$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json) Hash identifier: hJ0uswlPLB056AQqhzYS8Gnd56rBCJtNg+PhLcR26lI= Subject key identifier: 8F:E2:6F:3F:03:A8:D0:B2:FC:14:BA:D3:0D:B3:57:83:D9:57:5C:A2 Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 25A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft Manifest number: 2518 Signing time: Fri 22 Nov 2024 15:45:41 +0000 Manifest this update: Fri 22 Nov 2024 15:45:40 +0000 Manifest next update: Fri 29 Nov 2024 15:45:40 +0000 Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: BxyuuUQXGrV7KB9rnQttRB6R2G9x+hioDxgUMfiQ8hI=) 2: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (hash: ezRu4Wadjp9NH7xvxUm1SslQ6GZ7jqHMcsIlTCHPxl0=) 3: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: sPjEV8NdOTwFwPMcdQnUOL5yo6ytt7upFB96AA18yK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9637 (0x25a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Nov 22 15:45:40 2024 GMT Not After : Nov 29 15:45:40 2024 GMT Subject: CN=6740a724-dc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:a9:67:ea:02:e5:c9:c3:0c:cd:7c:8e:59: 03:8d:80:0f:af:01:52:25:4a:23:09:41:20:86:30: e2:ee:2c:ae:65:7e:78:16:d5:fa:31:23:43:38:9d: c6:3c:c6:59:55:38:43:77:55:f7:95:f8:00:b1:bd: 4d:4f:92:33:61:d6:40:56:96:d7:2c:a4:70:fa:29: 5c:fd:78:8e:e3:46:a5:a9:0b:b3:d8:70:44:a2:e9: a8:0c:55:6d:f2:95:35:69:6a:6f:89:e5:78:63:fb: 21:7e:cf:f2:9b:74:18:d0:fe:ea:2a:4a:e2:18:6b: e3:8b:3f:d4:0b:a9:cd:4b:36:b6:f5:79:86:43:c6: 28:b6:38:c7:21:9a:c2:bd:e9:fa:7a:94:9f:59:ef: 7c:2d:7a:e9:d1:43:e1:27:08:a9:c6:78:05:47:69: 0c:7c:03:86:bf:74:cc:bd:84:99:cb:cd:c7:06:d8: df:b0:01:16:c7:f7:71:a6:a9:6f:19:9e:0f:da:27: f7:16:1c:74:6c:a5:62:9e:4f:7f:04:0f:b7:f5:99: c2:88:ca:c9:22:e3:1e:82:ea:39:2d:f1:ab:56:51: 37:ef:20:56:a1:c5:1f:e2:b3:cf:64:73:c7:9c:e3: 0b:ee:e2:78:04:59:99:66:31:a1:51:9d:ef:a8:ba: 58:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E2:6F:3F:03:A8:D0:B2:FC:14:BA:D3:0D:B3:57:83:D9:57:5C:A2 X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:8b:27:a0:7e:85:ab:e8:10:d7:fd:db:19:df:26:7a:a9:25: fc:ac:b0:a0:07:66:d2:a2:ba:8e:03:aa:10:d0:a6:bd:9f:fe: 15:6d:51:c4:ce:b4:3d:ef:67:0b:fc:3e:df:9d:c4:95:98:a5: 80:1f:81:16:5d:a1:94:d4:49:48:72:4d:7d:82:b3:5b:ad:15: 3c:11:0a:6e:a3:1f:96:fe:2f:f9:6e:f3:cc:5d:0e:84:73:37: bb:af:fb:93:5c:c0:46:47:25:4d:d9:1e:78:c0:ef:21:cc:05: dc:e3:0a:59:1e:63:bf:37:3b:4b:dd:19:e5:93:8c:85:af:38: 6a:fa:13:6d:ad:b5:af:4b:58:4c:dc:ad:a3:5e:45:27:63:8e: 82:d7:a6:96:20:2d:43:4c:11:53:5b:15:87:0a:ec:65:3c:64: fe:69:a4:82:ff:f2:94:1d:92:0c:cc:64:82:4d:3c:6b:b5:02: 1c:a2:88:2c:5f:4d:19:3a:39:58:9f:5d:40:e0:98:f8:da:3a: 28:68:61:8d:54:67:83:21:3d:b9:d0:85:68:e9:44:41:67:03: c3:98:fe:3d:85:62:8e:bf:99:c2:f3:22:54:94:2e:21:ed:fc: 74:dc:8d:40:60:27:de:c9:96:3a:55:de:78:59:41:aa:aa:4f: b3:2b:9b:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjQxMTIyMTU0NTQwWhcNMjQxMTI5MTU0NTQwWjAYMRYwFAYD VQQDEw02NzQwYTcyNC1kYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMypZ+oC5cnDDM18jlkDjYAPrwFSJUojCUEghjDi7iyuZX54FtX6MSNDOJ3G PMZZVThDd1X3lfgAsb1NT5IzYdZAVpbXLKRw+ilc/XiO40alqQuz2HBEoumoDFVt 8pU1aWpvieV4Y/shfs/ym3QY0P7qKkriGGvjiz/UC6nNSza29XmGQ8YotjjHIZrC ven6epSfWe98LXrp0UPhJwipxngFR2kMfAOGv3TMvYSZy83HBtjfsAEWx/dxpqlv GZ4P2if3Fhx0bKVink9/BA+39ZnCiMrJIuMeguo5LfGrVlE37yBWocUf4rPPZHPH nOML7uJ4BFmZZjGhUZ3vqLpYdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/ibz8D qNCy/BS60w2zV4PZV1yiMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU0Ri8yQUQxNkYzMDFBNEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpP ZGh2RGs3X0xqV2RtaGZiQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoiyegfoWr6BDX/dsZ3yZ6qSX8rLCgB2bSorqOA6oQ0Ka9n/4VbVHE zrQ972cL/D7fncSVmKWAH4EWXaGU1ElIck19grNbrRU8EQpuox+W/i/5bvPMXQ6E cze7r/uTXMBGRyVN2R54wO8hzAXc4wpZHmO/NztL3Rnlk4yFrzhq+hNtrbWvS1hM 3K2jXkUnY46C16aWIC1DTBFTWxWHCuxlPGT+aaSC//KUHZIMzGSCTTxrtQIcoogs X00ZOjlYn11A4Jj42jooaGGNVGeDIT250IVo6URBZwPDmP49hWKOv5nC8yJUlC4h 7fx03I1AYCfeyZY6Vd54WUGqqk+zK5sB -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:23 2024 by rpki-client on console-ams.rpki-client.org