$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft File: pDc5u18gwUzF_EnjdVh9s7ciN68.mft (raw, json) Hash identifier: C84AziNQTiJPnhg3RaQ/YopEhwZAbt1kA++3ZtrbVLU= Subject key identifier: C0:DB:33:7C:BD:6B:7E:26:1D:03:E1:8B:DB:E0:5C:A3:76:73:D0:1D Authority key identifier: A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF Certificate issuer: /CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft Manifest number: F5 Signing time: Sat 23 Nov 2024 03:30:16 +0000 Manifest this update: Sat 23 Nov 2024 03:30:16 +0000 Manifest next update: Sat 30 Nov 2024 03:30:16 +0000 Files and hashes: 1: pDc5u18gwUzF_EnjdVh9s7ciN68.crl (hash: p4lpe3BpJYoWXNElZ5k4rwQ7QrrMuyZhnniVs0ElnKw=) 2: BF341AF869A911EE8CB76452C4F9AE02.roa (hash: es2BFpk/dVqzh/KiV65lQ+0ASQp0lQtHLBsKiiObL58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B7E/serialNumber=A43739BB5F20C14CC5FC49E375587DB3B72237AF Validity Not Before: Nov 23 03:30:16 2024 GMT Not After : Nov 30 03:30:16 2024 GMT Subject: CN=67414c48-1f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7e:51:c0:37:56:e9:b6:4c:64:be:59:fa:94: 07:d1:dc:ba:43:ae:98:b3:ff:4c:d8:33:cc:0c:bb: 45:b5:ce:89:ac:9c:e8:2b:d7:78:35:c7:19:e4:96: 61:1f:57:bd:af:00:2a:6f:bf:6d:ff:78:94:07:fd: 1e:4e:b2:de:5e:f3:a2:2c:50:c8:5d:11:30:ad:43: 8b:4c:1c:65:8d:b4:83:a1:18:e4:ea:7c:9b:d0:7a: ff:cc:75:df:d8:71:f0:da:45:fc:62:1f:83:c8:5a: 65:11:a9:c5:36:2f:7f:9e:c7:62:fa:ce:de:89:c6: 04:da:ae:22:15:ae:af:72:26:e7:ae:7f:65:3b:48: 69:ca:2d:86:8f:99:ea:0b:94:76:a9:02:27:58:7e: c1:6c:19:a8:ee:d5:67:63:c5:7e:6b:3a:fb:6e:32: d0:9e:c9:bd:da:0b:9f:67:14:60:ae:87:0c:3a:e5: 48:08:c1:71:06:d7:8d:fa:68:1b:20:d0:33:e1:04: f4:e3:9a:7e:71:4f:0f:91:42:f4:f1:4f:b9:1b:d4: 7e:3b:3b:a6:14:1b:21:e0:8c:b1:71:29:ad:60:6e: aa:4a:86:8f:b4:91:5e:ca:dc:6a:a1:25:fc:bf:a7: 04:1d:07:18:cb:a4:b2:ab:e6:01:d7:b1:39:17:1d: 17:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DB:33:7C:BD:6B:7E:26:1D:03:E1:8B:DB:E0:5C:A3:76:73:D0:1D X509v3 Authority Key Identifier: keyid:A4:37:39:BB:5F:20:C1:4C:C5:FC:49:E3:75:58:7D:B3:B7:22:37:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDc5u18gwUzF_EnjdVh9s7ciN68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B7E/73BC7AAC471711EEA446E346C4F9AE02/pDc5u18gwUzF_EnjdVh9s7ciN68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:25:2b:29:8d:5b:31:61:57:9f:53:de:f1:93:70:b5:51:5a: