$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft File: inTvQOZaEnwOZmsUpsZXSlNvNnM.mft (raw, json) Hash identifier: O5Av6GttCHS1eCe8LRBzqZd2iq3OMCACUzJQhwwRPOc= Subject key identifier: 79:D9:BD:3F:34:BF:0E:B4:C5:AB:D0:FB:81:A9:A6:78:EE:91:E8:80 Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 Certificate issuer: /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft Manifest number: 0159 Signing time: Sat 23 Nov 2024 02:27:48 +0000 Manifest this update: Sat 23 Nov 2024 02:27:47 +0000 Manifest next update: Sat 30 Nov 2024 02:27:47 +0000 Files and hashes: 1: inTvQOZaEnwOZmsUpsZXSlNvNnM.crl (hash: jChJGPQa0Ml38LdhEgOB7pym3yaZvMSZprnUXMvDiPo=) 2: 94817492A7AF11EE9ABC7953C4F9AE02.roa (hash: r8xTQZijVxBfTrzAxzSIebYBH5I/491FxaMTCA/JJHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Validity Not Before: Nov 23 02:27:47 2024 GMT Not After : Nov 30 02:27:47 2024 GMT Subject: CN=67413da4-217e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:33:72:d3:7c:4d:13:6b:f5:80:e6:c4:02:6b: 66:dc:0d:00:e5:2c:06:5d:ca:50:e5:bf:03:79:37: 56:f0:88:76:de:3e:92:bb:13:05:8d:9d:62:7c:4b: 4e:b0:27:4b:14:4f:db:ed:4b:9c:0d:c2:6f:44:fe: 35:25:62:fd:64:49:f8:3c:43:ea:f3:f5:e7:2c:65: 5b:83:1c:03:b1:f4:a9:e0:40:0f:df:0d:b9:6e:ec: c1:0f:fe:f0:79:a0:ea:c8:03:a8:75:ba:e9:e5:e7: 98:66:b0:02:a2:d8:e6:aa:d1:85:a4:0f:44:7e:5f: ac:00:06:35:01:cf:46:8f:9a:2c:ee:7d:c1:75:2c: e1:08:8f:3e:6c:bc:82:e1:6d:e6:f3:c1:ae:1a:a0: 75:70:8d:57:fd:69:92:a3:b3:4c:4b:17:d4:da:30: 09:9c:2d:df:f1:80:fe:66:c9:3b:f0:ec:4c:c3:4d: 79:00:28:99:09:ba:1a:8f:e8:88:1c:76:4b:0e:43: 36:8f:4d:91:39:6f:9b:0b:fa:29:f4:3b:62:d4:0c: af:a0:eb:49:fe:ef:24:2b:53:a9:cf:71:f4:b1:48: e6:67:8c:9c:82:2b:4d:c0:c5:7a:60:98:eb:99:e7: cf:64:79:42:e6:35:20:f9:cf:50:c2:b8:ca:25:30: e0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D9:BD:3F:34:BF:0E:B4:C5:AB:D0:FB:81:A9:A6:78:EE:91:E8:80 X509v3 Authority Key Identifier: keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3d:28:02:ff:0e:76:74:85:b9:94:a0:10:5a:f3:be:10:04: 94:f8:e1:53:58:f8:7a:f2:3a:b6:42:12:a7:e2:6d:f7:01:ac: 1c:d5:6f:23:6a:bd:71:ec:08:83:d6:b8:a6:9b:22:87:06:70: f2:be:3a:2c:9a:27:31:18:d1:d3:22:56:0b:42:2e:e0:cc:52: bb:22:d6:78:84:c9:3b:a2:1f:9e:84:3b:a0:f0:1f:44:fb:49: 02:10:be:b8:ca:5b:2d:c2:d4:f9:f5:0b:65:fb:26:44:0e:4c: 8b:b3:e4:b7:b3:ab:d1:37:df:cb:b7:10:4d:33:26:53:b9:6e: e0:ca:b7:d7:eb:ee:7f:4d:2f:9d:e8:79:07:31:c2:73:05:6e: f7:52:7c:11:5c:1a:f5:ec:d2:9e:f1:6f:8a:8e:86:1b:5f:f3: 01:dd:1f:c0:15:17:8b:33:d9:55:85:6d:b6:b3:62:de:c7:56: 36:43:a0:f8:62:7f:cc:cc:6f:e1:1d:53:d8:53:46:f1:a0:f0: 37:17:bc:a3:a0:fd:17:1e:dd:e2:9c:1b:67:87:fa:91:ac:7c: a3:d3:7d:90:3f:f4:56:51:3a:99:c3:d4:89:44:ec:d8:f2:1c: f6:c7:de:b9:a9:1c:3d:c2:28:6e:1a:15:fc:2e:18:3e:39:63: b0:98:40:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTQxMTAvBgNVBAUTKDhBNzRFRjQwRTY1QTEyN0MwRTY2NkIxNEE2QzY1NzRB NTM2RjM2NzMwHhcNMjQxMTIzMDIyNzQ3WhcNMjQxMTMwMDIyNzQ3WjAYMRYwFAYD VQQDEw02NzQxM2RhNC0yMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DNy03xNE2v1gObEAmtm3A0A5SwGXcpQ5b8DeTdW8Ih23j6SuxMFjZ1ifEtO sCdLFE/b7UucDcJvRP41JWL9ZEn4PEPq8/XnLGVbgxwDsfSp4EAP3w25buzBD/7w eaDqyAOodbrp5eeYZrACotjmqtGFpA9Efl+sAAY1Ac9Gj5os7n3BdSzhCI8+bLyC 4W3m88GuGqB1cI1X/WmSo7NMSxfU2jAJnC3f8YD+Zsk78OxMw015ACiZCboaj+iI HHZLDkM2j02ROW+bC/op9Dti1AyvoOtJ/u8kK1Opz3H0sUjmZ4ycgitNwMV6YJjr mefPZHlC5jUg+c9QwrjKJTDgOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnZvT80 vw60xavQ+4GppnjukeiAMB8GA1UdIwQYMBaAFIp070DmWhJ8DmZrFKbGV0pTbzZz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFNC8wNUZFRjQ0QTlF MEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVud09abXNVcHNaWFNsTnZO bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luVHZRT1phRW53T1ptc1Vwc1pYU2xOdk5uTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFNC8wNUZFRjQ0QTlFMEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVu d09abXNVcHNaWFNsTnZObk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7PSgC/w52dIW5lKAQWvO+EASU+OFTWPh68jq2QhKn4m33Aawc1W8j ar1x7AiD1rimmyKHBnDyvjosmicxGNHTIlYLQi7gzFK7ItZ4hMk7oh+ehDug8B9E +0kCEL64ylstwtT59Qtl+yZEDkyLs+S3s6vRN9/LtxBNMyZTuW7gyrfX6+5/TS+d 6HkHMcJzBW73UnwRXBr17NKe8W+KjoYbX/MB3R/AFReLM9lVhW22s2Lex1Y2Q6D4 Yn/MzG/hHVPYU0bxoPA3F7yjoP0XHt3inBtnh/qRrHyj032QP/RWUTqZw9SJROzY 8hz2x965qRw9wihuGhX8Lhg+OWOwmEA1 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org