$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: AZAW9JN1/Qyba+ROiFKemTlNKtmb2qS9z2x/7+0zLGo= Subject key identifier: EE:3B:62:E4:94:8A:A0:FB:8A:46:D0:7D:24:8C:B9:35:25:52:06:F7 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 1615 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 145C Signing time: Wed 20 Nov 2024 17:11:20 +0000 Manifest this update: Wed 20 Nov 2024 17:11:20 +0000 Manifest next update: Wed 27 Nov 2024 17:11:20 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: ED8/vW8pMlSLf3NXV7IRg1Bs+wcTSDjQ7XHD+zwha6s=) 2: 8D19F1388B3511EF99F24263C4F9AE02.roa (hash: 4+P/FksR8VSMQLPptOSowq4XgWMXSmSaGlEGhr+dXcE=) 3: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: Lx5JMDz+euSwXfN2bBhbtzFpbOuwQ+UGzdRfQfwqwmg=) 4: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: jFWx3yosTM6Ngdos0+GDHNaOyAPdPCLeZtZ1sRgMYug=) 5: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: 3K7qEYTTRPaMHZTJiAeJCFj5NoW5czqKHLINeQfDKgQ=) 6: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: p079JhzkV3DHxp4PDPvrbepGD7tngZQCKWLeyg6QpnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5653 (0x1615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Nov 20 17:11:20 2024 GMT Not After : Nov 27 17:11:20 2024 GMT Subject: CN=673e1838-d2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:db:4a:94:e4:ad:7d:ce:06:35:54:76:53: a6:41:f3:f2:6c:fb:5a:86:39:8c:33:04:69:75:4d: 60:39:63:0b:ff:dc:35:bc:37:96:0d:68:98:a7:db: 29:c5:5e:eb:3c:4e:6d:3a:44:64:87:c1:8e:bf:eb: 84:90:d8:1b:44:65:25:84:00:c2:82:41:f2:84:98: 5d:9b:42:08:46:73:f7:51:c1:35:1e:6a:1b:1f:1a: a4:1d:27:26:e6:04:cd:03:17:2b:a7:87:0e:db:a1: 72:35:35:22:d3:e9:f3:aa:d6:05:21:e9:20:51:61: 5d:a1:b2:ba:8f:e1:3f:9b:9c:eb:cb:ab:cd:23:cd: 7c:9d:7d:0d:47:69:74:22:19:da:dc:3c:33:22:29: db:25:9f:23:a4:2b:85:73:27:14:2e:93:a6:c6:7c: 0a:8b:aa:5e:fa:a2:02:93:6e:0d:25:13:ba:85:66: 25:22:5e:45:20:8d:14:79:0e:45:8e:d7:e4:9c:b4: a7:5b:42:25:5c:d5:bd:a4:9c:d4:9f:a1:c5:bd:90: 4f:99:a8:c4:62:58:cb:d9:ce:2d:e3:22:69:d0:84: ff:ec:77:d8:c9:df:8f:e1:33:cd:b6:2f:6a:17:6f: 23:d5:01:e1:4f:08:91:1d:34:9c:b9:98:9c:97:8d: e9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3B:62:E4:94:8A:A0:FB:8A:46:D0:7D:24:8C:B9:35:25:52:06:F7 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:53:9d:d8:52:af:13:b3:4b:26:de:53:a5:d1:b4:4a:99:c4: 85:67:25:8a:15:d8:f0:5d:1a:ab:29:94:0e:e4:3b:39:08:76: 32:40:fe:3e:36:fc:13:52:0e:15:a8:6b:02:d7:28:2b:e1:30: ad:70:11:66:f2:60:e0:31:c0:51:55:f6:aa:75:cf:5a:2e:10: fc:ca:12:b8:7e:aa:76:0e:dc:d2:50:03:d3:24:db:e2:48:8d: 4a:37:0f:a3:09:8b:99:c9:b7:80:7a:b7:43:e7:89:0c:35:90: 87:13:3c:77:65:45:e2:f6:83:05:30:df:f3:ce:3a:2d:99:d3: 62:52:41:4d:fa:4e:18:18:3a:47:54:8a:9c:53:d3:76:af:13: 04:d0:fa:3b:79:b2:90:b1:10:31:4a:4f:e9:cb:ae:97:48:7b: 0b:97:db:e1:11:1e:51:77:7b:0b:82:c9:b0:0a:be:76:7d:d0: d4:53:70:bb:4b:db:2b:1a:04:30:9e:1f:87:11:f8:0d:c2:76: 8c:d6:45:93:49:8e:f3:8d:ae:2a:a0:c6:5d:4d:72:3c:14:ba: 6a:20:0f:34:92:ae:c8:bf:6a:b2:e4:01:e4:71:8a:26:89:70: 35:96:13:85:d2:70:97:69:24:26:8f:e7:0d:90:3a:9c:cd:eb: a0:a3:e5:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjQxMTIwMTcxMTIwWhcNMjQxMTI3MTcxMTIwWjAYMRYwFAYD VQQDEw02NzNlMTgzOC1kMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyTbSpTkrX3OBjVUdlOmQfPybPtahjmMMwRpdU1gOWML/9w1vDeWDWiYp9sp xV7rPE5tOkRkh8GOv+uEkNgbRGUlhADCgkHyhJhdm0IIRnP3UcE1HmobHxqkHScm 5gTNAxcrp4cO26FyNTUi0+nzqtYFIekgUWFdobK6j+E/m5zry6vNI818nX0NR2l0 Ihna3DwzIinbJZ8jpCuFcycULpOmxnwKi6pe+qICk24NJRO6hWYlIl5FII0UeQ5F jtfknLSnW0IlXNW9pJzUn6HFvZBPmajEYljL2c4t4yJp0IT/7HfYyd+P4TPNti9q F28j1QHhTwiRHTScuZicl43pyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO47YuSU iqD7ikbQfSSMuTUlUgb3MB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByU53YUq8Ts0sm3lOl0bRKmcSFZyWKFdjwXRqrKZQO5Ds5CHYyQP4+ NvwTUg4VqGsC1ygr4TCtcBFm8mDgMcBRVfaqdc9aLhD8yhK4fqp2DtzSUAPTJNvi SI1KNw+jCYuZybeAerdD54kMNZCHEzx3ZUXi9oMFMN/zzjotmdNiUkFN+k4YGDpH VIqcU9N2rxME0Po7ebKQsRAxSk/py66XSHsLl9vhER5Rd3sLgsmwCr52fdDUU3C7 S9srGgQwnh+HEfgNwnaM1kWTSY7zja4qoMZdTXI8FLpqIA80kq7Iv2qy5AHkcYom iXA1lhOF0nCXaSQmj+cNkDqczeugo+Xg -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:20 2024 by rpki-client on console-ams.rpki-client.org