$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft File: x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json) Hash identifier: 9ZRu/suWNCk2TfsA5gCox/rQjRf6tt2BFubNjztom+c= Subject key identifier: D9:B2:3A:CD:A7:46:EE:B8:1B:B6:32:95:64:B1:01:BC:73:48:3F:2D Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Certificate serial: 167B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft Manifest number: 1657 Signing time: Fri 22 Nov 2024 16:43:41 +0000 Manifest this update: Fri 22 Nov 2024 16:43:40 +0000 Manifest next update: Fri 29 Nov 2024 16:43:40 +0000 Files and hashes: 1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: OTtRUTXzt+y4xRBFZu12BJBnYpbWFHOrdqTb6EBAUXA=) 2: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: o49h84ZO3CplLE7AB590r40W07bNiZwLcqExiYOYnJk=) 3: 0897E314434811EF8E76757AC4F9AE02.roa (hash: R1gEi8j8mfWvUtSAHt/wf2LiIREsRf4G5SX9f+LsG9I=) 4: 51B575404C3111ECB9639932C4F9AE02.roa (hash: CsgwZlw/JKOl7lCcDE26v4otl9NG57bkHLVRzw3Zc0U=) 5: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: bl/e4lQvjaSTkRxdWl0r2qMTTE7ezGReVPoOsVbal14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5755 (0x167b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Validity Not Before: Nov 22 16:43:40 2024 GMT Not After : Nov 29 16:43:40 2024 GMT Subject: CN=6740b4bc-3604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:5b:ab:7f:64:6b:3d:24:49:6f:a6:14:77: 1e:32:90:3e:6a:e4:fd:3d:f5:80:5d:c9:88:a4:e6: a1:0c:7a:4e:5d:c6:af:c1:04:cb:fd:99:4c:85:80: 39:f6:d9:75:5b:5b:89:01:90:bf:44:cc:50:c3:3b: aa:d0:37:c9:96:0d:66:bf:3a:72:dd:be:95:f0:03: dd:3c:cc:b3:e0:42:61:89:86:e8:10:2c:aa:ba:45: 3d:15:6e:84:e2:b2:b8:f3:d6:8c:c1:87:f4:f9:93: 5f:13:b6:14:01:3d:fb:48:52:5a:6e:32:ad:82:bf: 52:94:45:7a:be:80:e5:a4:16:04:fb:96:c9:34:c6: 67:d0:d5:a6:08:7c:79:f9:be:e8:14:3e:35:43:6f: 09:4c:e2:3b:7a:0b:cf:4d:b0:29:e9:41:66:e2:56: 39:30:c6:28:cb:59:a0:20:47:5a:dd:c7:f6:a9:16: d5:5f:8b:28:48:7d:df:77:72:c4:7e:78:e5:71:f0: 1f:94:b4:bb:34:0c:49:3e:fa:87:6d:fb:ab:d5:d5: 80:77:c4:7b:30:e4:6c:a4:87:ca:b4:bc:98:13:74: 14:28:87:dd:16:fb:3b:68:a2:4c:12:34:25:9b:20: 44:1f:ee:d9:53:76:58:53:4a:8c:96:fc:5e:ac:a4: d2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B2:3A:CD:A7:46:EE:B8:1B:B6:32:95:64:B1:01:BC:73:48:3F:2D X509v3 Authority Key Identifier: keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a1:d6:4f:26:01:a9:84:70:69:89:9e:09:5e:ff:31:70:a7: 7a:3a:c8:05:ad:72:57:67:7c:6c:c9:5a:f6:dc:fb:84:e6:0a: 81:a5:15:ef:a2:00:53:a1:93:f4:c8:fd:ec:9d:ea:20:e9:5a: fe:7d:5a:53:9c:fb:80:2d:dd:50:e5:7d:a3:57:d0:48:e9:ff: 92:3e:8f:40:46:df:06:c6:e7:ce:bb:f9:28:6d:56:56:2b:bd: 2e:e8:ef:f6:bd:16:27:95:21:24:d0:1c:c0:e2:e8:23:ab:78: 34:b9:44:41:a6:75:55:53:55:99:2e:d5:ad:5c:22:e8:5e:cd: 16:f8:72:cc:6d:69:1f:e7:7d:5d:e9:75:36:9b:a2:e3:da:b5: 8d:4d:f9:5c:92:a0:5e:29:d7:0a:1e:d3:f5:a8:7f:3a:26:e5: b7:b6:55:04:70:4a:c0:54:7e:84:cf:fe:a2:af:3f:f3:f4:80: cc:bf:94:fb:f8:ab:b8:d2:1b:a0:c2:98:98:3e:70:ad:b0:86: c0:2e:bf:68:08:88:41:4a:f1:49:12:c6:1c:d7:85:d1:0d:6f: 65:74:d8:23:cc:1d:39:22:9f:75:b8:01:38:91:85:66:b6:b9: 50:21:03:9f:85:f4:a1:31:85:d2:00:3c:82:46:d8:b4:25:2e: b3:bf:73:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKEM3QjI2NDczNTAzODBBNkEzNEUzNEUzMkNFRkUzNTE5 OTM3RTk3QzgwHhcNMjQxMTIyMTY0MzQwWhcNMjQxMTI5MTY0MzQwWjAYMRYwFAYD VQQDEw02NzQwYjRiYy0zNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzhbq39kaz0kSW+mFHceMpA+auT9PfWAXcmIpOahDHpOXcavwQTL/ZlMhYA5 9tl1W1uJAZC/RMxQwzuq0DfJlg1mvzpy3b6V8APdPMyz4EJhiYboECyqukU9FW6E 4rK489aMwYf0+ZNfE7YUAT37SFJabjKtgr9SlEV6voDlpBYE+5bJNMZn0NWmCHx5 +b7oFD41Q28JTOI7egvPTbAp6UFm4lY5MMYoy1mgIEda3cf2qRbVX4soSH3fd3LE fnjlcfAflLS7NAxJPvqHbfur1dWAd8R7MORspIfKtLyYE3QUKIfdFvs7aKJMEjQl myBEH+7ZU3ZYU0qMlvxerKTS8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmyOs2n Ru64G7YylWSxAbxzSD8tMB8GA1UdIwQYMBaAFMeyZHNQOApqNONOMs7+NRmTfpfI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80Qjk1OEJDRTAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENtbzA0MDR5enY0MUdaTi1s OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3SmtjMUE0Q21vMDQwNHl6djQxR1pOLWw4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80Qjk1OEJDRTAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENt bzA0MDR5enY0MUdaTi1sOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNodZPJgGphHBpiZ4JXv8xcKd6OsgFrXJXZ3xsyVr23PuE5gqBpRXv ogBToZP0yP3sneog6Vr+fVpTnPuALd1Q5X2jV9BI6f+SPo9ARt8GxufOu/kobVZW K70u6O/2vRYnlSEk0BzA4ugjq3g0uURBpnVVU1WZLtWtXCLoXs0W+HLMbWkf531d 6XU2m6Lj2rWNTflckqBeKdcKHtP1qH86JuW3tlUEcErAVH6Ez/6irz/z9IDMv5T7 +Ku40hugwpiYPnCtsIbALr9oCIhBSvFJEsYc14XRDW9ldNgjzB05Ip91uAE4kYVm trlQIQOfhfShMYXSADyCRti0JS6zv3Op -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:00 2024 by rpki-client on console-ams.rpki-client.org