$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: ec+Pi2xGv/rgoSmAh2PfzUrW0pR/YvVtf4CFIJOZGDU= Subject key identifier: E5:61:89:38:89:A3:1B:E7:3A:ED:82:91:5C:AF:0B:AB:A2:EB:5D:FF Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 0826 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 0808 Signing time: Wed 20 Nov 2024 20:35:33 +0000 Manifest this update: Wed 20 Nov 2024 20:35:32 +0000 Manifest next update: Wed 27 Nov 2024 20:35:32 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: aPyVQ2drbCanPJSMSZqU++dgtzJNPZkkLag8by+qtUA=) 2: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: 1z83FO4GtKRx6NJ1zk8GB6hRpxtXT/R6CtAHYUkaqdA=) 3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: USCITVxdvr2vZIKZ9pZeTbR2vvO/c7r8PRbW/v091j8=) 4: 0454DCC4C63A11EAB59CC262C4F9AE02.roa (hash: sjVV92TWr17Q5E7deLvp5LrkNkR25Y2nq+eGhf+3ca4=) 5: 04F19212C63A11EAB59CC262C4F9AE02.roa (hash: 9Lu/m9ZIOQ62O9GVdOQbSiFzGg5F/YviY3o3WadSNV4=) 6: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: MuEbqKnGdeTwOpzWtZfybGE0sUEXNrb1FXuWP6xXyqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Nov 20 20:35:32 2024 GMT Not After : Nov 27 20:35:32 2024 GMT Subject: CN=673e4815-faf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2e:15:bc:d1:da:23:60:67:b9:49:f3:3c:7c: 5b:97:47:12:53:77:b5:ca:d8:9f:dc:b0:49:e2:56: 85:26:9b:c7:31:d6:34:92:8e:e6:76:e7:5b:96:ab: 6a:8f:1d:d7:8e:42:3b:a3:cc:ff:dd:0a:f7:0b:aa: 23:24:dc:c9:a7:93:d7:fd:5d:83:6b:63:06:4a:33: 2c:27:49:c3:0e:40:e9:0d:bb:11:30:38:2a:8e:f2: b4:67:4a:67:32:88:cc:54:45:18:09:bd:fc:c7:e5: b1:7b:55:54:33:1b:17:28:59:a3:55:c0:e4:55:d7: 1b:5e:b6:a4:f7:26:91:e9:58:62:f1:c7:35:7a:7b: ab:ae:86:2a:6e:bb:5d:aa:62:6c:e9:8d:48:04:83: 1c:6b:26:b1:0f:fa:2e:d6:b8:04:a7:a6:36:d6:f6: 0e:21:60:30:f5:85:a1:dc:21:88:73:ca:6b:84:69: 05:2a:ea:c5:29:78:b1:15:24:91:8d:17:a2:37:44: 50:87:76:7d:b9:05:d1:5c:87:5d:26:03:3a:e3:b2: f9:9a:85:cc:63:97:0a:9f:1d:66:7a:8d:a0:84:1c: 4f:24:8c:40:b0:4f:35:d4:e3:a0:4b:55:96:55:b5: 5f:9f:ed:b4:09:48:58:03:52:7c:5d:b2:64:9b:03: 35:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:61:89:38:89:A3:1B:E7:3A:ED:82:91:5C:AF:0B:AB:A2:EB:5D:FF X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:29:b6:1f:cf:ce:8e:d5:f9:9f:ab:ae:75:46:f1:5e:5b:62: e8:a4:05:e6:2d:c0:8c:6d:31:4c:ac:c9:93:32:8b:d1:a0:8b: 41:ab:ec:74:02:ce:9c:7f:73:0e:1e:1a:d3:2b:da:ed:eb:2a: 4d:4c:52:58:4e:d0:5e:f5:86:3f:2e:a5:1e:bc:cd:95:4c:0a: 9f:47:8e:31:3c:6d:0f:a2:41:c4:35:ca:d2:f2:a4:1a:3b:b9: d8:0a:93:9a:ee:97:aa:0e:8f:a0:1f:78:f4:88:5b:b2:33:56: e3:a9:6a:9e:08:b3:87:4e:c4:6a:36:c8:b8:3e:ce:3e:be:ab: ab:fb:99:3f:84:ae:1d:75:68:fe:2c:1f:d6:c4:ca:be:a3:57: 54:87:c7:48:a0:ee:8a:a2:c2:e7:3c:87:51:88:4f:d6:b9:26: 36:ca:ae:81:90:15:19:2a:6e:27:76:55:0d:78:d7:cd:04:18: 1a:1d:14:98:f6:83:63:db:6a:e2:39:54:fa:9f:4c:07:29:cf: 95:4c:bb:db:44:ef:48:81:21:aa:e5:ee:24:2a:48:64:e6:7d: 20:d8:8f:66:d0:e7:d5:20:00:96:9b:dd:49:59:15:e4:18:9f: 2e:f6:9c:83:1c:16:53:62:6f:64:8e:1e:bc:90:6c:e2:b3:a4: a5:86:8b:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjQxMTIwMjAzNTMyWhcNMjQxMTI3MjAzNTMyWjAYMRYwFAYD VQQDEw02NzNlNDgxNS1mYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy4VvNHaI2BnuUnzPHxbl0cSU3e1ytif3LBJ4laFJpvHMdY0ko7mdudblqtq jx3XjkI7o8z/3Qr3C6ojJNzJp5PX/V2Da2MGSjMsJ0nDDkDpDbsRMDgqjvK0Z0pn MojMVEUYCb38x+Wxe1VUMxsXKFmjVcDkVdcbXrak9yaR6Vhi8cc1enurroYqbrtd qmJs6Y1IBIMcayaxD/ou1rgEp6Y21vYOIWAw9YWh3CGIc8prhGkFKurFKXixFSSR jReiN0RQh3Z9uQXRXIddJgM647L5moXMY5cKnx1meo2ghBxPJIxAsE811OOgS1WW VbVfn+20CUhYA1J8XbJkmwM1NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVhiTiJ oxvnOu2CkVyvC6ui613/MB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeKbYfz86O1fmfq651RvFeW2LopAXmLcCMbTFMrMmTMovRoItBq+x0 As6cf3MOHhrTK9rt6ypNTFJYTtBe9YY/LqUevM2VTAqfR44xPG0PokHENcrS8qQa O7nYCpOa7peqDo+gH3j0iFuyM1bjqWqeCLOHTsRqNsi4Ps4+vqur+5k/hK4ddWj+ LB/WxMq+o1dUh8dIoO6KosLnPIdRiE/WuSY2yq6BkBUZKm4ndlUNeNfNBBgaHRSY 9oNj22riOVT6n0wHKc+VTLvbRO9IgSGq5e4kKkhk5n0g2I9m0OfVIACWm91JWRXk GJ8u9pyDHBZTYm9kjh68kGzis6Slhoug -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:38 2024 by rpki-client on console-ams.rpki-client.org