$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft File: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json) Hash identifier: J5WjknVJQIZaKkdTEM05jvAIdn2iv/i9/3dI6CpDIzo= Subject key identifier: 61:03:FA:86:F7:4C:E2:54:81:66:D6:0D:9D:D8:7B:9B:DF:C2:20:2B Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36 Certificate issuer: /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836 Certificate serial: 0D8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft Manifest number: 0D7D Signing time: Fri 22 Nov 2024 17:54:41 +0000 Manifest this update: Fri 22 Nov 2024 17:54:40 +0000 Manifest next update: Fri 29 Nov 2024 17:54:40 +0000 Files and hashes: 1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: J24yvxgZ13QRZtnZR1NsrnCeApJ15/XbL4V9uPsJ22I=) 2: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: 6b2tMOXqi0MLk/Hu4xH6AhhU3ZFcsYoMzDIzjHh7G84=) 3: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: pfOPMFW4kQhWgEqFAOwq3YPcCBwScpJaJmY0T/CFlyo=) 4: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: +n1zXMDCEU4YWE/0cXk32wV8ITOzuCJeFwK/MfgKlSw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3470 (0xd8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836 Validity Not Before: Nov 22 17:54:40 2024 GMT Not After : Nov 29 17:54:40 2024 GMT Subject: CN=6740c560-fd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:5c:94:66:72:97:d9:2e:1b:d5:37:c9:06: d1:61:7b:26:6f:59:9d:40:03:44:4f:b7:9c:20:1f: 8c:da:77:1a:87:5d:89:06:9a:b1:69:9e:7a:07:5b: f5:0e:e2:68:61:84:84:e7:88:dc:28:c2:cf:28:57: f1:81:af:62:8c:10:43:0c:6a:ee:c6:7a:e5:a0:79: 41:94:d8:c3:2a:75:12:e2:b1:45:c9:24:5c:d5:33: 35:9f:78:19:da:bb:86:9e:cf:fd:92:c4:cb:03:b2: 2b:c1:8c:d8:15:ee:61:37:4c:01:c8:99:b7:e5:a4: 09:0d:99:34:0b:6d:62:3f:b5:ed:75:33:0a:07:fe: 59:ee:9a:8a:65:37:85:24:7a:7b:ff:d0:86:8b:3c: 68:b0:7c:d3:84:d9:1f:0c:ba:aa:98:56:ba:d4:0e: b9:a0:38:71:da:9e:6b:c3:ed:54:18:5d:e3:22:5f: ad:42:f0:6e:ba:10:25:53:b9:a4:7b:bc:19:70:41: b5:5e:58:e8:92:3a:d2:41:66:03:2b:e6:e8:6e:98: 13:4c:a1:64:fe:ab:82:4a:1c:98:a8:dd:5e:27:b7: d1:59:9e:bd:00:a7:85:17:bd:4c:dd:a0:7f:a3:3f: 52:cf:cf:33:8f:12:51:85:24:12:8b:3e:45:21:41: aa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:03:FA:86:F7:4C:E2:54:81:66:D6:0D:9D:D8:7B:9B:DF:C2:20:2B X509v3 Authority Key Identifier: keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:29:40:48:e5:e0:a8:1a:9c:86:cd:3d:35:68:57:d1:0e:94: f6:20:43:49:e7:e7:9a:ac:b8:94:bc:7d:53:77:6b:18:b5:e8: 35:e8:a2:42:93:42:cc:1d:f3:9d:3f:5a:b8:96:7b:13:1f:5f: ef:44:3a:f6:27:80:bf:85:12:e2:2d:ca:07:69:41:82:42:86: f3:22:51:f8:c6:1c:67:53:fa:63:9c:65:7b:64:33:99:08:a9: 8d:22:77:bb:26:06:a1:9a:ff:97:b5:21:c9:2f:0a:66:70:43: 3e:be:61:bf:ff:ca:24:1e:45:85:4d:c9:9d:f0:a7:20:b2:63: b8:cc:d8:2a:5a:d9:97:6f:39:11:89:8d:52:cf:16:86:79:1d: d6:9f:d1:16:a7:0f:a5:cd:64:05:60:76:b8:72:03:e5:3c:af: 14:df:7b:2d:83:0a:21:4a:7b:12:d4:86:55:f3:33:8e:db:84: 2c:10:4a:7c:e8:23:50:be:ef:76:9d:12:cb:0c:e6:1c:5c:21: 40:58:fb:be:93:7d:c6:e0:eb:7d:20:49:10:64:3b:34:aa:8c: c5:8c:51:27:8d:5a:03:89:46:9f:58:c6:e1:27:97:1e:af:b0: fe:d8:44:6a:e4:0e:fe:0d:9a:23:b9:0d:f3:39:3f:f4:df:2b: 38:d2:36:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNEQjcxMTAvBgNVBAUTKEU1MThFOTQ4MTVDNDZEN0Q4RTZGRUY0RUJDM0QxOERG MEUyMUY4MzYwHhcNMjQxMTIyMTc1NDQwWhcNMjQxMTI5MTc1NDQwWjAYMRYwFAYD VQQDEw02NzQwYzU2MC1mZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJ9clGZyl9kuG9U3yQbRYXsmb1mdQANET7ecIB+M2ncah12JBpqxaZ56B1v1 DuJoYYSE54jcKMLPKFfxga9ijBBDDGruxnrloHlBlNjDKnUS4rFFySRc1TM1n3gZ 2ruGns/9ksTLA7IrwYzYFe5hN0wByJm35aQJDZk0C21iP7XtdTMKB/5Z7pqKZTeF JHp7/9CGizxosHzThNkfDLqqmFa61A65oDhx2p5rw+1UGF3jIl+tQvBuuhAlU7mk e7wZcEG1XljokjrSQWYDK+bobpgTTKFk/quCShyYqN1eJ7fRWZ69AKeFF71M3aB/ oz9Sz88zjxJRhSQSiz5FIUGqcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGED+ob3 TOJUgWbWDZ3Ye5vfwiArMB8GA1UdIwQYMBaAFOUY6UgVxG19jm/vTrw9GN8OIfg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0RCNy8wRjM3NTk5RUI1 MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJYMk9iLTlPdkQwWTN3NGgt RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVSanBTQlhFYlgyT2ItOU92RDBZM3c0aC1EWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0RCNy8wRjM3NTk5RUI1MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJY Mk9iLTlPdkQwWTN3NGgtRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyKUBI5eCoGpyGzT01aFfRDpT2IENJ5+earLiUvH1Td2sYteg16KJC k0LMHfOdP1q4lnsTH1/vRDr2J4C/hRLiLcoHaUGCQobzIlH4xhxnU/pjnGV7ZDOZ CKmNIne7Jgahmv+XtSHJLwpmcEM+vmG//8okHkWFTcmd8KcgsmO4zNgqWtmXbzkR iY1SzxaGeR3Wn9EWpw+lzWQFYHa4cgPlPK8U33stgwohSnsS1IZV8zOO24QsEEp8 6CNQvu92nRLLDOYcXCFAWPu+k33G4Ot9IEkQZDs0qozFjFEnjVoDiUafWMbhJ5ce r7D+2ERq5A7+DZojuQ3zOT/03ys40jZr -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org