$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: sU7MBZZA1WQ5+JVYo3mHn6XNkvdLRn5L0I6oL7RgctY= Subject key identifier: F2:35:8B:0C:F2:C2:9E:D9:3A:6E:18:27:77:3A:D1:44:D2:CF:10:44 Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: 15 Signing time: Sat 23 Nov 2024 05:58:47 +0000 Manifest this update: Sat 23 Nov 2024 05:58:46 +0000 Manifest next update: Sat 30 Nov 2024 05:58:46 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: iqKSZ4NY6m5BZPGWQ0Ca+QzpzdsuSE8QUN4zegjmkzo=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: 5nFCTmC5xU4JIe+ocqPzYmN20Z681T2Mb6LU4xxafNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Nov 23 05:58:46 2024 GMT Not After : Nov 30 05:58:46 2024 GMT Subject: CN=67416f16-1637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:f6:d1:be:44:31:3d:32:5c:7c:62:4a:b6: d4:96:f6:24:7d:80:71:0e:ea:54:ae:db:72:6d:bb: 1d:f0:7a:14:47:6d:04:d0:94:aa:ef:35:d8:6e:7e: e9:2b:d9:8a:cb:07:06:95:4b:05:21:13:2b:19:2f: ca:83:76:75:f4:cf:2e:98:a8:26:6f:1a:92:e8:24: 0e:69:3a:70:30:ad:05:1a:6c:8e:0d:7d:1c:d8:08: 91:48:5f:79:bf:aa:9a:a3:f2:d4:1a:84:bb:d1:1d: 73:cb:c1:2a:6e:9a:e1:5e:89:c4:fa:df:e8:26:fd: b2:63:d1:cb:c8:ba:09:68:c9:30:54:00:99:a9:ef: ce:d3:64:a3:5d:70:4d:9f:56:78:30:b1:bc:b9:55: 14:49:2f:d5:57:65:6a:90:e3:b3:2e:f4:3c:a5:47: a5:77:8c:35:15:09:23:e4:f6:23:06:e8:85:f8:ca: 50:93:fc:5f:de:94:6d:9b:a4:91:72:ea:07:b0:06: b0:b2:03:02:71:06:df:4e:fa:a6:d8:f0:63:fb:9b: 91:6a:0e:e7:2e:0f:db:23:17:2f:a4:57:c4:c6:ba: b6:8e:07:6d:91:99:98:12:c8:f9:44:70:42:a3:55: f4:54:49:f9:2e:95:ba:86:e9:7c:8a:c3:45:0f:38: ac:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:35:8B:0C:F2:C2:9E:D9:3A:6E:18:27:77:3A:D1:44:D2:CF:10:44 X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:64:6d:27:1c:21:3c:e7:fa:69:f9:44:f4:9a:2d:19:3c:f2: ce:c9:ea:4d:60:6d:db:65:26:a2:ff:8f:50:d3:1e:0a:31:36: 70:5c:17:ff:b0:b4:6b:81:b7:d6:2f:b0:af:f4:6d:ac:02:38: 6b:4b:27:04:33:e8:53:52:1e:74:2a:76:6c:c1:11:f6:aa:de: 18:2d:1f:81:1b:4a:14:ab:bb:77:d6:b0:17:a6:d9:50:f6:ab: 4f:39:ae:ce:21:f3:59:4a:64:1e:ff:cd:25:da:07:16:9b:bf: b4:c0:a6:7f:12:25:61:61:77:af:9d:fd:4b:ac:45:d0:b2:5a: 70:7d:04:fe:47:bb:1d:b4:15:86:66:53:43:5f:00:ab:e4:31: 6a:9d:0b:ca:09:97:d1:b7:82:c6:03:a9:2c:56:e1:bc:55:b4: 85:a8:6f:94:29:00:15:f1:ca:00:e4:9e:0b:fb:4b:9e:e6:3a: 26:12:b6:2e:c5:ae:e2:b3:c9:b2:53:1f:9c:bf:0c:97:f3:ff: 17:58:1b:df:e2:f8:dc:8a:5d:6f:f6:52:fb:b6:92:98:6f:6a: f8:78:bf:9a:7c:fe:50:50:4c:15:89:e4:d9:94:5c:7e:2d:83: 88:c0:0e:9d:17:8c:ae:dd:a9:0f:ec:38:8c:ef:98:7a:4b:0a: 7f:c3:b5:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTZFNzExMC8GA1UEBRMoMTI0NzA4MUU5QkE5N0MxM0M3REQzRDY4RTQ0M0QxRjU0 NzlCMkFGRjAeFw0yNDExMjMwNTU4NDZaFw0yNDExMzAwNTU4NDZaMBgxFjAUBgNV BAMTDTY3NDE2ZjE2LTE2MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuR/bRvkQxPTJcfGJKttSW9iR9gHEO6lSu23Jtux3wehRHbQTQlKrvNdhufukr 2YrLBwaVSwUhEysZL8qDdnX0zy6YqCZvGpLoJA5pOnAwrQUabI4NfRzYCJFIX3m/ qpqj8tQahLvRHXPLwSpumuFeicT63+gm/bJj0cvIugloyTBUAJmp787TZKNdcE2f Vngwsby5VRRJL9VXZWqQ47Mu9DylR6V3jDUVCSPk9iMG6IX4ylCT/F/elG2bpJFy 6gewBrCyAwJxBt9O+qbY8GP7m5FqDucuD9sjFy+kV8TGuraOB22RmZgSyPlEcEKj VfRUSfkulbqG6XyKw0UPOKzXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8jWLDPLC ntk6bhgndzrRRNLPEEQwHwYDVR0jBBgwFoAUEkcIHpupfBPH3T1o5EPR9UebKv8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NkU3LzA2NzlBQ0Y0OTEy NTExRUY5NDJBMkIyOEM0RjlBRTAyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWtjSUhwdXBmQlBIM1QxbzVFUFI5VWViS3Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NkU3LzA2NzlBQ0Y0OTEyNTExRUY5NDJBMkIyOEM0RjlBRTAyL0VrY0lIcHVwZkJQ SDNUMW81RVBSOVVlYkt2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABdkbSccITzn+mn5RPSaLRk88s7J6k1gbdtlJqL/j1DTHgoxNnBcF/+w tGuBt9YvsK/0bawCOGtLJwQz6FNSHnQqdmzBEfaq3hgtH4EbShSru3fWsBem2VD2 q085rs4h81lKZB7/zSXaBxabv7TApn8SJWFhd6+d/UusRdCyWnB9BP5Hux20FYZm U0NfAKvkMWqdC8oJl9G3gsYDqSxW4bxVtIWob5QpABXxygDkngv7S57mOiYSti7F ruKzybJTH5y/DJfz/xdYG9/i+NyKXW/2Uvu2kphvavh4v5p8/lBQTBWJ5NmUXH4t g4jADp0XjK7dqQ/sOIzvmHpLCn/DtR0= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org