$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft File: 2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json) Hash identifier: 91NqenBysaOnw6linsdRTY31tMpnmGbGeCkWHCkT9aw= Subject key identifier: C8:1E:B4:CB:B1:F0:6C:2D:E3:D6:31:AA:5A:84:31:BF:56:AA:A4:67 Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Certificate serial: 0E39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft Manifest number: 0E30 Signing time: Fri 22 Nov 2024 17:44:07 +0000 Manifest this update: Fri 22 Nov 2024 17:44:07 +0000 Manifest next update: Fri 29 Nov 2024 17:44:07 +0000 Files and hashes: 1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: cdJ5axVoSpB3sCMbvnQjYm57V7TT92EIlB6kgU11Sis=) 2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: Lhup7Zk9zUWbpx4YvLoYtp8k4a6DjCWODZVfnB4MNOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3641 (0xe39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Validity Not Before: Nov 22 17:44:07 2024 GMT Not After : Nov 29 17:44:07 2024 GMT Subject: CN=6740c2e7-3162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:30:83:f3:11:e8:8c:e4:42:f9:d5:69:3d: 64:25:36:d4:58:84:fe:28:7d:91:a3:a4:13:bb:3e: fb:26:93:a1:b2:ad:50:a0:26:0b:d0:f4:69:e5:fb: d1:98:a2:02:bf:66:c9:3c:ff:74:e2:a9:37:21:5c: 76:db:71:6c:f5:d8:e7:8a:af:7f:b5:c7:8b:2d:1c: 88:7c:35:37:04:10:32:c5:d7:de:6b:68:ab:bf:10: 33:99:61:c0:86:93:d4:36:a1:4b:7b:06:5c:86:d2: 12:7f:52:93:a2:df:3c:cd:db:9e:4a:8d:a7:82:8c: 37:5d:ff:8f:cc:49:cf:64:f7:63:13:01:73:87:f8: 12:bd:6a:d0:ef:c1:49:f8:4f:67:1f:11:4a:ca:70: cd:ab:a2:b6:ed:7a:6e:10:59:50:1b:39:c0:b2:b5: 21:f2:cd:7f:0c:15:ef:b2:72:e4:04:7d:f2:d6:ba: 9a:86:37:fe:cc:fb:28:36:58:6c:ed:68:f6:cc:da: 6d:c7:40:59:66:c1:2d:cc:6d:4b:dd:54:d8:bd:98: eb:d2:b6:78:f3:f0:d6:29:5b:72:21:ea:b3:52:80: ea:62:c1:97:df:e9:f0:43:a2:01:7c:2d:0d:30:ba: 97:ad:03:87:6e:70:9b:1d:f0:cf:84:fe:aa:70:70: 8d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1E:B4:CB:B1:F0:6C:2D:E3:D6:31:AA:5A:84:31:BF:56:AA:A4:67 X509v3 Authority Key Identifier: keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6d:1d:3c:21:7c:35:99:74:43:32:8e:bc:9e:e1:7e:a0:58: f5:e0:7a:41:e1:02:2d:61:c7:86:1b:d8:bb:dd:36:85:99:bc: ec:c4:58:1c:d4:23:a6:11:5d:45:ed:85:f3:0c:ee:29:7f:92: 71:1b:cd:63:f0:6d:44:19:99:bf:67:9c:da:dd:1f:d4:4a:a8: 59:6f:64:da:e8:fb:01:6e:8b:df:07:67:7d:45:0c:67:d7:c8: 57:53:69:a5:0a:00:46:7f:a5:d4:3d:91:59:67:7a:22:53:98: 7f:c2:f7:73:71:e0:09:b6:7a:87:c1:be:6f:ce:05:32:57:2c: c8:47:a6:f0:62:6e:c1:38:81:3e:df:76:15:74:43:fd:87:3e: 31:71:b8:a9:b4:8a:52:6d:91:79:dd:b0:d9:34:f2:86:65:b7: 1d:8f:bc:e7:6e:dd:de:fc:48:a6:9a:66:ae:d7:80:be:dd:4f: 36:c1:4e:aa:eb:b5:98:1f:60:d6:5e:d1:96:fb:2d:31:f7:63: 88:fe:ef:ff:a0:f8:db:ec:cc:67:f3:fb:fe:e1:61:8e:50:ce: da:ab:4b:09:fe:e6:bb:15:99:65:0c:a0:80:31:54:57:2e:a0: 5b:51:02:75:9d:8f:9f:3b:f7:22:92:34:a4:b3:ad:93:a4:c1: 36:6a:81:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFMzgxMTAvBgNVBAUTKEQ5NTU5NUM2MDk1QjRERkFFMkNCOUI0NUI5MDg5Q0My NjIzRDk0QTMwHhcNMjQxMTIyMTc0NDA3WhcNMjQxMTI5MTc0NDA3WjAYMRYwFAYD VQQDEw02NzQwYzJlNy0zMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSkwg/MR6IzkQvnVaT1kJTbUWIT+KH2Ro6QTuz77JpOhsq1QoCYL0PRp5fvR mKICv2bJPP904qk3IVx223Fs9djniq9/tceLLRyIfDU3BBAyxdfea2irvxAzmWHA hpPUNqFLewZchtISf1KTot88zdueSo2ngow3Xf+PzEnPZPdjEwFzh/gSvWrQ78FJ +E9nHxFKynDNq6K27XpuEFlQGznAsrUh8s1/DBXvsnLkBH3y1rqahjf+zPsoNlhs 7Wj2zNptx0BZZsEtzG1L3VTYvZjr0rZ48/DWKVtyIeqzUoDqYsGX3+nwQ6IBfC0N MLqXrQOHbnCbHfDPhP6qcHCNqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgetMux 8Gwt49YxqlqEMb9WqqRnMB8GA1UdIwQYMBaAFNlVlcYJW0364subRbkInMJiPZSj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEUzOC83MzMzMUI1RTkx RDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRmcml5NXRGdVFpY3dtSTls S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWV1Z4Z2xiVGZyaXk1dEZ1UWljd21JOWxLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEUzOC83MzMzMUI1RTkxRDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRm cml5NXRGdVFpY3dtSTlsS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKbR08IXw1mXRDMo68nuF+oFj14HpB4QItYceGG9i73TaFmbzsxFgc 1COmEV1F7YXzDO4pf5JxG81j8G1EGZm/Z5za3R/USqhZb2Ta6PsBbovfB2d9RQxn 18hXU2mlCgBGf6XUPZFZZ3oiU5h/wvdzceAJtnqHwb5vzgUyVyzIR6bwYm7BOIE+ 33YVdEP9hz4xcbiptIpSbZF53bDZNPKGZbcdj7znbt3e/Eimmmau14C+3U82wU6q 67WYH2DWXtGW+y0x92OI/u//oPjb7Mxn8/v+4WGOUM7aq0sJ/ua7FZllDKCAMVRX LqBbUQJ1nY+fO/cikjSks62TpME2aoFY -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org