$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json) Hash identifier: Wd+94mTsiIhWcqFcOkXmBt8pCFrWC1lVzmzqGqS7GLw= Subject key identifier: 53:2B:2F:DC:FE:FC:42:4E:1F:15:4B:F1:11:21:70:7A:93:E7:63:43 Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Certificate serial: 17F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft Manifest number: 17E7 Signing time: Fri 22 Nov 2024 16:32:25 +0000 Manifest this update: Fri 22 Nov 2024 16:32:24 +0000 Manifest next update: Fri 29 Nov 2024 16:32:24 +0000 Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: EjZzUGwTrEJHG75g+4Zx6vnkC/St7JLVSF6D4C69HHc=) 2: 65F89850A96711E79BECEA42C4F9AE02.roa (hash: PZ7XnBrJz/a7vzH5LB2fdLCKyMtJ6Vj9A+2dGf6LXe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6131 (0x17f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60 Validity Not Before: Nov 22 16:32:24 2024 GMT Not After : Nov 29 16:32:24 2024 GMT Subject: CN=6740b218-a73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:53:39:8e:90:80:a6:7b:49:d9:9a:12:64: 86:a1:db:fc:f1:f1:89:4c:86:0f:ae:8d:44:c2:81: be:8e:25:c2:6b:ed:cf:38:14:fe:bf:cc:70:1e:fe: c1:29:c1:0e:d3:21:18:c2:75:d9:13:69:9b:77:9a: a8:e5:a7:4b:c3:d1:67:d2:6b:42:23:95:ce:b8:f9: 60:f4:4b:af:8f:e5:a6:8f:87:c9:3b:2a:72:69:4c: 19:76:c1:72:8c:22:91:4e:81:16:0e:c7:06:08:5e: 57:7b:83:2b:dc:5a:61:21:cc:4e:c9:60:cc:61:c2: 9c:71:1b:22:70:05:89:79:43:29:90:28:11:21:76: d4:4c:54:ea:2b:6e:ce:06:3d:c0:09:7b:2c:a9:5c: 87:8f:7c:c7:cb:45:ad:83:03:e5:87:8a:08:00:21: 1a:2d:a6:b7:67:92:d1:80:8a:d6:9a:12:8c:8a:12: 5b:30:fb:69:c1:b7:b1:dd:7e:57:5b:33:04:e6:eb: b5:9d:02:fb:f1:8a:0b:52:d6:1a:fe:a7:e6:6e:cd: 6a:48:e0:4a:4d:4f:be:eb:5f:75:ee:91:16:26:39: 5d:f2:7f:29:be:a0:cf:de:51:f7:46:8c:76:48:50: 7c:18:50:46:24:20:50:3f:20:c7:ba:8f:38:d5:f4: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2B:2F:DC:FE:FC:42:4E:1F:15:4B:F1:11:21:70:7A:93:E7:63:43 X509v3 Authority Key Identifier: keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:58:01:9a:b7:07:e0:02:68:a3:76:d0:6d:49:9f:2e:11:37: 07:4b:2b:36:71:d8:86:ca:47:85:7b:96:f0:87:46:f9:1a:01: 3e:b9:94:9e:2b:fc:b5:be:eb:6c:2c:29:c1:5c:aa:a4:6a:11: 81:f2:0c:8d:fc:eb:2b:f6:d7:ab:88:99:4d:d0:7e:ee:ed:3e: 45:7d:35:d1:d8:59:9a:0d:00:57:cd:36:a3:f0:93:3c:e6:31: 61:65:74:73:62:98:e1:b9:c6:6b:4f:9d:a2:03:cd:6c:49:ee: fc:cd:ba:4e:13:81:36:8a:18:27:e7:69:3d:eb:40:66:f3:f0: 3e:32:c1:26:cc:80:59:ac:d1:ba:b8:fb:01:14:a8:c1:09:33: 03:ac:b8:51:55:e5:85:7a:6a:73:6f:94:02:62:34:83:e2:02: 17:b0:df:30:60:b4:75:0d:7f:1f:ef:24:f3:43:72:0d:de:33: a0:3d:41:2f:ba:36:a1:4e:c5:1f:50:35:21:13:d3:f9:21:66: 0f:4c:f9:04:19:17:07:35:9a:7f:2d:5e:fe:c4:d2:3a:91:e9: bf:33:90:d5:f7:e9:46:95:e7:59:a0:6d:e9:91:0d:29:5a:8f: 06:8f:02:84:3b:ac:d6:cb:7a:58:c1:f5:28:7a:31:72:4a:31: 49:0e:ad:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCRTUxMTAvBgNVBAUTKEI3NDRBNDRFNUI2NTNFNkM3QTkwQ0Y2MDM0RTAwRENG RDg5NDdENjAwHhcNMjQxMTIyMTYzMjI0WhcNMjQxMTI5MTYzMjI0WjAYMRYwFAYD VQQDEw02NzQwYjIxOC1hNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurpTOY6QgKZ7SdmaEmSGodv88fGJTIYPro1EwoG+jiXCa+3POBT+v8xwHv7B KcEO0yEYwnXZE2mbd5qo5adLw9Fn0mtCI5XOuPlg9Euvj+Wmj4fJOypyaUwZdsFy jCKRToEWDscGCF5Xe4Mr3FphIcxOyWDMYcKccRsicAWJeUMpkCgRIXbUTFTqK27O Bj3ACXssqVyHj3zHy0WtgwPlh4oIACEaLaa3Z5LRgIrWmhKMihJbMPtpwbex3X5X WzME5uu1nQL78YoLUtYa/qfmbs1qSOBKTU++61917pEWJjld8n8pvqDP3lH3Rox2 SFB8GFBGJCBQPyDHuo841fQdAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMrL9z+ /EJOHxVL8REhcHqT52NDMB8GA1UdIwQYMBaAFLdEpE5bZT5sepDPYDTgDc/YlH1g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJFNS82NEM1MjcwOEE5 NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBteDZrTTlnTk9BTno5aVVm V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwU2tUbHRsUG14NmtNOWdOT0FOejlpVWZXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJFNS82NEM1MjcwOEE5NUYxMUU3OUFENEU3MzRDNEY5QUUwMi90MFNrVGx0bFBt eDZrTTlnTk9BTno5aVVmV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHWAGatwfgAmijdtBtSZ8uETcHSys2cdiGykeFe5bwh0b5GgE+uZSe K/y1vutsLCnBXKqkahGB8gyN/Osr9teriJlN0H7u7T5FfTXR2FmaDQBXzTaj8JM8 5jFhZXRzYpjhucZrT52iA81sSe78zbpOE4E2ihgn52k960Bm8/A+MsEmzIBZrNG6 uPsBFKjBCTMDrLhRVeWFempzb5QCYjSD4gIXsN8wYLR1DX8f7yTzQ3IN3jOgPUEv ujahTsUfUDUhE9P5IWYPTPkEGRcHNZp/LV7+xNI6kem/M5DV9+lGledZoG3pkQ0p Wo8GjwKEO6zWy3pYwfUoejFySjFJDq0m -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:02 2024 by rpki-client on console-ams.rpki-client.org