$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json) Hash identifier: ovUup934z82BZFUnCYPR/+/eGaTFXbaH9DpAYmcxCQE= Subject key identifier: 3A:34:39:C6:03:CE:B6:D8:E1:82:06:C7:CA:7D:FE:5F:B1:F6:58:EB Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 16A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft Manifest number: 161F Signing time: Wed 20 Nov 2024 16:35:52 +0000 Manifest this update: Wed 20 Nov 2024 16:35:51 +0000 Manifest next update: Wed 27 Nov 2024 16:35:51 +0000 Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: mZ0cgkwBsP/h1ggQQ87ucHXUYB67JX+47rTepYua9Pg=) 2: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: lsOmam/li1bkfNd+RqIYHcsa5LlCUkskqa4cLcEJ5uo=) 3: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: r0YSGkf4Uly1T3ccnKqscdpAXe/eUhnq2u7Y+nWyVFA=) 4: B1D95AEA7F9B11EFBF8E2428C4F9AE02.roa (hash: +ly/tyqaX5uEvHchQgDkvaVv7wGJ78IKjIczcO4zlYs=) 5: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: JKnsYkOp9VjEacI33Ba4AJhjDKF19c/H5ySudQCEfcg=) 6: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: PIer1s9fnShnuMBkKYfM0HDQ4suxju3yxP90XcCs/1k=) 7: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: 2fbDRTJBk5Ytg+eSm5CyRuKLRNTxFiA579mgfklTst4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5793 (0x16a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Nov 20 16:35:51 2024 GMT Not After : Nov 27 16:35:51 2024 GMT Subject: CN=673e0fe8-0d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:1f:6f:c5:a0:e5:6c:3a:a2:b6:72:d6:33: e5:5b:18:0c:25:9f:bd:45:00:b1:ba:2b:b4:82:36: c6:b5:75:45:ed:e1:9f:14:32:d9:a7:73:68:d1:aa: d3:f8:9a:b7:5a:ad:d2:f2:a6:f8:a3:a4:62:ab:4c: af:54:67:02:14:35:76:fe:db:a1:96:8a:31:9f:60: 7b:bc:fb:a8:61:54:cf:ef:e3:96:c0:d8:f9:6b:5a: 08:21:9e:0b:0d:7a:85:79:74:94:31:2b:52:b8:cc: f7:81:48:84:53:6b:ca:30:8a:3a:eb:b1:c5:0c:b1: 0f:32:52:77:e2:11:e3:80:1b:5c:62:39:06:fd:ba: 62:ad:f9:24:31:f7:ae:7e:73:cd:75:86:e6:75:5d: 3f:de:ed:66:52:fc:7f:ed:26:2e:66:22:b4:ce:bf: 5a:c0:b0:88:cb:dc:4e:a7:99:1e:bf:25:16:ef:c6: ec:04:8f:39:5f:a6:b0:56:78:5e:51:db:7d:27:4f: f6:1d:92:2f:79:ec:10:88:34:74:c1:88:ef:33:2f: 71:77:48:4b:fe:7f:51:4e:ec:c7:ca:9e:14:b7:95: ac:30:73:27:42:e4:d0:77:1c:a2:5a:a7:52:24:dd: b8:8d:41:5f:90:e7:1b:eb:50:cb:6e:20:e2:a0:6d: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:34:39:C6:03:CE:B6:D8:E1:82:06:C7:CA:7D:FE:5F:B1:F6:58:EB X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d8:a3:89:00:14:47:75:21:8b:d8:95:2a:7e:1d:15:7b:24: b2:ce:49:0b:75:8d:73:64:48:0e:9c:66:f1:52:8a:aa:23:00: 7e:05:8c:35:31:ea:6a:74:1c:37:0a:b6:bc:22:f0:28:8a:5f: 5a:b9:3e:b7:27:c4:19:e0:cc:64:bf:58:fe:6a:57:f4:67:c3: a2:38:de:0a:68:7e:fd:21:de:6f:ec:17:13:a1:22:60:7b:f6: 01:a1:1f:d4:50:6a:f5:7f:7a:94:03:b3:c2:93:54:08:b5:32: fd:d2:a0:44:b6:a5:e6:6a:18:68:4b:7c:34:20:31:5b:6f:32: 1a:99:ad:60:65:a7:b8:df:46:84:0a:e5:b4:c4:a6:a4:24:f6: dd:8d:2e:cf:be:cd:af:1f:e0:0e:2c:a6:91:8c:21:c7:0d:63: a3:51:00:50:b3:4d:aa:86:d8:c5:e9:3c:65:3a:fb:bb:10:e1: 74:57:03:70:20:cc:37:db:3c:f1:b3:9d:1e:c8:1d:36:06:5e: 20:07:e6:9f:7c:1f:37:7a:0a:9f:47:66:7e:f1:3e:e7:38:d3: 8d:ee:95:50:f4:c6:51:29:ff:5e:e5:e9:e3:e2:81:e5:1b:94: 3b:90:ac:bc:7a:c8:16:17:25:80:ef:58:c2:57:5b:9c:3f:e8: df:37:b2:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjQxMTIwMTYzNTUxWhcNMjQxMTI3MTYzNTUxWjAYMRYwFAYD VQQDEw02NzNlMGZlOC0wZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1Yfb8Wg5Ww6orZy1jPlWxgMJZ+9RQCxuiu0gjbGtXVF7eGfFDLZp3No0arT +Jq3Wq3S8qb4o6Riq0yvVGcCFDV2/tuhlooxn2B7vPuoYVTP7+OWwNj5a1oIIZ4L DXqFeXSUMStSuMz3gUiEU2vKMIo667HFDLEPMlJ34hHjgBtcYjkG/bpirfkkMfeu fnPNdYbmdV0/3u1mUvx/7SYuZiK0zr9awLCIy9xOp5kevyUW78bsBI85X6awVnhe Udt9J0/2HZIveewQiDR0wYjvMy9xd0hL/n9RTuzHyp4Ut5WsMHMnQuTQdxyiWqdS JN24jUFfkOcb61DLbiDioG2RpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDo0OcYD zrbY4YIGx8p9/l+x9ljrMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE4Qi9GOThCNUYwQzIxRjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZC SlNHanFCa0FtWGo4X3BIbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH2KOJABRHdSGL2JUqfh0VeySyzkkLdY1zZEgOnGbxUoqqIwB+BYw1 MepqdBw3Cra8IvAoil9auT63J8QZ4Mxkv1j+alf0Z8OiON4KaH79Id5v7BcToSJg e/YBoR/UUGr1f3qUA7PCk1QItTL90qBEtqXmahhoS3w0IDFbbzIama1gZae430aE CuW0xKakJPbdjS7Pvs2vH+AOLKaRjCHHDWOjUQBQs02qhtjF6TxlOvu7EOF0VwNw IMw32zzxs50eyB02Bl4gB+affB83egqfR2Z+8T7nONON7pVQ9MZRKf9e5enj4oHl G5Q7kKy8esgWFyWA71jCV1ucP+jfN7KN -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:20 2024 by rpki-client on console-ams.rpki-client.org