$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft File: CrPxFJz1w7raaFscahN5tojXQ4Q.mft (raw, json) Hash identifier: /kPPOxTMt5rLYWgUgs5ucXgx5/jJg3yTJ3mh5a6qKTA= Subject key identifier: C2:A2:45:02:BC:21:44:DF:43:94:60:3A:5C:D4:14:A0:ED:DD:87:0C Authority key identifier: 0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 Certificate issuer: /CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft Manifest number: 01EF Signing time: Sat 23 Nov 2024 01:40:27 +0000 Manifest this update: Sat 23 Nov 2024 01:40:26 +0000 Manifest next update: Sat 30 Nov 2024 01:40:26 +0000 Files and hashes: 1: CrPxFJz1w7raaFscahN5tojXQ4Q.crl (hash: +FzQOFsMGSpKCBTTJCziIsfIfz4xbKONXeVRVhT+72E=) 2: 899B070834D511ED99B1921FC4F9AE02.roa (hash: 59L53XZQZjjT2hN0a9eIPXDObrfGJobgfFbYtXLEctM=) 3: D58286CA1F9D11EDA5DD9842C4F9AE02.roa (hash: L9Ip2okOSQMq2psn2x0tTtvnTzOcLa7ive90M13do6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF1E/serialNumber=0AB3F1149CF5C3BADA685B1C6A1379B688D74384 Validity Not Before: Nov 23 01:40:26 2024 GMT Not After : Nov 30 01:40:26 2024 GMT Subject: CN=6741328b-3af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:97:c2:66:36:33:2c:de:6c:84:1a:7a:18:c9: d7:25:78:84:37:56:e7:0e:55:46:c0:c2:d4:a3:26: b7:9e:f8:dc:1e:fe:bf:6f:f7:a9:e0:8e:00:6a:e0: c4:88:d1:62:9e:64:ed:aa:57:fa:3c:a9:aa:08:b1: 50:b9:6e:b8:b3:0e:fb:ee:fd:6f:09:70:81:80:97: fd:b9:fd:86:b9:c9:93:31:3c:4b:55:e0:ac:54:3e: c0:51:b7:f5:d4:8c:c5:cb:17:1b:27:2e:af:10:e2: b8:0c:dd:2b:9f:d0:70:58:86:77:58:88:68:be:2c: b7:58:d7:70:c7:31:cc:3d:c2:aa:b3:6b:7d:f3:07: 60:33:41:11:52:42:3d:40:d3:b1:30:ef:96:24:da: f7:63:17:0d:d8:c2:bc:63:96:4a:11:dd:69:7f:66: f0:6e:0a:e2:13:28:a6:37:f5:5e:ea:38:f8:54:99: c0:22:65:b5:60:2a:e7:c8:05:9b:a9:f6:aa:be:09: 2d:89:63:2a:d6:6b:a6:5b:16:ce:47:38:01:cd:b0: bf:b7:d6:69:9b:e8:51:f6:b6:be:5d:4a:28:16:d0: d4:28:a7:c4:bc:e4:ff:46:a8:de:52:57:c7:08:b2: 8c:4e:98:49:85:93:ff:51:a9:6a:1c:e3:db:63:91: 1b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A2:45:02:BC:21:44:DF:43:94:60:3A:5C:D4:14:A0:ED:DD:87:0C X509v3 Authority Key Identifier: keyid:0A:B3:F1:14:9C:F5:C3:BA:DA:68:5B:1C:6A:13:79:B6:88:D7:43:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrPxFJz1w7raaFscahN5tojXQ4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF1E/CC65A66A1F9A11ED835CAA3FC4F9AE02/CrPxFJz1w7raaFscahN5tojXQ4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:e3:8c:5c:cb:28:de:bd:02:cf:32:2a:5a:40:a5:c0:1b:92: 