$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: 5i3oVXblJcYlhQzvoUITWGUOXd2+ooVWRASZqWL1Ca0= Subject key identifier: 9E:A1:ED:6B:54:AB:08:68:8A:E6:3D:20:0B:AD:D9:AE:3A:FD:13:76 Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 07CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 07C6 Signing time: Sun 24 Nov 2024 20:31:35 +0000 Manifest this update: Sun 24 Nov 2024 20:31:34 +0000 Manifest next update: Sun 01 Dec 2024 20:31:34 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: zbuzgxjMRQ77NSTTGRs9v4jdty+XGoQ3ifLr9CNlSfk=) 2: 021C59CCD1D011EAA2763743C4F9AE02.roa (hash: kMnM6tT1AQ+rXlanuefvWJQM92bE9CI8Z0JTFvLVui8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1995 (0x7cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: Nov 24 20:31:34 2024 GMT Not After : Dec 1 20:31:34 2024 GMT Subject: CN=67438d26-db3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:58:92:3e:a2:48:b6:b0:c2:8f:12:80:fb: 07:05:39:68:07:ac:9a:2e:64:c1:65:02:35:3a:33: 5d:9a:68:f2:67:df:32:25:53:11:57:d3:a5:ca:fd: 4e:ef:c6:3c:8e:5d:4e:76:c1:76:94:b8:1c:eb:e9: 5b:6c:28:23:d0:22:80:bd:10:03:44:f4:2f:4c:e0: cb:71:78:c0:ff:0e:4c:55:39:f4:4c:52:37:28:1b: 2d:dc:c0:7d:42:53:4a:53:fd:63:ac:93:66:82:1c: 7e:1c:b3:f3:57:24:d4:64:02:fc:44:3e:41:6b:15: 74:42:65:4a:40:95:17:5f:0e:3d:7e:df:92:4f:09: 3c:cf:ea:96:58:49:90:84:ad:f9:83:28:37:e7:3a: 48:dc:fc:8c:98:86:72:e8:f3:0f:01:d3:41:00:c3: d0:14:a6:56:70:b3:b5:25:53:f1:b3:74:99:da:d1: 58:b5:84:e9:41:ac:90:a5:b3:ed:1c:92:0c:f9:91: 2c:98:a2:06:e5:28:93:f2:ce:50:04:6c:21:bb:bb: fc:56:13:57:66:20:96:55:be:93:09:9a:27:bb:ac: 61:fd:4e:b0:88:b3:e4:30:29:3b:b2:11:e1:a0:03: 29:17:01:a4:e9:aa:45:8c:a6:e2:ee:3d:53:c9:18: a9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A1:ED:6B:54:AB:08:68:8A:E6:3D:20:0B:AD:D9:AE:3A:FD:13:76 X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:06:f1:e9:97:31:cc:20:72:dc:2e:c0:73:a2:46:4b:e1:d3: a4:60:27:73:d0:ba:88:87:98:7e:76:81:c5:ea:f4:00:3a:87: a4:f3:7b:28:77:f9:c9:6c:7f:79:e5:ac:2e:b9:bf:d4:e4:9f: 78:5b:ab:24:3e:66:05:14:f2:1e:36:03:61:84:4d:c6:6d:56: 35:11:fc:a2:aa:15:6e:34:f5:11:f7:6c:e8:90:bd:86:52:e9: fc:d3:f0:2f:4d:97:45:4c:24:48:51:f7:52:e7:45:97:1b:72: 82:14:9d:e8:7e:85:72:95:c8:19:31:f0:68:00:4f:55:cd:f9: 63:02:ac:c5:86:67:46:06:a9:f3:79:0b:87:e2:60:1b:e9:45: 58:3e:f4:cc:72:0f:d4:8c:19:8e:0f:cd:44:61:7d:47:15:b8: 74:2b:19:56:df:12:ef:f2:1d:92:5c:2a:7c:c0:00:fa:58:d6: d8:be:0b:28:df:6b:6c:3f:1a:12:66:d9:c2:41:06:21:aa:7a: 06:ef:20:9c:39:f2:ed:4c:83:ef:a0:86:33:82:1d:04:cd:88: 30:ef:28:f2:e4:cf:cc:37:d3:aa:01:78:d1:13:38:30:8e:ae: 5d:0e:19:0b:b2:88:ab:70:50:40:7e:e3:94:db:57:64:8d:b4: b4:6c:0d:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjQxMTI0MjAzMTM0WhcNMjQxMjAxMjAzMTM0WjAYMRYwFAYD VQQDEw02NzQzOGQyNi1kYjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwipYkj6iSLawwo8SgPsHBTloB6yaLmTBZQI1OjNdmmjyZ98yJVMRV9Olyv1O 78Y8jl1OdsF2lLgc6+lbbCgj0CKAvRADRPQvTODLcXjA/w5MVTn0TFI3KBst3MB9 QlNKU/1jrJNmghx+HLPzVyTUZAL8RD5BaxV0QmVKQJUXXw49ft+STwk8z+qWWEmQ hK35gyg35zpI3PyMmIZy6PMPAdNBAMPQFKZWcLO1JVPxs3SZ2tFYtYTpQayQpbPt HJIM+ZEsmKIG5SiT8s5QBGwhu7v8VhNXZiCWVb6TCZonu6xh/U6wiLPkMCk7shHh oAMpFwGk6apFjKbi7j1TyRipeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6h7WtU qwhoiuY9IAut2a46/RN2MB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnBvHplzHMIHLcLsBzokZL4dOkYCdz0LqIh5h+doHF6vQAOoek83so d/nJbH955awuub/U5J94W6skPmYFFPIeNgNhhE3GbVY1EfyiqhVuNPUR92zokL2G Uun80/AvTZdFTCRIUfdS50WXG3KCFJ3ofoVylcgZMfBoAE9VzfljAqzFhmdGBqnz eQuH4mAb6UVYPvTMcg/UjBmOD81EYX1HFbh0KxlW3xLv8h2SXCp8wAD6WNbYvgso 32tsPxoSZtnCQQYhqnoG7yCcOfLtTIPvoIYzgh0EzYgw7yjy5M/MN9OqAXjREzgw jq5dDhkLsoircFBAfuOU21dkjbS0bA3D -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:02 2024 by rpki-client on console-ams.rpki-client.org