$ rpki-client -vvf rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft File: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft (raw, json) Hash identifier: BdbPzua2Az7rMx1awq0s0M/XLPjPi6HgvpZ1Y2Hne/4= Subject key identifier: 64:62:11:ED:BF:09:A8:A9:6A:1C:C0:C5:99:81:CD:2C:9E:9C:0C:0E Authority key identifier: 97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 Certificate issuer: /CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Certificate serial: 063E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft Manifest number: 0639 Signing time: Fri 22 Nov 2024 22:03:12 +0000 Manifest this update: Fri 22 Nov 2024 22:03:11 +0000 Manifest next update: Fri 29 Nov 2024 22:03:11 +0000 Files and hashes: 1: l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl (hash: LAa2XgHXS82DXsTqoeebEWwfMYdB1vQ4Nxnxvl1N8cE=) 2: 5B596EA26B9B11EBA6B7E387C4F9AE02.roa (hash: lD6q0sRf2yTNxzGHBdawOBClgrppu6NH/3PWIE+9RCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1598 (0x63e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91887ED/serialNumber=97C64CEB665C7ECC5E77E1DB8FB6A358C4B59E12 Validity Not Before: Nov 22 22:03:11 2024 GMT Not After : Nov 29 22:03:11 2024 GMT Subject: CN=6740ff9f-c061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:81:9e:17:74:5a:98:6f:82:7d:6d:05:ab: b4:89:18:50:b7:98:c1:6a:64:f3:7a:93:54:a8:88: 8f:c2:9e:22:ea:fe:6f:ae:d6:ce:c8:0d:08:c6:fd: bf:7b:05:aa:c9:36:6e:96:3d:bb:e1:9e:fd:ef:57: 4f:f1:4a:94:a4:42:e8:e3:1d:e9:62:fb:8b:12:9d: ab:fa:d1:e0:40:4a:31:20:23:ff:fa:0e:48:96:90: 99:dd:93:6e:b0:43:b4:fb:03:26:e0:55:0e:0a:cd: c5:b2:ed:12:e6:d3:60:ea:47:ae:e8:7d:48:45:3f: bd:1d:1b:f9:41:17:42:c6:e3:72:34:ee:7d:d2:31: 25:9e:17:0a:e9:83:31:75:79:3d:fe:8d:71:7e:34: 2a:2b:7f:25:89:19:bd:24:d0:d1:88:74:f9:f5:e6: 4d:fa:58:00:dc:f5:fd:fa:49:3a:37:b4:7a:f6:58: 69:cd:d4:1f:61:8f:e6:e6:74:d5:61:45:4a:b7:af: a1:2f:11:48:06:73:00:8d:ef:7f:b6:6a:6c:64:24: 03:2f:4a:d4:66:71:b6:a4:24:8f:9b:05:56:30:d9: 91:b7:b5:fc:71:24:95:be:36:73:c3:1f:f8:82:e9: 89:5d:73:78:7f:73:7b:5a:37:13:85:68:73:55:da: 8a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:62:11:ED:BF:09:A8:A9:6A:1C:C0:C5:99:81:CD:2C:9E:9C:0C:0E X509v3 Authority Key Identifier: keyid:97:C6:4C:EB:66:5C:7E:CC:5E:77:E1:DB:8F:B6:A3:58:C4:B5:9E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91887ED/79073C4C6B9911EBBF06AE69C4F9AE02/l8ZM62Zcfsxed-Hbj7ajWMS1nhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f6:e3:29:eb:b3:0f:1e:43:14:76:3f:2d:af:5e:c8:61:8e: