$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft File: b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json) Hash identifier: JLyulnzvKK+tKjc+BhLxoHGMRtP28GuBl3TWVUyEd7Y= Subject key identifier: 8B:AF:BD:F4:45:D1:0A:96:C2:7D:36:5E:8A:96:D1:32:61:91:68:13 Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Certificate serial: 1C0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft Manifest number: 1BF1 Signing time: Wed 20 Nov 2024 16:11:50 +0000 Manifest this update: Wed 20 Nov 2024 16:11:50 +0000 Manifest next update: Wed 27 Nov 2024 16:11:50 +0000 Files and hashes: 1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: 30UWYUcHW7QBKuNG/cV4p2Vu/+qwZP2omijpADZGWoY=) 2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: KpfW5v22QQ8knW5hcfiQgbsPMLlFz8zLOAmQh0gN2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7180 (0x1c0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24 Validity Not Before: Nov 20 16:11:50 2024 GMT Not After : Nov 27 16:11:50 2024 GMT Subject: CN=673e0a46-d8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:88:3d:8b:1d:0d:ac:4e:14:52:e5:a8:f5:3f: 13:c7:96:5b:95:7a:b4:87:5c:fc:8e:1f:ed:54:46: 38:7c:d1:c9:52:4d:90:28:fe:eb:0b:89:84:5f:7f: 3a:48:e5:8e:dd:32:c0:c1:8c:40:e7:5c:92:0a:07: 60:06:d1:fd:80:1f:ac:18:5e:a1:1b:24:69:62:c0: e5:cb:85:e3:2f:26:7e:d5:16:14:bb:ce:b8:f8:1d: 77:48:36:d4:8b:b4:e7:e8:db:ef:5d:26:d8:fe:67: 17:30:4d:36:20:36:89:8f:fd:ed:b6:88:4b:a9:4d: c2:d4:aa:17:5b:59:64:b9:f2:a0:9f:1a:43:58:4a: 72:43:51:d1:0d:18:30:40:a1:61:6b:54:2c:63:87: 89:72:94:85:7c:9e:9e:25:1c:07:4d:32:7a:f6:48: de:ad:af:1a:53:1b:85:38:d4:68:0f:55:ee:05:d5: b6:36:54:5e:4e:76:c0:cc:02:8c:30:da:5a:10:95: 5d:cc:78:58:0f:34:0c:23:57:b0:fc:6b:db:11:22: 58:26:18:b1:03:75:65:8e:6e:36:5e:a3:80:24:50: 2a:91:6c:a5:34:e9:e2:30:a4:bc:8c:54:00:37:47: 3a:42:d0:d6:d2:84:24:a3:10:ff:25:b7:97:56:56: 94:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AF:BD:F4:45:D1:0A:96:C2:7D:36:5E:8A:96:D1:32:61:91:68:13 X509v3 Authority Key Identifier: keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:43:a9:c1:9b:e5:16:20:b0:40:a8:9f:d7:09:4a:89:c5:d3: 72:ae:86:9d:b5:bf:b1:92:a2:85:88:a3:45:64:85:37:e0:94: 5b:1c:ee:5a:75:5e:f2:3b:be:fd:5e:e4:4d:fa:ca:c4:e9:9d: 9e:2b:9d:48:a9:8b:41:f1:b2:3c:39:70:dc:fa:a0:e5:c4:4d: d5:69:fe:1d:e7:4b:2c:7b:6a:9e:ca:c8:72:05:cb:a3:6f:da: 71:3a:81:33:ab:f4:9b:66:74:7d:55:0d:d6:70:81:94:cb:c4: 6f:d0:76:91:d3:3c:b3:00:90:51:a9:67:b6:3e:c6:24:67:2b: 3e:ed:b1:aa:b2:c8:53:27:54:22:ab:da:39:f7:b6:c4:f4:3c: 4e:24:2b:9e:53:15:e4:56:27:ac:f4:77:5b:b2:10:85:b2:a1: 4a:c2:0c:95:59:55:b7:54:84:f4:14:1d:61:8e:93:04:ca:43: 08:82:ee:2b:5a:6c:83:68:78:8c:1f:11:d3:03:61:90:86:83: 83:e1:59:06:f8:ed:b6:ce:f6:17:b8:c0:fc:91:94:da:d4:95: 3c:99:70:75:73:4f:fb:b2:4b:9f:16:1a:9f:92:68:bb:ee:3f: 9e:92:c3:b9:19:91:c7:a9:49:bf:c5:74:d4:cf:1b:0d:e7:da: 0b:ba:20:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw NkYyRkVFMjQwHhcNMjQxMTIwMTYxMTUwWhcNMjQxMTI3MTYxMTUwWjAYMRYwFAYD VQQDEw02NzNlMGE0Ni1kOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIg9ix0NrE4UUuWo9T8Tx5ZblXq0h1z8jh/tVEY4fNHJUk2QKP7rC4mEX386 SOWO3TLAwYxA51ySCgdgBtH9gB+sGF6hGyRpYsDly4XjLyZ+1RYUu864+B13SDbU i7Tn6NvvXSbY/mcXME02IDaJj/3ttohLqU3C1KoXW1lkufKgnxpDWEpyQ1HRDRgw QKFha1QsY4eJcpSFfJ6eJRwHTTJ69kjera8aUxuFONRoD1XuBdW2NlReTnbAzAKM MNpaEJVdzHhYDzQMI1ew/GvbESJYJhixA3Vljm42XqOAJFAqkWylNOniMKS8jFQA N0c6QtDW0oQkoxD/JbeXVlaUIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIuvvfRF 0QqWwn02XoqW0TJhkWgTMB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0 NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3 aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH WUxSckVSMnRWOVlHOHY3aVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXQ6nBm+UWILBAqJ/XCUqJxdNyroadtb+xkqKFiKNFZIU34JRbHO5a dV7yO779XuRN+srE6Z2eK51IqYtB8bI8OXDc+qDlxE3Vaf4d50sse2qeyshyBcuj b9pxOoEzq/SbZnR9VQ3WcIGUy8Rv0HaR0zyzAJBRqWe2PsYkZys+7bGqsshTJ1Qi q9o597bE9DxOJCueUxXkVies9HdbshCFsqFKwgyVWVW3VIT0FB1hjpMEykMIgu4r WmyDaHiMHxHTA2GQhoOD4VkG+O22zvYXuMD8kZTa1JU8mXB1c0/7skufFhqfkmi7 7j+eksO5GZHHqUm/xXTUzxsN59oLuiDE -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:16 2024 by rpki-client on console-ams.rpki-client.org