$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft File: jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json) Hash identifier: beEh7B3vc9GMuiPDeU2wvgVSSGhFaC7jb5paOp6ATP0= Subject key identifier: 9D:4B:2D:3D:0A:1B:DD:40:05:83:B6:95:F2:A3:0A:13:E3:EF:19:FA Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft Manifest number: 38 Signing time: Thu 21 Nov 2024 05:35:35 +0000 Manifest this update: Thu 21 Nov 2024 05:35:35 +0000 Manifest next update: Thu 28 Nov 2024 05:35:35 +0000 Files and hashes: 1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: t2q7/rUkOT7XuCjwgz97/I1/CITDejepqyXqPgweUCs=) 2: 6104609C5A1111EFA655393FC4F9AE02.roa (hash: 9c45BaBlVMR7XX0xhpD8nfBMrjtsUQUJEJfn4sWwe5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162 Validity Not Before: Nov 21 05:35:35 2024 GMT Not After : Nov 28 05:35:35 2024 GMT Subject: CN=673ec6a7-8258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8a:61:33:83:33:98:bb:2a:cd:34:bc:fd:3b: 11:5d:c6:58:78:49:cc:f4:7e:cc:b4:2b:bf:59:3d: e2:99:ff:37:2f:ef:bf:65:70:f3:4d:0b:de:c5:91: 09:37:78:3e:a8:2e:43:e6:3e:6b:e6:db:d2:6a:f8: d5:42:cd:46:76:f2:f5:b8:61:7b:85:d0:c3:28:01: b1:69:b3:09:e1:c1:bf:25:f6:78:ac:26:e8:1f:7b: 3c:34:6c:d7:7a:7e:f6:80:2e:81:8a:f2:97:7d:a7: 45:1e:73:db:ac:46:8b:a5:35:61:d4:86:e2:e6:65: 5d:ff:e1:47:6a:f0:f0:eb:9f:5f:d2:89:87:ea:e8: 0c:79:cb:90:87:54:ea:2a:ba:6e:5c:81:aa:f6:d9: 5f:13:84:29:37:a2:3c:e5:79:67:e6:d7:04:31:14: a6:21:4e:3e:98:26:a0:14:1c:94:c3:8e:83:2a:7b: 43:48:89:70:ab:16:5a:91:5d:71:36:3b:ed:9f:d9: cb:34:9e:14:5b:2e:62:f3:6a:e0:6d:5b:f1:85:f4: a0:36:dc:6f:cf:3e:e2:2f:e0:7a:48:de:ea:61:05: cc:67:ff:0d:98:18:05:94:50:85:d5:36:da:ba:4e: 32:cc:15:aa:25:72:8a:71:c0:95:cd:b9:b3:55:96: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4B:2D:3D:0A:1B:DD:40:05:83:B6:95:F2:A3:0A:13:E3:EF:19:FA X509v3 Authority Key Identifier: keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f9:3e:49:4e:67:98:fa:1a:21:04:d6:b1:4d:51:d8:e4:e0: 0e:32:c1:3b:b1:ae:4e:ea:06:cc:ec:a1:d4:c8:3e:e9:7b:e6: 94:8f:9a:5f:5d:61:86:73:4d:b3:ec:89:18:9c:e1:8f:e1:bd: e6:c0:21:28:55:81:76:76:bc:f7:00:45:27:34:6f:f8:41:ce: 5c:57:f3:79:2f:95:db:8c:ed:0a:1b:c8:b2:2a:db:38:bb:a3: 99:2d:a7:9c:73:6e:85:97:14:71:56:56:56:cd:87:a5:96:0a: a6:ad:ba:25:25:4e:c4:e1:2d:c6:fd:34:f7:02:c3:85:52:4f: 8e:67:2f:21:ae:f8:61:01:e3:19:b6:b2:3b:d5:10:76:d1:5e: 7a:f5:23:73:1e:17:1e:90:3c:11:cf:41:bb:25:2a:26:67:f9: 3c:09:83:94:07:2a:71:28:05:02:37:99:d3:8c:72:f7:51:28: a6:2b:6c:24:ea:81:36:99:c4:da:a6:02:b1:b6:25:5c:bf:cb: 00:14:a3:5b:82:ca:ef:7c:b2:68:b2:98:7f:16:d6:d2:98:e7: ee:4d:74:a0:92:fa:77:33:46:7e:e2:02:23:88:2a:db:be:0d: e9:79:5a:00:e7:48:51:d3:87:ee:01:cc:48:66:fa:b3:d9:de: 45:fb:c1:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QjUzQjExMC8GA1UEBRMoOEQ5NzE3NzI3RDZFOEVFQjIzODA3QjMxM0MwNThEMDM1 NkZGRTE2MjAeFw0yNDExMjEwNTM1MzVaFw0yNDExMjgwNTM1MzVaMBgxFjAUBgNV BAMTDTY3M2VjNmE3LTgyNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkimEzgzOYuyrNNLz9OxFdxlh4Scz0fsy0K79ZPeKZ/zcv779lcPNNC97FkQk3 eD6oLkPmPmvm29Jq+NVCzUZ28vW4YXuF0MMoAbFpswnhwb8l9nisJugfezw0bNd6 fvaALoGK8pd9p0Uec9usRoulNWHUhuLmZV3/4Udq8PDrn1/SiYfq6Ax5y5CHVOoq um5cgar22V8ThCk3ojzleWfm1wQxFKYhTj6YJqAUHJTDjoMqe0NIiXCrFlqRXXE2 O+2f2cs0nhRbLmLzauBtW/GF9KA23G/PPuIv4HpI3uphBcxn/w2YGAWUUIXVNtq6 TjLMFaolcopxwJXNubNVlkqpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnUstPQob 3UAFg7aV8qMKE+PvGfowHwYDVR0jBBgwFoAUjZcXcn1ujusjgHsxPAWNA1b/4WIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCNTNCLzIwMzIzQTgyNTlE RDExRUZCQUQ0QzI4NkM0RjlBRTAyL2paY1hjbjF1anVzamdIc3hQQVdOQTFiXzRX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvalpjWGNuMXVqdXNqZ0hzeFBBV05BMWJfNFdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC NTNCLzIwMzIzQTgyNTlERDExRUZCQUQ0QzI4NkM0RjlBRTAyL2paY1hjbjF1anVz amdIc3hQQVdOQTFiXzRXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGX5PklOZ5j6GiEE1rFNUdjk4A4ywTuxrk7qBszsodTIPul75pSPml9d YYZzTbPsiRic4Y/hvebAIShVgXZ2vPcARSc0b/hBzlxX83kvlduM7QobyLIq2zi7 o5ktp5xzboWXFHFWVlbNh6WWCqatuiUlTsThLcb9NPcCw4VST45nLyGu+GEB4xm2 sjvVEHbRXnr1I3MeFx6QPBHPQbslKiZn+TwJg5QHKnEoBQI3mdOMcvdRKKYrbCTq gTaZxNqmArG2JVy/ywAUo1uCyu98smiymH8W1tKY5+5NdKCS+nczRn7iAiOIKtu+ Del5WgDnSFHTh+4BzEhm+rPZ3kX7waI= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org