update: Thu 21 Nov 2024 00:40:20 +0000 Manifest next update: Thu 28 Nov 2024 00:40:20 +0000 Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: 9r+I4EhLIWrrN5a565voDUDU5I58fS/ksKXlMdpzLuw=) 2: 3A671478DAFC11EEBFDF493AC4F9AE02.roa (hash: Xvx6Xaah6R0UvUoJSOMhkHoBk4qofzbf3t+jRFyKQZs=) 3: 73FCC4481CAD11EEA46B151DC4F9AE02.roa (hash: xLAp8SL1FdY9rdr5UWy+ApLo8i+9DkxfF4xI/C+ZcI0=) 4: F00EED50ED2B11EE98C44146C4F9AE02.roa (hash: d3JCpwne1uQUGFg4yTWW1Ytpt+bN8JwU4BdVhc7F6aY=) 5: 75CD74841CC611EEAD8F6969C4F9AE02.roa (hash: NN12ijjN6eHiIP1fgGNt8W/SjYLPT878HAPA443nXjw=) 6: 7D3AC586C19B11ED854B7639C4F9AE02.roa (hash: Rl2QgIY1asE3WPoShZtQ2iuX/xj4UI8nBTHZn6A9k6M=) 7: 0A6FBB5C152811EE8E31B969C4F9AE02.roa (hash: 8P9fQsyTCuiC83nyFEWreUG4FXx+RrwZOmDW3liswnE=) 8: ACFCE162DAFB11EE902F6539C4F9AE02.roa (hash: xJ7KzUAv8j9M+W6KCeCK63jNH2dqcmPqZTR8VHBvDCE=) 9: 5042F2F6ED2D11EE83179F16C4F9AE02.roa (hash: swYLtK6/7FNzTxaHvHKDUagJAbxQcguql17O0l4jnjY=) 10: 6806A9D07B4111EF87D2E951C4F9AE02.roa (hash: /KHhv0wFN+iPlsJ858r8JVJtCaymXIBJ4SFRGoaj2DM=) 11: 7539EF341CC611EEAD8F6969C4F9AE02.roa (hash: DhnEP4KL8BGueYtdhqpPKqo4ZVfA2e3SWaZ4Ysu/+44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1032 (0x408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Nov 21 00:40:20 2024 GMT Not After : Nov 28 00:40:20 2024 GMT Subject: CN=673e8174-d263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b7:79:11:2d:30:5c:a1:63:7d:95:9d:7f:62: 9a:ba:fc:5f:d1:94:cb:31:58:7c:98:d3:8c:e8:aa: f5:07:2f:99:2d:c4:9c:f0:0e:a6:b6:7f:b3:60:e3: f1:a6:2f:b7:d8:54:da:e2:07:a8:90:a4:44:5f:95: a8:b9:6b:7a:0b:7d:aa:8a:ad:a6:cf:b4:29:48:6c: 0d:5a:b3:e1:7a:f3:7a:a0:20:92:bc:4e:e3:48:21: 7e:aa:56:b4:c4:9d:14:a5:a6:37:58:e8:39:e0:37: c0:05:f6:1d:37:56:89:c2:87:a5:67:fe:11:dd:a6: 11:60:95:64:04:4b:53:37:91:49:d7:31:73:87:52: 20:bf:bf:c8:a5:0f:a7:0d:99:95:8d:98:4d:85:6a: 6b:6f:43:a4:69:5d:be:01:24:fe:01:33:11:04:b4: 6a:4c:eb:74:97:89:1b:c5:48:3d:e8:4a:ae:46:16: a0:ab:b7:87:18:a1:75:15:02:00:7b:99:20:04:45: 64:e4:5f:db:8b:25:70:37:7a:62:00:41:3f:f0:1f: e7:a9:ce:3d:07:b4:7b:a4:99:6e:4c:43:99:9b:b8: 4e:7c:e5:76:3d:a7:d9:06:e7:5e:1c:2f:ac:3c:04: