$ rpki-client -vvf rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft File: PitYQ36GJEE5rkzQPZf0A0KFBzY.mft (raw, json) Hash identifier: NJobUPvwC41FXtpkZvLQE3d/XY2rjtLcsVvUutelF9c= Subject key identifier: E5:8B:A9:DB:2F:74:0E:3D:0B:89:33:16:DA:D5:E3:31:32:AF:B8:20 Authority key identifier: 3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 Certificate issuer: /CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Certificate serial: 2680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft Manifest number: 265E Signing time: Fri 22 Nov 2024 15:41:28 +0000 Manifest this update: Fri 22 Nov 2024 15:41:27 +0000 Manifest next update: Fri 29 Nov 2024 15:41:27 +0000 Files and hashes: 1: PitYQ36GJEE5rkzQPZf0A0KFBzY.crl (hash: cIfkU/VlNd/HdE5dCfn1nKJeaBjtzNyyfMN1RHuPa0E=) 2: 7CEC0182B10C11E5BB6B2A16C4F9AE02.roa (hash: szs84NZp6PRkDbAazU5Vux6gnoQk27OVrBFKSwWNnmU=) 3: 7E75C196B10C11E5BB6B2A16C4F9AE02.roa (hash: 84MBUnVnF5YSfCtGOyL/Mf1o361blRMq4zWtu5Lhyug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9856 (0x2680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EE0C/serialNumber=3E2B58437E86244139AE4CD03D97F40342850736 Validity Not Before: Nov 22 15:41:27 2024 GMT Not After : Nov 29 15:41:27 2024 GMT Subject: CN=6740a627-cec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:01:45:f0:c9:6c:78:43:b1:4f:36:2f:5d:ec: 33:69:aa:44:60:18:26:51:3c:66:5f:90:0b:3c:33: 0a:d3:8c:b6:3b:f9:05:d5:dc:2c:09:fc:9a:f2:b2: 8b:07:4c:8b:8e:4e:d5:15:a3:30:a7:74:c1:6d:cf: 29:14:ac:be:a2:5e:c9:01:b3:91:e0:c2:36:f1:9f: 83:ec:4d:44:9e:a8:55:4c:31:ac:a7:22:0a:74:6d: ca:32:a9:b1:98:d2:ef:51:35:dc:37:37:34:77:d4: ab:2e:60:bb:47:43:d8:31:6a:f0:7a:91:5c:cd:d3: de:b8:04:93:30:d0:25:e1:91:c5:89:ab:a8:85:f5: 1f:8c:0c:9c:92:b9:8f:4c:d3:04:04:0f:31:bd:de: 06:ed:23:1b:9d:02:f7:79:f3:a6:ac:bf:40:e0:96: 4f:f4:a6:1b:9d:2f:b0:b3:e9:30:7d:ca:47:6b:05: 07:6b:d3:b6:97:f1:2c:04:64:20:ca:36:aa:d2:e7: 13:d8:8f:46:f6:f2:93:fb:07:97:c4:70:09:20:c6: 63:3f:86:4f:53:6d:cc:5f:14:89:1d:39:c9:c2:96: f4:c6:af:59:cb:eb:d4:28:91:fb:ac:2c:03:fd:fa: 8c:91:8b:24:2a:c8:d3:00:44:71:09:c0:c7:a3:46: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8B:A9:DB:2F:74:0E:3D:0B:89:33:16:DA:D5:E3:31:32:AF:B8:20 X509v3 Authority Key Identifier: keyid:3E:2B:58:43:7E:86:24:41:39:AE:4C:D0:3D:97:F4:03:42:85:07:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PitYQ36GJEE5rkzQPZf0A0KFBzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EE0C/22D53652D67211E4A2122351C4F9AE02/PitYQ36GJEE5rkzQPZf0A0KFBzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d6:aa:9e:d4:31:36:fe:e4:3f:f6:72:bf:51:00:9c:02:64: