$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft File: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft (raw, json) Hash identifier: Ulo5XHRwmYg9OnCfZ3S373rZ/VgvgC2XiErrCTowhBc= Subject key identifier: 9E:F6:3C:1E:22:84:1B:A9:42:83:AD:AB:BB:79:7B:19:03:43:7F:C6 Authority key identifier: 88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F Certificate issuer: /CN=A9175AA6/serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F Certificate serial: 0742 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft Manifest number: 073D Signing time: Fri 22 Nov 2024 21:09:56 +0000 Manifest this update: Fri 22 Nov 2024 21:09:55 +0000 Manifest next update: Fri 29 Nov 2024 21:09:55 +0000 Files and hashes: 1: iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl (hash: kGpwxgv9prAewsAs7J1R4JiME0mcxEL2Aiir7hLibeA=) 2: 030CCD12069611EB81CF2329C4F9AE02.roa (hash: 7kdaecQrFfrsndKpjXaOO6IRjRmwLt9+kq/Fe+7XLxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1858 (0x742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175AA6/serialNumber=88CD6D472DCA16B0F41F2EAE8ED921581C278D6F Validity Not Before: Nov 22 21:09:55 2024 GMT Not After : Nov 29 21:09:55 2024 GMT Subject: CN=6740f323-7afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:82:af:bc:f1:8b:4e:c2:1c:91:dc:34:b4: 7f:e8:96:f2:b5:71:e1:ae:79:a3:0b:10:d0:80:28: 2f:c1:40:49:1b:97:b7:c2:fd:f1:b4:82:4e:16:86: e6:d6:54:7f:d9:a2:c7:46:c5:29:68:c7:7d:2a:34: fd:55:6f:32:04:35:c4:9f:c5:82:10:ab:30:90:0c: 00:ad:6a:c3:7c:43:ec:11:75:5e:f5:50:58:43:26: 5f:03:ff:b2:98:90:50:d3:cf:6e:b7:65:98:41:e8: 50:26:ba:13:52:72:26:1d:6f:45:b8:99:74:2d:2c: 86:ce:a6:66:20:a5:4b:b9:0b:c8:5a:53:3e:e1:33: 82:d3:05:28:51:ee:02:c7:a9:cd:89:cc:9a:29:47: 0f:c6:fc:38:57:05:99:e0:dd:1b:3a:c7:22:dd:29: 55:4a:c6:db:07:44:dd:f3:e8:50:24:65:e9:bd:fa: 9f:5f:78:94:4c:6a:f6:3c:5e:b5:da:8c:cb:4f:7f: 54:e4:47:a9:3d:0c:b1:19:2c:5f:95:7c:6c:36:1c: ba:4a:ff:14:5a:4c:2d:bb:2b:09:65:69:d8:68:3e: b8:10:a1:9c:c0:47:71:4c:07:d4:92:2c:74:a5:44: b1:2f:9c:64:31:24:5e:a8:ad:69:f0:01:12:3a:6b: a6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F6:3C:1E:22:84:1B:A9:42:83:AD:AB:BB:79:7B:19:03:43:7F:C6 X509v3 Authority Key Identifier: keyid:88:CD:6D:47:2D:CA:16:B0:F4:1F:2E:AE:8E:D9:21:58:1C:27:8D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AA6/AD9EDF06069411EBB9D1EB27C4F9AE02/iM1tRy3KFrD0Hy6ujtkhWBwnjW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:32:39:b7:09:13:9a:a5:ba:18:ac:65:7c:48:0c:77:f7:89: