$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json) Hash identifier: ZKB3MSJzenzTx+2g3NIW8pn2TYG+tK7upZXCmrp1Trs= Subject key identifier: CF:0D:00:D1:5F:00:59:02:51:97:5A:2D:F8:C1:DC:1E:39:85:6C:C8 Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Certificate serial: 1769 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft Manifest number: 1707 Signing time: Wed 20 Nov 2024 16:36:04 +0000 Manifest this update: Wed 20 Nov 2024 16:36:04 +0000 Manifest next update: Wed 27 Nov 2024 16:36:04 +0000 Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: MnxB3Qy038WYTAemoHUeAdFlsrA3P/ZpLgX1/mNooGo=) 2: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: rlaLzwVaLuL4ngSmjTuU0HKWW8Z5rb2WxCS8BXA4T2A=) 3: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: f4Nb70DFVEDtxBNhflIcmdj1De7oL7oNb+VI5wy+7A8=) 4: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: HwVvfhhBB2RSjFMDjowAziG6alcP2zuXw5LmUAX2gK8=) 5: B04675FC959711EA9F290A33C4F9AE02.roa (hash: uYFRc83EBaJfN2GivSwIY06UqczGnSbs78PJfa9CAEA=) 6: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: 9OXjAAMYLAB5L3agld9axHr8PefYFycM5j/bsa1mWpA=) 7: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: th7HEEEVK4zRCYHv7MzA93JGFKTxnTNbxPYDrvgQY58=) 8: 696975861A3611EEA597E872C4F9AE02.roa (hash: B3kL8S/jc+3ePihG4qejPX9ur4Lx70UDT6EX1xakBa4=) 9: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: jF4bRTQ1bhj8ogQbDSaGxO9z7G4aPx9aLlwCJEOU1qE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5993 (0x1769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD Validity Not Before: Nov 20 16:36:04 2024 GMT Not After : Nov 27 16:36:04 2024 GMT Subject: CN=673e0ff4-b0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:0c:24:ce:aa:d0:2a:ef:22:74:63:0c:64: cf:12:ee:2e:97:6b:17:b6:ed:b4:53:89:82:9b:b4: 4f:13:f4:6e:15:f7:ea:ba:9b:ca:c4:6e:e8:05:c1: 21:b4:60:64:d0:19:2a:c6:1b:eb:9f:de:91:39:59: 0e:7d:48:f3:89:9d:4b:03:e2:32:40:cb:bd:e0:3e: a5:12:b2:88:be:ee:cb:1e:56:bd:23:27:9d:2e:3a: 44:b5:d8:4b:fc:1d:f6:4b:56:fc:d1:d9:1d:9a:82: 78:39:cc:1a:99:f7:76:9a:a8:94:56:21:de:53:dc: 08:48:99:f6:45:6f:03:87:90:d1:10:32:2a:0e:98: 5d:f2:89:b4:80:0b:da:66:01:1d:de:1e:83:13:de: 70:73:4c:31:b9:c2:ad:f9:be:05:f3:47:49:b5:4b: 3e:55:19:df:e5:32:72:89:86:99:48:42:c4:70:ef: bd:fc:0d:cb:3e:99:9f:a1:74:fc:a8:ca:2e:e2:90: 3e:f7:cf:bc:40:d4:cd:85:9d:c5:b3:f4:08:6c:41: f6:5f:80:68:b0:b3:5e:75:56:b3:b8:48:e3:7e:80: 4a:19:ad:1b:92:3d:0e:bc:8d:b8:2a:77:fb:f1:88: 1a:2f:be:38:07:07:63:b3:72:03:ed:3c:35:11:7a: 06:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0D:00:D1:5F:00:59:02:51:97:5A:2D:F8:C1:DC:1E:39:85:6C:C8 X509v3 Authority Key Identifier: keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9f:d2:e6:6f:bb:95:6f:14:cd:a3:41:fe:40:fa:43:05:1a: c2:7d:1c:fc:52:96:bc:89:5e:19:b8:2e:16:c3:bb:d0:25:e8: 3f:42:67:6d:33:4c:f5:f1:fb:a4:3e:b5:8a:02:f3:84:3c:a8: 91:d2:e3:1a:1e:93:80:c8:ce:c1:73:8c:8a:24:fc:16:e0:72: 51:54:0c:1c:3d:ce:a8:bd:b6:df:0a:ed:27:1f:ee:f9:cb:ce: da:6e:24:f6:19:5f:8d:35:4c:d5:26:b2:b5:48:c1:20:71:cd: fc:6f:05:29:4b:2d:78:dd:e1:70:43:8f:06:7b:4a:41:1b:6e: 41:74:f7:65:2b:15:85:9e:c5:9e:2b:86:44:52:08:f3:6c:53: 73:2f:63:fc:2b:d2:d8:c2:b6:6e:9d:a6:b0:fe:39:b7:88:d7: 9b:02:b7:23:73:10:4f:38:90:d2:d4:e8:21:82:14:aa:8e:00: e7:98:71:ea:9a:6d:8b:3d:94:e5:5d:55:47:66:4f:73:40:5e: 85:17:fd:bf:32:7f:8d:56:bf:0c:7e:c0:51:ec:26:46:96:9b: 09:27:b9:20:d2:9b:3d:3f:c5:9d:74:5a:14:8c:c4:7b:2e:54: 51:de:1a:8e:38:41:4e:bf:bc:a7:b6:28:13:19:29:82:45:84: aa:3a:67:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy RDFBQ0Q4RkQwHhcNMjQxMTIwMTYzNjA0WhcNMjQxMTI3MTYzNjA0WjAYMRYwFAYD VQQDEw02NzNlMGZmNC1iMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1kMJM6q0CrvInRjDGTPEu4ul2sXtu20U4mCm7RPE/RuFffqupvKxG7oBcEh tGBk0Bkqxhvrn96ROVkOfUjziZ1LA+IyQMu94D6lErKIvu7LHla9IyedLjpEtdhL /B32S1b80dkdmoJ4Ocwamfd2mqiUViHeU9wISJn2RW8Dh5DREDIqDphd8om0gAva ZgEd3h6DE95wc0wxucKt+b4F80dJtUs+VRnf5TJyiYaZSELEcO+9/A3LPpmfoXT8 qMou4pA+98+8QNTNhZ3Fs/QIbEH2X4BosLNedVazuEjjfoBKGa0bkj0OvI24Knf7 8YgaL744Bwdjs3ID7Tw1EXoGcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8NANFf AFkCUZdaLfjB3B45hWzIMB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri84NDhDODU3Q0RGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRv N1BhMThlTWcwSHN0R3MyUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMn9Lmb7uVbxTNo0H+QPpDBRrCfRz8Upa8iV4ZuC4Ww7vQJeg/Qmdt M0z18fukPrWKAvOEPKiR0uMaHpOAyM7Bc4yKJPwW4HJRVAwcPc6ovbbfCu0nH+75 y87abiT2GV+NNUzVJrK1SMEgcc38bwUpSy143eFwQ48Ge0pBG25BdPdlKxWFnsWe K4ZEUgjzbFNzL2P8K9LYwrZunaaw/jm3iNebArcjcxBPOJDS1OghghSqjgDnmHHq mm2LPZTlXVVHZk9zQF6FF/2/Mn+NVr8MfsBR7CZGlpsJJ7kg0ps9P8WddFoUjMR7 LlRR3hqOOEFOv7yntigTGSmCRYSqOmdQ -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:22 2024 by rpki-client on console-ams.rpki-client.org