eb:8b:16:88:fd:6f:84:ab:8c:cc:15:8d:22:01:b8:b7:c4:90: 2b:f9:0d:49:de:60:b2:f8:e3:59:ff:0d:36:3d:06:ea:99:37: 4a:2b:78:58:08:3b:73:ca:09:94:5c:b9:71:d9:b1:ab:9d:fc: 51:71:a0:71:ea:37:a0:c1:09:02:98:d3:82:d9:3b:1d:c9:71: 3a:67:a3:23:d7:36:d5:ba:21:35:e6:38:41:7f:46:ed:90:46: 3a:4b:2e:f1:16:77:13:b3:67:51:a2:99:79:e8:72:1a:3f:39: 87:68:1e:b3:da:e3:1f:35:f7:e8:4f:c9:d0:d7:59:f2:1c:d8: a5:5e:dc:80:48:b4:2b:b3:f2:17:03:6f:12:29:b6:93:b2:ea: db:ce:b3:ca:33:82:55:36:42:b4:4d:b5:06:1e:41:f2:1d:07: 5b:4b:0a:5f:ae:74:43:7f:56:5e:5e:c5:9f:1a:4b:2d:01:65: e7:4f:3d:11:3f:17:37:6a:0b:35:95:38:a6:15:de:96:fd:63: a1:9c:d6:4d:d9:05:0d:d7:8d:54:f3:58:49:f2:78:e9:db:53: d3:c6:95:e8:b4:fb:bd:34:fc:92:4e:cd:ef:24:4f:87:d5:22: ed:18:2a:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVFMEMxMTAvBgNVBAUTKDNFMkI1ODQzN0U4NjI0NDEzOUFFNENEMDNEOTdGNDAz NDI4NTA3MzYwHhcNMjQxMTIyMTU0MTI3WhcNMjQxMTI5MTU0MTI3WjAYMRYwFAYD VQQDEw02NzQwYTYyNy1jZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AFF8MlseEOxTzYvXewzaapEYBgmUTxmX5ALPDMK04y2O/kF1dwsCfya8rKL B0yLjk7VFaMwp3TBbc8pFKy+ol7JAbOR4MI28Z+D7E1EnqhVTDGspyIKdG3KMqmx mNLvUTXcNzc0d9SrLmC7R0PYMWrwepFczdPeuASTMNAl4ZHFiauohfUfjAyckrmP TNMEBA8xvd4G7SMbnQL3efOmrL9A4JZP9KYbnS+ws+kwfcpHawUHa9O2l/EsBGQg yjaq0ucT2I9G9vKT+weXxHAJIMZjP4ZPU23MXxSJHTnJwpb0xq9Zy+vUKJH7rCwD /fqMkYskKsjTAERxCcDHo0Z6bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWLqdsv dA49C4kzFtrV4zEyr7ggMB8GA1UdIwQYMBaAFD4rWEN+hiRBOa5M0D2X9ANChQc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUUwQy8yMkQ1MzY1MkQ2 NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pFRTVya3pRUFpmMEEwS0ZC elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BpdFlRMzZHSkVFNXJrelFQWmYwQTBLRkJ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUUwQy8yMkQ1MzY1MkQ2NzIxMUU0QTIxMjIzNTFDNEY5QUUwMi9QaXRZUTM2R0pF RTVya3pRUFpmMEEwS0ZCelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN1qqe1DE2/uQ/9nK/UQCcAmTrixaI/W+Eq4zMFY0iAbi3xJAr+Q1J 3mCy+ONZ/w02PQbqmTdKK3hYCDtzygmUXLlx2bGrnfxRcaBx6jegwQkCmNOC2Tsd yXE6Z6Mj1zbVuiE15jhBf0btkEY6Sy7xFncTs2dRopl56HIaPzmHaB6z2uMfNffo T8nQ11nyHNilXtyASLQrs/IXA28SKbaTsurbzrPKM4JVNkK0TbUGHkHyHQdbSwpf rnRDf1ZeXsWfGkstAWXnTz0RPxc3ags1lTimFd6W/WOhnNZN2QUN141U81hJ8njp 21PTxpXotPu9NPySTs3vJE+H1SLtGCqq -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:19 2024 by rpki-client on console-ams.rpki-client.org