$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft File: F2vOFchi1HunYKH2ZTj4HVxJO4E.mft (raw, json) Hash identifier: H8GarZYToC1ZXl16BvD086XIbT20C6zPcjqzC2/LbHs= Subject key identifier: E4:46:6B:64:91:9C:90:A2:1F:4C:DC:E6:B3:02:92:53:64:BE:B0:E4 Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 Certificate issuer: /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft Manifest number: 03 Signing time: Thu 21 Nov 2024 06:17:48 +0000 Manifest this update: Thu 21 Nov 2024 06:17:48 +0000 Manifest next update: Thu 28 Nov 2024 06:17:48 +0000 Files and hashes: 1: F2vOFchi1HunYKH2ZTj4HVxJO4E.crl (hash: roBcjjsSt9laElSwLyui6enKTZA6gKGAGlwoV36cPIQ=) 2: 2CE10886A68511EFB0CF9981C4F9AE02.roa (hash: veK+ihHT7rgGehPtR5m7GK/hbNWI81sjRNiKcGQwWGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Validity Not Before: Nov 21 06:17:48 2024 GMT Not After : Nov 28 06:17:48 2024 GMT Subject: CN=673ed08c-a5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d5:72:7d:f5:ce:9e:bb:a8:1e:ba:8f:a8:d0: a0:8d:43:4d:90:99:07:b9:36:f3:dd:39:bf:ba:a0: fc:a9:32:60:4f:09:d8:89:c6:9a:a4:3b:95:b1:89: 4e:92:32:80:3a:34:f9:d5:59:80:62:55:7b:87:07: af:e6:1a:b1:d6:b5:97:ea:c2:58:0b:b8:8c:e2:e0: 11:1d:e8:cb:eb:e0:43:89:53:e3:f8:06:e3:37:a5: f1:c7:fc:80:ea:1d:05:d2:15:c7:bd:40:02:7c:19: 33:99:61:cd:2a:66:9d:df:63:7a:03:a0:63:3b:2e: 8d:a6:41:31:9c:43:ef:28:21:d3:2b:71:c3:1d:c2: 72:b1:bb:42:f7:57:ae:e6:5e:57:b5:db:2b:ef:26: 1e:3c:9a:4c:d3:f5:69:81:15:02:9c:ed:fb:01:2a: 43:9d:5e:8a:7a:47:27:c8:ff:bb:d5:f1:99:95:8e: 38:28:d2:06:a4:57:c9:a8:5a:c5:66:f8:9f:a8:23: 49:51:e5:5d:3f:97:9e:cc:2d:30:f5:4a:2c:77:56: d8:9b:75:4b:b2:9a:71:20:ed:ff:84:f4:a2:90:fd: 07:db:bb:a6:ff:f3:31:da:a6:f7:e5:92:5a:cc:25: ef:07:da:e7:a5:76:b9:9f:ac:8f:dc:c1:ee:df:cf: 41:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:46:6B:64:91:9C:90:A2:1F:4C:DC:E6:B3:02:92:53:64:BE:B0:E4 X509v3 Authority Key Identifier: keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:22:fe:dc:c3:0e:24:a7:ba:f5:4c:61:25:e5:f4:0b:a2:6a: af:ea:32:d8:74:82:dc:7b:05:7f:7f:1e:bb:fd:25:f6:28:06: 69:78:ea:d4:5e:1f:d7:30:65:e0:79:67:ff:cc:1b:7b:9c:af: 2b:ff:d0:98:40:5d:10:72:39:f3:8e:86:c4:38:24:48:9d:86: 14:f5:d9:0f:30:8d:66:09:01:8c:23:a2:ea:b2:af:90:47:a7: b5:b3:b8:6d:98:47:49:f1:35:e3:64:22:8e:ec:4b:21:6e:90: f0:c8:28:e7:2c:f3:a3:01:e2:15:2c:7f:6f:4d:3f:89:23:c4: 85:e3:da:4a:07:8b:15:d9:20:22:8e:6b:9a:fd:79:06:59:34: ff:9f:f8:32:12:66:de:b5:26:44:d7:60:4a:df:72:c4:51:cf: 7e:34:06:3a:82:ba:f6:ee:36:5f:19:0f:fd:5b:fa:43:16:79: ab:07:19:b5:f6:b9:22:af:9d:ca:7d:43:df:94:94:d6:74:29: e6:b3:7c:45:6e:06:88:10:cd:a5:5c:57:fc:ef:89:02:18:24: 51:64:20:30:c7:b0:d2:48:7f:4e:73:f8:58:e1:fb:92:fd:33: 42:c9:ce:b5:0f:37:ee:5f:bc:41:0d:ed:6c:17:0b:9f:a6:e5: e7:6c:ce:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDZFNDExMC8GA1UEBRMoMTc2QkNFMTVDODYyRDQ3QkE3NjBBMUY2NjUzOEY4MUQ1 QzQ5M0I4MTAeFw0yNDExMjEwNjE3NDhaFw0yNDExMjgwNjE3NDhaMBgxFjAUBgNV BAMTDTY3M2VkMDhjLWE1Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC41XJ99c6eu6geuo+o0KCNQ02QmQe5NvPdOb+6oPypMmBPCdiJxpqkO5WxiU6S MoA6NPnVWYBiVXuHB6/mGrHWtZfqwlgLuIzi4BEd6Mvr4EOJU+P4BuM3pfHH/IDq HQXSFce9QAJ8GTOZYc0qZp3fY3oDoGM7Lo2mQTGcQ+8oIdMrccMdwnKxu0L3V67m Xle12yvvJh48mkzT9WmBFQKc7fsBKkOdXop6RyfI/7vV8ZmVjjgo0gakV8moWsVm +J+oI0lR5V0/l57MLTD1Six3VtibdUuymnEg7f+E9KKQ/Qfbu6b/8zHapvflklrM Je8H2ueldrmfrI/cwe7fz0FtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5EZrZJGc kKIfTNzmswKSU2S+sOQwHwYDVR0jBBgwFoAUF2vOFchi1HunYKH2ZTj4HVxJO4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNkU0LzMyRTk5M0MwQTY4 NDExRUY4RjVFRDM3RkM0RjlBRTAyL0Yydk9GY2hpMUh1bllLSDJaVGo0SFZ4Sk80 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjJ2T0ZjaGkxSHVuWUtIMlpUajRIVnhKTzRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NkU0LzMyRTk5M0MwQTY4NDExRUY4RjVFRDM3RkM0RjlBRTAyL0Yydk9GY2hpMUh1 bllLSDJaVGo0SFZ4Sk80RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEQi/tzDDiSnuvVMYSXl9Auiaq/qMth0gtx7BX9/Hrv9JfYoBml46tRe H9cwZeB5Z//MG3ucryv/0JhAXRByOfOOhsQ4JEidhhT12Q8wjWYJAYwjouqyr5BH p7WzuG2YR0nxNeNkIo7sSyFukPDIKOcs86MB4hUsf29NP4kjxIXj2koHixXZICKO a5r9eQZZNP+f+DISZt61JkTXYErfcsRRz340BjqCuvbuNl8ZD/1b+kMWeasHGbX2 uSKvncp9Q9+UlNZ0KeazfEVuBogQzaVcV/zviQIYJFFkIDDHsNJIf05z+Fjh+5L9 M0LJzrUPN+5fvEEN7WwXC5+m5edszls= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:06 2024 by rpki-client on console-ams.rpki-client.org