c4:f9:7a:bc:7d:63:d8:4a:2d:13:89:87:c9:bd:aa:45:eb:52: c0:fd:4e:6e:e1:8e:04:12:d5:46:19:e9:e3:14:d7:2c:16:6f: cf:68:2e:d5:aa:ae:15:19:e0:5a:4c:b3:5a:35:25:71:2e:76: 44:d2:20:e0:37:cd:fd:3e:fb:a9:f2:a2:c6:ff:bc:a2:f6:f0: 89:c1:a7:9d:86:32:10:6c:37:34:a6:04:8b:77:e3:f7:8f:b7: 88:bb:dd:cf:df:9f:5b:04:7b:39:b3:4f:86:a1:ea:20:33:64: 04:0a:e5:63:1f:dc:a0:39:6d:63:c5:45:08:39:1d:c8:b0:d7: 4c:48:db:81:14:8f:8c:8f:26:31:d5:a4:3c:b2:97:f2:10:4e: 4c:b6:be:ac:93:e8:54:cc:d0:fa:95:c7:64:b2:1d:6e:41:ad: d2:68:7b:2c:3d:2f:ef:41:24:43:08:85:f7:f0:d4:d7:ec:6d: 10:0a:1c:5c:db:12:f4:23:22:14:b3:91:c0:0e:0a:50:26:e6: dd:3f:84:6f:cf:29:79:81:8f:28:fa:0c:67:90:69:82:9b:ce: 00:1e:b0:52:7b:ad:22:48:3f:65:c7:fd:02:7a:a1:b8:c6:04: 79:d1:84:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVBQTYxMTAvBgNVBAUTKDg4Q0Q2RDQ3MkRDQTE2QjBGNDFGMkVBRThFRDkyMTU4 MUMyNzhENkYwHhcNMjQxMTIyMjEwOTU1WhcNMjQxMTI5MjEwOTU1WjAYMRYwFAYD VQQDEw02NzQwZjMyMy03YWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcCCr7zxi07CHJHcNLR/6JbytXHhrnmjCxDQgCgvwUBJG5e3wv3xtIJOFobm 1lR/2aLHRsUpaMd9KjT9VW8yBDXEn8WCEKswkAwArWrDfEPsEXVe9VBYQyZfA/+y mJBQ089ut2WYQehQJroTUnImHW9FuJl0LSyGzqZmIKVLuQvIWlM+4TOC0wUoUe4C x6nNicyaKUcPxvw4VwWZ4N0bOsci3SlVSsbbB0Td8+hQJGXpvfqfX3iUTGr2PF61 2ozLT39U5EepPQyxGSxflXxsNhy6Sv8UWkwtuysJZWnYaD64EKGcwEdxTAfUkix0 pUSxL5xkMSReqK1p8AESOmumOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ72PB4i hBupQoOtq7t5exkDQ3/GMB8GA1UdIwQYMBaAFIjNbUctyhaw9B8uro7ZIVgcJ41v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFBNi9BRDlFREYwNjA2 OTQxMUVCQjlEMUVCMjdDNEY5QUUwMi9pTTF0UnkzS0ZyRDBIeTZ1anRraFdCd25q VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lNMXRSeTNLRnJEMEh5NnVqdGtoV0J3bmpXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUFBNi9BRDlFREYwNjA2OTQxMUVCQjlEMUVCMjdDNEY5QUUwMi9pTTF0UnkzS0Zy RDBIeTZ1anRraFdCd25qVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQMjm3CROapboYrGV8SAx394nE+Xq8fWPYSi0TiYfJvapF61LA/U5u 4Y4EEtVGGenjFNcsFm/PaC7Vqq4VGeBaTLNaNSVxLnZE0iDgN839Pvup8qLG/7yi 9vCJwaedhjIQbDc0pgSLd+P3j7eIu93P359bBHs5s0+GoeogM2QECuVjH9ygOW1j xUUIOR3IsNdMSNuBFI+MjyYx1aQ8spfyEE5Mtr6sk+hUzND6lcdksh1uQa3SaHss PS/vQSRDCIX38NTX7G0QChxc2xL0IyIUs5HADgpQJubdP4Rvzyl5gY8o+gxnkGmC m84AHrBSe60iSD9lx/0CeqG4xgR50YQw -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:31 2024 by rpki-client on console-ams.rpki-client.org