$ rpki-client -vvf rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft File: mpwxvYeWc4abPI8FWW6IFVgvEdA.mft (raw, json) Hash identifier: lMATF4qwvBTbArAQd3nKl4XQiBD6BqcTOcqDkFoAWxI= Subject key identifier: 65:44:E0:0B:36:90:EA:2E:09:A8:F7:D3:0B:6D:AD:E5:84:92:F0:F1 Authority key identifier: 9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 Certificate issuer: /CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Certificate serial: 0BEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft Manifest number: 0BE2 Signing time: Fri 22 Nov 2024 18:25:15 +0000 Manifest this update: Fri 22 Nov 2024 18:25:14 +0000 Manifest next update: Fri 29 Nov 2024 18:25:14 +0000 Files and hashes: 1: mpwxvYeWc4abPI8FWW6IFVgvEdA.crl (hash: tQI8wayA5H7nr9cPsVNgzPT3QtzZB0x4XxYyiRqfTVA=) 2: 58AEC9929C0F11EA9CC4217CC4F9AE02.roa (hash: rjjlCBXic9PjXjyPWM+A+lhdUtqC6LPHHyzyg5jp9Pc=) 3: 98DC875C050111EA9BDD372BC4F9AE02.roa (hash: tUTz8eY+t4ddLMBAcdiLEQQ0A3k/C+6KL0Lp4wdaHaA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3054 (0xbee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91856C4/serialNumber=9A9C31BD879673869B3C8F05596E8815582F11D0 Validity Not Before: Nov 22 18:25:14 2024 GMT Not After : Nov 29 18:25:14 2024 GMT Subject: CN=6740cc8b-694e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:e1:88:12:bd:cf:9e:99:75:6b:07:c4:29: 2a:b8:3c:69:05:b8:ff:f9:20:25:51:8a:21:38:ec: 8c:90:09:e6:3b:f7:ed:3d:f3:af:7d:4d:43:dd:80: 96:2b:98:a8:c5:ce:5e:b5:38:eb:53:db:87:c2:cd: c2:ec:d4:98:96:84:df:72:2a:06:9b:65:54:6b:a8: 0a:14:c4:0e:44:78:bc:d3:df:d5:77:60:f5:35:4c: b6:26:75:11:0f:cb:29:dc:a0:61:0b:61:5d:f0:f2: 66:c9:4f:12:a8:38:d4:59:a7:55:1b:87:41:db:e4: 52:dc:d4:81:a3:86:16:e6:a5:d9:3c:99:63:76:23: ce:a7:18:7b:16:e6:5e:cd:43:42:99:97:0e:08:e1: c6:c4:71:a0:f1:e6:1a:2c:59:21:6f:fc:55:b0:68: e7:32:9f:43:81:80:50:52:74:90:42:c8:df:5f:42: 68:05:47:7a:b4:da:19:ef:dc:eb:f9:61:f0:c9:7f: 32:d4:c6:cf:49:d3:47:ed:26:8a:b7:35:4a:a5:27: 00:f0:bf:89:5a:e8:21:24:93:b3:0d:0f:80:33:4f: af:58:fb:94:64:ed:60:b2:a4:5e:5e:d3:5d:83:c6: 2d:93:5e:7d:7c:5b:e4:74:50:de:31:ff:3b:41:9f: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:44:E0:0B:36:90:EA:2E:09:A8:F7:D3:0B:6D:AD:E5:84:92:F0:F1 X509v3 Authority Key Identifier: keyid:9A:9C:31:BD:87:96:73:86:9B:3C:8F:05:59:6E:88:15:58:2F:11:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mpwxvYeWc4abPI8FWW6IFVgvEdA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91856C4/A3BAD8E204FF11EA93EE9A23C4F9AE02/mpwxvYeWc4abPI8FWW6IFVgvEdA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a2:7c:47:e3:73:8c:ab:42:12:c9:66:ad:2f:b3:2b:b9:13: 