$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: 3WN0+sNzILdn2p21zB9PZ/9Kl13TyHVBTQBMf7Kk75Y= Subject key identifier: 3D:E0:43:8A:F5:8D:A3:03:76:C4:69:BB:59:FA:2D:2D:50:D6:7F:C9 Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: 4E Signing time: Sat 23 Nov 2024 05:15:28 +0000 Manifest this update: Sat 23 Nov 2024 05:15:27 +0000 Manifest next update: Sat 30 Nov 2024 05:15:27 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: ab+oIIIcEmXG4oPqrqxoI8zRFw4GKPB2iPYetrIIOOI=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: hMAkv0SPUa2fx1kdkftE1TeJlCXaC/PpyWLtj7Qjwao=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: RaPUG+Dh7qLyN+q+gPgCKOJ1sH5dp6IUHARU5/CAIwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Nov 23 05:15:27 2024 GMT Not After : Nov 30 05:15:27 2024 GMT Subject: CN=674164ef-d119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:ea:42:ad:d0:b7:cd:ae:f3:dd:b6:50:2a: c9:5b:0f:f6:af:8b:0b:a8:a1:0e:46:9a:b3:3f:2d: e2:50:3f:e1:3e:e7:fd:c0:5d:ef:0a:03:5c:f3:53: f4:e2:58:f0:20:22:5d:b8:0c:b3:dc:0f:19:d1:9f: 09:46:0c:8a:de:f2:b0:7b:8f:18:d9:f5:60:8e:a3: c2:c3:f2:ea:5c:5f:75:91:54:98:25:aa:ba:5d:9e: 61:2a:5c:bc:01:98:db:e4:1b:05:f0:6e:11:43:38: cf:38:cd:45:ef:1a:01:3e:65:fa:5a:c7:c0:08:0a: 59:31:eb:2d:8c:eb:f4:7f:90:43:aa:d7:0a:fb:78: c4:13:39:77:a1:9e:71:44:0c:81:e9:e4:08:f2:59: 67:c4:27:69:bf:8d:b3:42:62:47:76:4e:6c:fa:cc: 88:2a:47:c8:d5:1c:55:42:4f:a1:89:00:9f:85:f9: 44:c8:7e:43:4f:5e:63:23:55:85:1b:62:17:6c:46: ca:d8:26:49:f1:88:26:9b:f2:58:bb:21:56:c6:1a: 30:e4:e0:13:ef:d7:d9:f6:82:8f:67:53:31:44:15: 9c:d6:e7:aa:75:f6:d5:e8:3d:13:73:34:ad:67:d2: b1:4b:7a:3a:94:5d:ff:18:8a:80:3e:c1:6e:87:d4: 75:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E0:43:8A:F5:8D:A3:03:76:C4:69:BB:59:FA:2D:2D:50:D6:7F:C9 X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f4:28:1e:df:e5:e5:4d:70:84:bc:ae:ca:cb:0c:33:16:9e: d4:5b:57:22:17:67:a6:d4:ea:65:bc:a7:c6:da:22:8c:22:ad: 34:9b:8b:2f:01:38:df:ef:1a:95:1d:d4:46:fe:d2:e7:d5:52: b6:61:50:a1:ee:81:0d:af:e6:ce:80:c6:78:43:6f:44:c7:14: 68:dc:2a:e7:aa:6b:ac:84:51:53:a8:51:85:cf:5e:9b:ea:a1: cf:61:e8:6e:af:41:06:42:e2:92:2d:3b:ce:9a:1c:fd:ff:74: 98:1b:c9:0e:78:ed:68:72:39:49:c6:eb:ff:89:58:4d:95:b6: fc:72:bb:4e:a3:8b:07:ef:7a:79:29:58:b2:a0:3e:d7:d8:dc: 86:f0:14:3c:9f:f0:ed:3b:02:9d:3a:4b:59:90:59:a1:79:0f: d8:39:de:5e:57:1b:b1:ad:43:9c:59:82:53:cd:df:c6:42:f2: f3:b9:bb:7f:a7:a8:c9:70:3d:22:56:c3:ad:e6:84:02:79:e7: 89:10:48:46:1f:ab:0a:f9:e2:dd:01:a8:e7:08:d2:1c:14:3d: 36:d2:53:8f:d1:da:b2:09:36:4a:0f:ce:e2:b3:e9:00:1e:b2: 57:fc:5d:e0:8d:0e:95:91:a2:4a:53:c4:3e:14:79:87:cd:cc: 78:89:12:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTBERDExMC8GA1UEBRMoRDhCRDY3NjUxODM2NjAzNEI4ODg4NDhCM0I1NzE4RkE5 MDcwRTE5MjAeFw0yNDExMjMwNTE1MjdaFw0yNDExMzAwNTE1MjdaMBgxFjAUBgNV BAMTDTY3NDE2NGVmLWQxMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwfOpCrdC3za7z3bZQKslbD/aviwuooQ5GmrM/LeJQP+E+5/3AXe8KA1zzU/Ti WPAgIl24DLPcDxnRnwlGDIre8rB7jxjZ9WCOo8LD8upcX3WRVJglqrpdnmEqXLwB mNvkGwXwbhFDOM84zUXvGgE+Zfpax8AIClkx6y2M6/R/kEOq1wr7eMQTOXehnnFE DIHp5AjyWWfEJ2m/jbNCYkd2Tmz6zIgqR8jVHFVCT6GJAJ+F+UTIfkNPXmMjVYUb YhdsRsrYJknxiCab8li7IVbGGjDk4BPv19n2go9nUzFEFZzW56p19tXoPRNzNK1n 0rFLejqUXf8YioA+wW6H1HVZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPeBDivWN owN2xGm7WfotLVDWf8kwHwYDVR0jBBgwFoAU2L1nZRg2YDS4iISLO1cY+pBw4ZIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxMERELzY1NjMyNEY0MzhF QTExRUZCMEZCMjE3REM0RjlBRTAyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRa SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkwxblpSZzJZRFM0aUlTTE8xY1ktcEJ3NFpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx MERELzY1NjMyNEY0MzhFQTExRUZCMEZCMjE3REM0RjlBRTAyLzJMMW5aUmcyWURT NGlJU0xPMWNZLXBCdzRaSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI70KB7f5eVNcIS8rsrLDDMWntRbVyIXZ6bU6mW8p8baIowirTSbiy8B ON/vGpUd1Eb+0ufVUrZhUKHugQ2v5s6AxnhDb0THFGjcKueqa6yEUVOoUYXPXpvq oc9h6G6vQQZC4pItO86aHP3/dJgbyQ547WhyOUnG6/+JWE2Vtvxyu06jiwfvenkp WLKgPtfY3IbwFDyf8O07Ap06S1mQWaF5D9g53l5XG7GtQ5xZglPN38ZC8vO5u3+n qMlwPSJWw63mhAJ554kQSEYfqwr54t0BqOcI0hwUPTbSU4/R2rIJNkoPzuKz6QAe slf8XeCNDpWRokpTxD4UeYfNzHiJEr4= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org