$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft File: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json) Hash identifier: TKaqnHQuJ9aySYApzXSsizHPwt6OQrfgAhAlHsRVEmw= Subject key identifier: E1:8A:BF:1B:D8:2B:52:8A:5A:C9:88:EE:B6:01:CD:02:F5:4E:69:63 Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B Certificate issuer: /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft Manifest number: 0296 Signing time: Thu 21 Nov 2024 00:47:25 +0000 Manifest this update: Thu 21 Nov 2024 00:47:25 +0000 Manifest next update: Thu 28 Nov 2024 00:47:25 +0000 Files and hashes: 1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: qwUGBvvLINlc78yc7gd7VltEdb+Jjb/c6o13BKUKjvA=) 2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: PU6naooXvRoDV33LBTNRBxRANbQSj2Y43wiSsnkhFEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B Validity Not Before: Nov 21 00:47:25 2024 GMT Not After : Nov 28 00:47:25 2024 GMT Subject: CN=673e831d-ffb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:37:eb:11:f1:a3:4a:2c:e9:ed:85:9f:42: 71:8d:12:bb:4c:18:8e:82:cc:e7:67:f3:14:28:af: 1b:d4:f6:5e:e3:c1:23:d8:cb:b9:8e:e8:d7:27:65: 8e:cb:cc:69:5d:d9:a6:b1:5b:4c:e1:bf:b8:b6:ca: 31:4c:ef:9f:15:b0:14:fd:91:08:7e:80:28:e5:76: a7:61:33:63:54:5d:b7:3d:6e:d7:18:e7:1f:82:e7: 69:fe:af:98:a4:c5:4f:dc:f5:7d:57:30:dd:69:96: 60:3e:7f:31:56:16:19:50:a6:9c:6f:4b:b3:7b:14: c2:15:18:25:0d:e3:76:34:d4:a7:68:9e:1e:08:c8: e1:d0:5d:d9:d4:05:2e:fc:07:36:dd:a5:05:1a:ff: ec:6d:bb:65:db:3b:6d:bc:b7:ec:62:9d:83:eb:0c: ed:6b:49:74:6d:08:c4:33:50:07:49:45:90:8e:8e: 1e:c1:1a:ef:b9:62:96:f0:54:02:16:a4:2c:11:5f: 82:36:f9:0a:56:24:cc:7b:de:da:56:e7:0a:ee:9e: 88:6d:3d:3b:1f:4a:ed:bc:b6:59:50:0b:24:32:e0: 3c:9d:53:8b:d4:12:43:cd:4f:ea:c7:95:20:0c:93: 48:52:04:e6:e6:db:fe:58:e0:a2:13:09:34:af:7c: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8A:BF:1B:D8:2B:52:8A:5A:C9:88:EE:B6:01:CD:02:F5:4E:69:63 X509v3 Authority Key Identifier: keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:56:f6:97:d0:9b:21:29:cf:a2:a8:dc:71:67:17:8c:af:92: 9b:13:5b:a2:fe:e4:30:27:23:e4:26:09:5a:7e:cd:87:7b:8e: 3d:66:d2:a9:85:81:e7:cb:6f:9f:14:25:cc:2a:1a:9c:bd:32: 74:d4:7a:0e:7c:44:22:f9:fa:63:ff:f8:22:5c:f8:6b:0e:f9: 24:42:e6:3a:1c:a5:ce:9e:b6:0b:29:a9:1a:dc:b1:3f:76:a3: ab:9a:89:14:01:ef:d5:06:72:8c:6f:a4:ab:86:43:65:ec:af: 25:61:a8:ad:f4:16:2a:2b:b6:31:8c:ac:38:69:9c:38:f8:79: 8c:b6:df:38:3f:a0:67:23:31:4b:45:da:6c:e4:28:fb:b6:c8: a7:51:d1:c9:cf:ac:d5:7f:e8:0a:79:f4:72:cf:f9:cf:e3:ca: f0:8b:9e:2a:53:cd:af:a6:e1:ef:82:b5:7c:a0:5b:89:5b:60: 16:a5:c9:15:5e:48:7c:a5:68:de:f5:5b:30:aa:56:d9:e8:61: c8:73:86:1d:60:95:de:60:ae:85:13:f3:dd:77:5c:6d:83:20: 3b:1d:e9:2e:a2:52:44:8c:cc:a6:5c:56:b3:0a:9b:bf:5e:48: cb:17:ce:97:93:85:55:55:79:08:b5:4a:52:bd:cc:73:1e:de: 63:74:77:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEY2NTUzMjU2QjI5N0YyODMzMTlDQjk4OUU2QjhDNzgz NkY4NzE5MEIwHhcNMjQxMTIxMDA0NzI1WhcNMjQxMTI4MDA0NzI1WjAYMRYwFAYD VQQDEw02NzNlODMxZC1mZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyw36xHxo0os6e2Fn0JxjRK7TBiOgsznZ/MUKK8b1PZe48Ej2Mu5jujXJ2WO y8xpXdmmsVtM4b+4tsoxTO+fFbAU/ZEIfoAo5XanYTNjVF23PW7XGOcfgudp/q+Y pMVP3PV9VzDdaZZgPn8xVhYZUKacb0uzexTCFRglDeN2NNSnaJ4eCMjh0F3Z1AUu /Ac23aUFGv/sbbtl2zttvLfsYp2D6wzta0l0bQjEM1AHSUWQjo4ewRrvuWKW8FQC FqQsEV+CNvkKViTMe97aVucK7p6IbT07H0rtvLZZUAskMuA8nVOL1BJDzU/qx5Ug DJNIUgTm5tv+WOCiEwk0r3wF3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGKvxvY K1KKWsmI7rYBzQL1TmljMB8GA1UdIwQYMBaAFPZVMlayl/KDMZy5iea4x4NvhxkL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC8zRUU5NDdBQURD QUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhvTXhuTG1KNXJqSGcyLUhH UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsVXlWcktYOG9NeG5MbUo1cmpIZzItSEdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC8zRUU5NDdBQURDQUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhv TXhuTG1KNXJqSGcyLUhHUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRVvaX0JshKc+iqNxxZxeMr5KbE1ui/uQwJyPkJglafs2He449ZtKp hYHny2+fFCXMKhqcvTJ01HoOfEQi+fpj//giXPhrDvkkQuY6HKXOnrYLKaka3LE/ dqOrmokUAe/VBnKMb6SrhkNl7K8lYait9BYqK7YxjKw4aZw4+HmMtt84P6BnIzFL Rdps5Cj7tsinUdHJz6zVf+gKefRyz/nP48rwi54qU82vpuHvgrV8oFuJW2AWpckV Xkh8pWje9VswqlbZ6GHIc4YdYJXeYK6FE/Pdd1xtgyA7HekuolJEjMymXFazCpu/ XkjLF86Xk4VVVXkItUpSvcxzHt5jdHeo -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:36 2024 by rpki-client on console-ams.rpki-client.org