$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json) Hash identifier: E1kNMbtfA8MotwRhpMgjRDUtHYmtnxVxBy2iCWCvOQQ= Subject key identifier: 0F:64:35:79:53:F3:12:65:0E:BA:19:89:8A:32:8F:9C:E8:85:A4:D6 Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft Manifest number: 18 Signing time: Thu 21 Nov 2024 06:00:37 +0000 Manifest this update: Thu 21 Nov 2024 06:00:37 +0000 Manifest next update: Thu 28 Nov 2024 06:00:37 +0000 Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: hWW5IFq8aaOh5r2O28zNWSgr3kB66nZ4B8vC6+K8lIM=) 2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: kBrZwIHTbaSnaE7XdLULllQIjEnMuSEphHZrV4DhNKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Validity Not Before: Nov 21 06:00:37 2024 GMT Not After : Nov 28 06:00:37 2024 GMT Subject: CN=673ecc85-9181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:52:b8:5e:cb:7a:69:fe:53:ad:12:7c:d5:8b: 59:ab:c3:74:c7:30:fe:13:f1:c8:89:7d:2e:04:ac: 47:1d:9c:1e:18:eb:4c:53:e9:c4:97:78:81:73:3f: a4:60:6e:d3:8c:9b:fb:55:64:17:44:22:b3:69:ee: a7:1f:46:8a:4e:38:69:f5:0b:9a:90:fc:d7:ec:dc: f1:2f:5e:4a:d3:6b:e9:f0:86:b8:92:55:68:e5:34: 03:4f:23:b2:a4:29:69:ed:2f:ab:1b:68:a0:a5:ce: 2a:61:ab:a6:41:ab:40:af:94:03:9d:28:2c:bc:5d: f4:e0:29:96:1a:15:25:74:de:cb:95:56:58:70:70: 17:c0:46:e0:02:19:b5:c5:36:92:87:f5:10:d2:49: ed:c7:15:0a:12:b3:2b:fa:69:21:5a:a2:02:60:b8: c7:26:3e:0d:5b:f5:a7:93:07:b1:22:16:90:77:36: c0:cc:3a:f2:81:8e:2f:45:c0:1c:0f:e8:fa:3a:b6: af:f5:d2:38:de:18:ac:06:bc:17:d6:ff:1e:ad:42: 53:85:40:0e:85:9e:cc:7f:c6:ee:1d:e9:f2:0b:d7: 6e:25:43:fd:2e:e5:f8:6b:c9:88:7b:3a:0b:97:36: fa:7b:59:56:18:ba:1f:a3:8a:ad:f4:24:44:63:36: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:64:35:79:53:F3:12:65:0E:BA:19:89:8A:32:8F:9C:E8:85:A4:D6 X509v3 Authority Key Identifier: keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:27:4f:b0:db:90:e0:c7:82:97:f5:b9:06:34:a5:fb:27:77: c9:02:3c:28:7a:d6:59:72:1b:78:db:91:13:e2:0b:71:3c:7d: d0:6f:cc:61:c8:3f:46:6b:40:d5:dc:4e:d8:66:0e:53:27:4c: 11:26:dc:f6:3a:bd:32:6e:27:88:fc:09:ad:96:c0:8e:a1:d6: 54:0f:b2:d3:df:8e:2d:42:c2:12:df:4f:58:ec:77:0b:9b:00: 07:d5:66:37:23:5f:80:c8:ee:8f:9a:b6:3b:e8:76:f7:cf:31: 27:8e:ed:61:77:f7:65:a5:6b:78:eb:1b:0b:f3:76:e7:d6:b7: c8:80:33:1f:a7:9f:d9:70:cf:0e:42:07:77:6f:63:9c:b2:87: 52:bb:ef:ae:52:86:8e:63:2e:fb:33:6a:c8:8b:95:8f:77:7f: be:2d:c3:be:28:29:48:17:12:b7:99:c6:93:f3:65:49:ec:63: 89:1b:cc:7b:3f:23:8a:95:ca:06:ad:e0:d9:d9:31:ff:9b:17: e9:fb:b9:11:08:99:94:c4:5e:61:32:44:4f:0f:a8:e5:26:b1: 0f:2f:c9:13:cf:62:07:9c:9c:73:dc:39:b4:54:73:9f:3b:8a: 4a:86:36:f1:fc:1a:bb:d9:c1:78:14:48:97:01:36:3d:ed:83: e5:94:f6:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjYzMzExMC8GA1UEBRMoMTNEN0ExM0I0MjNCQjZFODdBMUE3NUI3NDkzRjBCQzE5 RDBDRUFBMzAeFw0yNDExMjEwNjAwMzdaFw0yNDExMjgwNjAwMzdaMBgxFjAUBgNV BAMTDTY3M2VjYzg1LTkxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXUrhey3pp/lOtEnzVi1mrw3THMP4T8ciJfS4ErEcdnB4Y60xT6cSXeIFzP6Rg btOMm/tVZBdEIrNp7qcfRopOOGn1C5qQ/Nfs3PEvXkrTa+nwhriSVWjlNANPI7Kk KWntL6sbaKClziphq6ZBq0CvlAOdKCy8XfTgKZYaFSV03suVVlhwcBfARuACGbXF NpKH9RDSSe3HFQoSsyv6aSFaogJguMcmPg1b9aeTB7EiFpB3NsDMOvKBji9FwBwP 6Po6tq/10jjeGKwGvBfW/x6tQlOFQA6Fnsx/xu4d6fIL124lQ/0u5fhryYh7OguX Nvp7WVYYuh+jiq30JERjNhaFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD2Q1eVPz EmUOuhmJijKPnOiFpNYwHwYDVR0jBBgwFoAUE9ehO0I7tuh6GnW3ST8LwZ0M6qMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNjMzL0QwQUI5M0U0ODZE OTExRUY4QjhCRUIxRkM0RjlBRTAyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRTllaE8wSTd0dWg2R25XM1NUOEx3WjBNNnFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NjMzL0QwQUI5M0U0ODZEOTExRUY4QjhCRUIxRkM0RjlBRTAyL0U5ZWhPMEk3dHVo NkduVzNTVDhMd1owTTZxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4nT7DbkODHgpf1uQY0pfsnd8kCPCh61llyG3jbkRPiC3E8fdBvzGHI P0ZrQNXcTthmDlMnTBEm3PY6vTJuJ4j8Ca2WwI6h1lQPstPfji1CwhLfT1jsdwub AAfVZjcjX4DI7o+atjvodvfPMSeO7WF392Wla3jrGwvzdufWt8iAMx+nn9lwzw5C B3dvY5yyh1K7765Sho5jLvszasiLlY93f74tw74oKUgXEreZxpPzZUnsY4kbzHs/ I4qVygat4NnZMf+bF+n7uREImZTEXmEyRE8PqOUmsQ8vyRPPYgecnHPcObRUc587 ikqGNvH8GrvZwXgUSJcBNj3tg+WU9m0= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:06 2024 by rpki-client on console-ams.rpki-client.org