c6:bd:63:5b:58:5c:a0:33:4f:51:c3:81:c7:1d:c2:3e:80:07: da:4c:61:02:de:b2:cb:fb:ea:30:e2:09:48:e5:10:a7:ea:ac: a0:07:ed:b5:32:9d:08:b4:ad:a8:ab:06:13:38:65:40:a0:2b: b1:7b:62:74:3d:e9:53:68:55:f3:51:6f:06:b1:bd:ec:c1:8d: aa:8d:39:c7:10:bf:a2:0c:b3:ff:e9:0d:c3:02:cc:f1:98:87: a6:13:0b:7a:6a:15:64:6d:b8:63:10:5d:44:03:f7:06:ac:ec: 5a:32:b2:87:47:20:65:8f:5c:d6:8f:27:aa:48:31:2d:d5:1c: e3:c4:7d:8e:c1:45:4b:f4:2e:76:65:77:6d:9a:96:12:a4:6b: e8:91:1a:2f:cd:95:1b:43:9b:35:57:e3:71:f5:8b:4c:62:ae: 7f:46:70:dd:1c:3a:e1:7f:30:db:1d:84:b6:fc:a1:b4:e1:b5: b5:12:fc:1b:6e:ee:d4:3b:98:7c:94:2f:34:85:ee:dd:e4:d0: a1:f4:54:ac:63:75:35:4f:f7:1a:fd:e4:2b:2d:08:8c:07:81: 50:41:4b:c2:f8:4a:24:67:04:20:88:eb:ea:82:b3:36:c9:55: 93:4e:d7:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg3RUQxMTAvBgNVBAUTKDk3QzY0Q0VCNjY1QzdFQ0M1RTc3RTFEQjhGQjZBMzU4 QzRCNTlFMTIwHhcNMjQxMTIyMjIwMzExWhcNMjQxMTI5MjIwMzExWjAYMRYwFAYD VQQDEw02NzQwZmY5Zi1jMDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuaBnhd0Wphvgn1tBau0iRhQt5jBamTzepNUqIiPwp4i6v5vrtbOyA0Ixv2/ ewWqyTZulj274Z7971dP8UqUpELo4x3pYvuLEp2r+tHgQEoxICP/+g5IlpCZ3ZNu sEO0+wMm4FUOCs3Fsu0S5tNg6keu6H1IRT+9HRv5QRdCxuNyNO590jElnhcK6YMx dXk9/o1xfjQqK38liRm9JNDRiHT59eZN+lgA3PX9+kk6N7R69lhpzdQfYY/m5nTV YUVKt6+hLxFIBnMAje9/tmpsZCQDL0rUZnG2pCSPmwVWMNmRt7X8cSSVvjZzwx/4 gumJXXN4f3N7WjcThWhzVdqKcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRiEe2/ CaipahzAxZmBzSyenAwOMB8GA1UdIwQYMBaAFJfGTOtmXH7MXnfh24+2o1jEtZ4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODdFRC83OTA3M0M0QzZC OTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2ZzeGVkLUhiajdhaldNUzFu aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w4Wk02MlpjZnN4ZWQtSGJqN2FqV01TMW5oSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODdFRC83OTA3M0M0QzZCOTkxMUVCQkYwNkFFNjlDNEY5QUUwMi9sOFpNNjJaY2Zz eGVkLUhiajdhaldNUzFuaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF9uMp67MPHkMUdj8tr17IYY7GvWNbWFygM09Rw4HHHcI+gAfaTGEC 3rLL++ow4glI5RCn6qygB+21Mp0ItK2oqwYTOGVAoCuxe2J0PelTaFXzUW8Gsb3s wY2qjTnHEL+iDLP/6Q3DAszxmIemEwt6ahVkbbhjEF1EA/cGrOxaMrKHRyBlj1zW jyeqSDEt1RzjxH2OwUVL9C52ZXdtmpYSpGvokRovzZUbQ5s1V+Nx9YtMYq5/RnDd HDrhfzDbHYS2/KG04bW1Evwbbu7UO5h8lC80he7d5NCh9FSsY3U1T/ca/eQrLQiM B4FQQUvC+EokZwQgiOvqgrM2yVWTTtc4 -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:44 2024 by rpki-client on console-ams.rpki-client.org