$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft File: ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json) Hash identifier: NnQdF22JibeBvRg6jpxdaT9wNRV1Ie9F1GdgetFBo/U= Subject key identifier: 10:94:B7:D9:DC:5B:F1:0C:4E:0B:1E:76:A4:F9:14:9E:F8:8B:E5:48 Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft Manifest number: 04D4 Signing time: Fri 22 Nov 2024 23:25:00 +0000 Manifest this update: Fri 22 Nov 2024 23:24:59 +0000 Manifest next update: Fri 29 Nov 2024 23:24:59 +0000 Files and hashes: 1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: s0ZwcCaKsQZhqFFoKE8EeF2wdIw0iWg/sQp7v7cgy7s=) 2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: 9EHn/O7TWbIzxUUf7sMxruBfENB+nlmVCyCtMi2XPLc=) 3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: lPjfdwsG9MxSbp4hrYgWXk0XAJ3QHf0VRvCcBo4gZRI=) 4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: QPyPuuXiEoxMRcuvSgY9i0fqsHr66Z613AzBKY7x8bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Nov 22 23:24:59 2024 GMT Not After : Nov 29 23:24:59 2024 GMT Subject: CN=674112cb-88b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1a:23:64:d1:cc:48:8e:2f:37:cd:20:6f:9e: ee:3d:4c:52:27:7e:92:b3:73:90:d8:0f:0c:43:8a: af:1a:2a:a2:2c:63:b4:fb:8a:ff:ff:e5:e3:99:f2: 63:7c:a4:e0:46:67:71:fc:0f:11:68:60:97:48:95: 29:d9:e3:90:f6:b8:cc:d5:6c:49:9f:af:d0:a4:1e: f0:10:bc:9a:4f:04:e5:ff:69:e6:2f:30:af:b4:6c: ae:cc:a6:88:df:90:8a:0e:b6:e8:85:7c:b4:f9:1a: d8:80:ac:cf:95:24:bc:48:7f:44:14:3d:9f:44:83: 00:5f:0e:b3:18:73:2b:65:9e:e7:69:00:9e:f1:82: 8e:f9:9b:85:32:23:17:58:62:b6:bd:73:07:f1:f9: 68:99:fe:60:be:c5:1a:bf:8e:47:51:b8:d5:7d:1e: 00:7c:ca:3c:ec:0c:17:3b:df:ff:59:3d:d4:da:2f: b1:0d:27:bf:4b:c7:cf:2a:8d:31:67:4f:02:20:6c: d7:cd:95:22:72:eb:74:dc:22:66:c7:f5:fd:50:53: aa:c0:43:f4:7b:19:c6:72:5b:5d:f7:d1:83:4a:d7: be:69:cd:2e:64:ac:31:21:54:65:f1:fd:62:39:04: a7:d6:10:be:d9:7a:f5:77:6b:29:9c:ef:96:2c:56: 3a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:94:B7:D9:DC:5B:F1:0C:4E:0B:1E:76:A4:F9:14:9E:F8:8B:E5:48 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:20:d1:cb:ea:92:20:c7:c4:5d:6f:cc:e3:55:65:75:08:e9: b9:b5:c0:2b:8b:45:f9:b7:6e:bc:f8:cf:56:7f:88:96:54:bf: ee:1c:e5:1a:ce:f6:10:d1:80:6b:b4:ff:0c:3d:0d:8b:09:ec: 12:30:91:34:0d:c0:04:6b:99:6b:04:a6:f3:3a:13:dc:6b:3c: a9:67:5a:dd:cf:ae:25:ef:42:34:50:9e:f3:45:4e:f9:eb:de: bd:d9:50:2d:80:bf:a3:56:6f:dd:9d:ee:cd:a4:4e:a9:89:82: 1e:aa:9c:6d:e7:bb:90:56:e2:9c:f4:7e:12:8f:67:73:49:6a: 22:7a:09:18:47:71:17:04:51:09:8b:ad:61:71:74:82:1b:af: 24:3d:7b:23:3e:1d:08:e8:09:de:9b:ce:9a:f7:d8:02:f4:ed: c1:09:58:f0:56:d1:d3:88:9b:a3:dd:8d:bb:02:e4:72:6b:0a: 24:70:b8:93:ad:20:bc:ba:6e:97:29:dd:b3:90:0e:cc:c7:42: 21:15:f3:c8:d8:9d:71:7d:2d:69:40:1f:83:2c:d0:31:b6:c8: 11:52:67:a1:aa:e3:df:03:3c:f7:03:35:18:22:4f:ac:f8:b1: 4e:55:fb:21:9b:a1:dd:85:6d:9f:19:69:f1:2a:0d:66:b0:b0: 1d:9e:9c:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjQxMTIyMjMyNDU5WhcNMjQxMTI5MjMyNDU5WjAYMRYwFAYD VQQDEw02NzQxMTJjYi04OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhojZNHMSI4vN80gb57uPUxSJ36Ss3OQ2A8MQ4qvGiqiLGO0+4r//+XjmfJj fKTgRmdx/A8RaGCXSJUp2eOQ9rjM1WxJn6/QpB7wELyaTwTl/2nmLzCvtGyuzKaI 35CKDrbohXy0+RrYgKzPlSS8SH9EFD2fRIMAXw6zGHMrZZ7naQCe8YKO+ZuFMiMX WGK2vXMH8flomf5gvsUav45HUbjVfR4AfMo87AwXO9//WT3U2i+xDSe/S8fPKo0x Z08CIGzXzZUicut03CJmx/X9UFOqwEP0exnGcltd99GDSte+ac0uZKwxIVRl8f1i OQSn1hC+2Xr1d2spnO+WLFY6nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCUt9nc W/EMTgsedqT5FJ74i+VIMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZINHL6pIgx8Rdb8zjVWV1COm5tcAri0X5t268+M9Wf4iWVL/uHOUa zvYQ0YBrtP8MPQ2LCewSMJE0DcAEa5lrBKbzOhPcazypZ1rdz64l70I0UJ7zRU75 69692VAtgL+jVm/dne7NpE6piYIeqpxt57uQVuKc9H4Sj2dzSWoiegkYR3EXBFEJ i61hcXSCG68kPXsjPh0I6Anem86a99gC9O3BCVjwVtHTiJuj3Y27AuRyawokcLiT rSC8um6XKd2zkA7Mx0IhFfPI2J1xfS1pQB+DLNAxtsgRUmehquPfAzz3AzUYIk+s +LFOVfshm6HdhW2fGWnxKg1msLAdnpw3 -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:23 2024 by rpki-client on console-ams.rpki-client.org