73:d9:33:b1:fb:f7:54:74:43:b3:29:58:9d:bc:98:a9:8b:93: a2:db:01:9c:ca:94:db:ff:0e:83:8b:41:2c:9f:60:d4:c0:55: 3f:f3:2e:b2:ab:2f:70:ef:5f:ad:19:a5:25:87:bd:60:fd:fe: 7a:c4:cd:d5:ac:3c:6a:de:a5:13:ae:79:77:9f:04:9d:7b:63: 7c:95:9f:98:0a:b9:99:fe:fd:4f:93:84:ec:15:ff:ae:8d:16: 58:4b:d1:7b:0f:d6:ad:89:aa:2f:d6:42:b6:88:ec:4b:46:a0: 94:47:12:1f:13:0a:c6:34:45:e5:17:33:85:1d:c9:e8:76:2a: 42:67:a9:2c:41:31:3b:ca:a2:c3:24:3c:13:33:01:0e:a1:88: 01:69:4e:09:65:79:d7:20:91:e5:a9:a6:7d:d2:de:f1:b2:6f: 7b:b2:53:6d:67:da:bf:a1:43:56:21:e9:5e:32:60:0e:7e:c9: 86:bb:86:24:9d:3d:06:fe:9a:35:6c:b3:f5:1e:05:d4:52:5f: 1c:2c:dc:12:75:f6:b4:33:f3:75:2d:b4:4c:c9:73:4b:78:c2: 05:cd:fd:b6:39:d9:f2:6e:f3:ec:d6:60:da:ea:74:14:47:3e: 81:7f:b4:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2QzQxMTAvBgNVBAUTKDlBOUMzMUJEODc5NjczODY5QjNDOEYwNTU5NkU4ODE1 NTgyRjExRDAwHhcNMjQxMTIyMTgyNTE0WhcNMjQxMTI5MTgyNTE0WjAYMRYwFAYD VQQDEw02NzQwY2M4Yi02OTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAThiBK9z56ZdWsHxCkquDxpBbj/+SAlUYohOOyMkAnmO/ftPfOvfU1D3YCW K5ioxc5etTjrU9uHws3C7NSYloTfcioGm2VUa6gKFMQORHi809/Vd2D1NUy2JnUR D8sp3KBhC2Fd8PJmyU8SqDjUWadVG4dB2+RS3NSBo4YW5qXZPJljdiPOpxh7FuZe zUNCmZcOCOHGxHGg8eYaLFkhb/xVsGjnMp9DgYBQUnSQQsjfX0JoBUd6tNoZ79zr +WHwyX8y1MbPSdNH7SaKtzVKpScA8L+JWughJJOzDQ+AM0+vWPuUZO1gsqReXtNd g8Ytk159fFvkdFDeMf87QZ9rZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVE4As2 kOouCaj30wttreWEkvDxMB8GA1UdIwQYMBaAFJqcMb2HlnOGmzyPBVluiBVYLxHQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTZDNC9BM0JBRDhFMjA0 RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0YWJQSThGV1c2SUZWZ3ZF ZEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21wd3h2WWVXYzRhYlBJOEZXVzZJRlZndkVkQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTZDNC9BM0JBRDhFMjA0RkYxMUVBOTNFRTlBMjNDNEY5QUUwMi9tcHd4dlllV2M0 YWJQSThGV1c2SUZWZ3ZFZEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCponxH43OMq0ISyWatL7MruRNz2TOx+/dUdEOzKVidvJipi5Oi2wGc ypTb/w6Di0Esn2DUwFU/8y6yqy9w71+tGaUlh71g/f56xM3VrDxq3qUTrnl3nwSd e2N8lZ+YCrmZ/v1Pk4TsFf+ujRZYS9F7D9atiaov1kK2iOxLRqCURxIfEwrGNEXl FzOFHcnodipCZ6ksQTE7yqLDJDwTMwEOoYgBaU4JZXnXIJHlqaZ90t7xsm97slNt Z9q/oUNWIeleMmAOfsmGu4YknT0G/po1bLP1HgXUUl8cLNwSdfa0M/N1LbRMyXNL eMIFzf22OdnybvPs1mDa6nQURz6Bf7TR -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org