$ rpki-client -vvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft File: juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json) Hash identifier: Ig699zMWYYKe4s8xopV4Li7S3Jkrc3D03s6Ark0tBJU= Subject key identifier: D2:1D:0F:A7:B0:83:9E:7D:C0:DE:C9:0A:E3:E7:D2:FA:57:D6:23:D0 Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A Certificate issuer: /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft Manifest number: 0128 Signing time: Sat 23 Nov 2024 02:53:41 +0000 Manifest this update: Sat 23 Nov 2024 02:53:41 +0000 Manifest next update: Sat 30 Nov 2024 02:53:41 +0000 Files and hashes: 1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: WHb8qMZvVjaXLpiwsfEtTZerE0BpCgys15YWJ+3PH2U=) 2: 305A9890EAEF11EDBBFC2B0BC4F9AE02.roa (hash: ePVRm39tIyAswyhwrdMeKFH+yRFfrkV0msYN8ZorCeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A Validity Not Before: Nov 23 02:53:41 2024 GMT Not After : Nov 30 02:53:41 2024 GMT Subject: CN=674143b5-ec00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:65:88:5a:7f:97:9c:d3:b3:d7:f3:d6:d8: 94:42:58:99:15:d9:45:a2:f5:12:45:95:49:29:dc: 9f:89:bc:18:2e:28:e3:ee:48:66:aa:d0:15:cd:d4: f8:d5:2e:9d:46:ff:cf:ca:61:11:33:7c:87:a3:08: 1c:ae:80:4b:98:70:67:e5:1b:7f:e4:ae:ac:ea:58: e3:62:c1:23:e5:ad:fa:62:48:d6:80:2a:3c:81:11: 44:1e:ea:76:ab:9e:a0:33:eb:f0:e3:cb:45:cd:35: 93:1f:ec:24:32:64:54:65:14:67:60:d4:5c:f0:68: 6e:75:a7:1f:40:ad:1c:e1:3b:a9:66:18:56:e8:b3: fa:85:8f:43:6e:a6:a1:88:c8:ca:0b:1d:6c:fc:83: 13:07:19:85:03:f2:a0:d6:d1:9c:da:54:c6:81:62: 82:f6:8b:a1:4f:07:32:2a:4f:fe:1c:f3:ae:d8:11: 0f:ab:21:5c:e1:b4:35:19:ad:b9:e3:76:07:7b:92: d4:88:f6:9e:e0:bf:6e:3b:c6:3f:ce:58:7f:95:e1: e4:7f:43:09:1f:94:16:1e:e9:0a:95:28:87:fd:df: 80:0a:90:02:90:66:c7:1b:56:bb:42:ae:9b:95:2d: 27:51:0e:a9:0c:1d:3f:10:c6:78:af:4c:27:a7:ad: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1D:0F:A7:B0:83:9E:7D:C0:DE:C9:0A:E3:E7:D2:FA:57:D6:23:D0 X509v3 Authority Key Identifier: keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:b6:be:df:da:ae:d4:67:c3:c7:20:b3:26:4e:6c:cf:50:29: 1c:27:8a:9d:ac:18:57:d6:a3:f5:68:df:71:0b:46:eb:a1:74: ce:bd:c0:03:78:b0:9c:1a:eb:d3:03:61:43:a5:c9:d8:6e:f6: 0f:1c:a2:2d:e0:4e:cf:ea:8a:ae:5d:ae:2d:f7:ae:ea:21:71: fb:17:f2:f1:33:29:2f:ce:9d:99:f8:6f:87:6f:7a:aa:32:b2: 7f:33:e6:9e:18:84:c2:54:0d:db:92:99:d3:cd:eb:50:7b:65: 6d:9f:36:0f:78:28:0b:b5:0a:11:40:67:3e:8e:6e:80:d0:19: 7c:e9:71:42:7f:5d:d2:4e:57:16:90:09:0c:ec:e3:d2:31:d7: 8a:c6:f0:23:54:fa:b4:59:37:f3:46:e2:f9:96:50:0d:76:d5: 69:cf:f3:54:24:66:19:af:22:fd:1e:22:1f:7a:b1:f4:22:31: 50:00:e5:02:1f:e7:76:3f:bd:7b:82:6f:6b:f7:2a:6d:59:40: 91:1b:f3:9b:47:d1:bc:3d:26:a1:2c:11:05:38:60:6b:37:44: b5:c9:a4:f7:2e:f2:2f:81:ce:42:77:35:a4:3f:e4:8d:e8:b7: 9e:e4:53:56:88:57:c4:9e:dd:dd:5e:ad:9f:1b:96:99:4d:62: bb:26:21:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5 MERGMzI0OEEwHhcNMjQxMTIzMDI1MzQxWhcNMjQxMTMwMDI1MzQxWjAYMRYwFAYD VQQDEw02NzQxNDNiNS1lYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz9liFp/l5zTs9fz1tiUQliZFdlFovUSRZVJKdyfibwYLijj7khmqtAVzdT4 1S6dRv/PymERM3yHowgcroBLmHBn5Rt/5K6s6ljjYsEj5a36YkjWgCo8gRFEHup2 q56gM+vw48tFzTWTH+wkMmRUZRRnYNRc8GhudacfQK0c4TupZhhW6LP6hY9Dbqah iMjKCx1s/IMTBxmFA/Kg1tGc2lTGgWKC9ouhTwcyKk/+HPOu2BEPqyFc4bQ1Ga25 43YHe5LUiPae4L9uO8Y/zlh/leHkf0MJH5QWHukKlSiH/d+ACpACkGbHG1a7Qq6b lS0nUQ6pDB0/EMZ4r0wnp62DnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIdD6ew g559wN7JCuPn0vpX1iPQMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJFMy9DNkI1MDEzQ0VBRTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpV UWtJdXItMmNZdUtRM3pKSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEtr7f2q7UZ8PHILMmTmzPUCkcJ4qdrBhX1qP1aN9xC0broXTOvcAD eLCcGuvTA2FDpcnYbvYPHKIt4E7P6oquXa4t967qIXH7F/LxMykvzp2Z+G+Hb3qq MrJ/M+aeGITCVA3bkpnTzetQe2VtnzYPeCgLtQoRQGc+jm6A0Bl86XFCf13STlcW kAkM7OPSMdeKxvAjVPq0WTfzRuL5llANdtVpz/NUJGYZryL9HiIferH0IjFQAOUC H+d2P717gm9r9yptWUCRG/ObR9G8PSahLBEFOGBrN0S1yaT3LvIvgc5CdzWkP+SN 6Lee5FNWiFfEnt3dXq2fG5aZTWK7JiFf -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org