$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft File: t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json) Hash identifier: JF0lJ8uGn9DNOot2w/ykr1TDopH5kBC3eX6hu2Tt9Ww= Subject key identifier: 7F:F9:9A:DB:DA:7C:5E:6B:EC:92:93:CF:CD:DB:E8:8B:B9:BF:35:0F Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 Certificate issuer: /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft Manifest number: 9F Signing time: Thu 21 Nov 2024 04:25:02 +0000 Manifest this update: Thu 21 Nov 2024 04:25:01 +0000 Manifest next update: Thu 28 Nov 2024 04:25:01 +0000 Files and hashes: 1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: +E4Ok8lyV+oGjKvE7KkAebWuYW9YifuK6njqfV4Rz7Q=) 2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: gHv97LbD597egHzs1DHhKJuGArhYuwuC/fceU19SEJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44 Validity Not Before: Nov 21 04:25:01 2024 GMT Not After : Nov 28 04:25:01 2024 GMT Subject: CN=673eb61e-b4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:3f:7b:7a:58:1a:66:89:da:9e:c6:82:98: db:69:60:fb:16:9e:cc:57:b8:67:47:1d:0b:0f:bc: 6d:38:1d:dd:45:ed:8c:eb:bc:f5:71:71:50:29:f1: c8:ec:21:f6:25:b7:1e:3e:61:96:93:ad:ed:41:21: 9a:0b:97:76:07:6e:5e:43:d6:27:79:54:89:ba:97: 55:bc:c6:49:43:60:62:aa:e4:43:42:db:fd:7c:ae: b8:07:d1:96:87:cb:c5:6a:01:11:6e:d6:c2:f4:14: df:2b:03:4d:91:b9:c8:2f:96:82:2d:ea:40:5b:d5: 62:b9:1e:59:6d:09:e6:d1:ec:c5:ed:0e:96:47:96: 10:26:59:2b:10:5b:c4:d9:90:06:ba:6b:a2:d3:a0: 53:0e:a5:b9:b0:1e:2d:3a:5a:8e:bd:fc:0d:c8:72: 97:79:6e:cf:22:6b:9a:23:99:2a:bd:90:e5:e4:79: 7d:fb:5d:81:9a:ae:ad:68:e4:d9:3b:4d:50:2d:43: c0:02:a7:88:7c:da:24:f4:c9:83:a7:a1:e2:45:22: 71:e9:b3:0c:17:cc:fe:ca:7b:41:cc:aa:d7:0f:01: ad:ea:c7:a8:86:54:00:74:52:69:27:0a:7c:7e:fb: 60:78:81:85:9f:51:ad:c2:e8:52:32:21:d7:fa:18: 24:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F9:9A:DB:DA:7C:5E:6B:EC:92:93:CF:CD:DB:E8:8B:B9:BF:35:0F X509v3 Authority Key Identifier: keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:31:af:4c:1b:f9:84:fe:df:64:11:0f:d6:19:bd:fe:79:42: a6:19:b2:7e:a9:f7:8a:e0:26:18:97:dd:91:03:f6:34:be:ce: cf:fb:06:de:5f:14:61:97:96:bb:1d:56:1a:ce:75:ea:e3:81: 78:c1:0e:2a:e5:e4:1e:cb:cf:8d:bb:14:6e:9e:12:7d:b6:d1: a5:54:15:e7:b5:c6:b1:27:d1:33:ff:8e:0d:58:52:f3:b3:0a: 63:07:4e:a8:43:d0:e8:07:84:a6:cb:0c:ce:74:87:16:36:da: 2f:df:53:3c:ee:9d:1f:95:c1:50:19:0f:ef:ad:2c:b7:72:69: cd:73:fe:64:75:2c:74:e7:6b:42:91:43:dd:f4:2a:e3:44:67: a8:c2:06:24:64:c1:09:84:47:6a:79:9e:e4:5d:3c:5e:43:ea: 30:55:7f:98:29:8c:e2:be:cd:32:79:4a:25:42:07:10:84:c0: d8:ca:45:5a:ef:14:6f:8f:09:c2:88:9f:ae:c7:8c:32:4a:c6: eb:c4:f4:df:cd:2e:1f:9f:1d:5c:a9:f4:89:96:98:63:38:cc: d7:3d:53:4b:2b:6e:cb:3c:16:cc:88:6e:f2:42:39:64:57:ff: b6:d9:a1:f7:e4:cf:19:05:92:91:40:2b:a1:49:75:be:93:e0: 63:3a:37:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5N0ExMTAvBgNVBAUTKEI3RkE1MTIxNUJCNUMxRUY4OEVBRTE1RjAzNDMxM0Qx QjcxQjhENDQwHhcNMjQxMTIxMDQyNTAxWhcNMjQxMTI4MDQyNTAxWjAYMRYwFAYD VQQDEw02NzNlYjYxZS1iNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1E/e3pYGmaJ2p7GgpjbaWD7Fp7MV7hnRx0LD7xtOB3dRe2M67z1cXFQKfHI 7CH2JbcePmGWk63tQSGaC5d2B25eQ9YneVSJupdVvMZJQ2BiquRDQtv9fK64B9GW h8vFagERbtbC9BTfKwNNkbnIL5aCLepAW9ViuR5ZbQnm0ezF7Q6WR5YQJlkrEFvE 2ZAGumui06BTDqW5sB4tOlqOvfwNyHKXeW7PImuaI5kqvZDl5Hl9+12Bmq6taOTZ O01QLUPAAqeIfNok9MmDp6HiRSJx6bMMF8z+yntBzKrXDwGt6seohlQAdFJpJwp8 fvtgeIGFn1GtwuhSMiHX+hgkTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/5mtva fF5r7JKTz83b6Iu5vzUPMB8GA1UdIwQYMBaAFLf6USFbtcHviOrhXwNDE9G3G41E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODk3QS81MzNFMjQ2MkI1 NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdlLUk2dUZmQTBNVDBiY2Jq VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RfcFJJVnUxd2UtSTZ1RmZBME1UMGJjYmpVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODk3QS81MzNFMjQ2MkI1NTExMUVFQkI0QzU3M0JDNEY5QUUwMi90X3BSSVZ1MXdl LUk2dUZmQTBNVDBiY2JqVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Ma9MG/mE/t9kEQ/WGb3+eUKmGbJ+qfeK4CYYl92RA/Y0vs7P+wbe XxRhl5a7HVYaznXq44F4wQ4q5eQey8+NuxRunhJ9ttGlVBXntcaxJ9Ez/44NWFLz swpjB06oQ9DoB4SmywzOdIcWNtov31M87p0flcFQGQ/vrSy3cmnNc/5kdSx052tC kUPd9CrjRGeowgYkZMEJhEdqeZ7kXTxeQ+owVX+YKYzivs0yeUolQgcQhMDYykVa 7xRvjwnCiJ+ux4wySsbrxPTfzS4fnx1cqfSJlphjOMzXPVNLK27LPBbMiG7yQjlk V/+22aH35M8ZBZKRQCuhSXW+k+BjOjex -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:08 2024 by rpki-client on console-ams.rpki-client.org