$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft File: nIFHHxiq7s35RafJF_2KiYXXw6w.mft (raw, json) Hash identifier: M0Z9xmDx+vPSLHDqh1GkzeOxFt6rqyO7+pGloQrDltk= Subject key identifier: 59:BF:23:87:DA:D8:28:C4:15:EC:7C:8B:05:29:B3:72:2C:9F:C2:60 Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Certificate serial: 2A2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft Manifest number: 29EE Signing time: Fri 22 Nov 2024 15:36:06 +0000 Manifest this update: Fri 22 Nov 2024 15:36:05 +0000 Manifest next update: Fri 29 Nov 2024 15:36:05 +0000 Files and hashes: 1: nIFHHxiq7s35RafJF_2KiYXXw6w.crl (hash: V/46TBQsaWp0PdaTF598mqf9tFsXW5rlOsQynfu7ZCg=) 2: FB405D86900E11EAA43BB21FC4F9AE02.roa (hash: xBHGq+I+gC6mBEO7iAqcoK3D8WpSvv5eSxXQn/j0Q60=) 3: 3118E43E966B11EAAA23047CC4F9AE02.roa (hash: gq6V0/TIcAAKvh2pY9bQTg3IwnYpN56MDdlGTWJZ3cM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10796 (0x2a2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC Validity Not Before: Nov 22 15:36:05 2024 GMT Not After : Nov 29 15:36:05 2024 GMT Subject: CN=6740a4e6-74a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:40:52:f4:6d:c7:c0:73:8f:95:bd:49:42: 64:9c:6b:1b:b3:ba:b3:60:a5:f5:ff:c8:ef:1b:2f: 2d:7f:76:1f:39:a0:ed:59:cb:92:4b:4d:c9:44:a2: 95:fe:36:ff:19:1f:25:11:ab:76:65:c7:46:5a:bf: ca:5d:10:97:c6:87:db:3a:ba:6a:21:21:bb:23:7c: 1a:81:f6:89:45:1b:47:53:19:1a:f7:c0:55:74:75: f0:65:eb:94:e6:48:75:a4:f1:80:98:c4:0b:13:4e: a5:a4:f6:ca:ee:63:f8:74:a7:29:e0:7a:e8:06:a2: ea:a8:73:5d:42:1c:1f:a6:73:b0:88:48:de:ee:a8: 59:1c:b8:86:c6:24:71:b2:6a:84:01:ed:68:9f:59: 30:03:14:ca:84:65:89:ba:86:ad:29:2c:d0:b6:61: 55:38:4c:e0:af:ce:55:70:36:2d:6f:90:db:bc:67: a8:3b:23:c1:f5:84:b0:e1:c9:87:f2:55:92:79:3d: 3e:00:2e:b9:7d:ed:ea:6f:8c:ed:e4:16:75:27:1a: f2:76:af:94:c8:4c:53:c7:af:1c:5e:4c:29:c1:9e: 9f:30:5c:ef:ba:58:87:77:5f:2b:7c:5a:21:e1:31: 82:34:21:97:1e:97:42:e0:46:5d:54:d5:b5:eb:93: 15:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BF:23:87:DA:D8:28:C4:15:EC:7C:8B:05:29:B3:72:2C:9F:C2:60 X509v3 Authority Key Identifier: keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:aa:57:35:69:89:f0:b9:29:cd:e3:17:d2:5d:c7:83:01:7f: 4c:5d:fe:86:24:7f:9e:2a:97:56:49:10:15:e0:fc:6c:0f:7d: 8f:31:69:63:6d:0f:33:1a:9b:18:1a:32:73:33:f1:29:23:0c: c2:d0:32:17:e3:b5:33:16:c1:13:60:19:29:ce:61:54:10:67: 4e:6b:db:4d:bf:1e:21:03:c0:3d:62:ad:74:68:8a:75:04:73: 15:e7:45:ea:d1:a1:ed:85:3a:9d:1c:38:a4:60:e2:25:48:88: fb:07:cf:f5:d6:79:77:61:9a:ff:5f:e7:cf:de:fb:e1:85:d7: c0:55:a2:11:74:00:24:cd:0c:16:36:cd:77:a1:a3:5a:2e:11: 30:12:93:77:a5:63:07:7f:39:1b:42:b9:13:76:17:bf:96:f8: f8:3f:7d:50:5d:99:3d:4c:25:fd:f9:a0:f1:1b:7b:80:18:ec: 17:54:23:ed:e0:18:4d:9d:6f:8c:ed:84:0f:6f:37:a9:cb:34: 26:d3:51:46:b7:7f:d0:2b:42:d7:4b:f0:d6:b7:c6:ad:3e:c9: 49:e3:ca:58:46:ba:ad:3b:48:1a:85:d6:7c:6e:05:15:c1:64: 59:ee:1c:08:37:13:ef:e6:5d:0d:8c:8b:08:33:a5:cc:b4:73: 3f:7c:fa:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDlDODE0NzFGMThBQUVFQ0RGOTQ1QTdDOTE3RkQ4QTg5 ODVEN0MzQUMwHhcNMjQxMTIyMTUzNjA1WhcNMjQxMTI5MTUzNjA1WjAYMRYwFAYD VQQDEw02NzQwYTRlNi03NGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGVAUvRtx8Bzj5W9SUJknGsbs7qzYKX1/8jvGy8tf3YfOaDtWcuSS03JRKKV /jb/GR8lEat2ZcdGWr/KXRCXxofbOrpqISG7I3wagfaJRRtHUxka98BVdHXwZeuU 5kh1pPGAmMQLE06lpPbK7mP4dKcp4HroBqLqqHNdQhwfpnOwiEje7qhZHLiGxiRx smqEAe1on1kwAxTKhGWJuoatKSzQtmFVOEzgr85VcDYtb5DbvGeoOyPB9YSw4cmH 8lWSeT0+AC65fe3qb4zt5BZ1Jxrydq+UyExTx68cXkwpwZ6fMFzvuliHd18rfFoh 4TGCNCGXHpdC4EZdVNW165MVmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFm/I4fa 2CjEFex8iwUps3Isn8JgMB8GA1UdIwQYMBaAFJyBRx8Yqu7N+UWnyRf9iomF18Os MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS8xRDJCRDAzRTJE REIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdzMzVSYWZKRl8yS2lZWFh3 NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JRkhIeGlxN3MzNVJhZkpGXzJLaVlYWHc2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS8xRDJCRDAzRTJEREIxMUU0OUFGNjE1MzBDNEY5QUUwMi9uSUZISHhpcTdz MzVSYWZKRl8yS2lZWFh3NncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPqlc1aYnwuSnN4xfSXceDAX9MXf6GJH+eKpdWSRAV4PxsD32PMWlj bQ8zGpsYGjJzM/EpIwzC0DIX47UzFsETYBkpzmFUEGdOa9tNvx4hA8A9Yq10aIp1 BHMV50Xq0aHthTqdHDikYOIlSIj7B8/11nl3YZr/X+fP3vvhhdfAVaIRdAAkzQwW Ns13oaNaLhEwEpN3pWMHfzkbQrkTdhe/lvj4P31QXZk9TCX9+aDxG3uAGOwXVCPt 4BhNnW+M7YQPbzepyzQm01FGt3/QK0LXS/DWt8atPslJ48pYRrqtO0gahdZ8bgUV wWRZ7hwINxPv5l0NjIsIM6XMtHM/fPpl -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:19 2024 by rpki-client on console-ams.rpki-client.org