9b:0a:17:7b:a5:96:2c:7f:e1:d0:91:16:60:51:52:6e:d4:6c: 32:ca:d8:90:32:79:16:7d:b0:e4:e0:c9:8e:26:3b:a4:bb:6a: a9:f9:30:c1:8a:fc:5c:66:e3:fb:10:13:fc:b0:11:7c:99:e8: a2:d4:85:b8:35:91:96:72:7b:f3:8a:05:39:1c:cf:23:49:ae: c1:46:e3:40:5c:b1:45:2a:41:c8:73:95:f8:47:b5:c2:04:a8: be:7a:9f:22:4f:af:68:0a:6a:64:27:1f:95:0e:00:33:22:a1: 73:b7:e3:20:74:2f:06:b9:1a:be:12:3d:47:b6:e9:4f:16:f0: ab:1f:eb:b7:97:6f:43:08:96:9a:44:e2:51:69:48:55:6c:77: e9:77:bb:43:b9:49:d0:68:e9:16:54:f9:12:36:e4:0e:b2:bd: 30:c7:1d:2c:3b:75:5f:bf:12:ee:7a:2f:2e:73:63:42:5e:44: 24:d3:0c:13:9e:4c:c1:35:d9:f2:f2:46:ff:23:68:d4:2c:11: a2:94:c4:59:1a:42:20:2b:59:49:a3:77:09:14:6e:a6:60:34: ed:f8:e5:f3:01:bb:ef:2f:d6:84:80:66:5f:b7:c4:ab:d5:13: 88:23:e7:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGMUUxMTAvBgNVBAUTKDBBQjNGMTE0OUNGNUMzQkFEQTY4NUIxQzZBMTM3OUI2 ODhENzQzODQwHhcNMjQxMTIzMDE0MDI2WhcNMjQxMTMwMDE0MDI2WjAYMRYwFAYD VQQDEw02NzQxMzI4Yi0zYWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pfCZjYzLN5shBp6GMnXJXiEN1bnDlVGwMLUoya3nvjcHv6/b/ep4I4AauDE iNFinmTtqlf6PKmqCLFQuW64sw777v1vCXCBgJf9uf2GucmTMTxLVeCsVD7AUbf1 1IzFyxcbJy6vEOK4DN0rn9BwWIZ3WIhoviy3WNdwxzHMPcKqs2t98wdgM0ERUkI9 QNOxMO+WJNr3YxcN2MK8Y5ZKEd1pf2bwbgriEyimN/Ve6jj4VJnAImW1YCrnyAWb qfaqvgktiWMq1mumWxbORzgBzbC/t9Zpm+hR9ra+XUooFtDUKKfEvOT/RqjeUlfH CLKMTphJhZP/UalqHOPbY5Eb3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKiRQK8 IUTfQ5RgOlzUFKDt3YcMMB8GA1UdIwQYMBaAFAqz8RSc9cO62mhbHGoTebaI10OE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYxRS9DQzY1QTY2QTFG OUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3cmFhRnNjYWhONXRvalhR NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyUHhGSnoxdzdyYWFGc2NhaE41dG9qWFE0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REYxRS9DQzY1QTY2QTFGOUExMUVEODM1Q0FBM0ZDNEY5QUUwMi9DclB4Rkp6MXc3 cmFhRnNjYWhONXRvalhRNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI44xcyyjevQLPMipaQKXAG5KbChd7pZYsf+HQkRZgUVJu1GwyytiQ MnkWfbDk4MmOJjuku2qp+TDBivxcZuP7EBP8sBF8meii1IW4NZGWcnvzigU5HM8j Sa7BRuNAXLFFKkHIc5X4R7XCBKi+ep8iT69oCmpkJx+VDgAzIqFzt+MgdC8GuRq+ Ej1HtulPFvCrH+u3l29DCJaaROJRaUhVbHfpd7tDuUnQaOkWVPkSNuQOsr0wxx0s O3VfvxLuei8uc2NCXkQk0wwTnkzBNdny8kb/I2jULBGilMRZGkIgK1lJo3cJFG6m YDTt+OXzAbvvL9aEgGZft8Sr1ROII+cJ -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org