$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: R5MCQvnspPAwiEAK+rtRw+RYbTq3VHF+aA0xxXVqZhQ= Subject key identifier: 97:68:7D:58:C0:3D:35:93:B3:EB:F1:5A:7A:09:95:FA:DA:37:B0:33 Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 160B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 15F9 Signing time: Wed 20 Nov 2024 16:42:40 +0000 Manifest this update: Wed 20 Nov 2024 16:42:39 +0000 Manifest next update: Wed 27 Nov 2024 16:42:39 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: u956vaCXAFsButKsTmvY6ehO4iJEZo4mEGLBhmqIJXU=) 2: E259315C57CA11EA8D931284C4F9AE02.roa (hash: UF4UGi4YvKSRTlKCNcjEh8f4bqwvLQuk9xLcKAJKTWQ=) 3: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: slzLXwHdalwSZSG2cdS37Tf6mGAWnLHG4M+IywxJpUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5643 (0x160b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Nov 20 16:42:39 2024 GMT Not After : Nov 27 16:42:39 2024 GMT Subject: CN=673e1180-1a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:97:fc:f0:7f:90:03:b3:18:a0:0a:96:6e: 53:4b:ad:fa:39:bc:ee:79:fe:56:55:a8:15:42:61: d0:15:6f:53:82:b0:d0:3c:65:1e:51:48:18:b3:95: 82:8c:1e:c8:d1:5d:83:70:29:c2:b2:70:e2:b5:dc: ef:c2:a6:88:d9:8d:9e:df:5c:24:4c:69:b5:37:67: 79:29:41:01:0c:51:49:1e:e8:50:f5:ef:27:77:6e: d8:36:05:b6:e1:ee:07:4d:71:7d:f8:96:a7:78:45: f1:5e:40:c6:8d:4e:00:b3:88:5e:74:98:80:bf:ae: a4:12:b9:c3:a9:bb:26:36:3c:58:15:5e:b2:a4:dd: 00:7c:02:4f:95:6c:8b:20:48:10:14:00:96:35:6b: 51:01:1d:84:db:54:9f:db:30:2d:1b:0f:66:51:29: 64:30:b8:75:30:33:6c:31:32:c7:07:3a:e9:0b:59: 96:d2:dd:f3:0b:09:01:9c:8b:35:ca:3d:30:32:56: ab:08:cf:e4:95:16:86:04:11:fd:6d:b5:60:19:61: c5:96:ed:0f:23:46:7a:3b:6d:d7:5e:fd:f6:61:b4: ca:4b:19:19:a5:c0:f1:b0:0c:73:29:6f:08:e3:3b: a0:1d:df:97:86:9e:ef:a5:b5:5b:7e:e9:aa:a9:44: c8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:68:7D:58:C0:3D:35:93:B3:EB:F1:5A:7A:09:95:FA:DA:37:B0:33 X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a2:fe:d6:fe:6f:5b:7e:a5:6a:7b:6d:f4:b6:1a:24:4f:b4: 81:dd:81:7d:1b:a2:de:e3:74:f9:72:b9:78:2e:67:07:61:47: 02:99:c1:70:e5:e0:b8:6b:2d:bb:ba:69:5a:c4:ff:2f:64:25: b1:4a:7f:a7:1d:e1:ae:89:5c:ca:aa:43:e2:6a:de:03:79:c0: 56:2c:2a:5a:3b:5d:27:bd:f3:1c:7f:d2:65:71:ba:a1:4d:2e: 8b:03:c6:d4:71:df:e0:04:03:7f:a9:ce:a9:72:18:8c:b0:49: 5f:fb:7f:18:54:f0:7a:69:84:de:c3:e8:49:f0:af:3b:ce:d1: c7:64:7a:85:e7:b0:ac:e8:d3:e5:88:25:fd:9d:80:37:af:9d: cc:64:dd:38:68:83:77:c6:4d:56:df:6a:40:7f:8f:03:f4:63: 98:e9:86:f0:0c:7b:52:3f:0b:45:f0:16:bb:48:83:95:91:00: e5:cd:bb:57:7e:fd:07:f0:82:8b:74:f7:be:04:a8:bb:7a:a6: 7d:4d:ae:4d:16:2c:fd:27:35:a3:6c:3a:a0:82:21:41:2d:67: f7:cd:e6:01:50:cb:d3:2a:db:cf:9e:50:1d:02:ca:b4:f2:04: 35:ac:8a:6a:ab:da:07:b0:0a:ea:ad:97:42:18:62:47:06:4e: 7c:48:a1:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjQxMTIwMTY0MjM5WhcNMjQxMTI3MTY0MjM5WjAYMRYwFAYD VQQDEw02NzNlMTE4MC0xYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVCX/PB/kAOzGKAKlm5TS636Obzuef5WVagVQmHQFW9TgrDQPGUeUUgYs5WC jB7I0V2DcCnCsnDitdzvwqaI2Y2e31wkTGm1N2d5KUEBDFFJHuhQ9e8nd27YNgW2 4e4HTXF9+JaneEXxXkDGjU4As4hedJiAv66kErnDqbsmNjxYFV6ypN0AfAJPlWyL IEgQFACWNWtRAR2E21Sf2zAtGw9mUSlkMLh1MDNsMTLHBzrpC1mW0t3zCwkBnIs1 yj0wMlarCM/klRaGBBH9bbVgGWHFlu0PI0Z6O23XXv32YbTKSxkZpcDxsAxzKW8I 4zugHd+Xhp7vpbVbfumqqUTIxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdofVjA PTWTs+vxWnoJlfraN7AzMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMov7W/m9bfqVqe230thokT7SB3YF9G6Le43T5crl4LmcHYUcCmcFw 5eC4ay27umlaxP8vZCWxSn+nHeGuiVzKqkPiat4DecBWLCpaO10nvfMcf9Jlcbqh TS6LA8bUcd/gBAN/qc6pchiMsElf+38YVPB6aYTew+hJ8K87ztHHZHqF57Cs6NPl iCX9nYA3r53MZN04aIN3xk1W32pAf48D9GOY6YbwDHtSPwtF8Ba7SIOVkQDlzbtX fv0H8IKLdPe+BKi7eqZ9Ta5NFiz9JzWjbDqggiFBLWf3zeYBUMvTKtvPnlAdAsq0 8gQ1rIpqq9oHsArqrZdCGGJHBk58SKEC -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:23 2024 by rpki-client on console-ams.rpki-client.org