$ rpki-client -vvf rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft File: PTTx6lntsIbxczTVmekxDXH-B0Q.mft (raw, json) Hash identifier: C09VZ4ft0edp5SS2AGcC07+ntWk8rY5PQYDMs8x1ke0= Subject key identifier: AF:1B:3D:A1:98:72:BC:DC:E9:F7:12:C5:1B:C3:EB:95:FE:C7:DC:BA Authority key identifier: 3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 Certificate issuer: /CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Certificate serial: 0E17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft Manifest number: 0E00 Signing time: Fri 22 Nov 2024 17:45:38 +0000 Manifest this update: Fri 22 Nov 2024 17:45:38 +0000 Manifest next update: Fri 29 Nov 2024 17:45:38 +0000 Files and hashes: 1: PTTx6lntsIbxczTVmekxDXH-B0Q.crl (hash: rC+9jYw2b5Nx2d1ghlIbif7uYaE5b/YEGXg9XBh8l5I=) 2: 3D69458C9E2111E9BCDFAE69C4F9AE02.roa (hash: alUP6VMzD0tmc3pTboCQa5BjgFfvzIB460TqVIvJ3eU=) 3: A152FA389E2211E99CA85B6CC4F9AE02.roa (hash: tVnO8ZV7Glm7r1+kxCAZBT0FT0Hia7Gl07cM925RQ3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3607 (0xe17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744 Validity Not Before: Nov 22 17:45:38 2024 GMT Not After : Nov 29 17:45:38 2024 GMT Subject: CN=6740c342-44e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f4:22:00:be:2c:35:77:1f:ab:d3:d9:24:fe: 39:7e:fd:7a:3c:58:cf:88:cb:59:11:04:c1:07:ec: 89:25:7c:86:40:74:5d:61:53:87:e7:8a:b7:d3:f8: 66:b4:de:19:eb:8b:af:01:85:69:7d:7a:33:ef:ac: ea:ee:bb:dc:d4:34:b5:80:fc:01:40:1d:73:c7:19: 6a:79:3d:cb:31:d6:06:de:01:aa:8c:6c:f5:d0:71: 50:85:dc:c6:0b:19:ee:44:4e:66:83:1c:5b:21:55: ca:bc:7d:fa:be:3d:c5:de:fd:9d:3e:f7:b6:45:be: cd:88:cf:b0:76:4a:b4:63:64:a6:7d:9f:33:8f:0e: 41:13:52:86:82:b8:0b:e9:1e:a1:dc:72:04:85:20: ed:54:bc:20:88:30:df:01:db:b6:0f:87:02:07:19: e7:4c:39:ad:a5:77:38:0e:6e:73:46:f0:10:e2:f2: 46:92:66:b1:4e:6b:df:26:65:01:df:fb:44:87:06: 37:4e:6a:6a:34:ed:12:66:c4:3e:05:d2:b8:aa:2f: 10:7d:62:12:a2:7d:18:9a:6b:4a:7c:ec:d1:34:48: c5:2a:46:74:9e:77:76:b5:0e:f7:e8:5e:88:c6:67: 35:62:3e:c7:a4:9e:24:6a:51:82:63:aa:1a:50:90: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1B:3D:A1:98:72:BC:DC:E9:F7:12:C5:1B:C3:EB:95:FE:C7:DC:BA X509v3 Authority Key Identifier: keyid:3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:0f:c0:84:fb:9a:90:b2:a0:85:ec:78:d7:e7:5d:c3:13:18: 8c:7e:e0:ba:60:2d:bb:a3:c7:1e:d8:51:67:18:6a:04:ed:d9: 9b:87:5e:eb:92:97:7d:28:4b:12:a1:05:bb:49:7d:8a:4f:a9: f1:f6:f7:90:4a:3b:83:2f:fc:ca:26:15:15:32:3c:fa:f9:14: ce:d8:85:77:39:10:2c:ae:df:21:dd:d8:47:66:aa:d0:2e:e3: 63:24:be:15:0b:64:cd:69:ec:b4:09:5f:20:4c:8b:dd:6b:f4: 9f:52:90:76:9b:94:f0:23:c5:b4:f8:09:bc:38:47:b7:fb:38: f9:93:8e:4b:04:c6:86:48:c7:a9:bb:db:21:1a:89:47:d7:2c: 7e:ab:a9:7a:e7:0e:6c:93:6e:aa:9f:6e:23:a6:be:38:e6:05: de:03:a8:97:47:fe:ec:5d:b1:6b:18:84:8e:6c:2d:83:89:41: 6c:a4:9c:99:5c:97:1b:5d:88:81:11:1e:ac:71:23:46:3e:85: be:ab:91:1b:76:fd:02:f2:e9:41:db:8d:86:89:63:3b:64:2d: 40:82:bc:c8:8a:e8:ad:2a:4a:62:f9:ee:8b:5b:fa:5b:43:92: 9a:b4:ea:ae:d9:5c:7a:51:c0:77:26:2b:32:c7:b9:bf:ef:39: 34:d7:16:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VBRTYxMTAvBgNVBAUTKDNEMzRGMUVBNTlFREIwODZGMTczMzRENTk5RTkzMTBE NzFGRTA3NDQwHhcNMjQxMTIyMTc0NTM4WhcNMjQxMTI5MTc0NTM4WjAYMRYwFAYD VQQDEw02NzQwYzM0Mi00NGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5PQiAL4sNXcfq9PZJP45fv16PFjPiMtZEQTBB+yJJXyGQHRdYVOH54q30/hm tN4Z64uvAYVpfXoz76zq7rvc1DS1gPwBQB1zxxlqeT3LMdYG3gGqjGz10HFQhdzG CxnuRE5mgxxbIVXKvH36vj3F3v2dPve2Rb7NiM+wdkq0Y2SmfZ8zjw5BE1KGgrgL 6R6h3HIEhSDtVLwgiDDfAdu2D4cCBxnnTDmtpXc4Dm5zRvAQ4vJGkmaxTmvfJmUB 3/tEhwY3TmpqNO0SZsQ+BdK4qi8QfWISon0YmmtKfOzRNEjFKkZ0nnd2tQ736F6I xmc1Yj7HpJ4kalGCY6oaUJAKFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8bPaGY crzc6fcSxRvD65X+x9y6MB8GA1UdIwQYMBaAFD008epZ7bCG8XM01ZnpMQ1x/gdE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUFFNi83QkMyOTMyNjlC RjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJYnhjelRWbWVreERYSC1C MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUVHg2bG50c0lieGN6VFZtZWt4RFhILUIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RUFFNi83QkMyOTMyNjlCRjkxMUU5QUE2RDg0NTNDNEY5QUUwMi9QVFR4NmxudHNJ YnhjelRWbWVreERYSC1CMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkD8CE+5qQsqCF7HjX513DExiMfuC6YC27o8ce2FFnGGoE7dmbh17r kpd9KEsSoQW7SX2KT6nx9veQSjuDL/zKJhUVMjz6+RTO2IV3ORAsrt8h3dhHZqrQ LuNjJL4VC2TNaey0CV8gTIvda/SfUpB2m5TwI8W0+Am8OEe3+zj5k45LBMaGSMep u9shGolH1yx+q6l65w5sk26qn24jpr445gXeA6iXR/7sXbFrGISObC2DiUFspJyZ XJcbXYiBER6scSNGPoW+q5Ebdv0C8ulB242GiWM7ZC1AgrzIiuitKkpi+e6LW/pb Q5KatOqu2Vx6UcB3Jisyx7m/7zk01xbX -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org