$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft File: vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json) Hash identifier: J2rrOhE7rsBC+btwwRwRxgU+e2qjucejOsaR/KdZzQE= Subject key identifier: 8C:23:E1:AF:04:3D:A5:24:CD:29:5A:CA:29:E4:4C:61:B7:D4:26:BA Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C Certificate issuer: /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft Manifest number: 3A Signing time: Thu 21 Nov 2024 05:34:07 +0000 Manifest this update: Thu 21 Nov 2024 05:34:06 +0000 Manifest next update: Thu 28 Nov 2024 05:34:06 +0000 Files and hashes: 1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: 5rKHV9PmSSiOpt2sz99JheuQEPRpds6Gnzm/WC8FuNI=) 2: 710FB354979E11EF99310B40C4F9AE02.roa (hash: bruRF8XqvNXc2lROOKilx3DJEF2Mi08/zHCfWANPCjg=) 3: 27AEE7D0979D11EFB1426839C4F9AE02.roa (hash: FRD/IGf5tsKizstdT15eHvBke9+NzOwPHHiU7wEzleM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C Validity Not Before: Nov 21 05:34:06 2024 GMT Not After : Nov 28 05:34:06 2024 GMT Subject: CN=673ec64e-614d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a1:7d:5d:94:b0:d6:23:ed:f7:4b:ed:83:92: d6:d9:d7:ba:c8:26:eb:e5:9f:08:88:61:5c:a5:38: 4f:3d:32:4f:1a:db:a6:b8:7d:16:93:48:f4:55:10: a7:a3:75:50:ee:f1:ff:3f:cd:9c:c4:c8:a2:ce:c9: cd:c4:71:98:02:78:40:5f:46:6b:37:4d:95:aa:ff: b9:71:52:94:fb:16:60:16:ee:ea:0d:94:b8:04:3c: 59:89:52:cb:83:40:11:58:4e:f9:c2:37:7c:fa:6f: b5:15:d6:5c:ac:1c:91:ca:23:b3:e5:5d:7e:9d:dc: 04:dd:72:15:79:d6:57:30:64:10:7b:8f:dc:97:35: 32:55:91:ac:20:48:2c:ab:6f:6e:ed:d0:c3:ae:07: 53:8e:62:a5:99:f1:aa:17:28:b0:d0:76:7c:b9:f4: e8:09:b4:4c:fa:f4:12:6e:5e:20:30:31:e7:76:eb: 06:54:bb:4f:9e:ed:6c:bf:6e:e1:85:b0:3e:93:e9: 31:5e:93:38:ab:c8:ed:c6:11:39:64:cd:bb:a6:a0: 74:78:9a:e2:9f:8b:e9:0e:48:64:59:a6:c7:d1:49: 6c:94:ce:7a:0a:09:8a:9c:3c:de:9f:ef:4c:51:0c: f6:6c:9e:f3:3c:c4:01:c6:3b:17:fd:1a:6b:4d:e5: b8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:23:E1:AF:04:3D:A5:24:CD:29:5A:CA:29:E4:4C:61:B7:D4:26:BA X509v3 Authority Key Identifier: keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:1d:53:26:15:63:4c:1f:d0:76:12:54:89:6b:84:38:b9:98: fd:95:fc:55:a6:af:a7:1f:7f:a7:14:70:e5:9a:5e:c1:1b:68: 5d:bd:2c:6f:1b:26:f7:27:d5:7d:37:2e:12:2e:90:fe:4b:4e: 65:7b:f4:44:c1:90:1a:41:3f:56:c0:e4:66:ed:4b:d9:ed:84: c4:1e:77:ad:35:75:a2:f0:a2:56:77:68:ed:45:67:78:6c:dd: 5f:73:fa:50:ec:5f:1e:fa:10:bf:11:ea:ca:f3:61:b0:00:08: fa:d9:e1:be:e0:f8:3b:63:e4:2d:38:66:e0:94:bd:47:7f:88: 2f:41:7e:e8:a3:29:99:7a:11:1c:89:f8:4a:a4:21:48:6c:39: 75:89:46:25:78:bf:79:23:07:3c:ff:50:5e:8c:cd:5b:81:bd: bd:b1:b3:33:34:d3:3e:18:00:16:2b:30:c6:cb:13:05:9d:af: 99:88:2c:2c:3e:d2:06:69:67:bb:de:cf:22:b5:c2:e4:18:20: 6b:c2:78:a4:2a:f0:12:b6:52:53:8b:90:59:78:25:09:0c:3b: 17:ca:98:c6:0e:0f:ae:b4:f4:7c:34:00:ad:82:23:80:2a:4c: 24:82:34:1c:07:e0:95:3f:04:14:14:28:89:77:a7:d1:95:3e: d0:37:b1:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 M0VCOTExMC8GA1UEBRMoQkMwQkY4RjlENzNCN0U4Q0ZDQzhFQTVFOUY0MkQ3QTg1 NTIzM0Q3QzAeFw0yNDExMjEwNTM0MDZaFw0yNDExMjgwNTM0MDZaMBgxFjAUBgNV BAMTDTY3M2VjNjRlLTYxNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnoX1dlLDWI+33S+2DktbZ17rIJuvlnwiIYVylOE89Mk8a26a4fRaTSPRVEKej dVDu8f8/zZzEyKLOyc3EcZgCeEBfRms3TZWq/7lxUpT7FmAW7uoNlLgEPFmJUsuD QBFYTvnCN3z6b7UV1lysHJHKI7PlXX6d3ATdchV51lcwZBB7j9yXNTJVkawgSCyr b27t0MOuB1OOYqWZ8aoXKLDQdny59OgJtEz69BJuXiAwMed26wZUu0+e7Wy/buGF sD6T6TFekziryO3GETlkzbumoHR4muKfi+kOSGRZpsfRSWyUznoKCYqcPN6f70xR DPZsnvM8xAHGOxf9GmtN5bizAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjCPhrwQ9 pSTNKVrKKeRMYbfUJrowHwYDVR0jBBgwFoAUvAv4+dc7foz8yOpen0LXqFUjPXww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzRUI5L0ZDRDU1QzBBNTQ5 RjExRUY4NkFFNTkyMkM0RjlBRTAyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBY dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkF2NC1kYzdmb3o4eU9wZW4wTFhxRlVqUFh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz RUI5L0ZDRDU1QzBBNTQ5RjExRUY4NkFFNTkyMkM0RjlBRTAyL3ZBdjQtZGM3Zm96 OHlPcGVuMExYcUZValBYdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACMdUyYVY0wf0HYSVIlrhDi5mP2V/FWmr6cff6cUcOWaXsEbaF29LG8b Jvcn1X03LhIukP5LTmV79ETBkBpBP1bA5GbtS9nthMQed601daLwolZ3aO1FZ3hs 3V9z+lDsXx76EL8R6srzYbAACPrZ4b7g+Dtj5C04ZuCUvUd/iC9BfuijKZl6ERyJ +EqkIUhsOXWJRiV4v3kjBzz/UF6MzVuBvb2xszM00z4YABYrMMbLEwWdr5mILCw+ 0gZpZ7vezyK1wuQYIGvCeKQq8BK2UlOLkFl4JQkMOxfKmMYOD6609Hw0AK2CI4Aq TCSCNBwH4JU/BBQUKIl3p9GVPtA3sTU= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org