fe:e9:84:d9:38:59:a4:fc:1e:fa:73:c0:8b:91:7b:87:84:38: 4c:f2:5b:2b:3c:83:d5:be:f5:db:dc:99:72:0b:31:1d:81:19: 53:e4:53:ae:49:d2:90:b0:03:66:c3:4d:f1:80:a7:3c:ea:de: dc:19:f3:bf:82:5f:48:69:57:8c:c3:87:8c:21:dc:3b:b9:fa: 7d:76:77:d6:8d:e1:b9:68:fe:9b:cf:8a:7b:1f:ca:df:a2:5e: 58:b2:cf:21:73:0e:92:59:6c:ad:99:20:fa:b0:0b:3d:74:b9: 49:44:55:53:0c:f6:49:4a:a9:91:8a:b7:0c:fe:ef:ed:f1:da: b5:60:8b:41:10:1e:3c:53:21:bd:7c:d9:08:fd:c1:23:8f:c2: 38:e8:ac:9f:a6:b3:a2:de:c4:f9:fd:a9:f4:41:b1:77:d8:61: 5e:6e:c5:fa:00:8c:2a:dc:5f:ef:3e:35:bf:14:88:b0:1b:80: 2d:ef:fd:fe:33:2e:fb:0c:f0:20:37:6d:4a:8e:c1:cc:ad:ed: 02:69:60:72:17:86:06:9b:26:4f:ed:94:80:91:eb:6a:a2:cc: 46:9d:1d:41:84:fd:fc:fc:41:ca:3a:a2:b3:bf:11:d3:9f:56: 19:ae:5a:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCN0UxMTAvBgNVBAUTKEE0MzczOUJCNUYyMEMxNENDNUZDNDlFMzc1NTg3REIz QjcyMjM3QUYwHhcNMjQxMTIzMDMzMDE2WhcNMjQxMTMwMDMzMDE2WjAYMRYwFAYD VQQDEw02NzQxNGM0OC0xZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnn5RwDdW6bZMZL5Z+pQH0dy6Q66Ys/9M2DPMDLtFtc6JrJzoK9d4NccZ5JZh H1e9rwAqb79t/3iUB/0eTrLeXvOiLFDIXREwrUOLTBxljbSDoRjk6nyb0Hr/zHXf 2HHw2kX8Yh+DyFplEanFNi9/nsdi+s7eicYE2q4iFa6vcibnrn9lO0hpyi2Gj5nq C5R2qQInWH7BbBmo7tVnY8V+azr7bjLQnsm92gufZxRgrocMOuVICMFxBteN+mgb INAz4QT045p+cU8PkUL08U+5G9R+OzumFBsh4IyxcSmtYG6qSoaPtJFeytxqoSX8 v6cEHQcYy6Syq+YB17E5Fx0XXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDbM3y9 a34mHQPhi9vgXKN2c9AdMB8GA1UdIwQYMBaAFKQ3ObtfIMFMxfxJ43VYfbO3Ijev MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI3RS83M0JDN0FBQzQ3 MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dVekZfRW5qZFZoOXM3Y2lO NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BEYzV1MThnd1V6Rl9FbmpkVmg5czdjaU42OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI3RS83M0JDN0FBQzQ3MTcxMUVFQTQ0NkUzNDZDNEY5QUUwMi9wRGM1dTE4Z3dV ekZfRW5qZFZoOXM3Y2lONjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYJSspjVsxYVefU97xk3C1UVr+6YTZOFmk/B76c8CLkXuHhDhM8lsr PIPVvvXb3JlyCzEdgRlT5FOuSdKQsANmw03xgKc86t7cGfO/gl9IaVeMw4eMIdw7 ufp9dnfWjeG5aP6bz4p7H8rfol5Yss8hcw6SWWytmSD6sAs9dLlJRFVTDPZJSqmR ircM/u/t8dq1YItBEB48UyG9fNkI/cEjj8I46KyfprOi3sT5/an0QbF32GFebsX6 AIwq3F/vPjW/FIiwG4At7/3+My77DPAgN21KjsHMre0CaWByF4YGmyZP7ZSAketq osxGnR1BhP38/EHKOqKzvxHTn1YZrlpK -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:09 2024 by rpki-client on console-ams.rpki-client.org