c7:ec:a4:77:c0:04:ca:d0:1d:53:2c:cf:0d:bb:a3: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:96:AC:68:6B:9F:AA:22:0F:37:4F:1D:23:0C:A2:01:60:94:9D:F0 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:9f:3a:08:9a:af:bc:e5:9e:87:41:89:3f:b2:07:05:08:ad: 9b:d6:43:85:01:ea:84:c8:3b:3a:e4:51:af:ec:e8:3c:52:dd: 60:56:1c:08:49:8a:ac:ba:74:33:50:0d:ac:e9:65:18:ee:69: ec:f3:be:cc:9d:1e:74:ef:ad:7d:e1:b1:33:f7:52:00:72:4c: 15:ed:0f:47:5e:a4:b0:9f:83:83:37:17:5d:af:d5:f8:3a:bb: 0b:ae:b9:30:70:99:05:55:f1:ce:27:e4:98:70:f8:eb:74:57: 1c:43:3e:78:46:de:00:b4:30:21:41:24:2f:51:23:ab:08:b6: 4b:d8:98:2d:d6:3d:99:c6:82:f7:e5:ba:7e:c1:57:3c:c0:55: fa:fc:3e:6b:28:9b:d2:db:96:9d:f0:dd:0d:86:3b:d4:94:64: 24:8d:bf:d9:1a:59:03:80:2a:ab:1f:47:7e:e4:7d:c5:22:70: 45:f3:1d:97:18:ed:5a:b6:f0:fd:e3:f5:cd:01:55:1f:35:f7: fe:51:0d:9a:b3:43:1c:aa:08:af:9a:cd:0d:1a:eb:4a:1f:1e: e5:da:f6:60:e6:b6:1a:e7:57:ee:e4:1b:20:fd:0f:b3:85:53: 8e:03:e8:45:bc:4c:29:a9:16:7f:bd:fe:70:20:89:c1:56:3c: b1:b7:64:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjQxMTIxMDA0MDIwWhcNMjQxMTI4MDA0MDIwWjAYMRYwFAYD VQQDEw02NzNlODE3NC1kMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLd5ES0wXKFjfZWdf2Kauvxf0ZTLMVh8mNOM6Kr1By+ZLcSc8A6mtn+zYOPx pi+32FTa4geokKREX5WouWt6C32qiq2mz7QpSGwNWrPhevN6oCCSvE7jSCF+qla0 xJ0UpaY3WOg54DfABfYdN1aJwoelZ/4R3aYRYJVkBEtTN5FJ1zFzh1Igv7/IpQ+n DZmVjZhNhWprb0OkaV2+AST+ATMRBLRqTOt0l4kbxUg96EquRhagq7eHGKF1FQIA e5kgBEVk5F/biyVwN3piAEE/8B/nqc49B7R7pJluTEOZm7hOfOV2PafZBudeHC+s PATH7KR3wATK0B1TLM8Nu6MpUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2WrGhr n6oiDzdPHSMMogFglJ3wMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkM3My8wMTQ0Q0RGODlGMzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlS czFKZHBWM1VySlhPLXZXcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqnzoImq+85Z6HQYk/sgcFCK2b1kOFAeqEyDs65FGv7Og8Ut1gVhwI SYqsunQzUA2s6WUY7mns877MnR5076194bEz91IAckwV7Q9HXqSwn4ODNxddr9X4 OrsLrrkwcJkFVfHOJ+SYcPjrdFccQz54Rt4AtDAhQSQvUSOrCLZL2Jgt1j2ZxoL3 5bp+wVc8wFX6/D5rKJvS25ad8N0NhjvUlGQkjb/ZGlkDgCqrH0d+5H3FInBF8x2X GO1atvD94/XNAVUfNff+UQ2as0Mcqgivms0NGutKHx7l2vZg5rYa51fu5Bsg/Q+z hVOOA+hFvEwpqRZ/vf5wIInBVjyxt2RG -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:33 2024 by rpki-client on console-ams.rpki-client.org