$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft File: tYgfusqd6_Rspghj0pd8U_3WwZA.mft (raw, json) Hash identifier: Nlt6+dkg9RxJWUThyZaE2usxh+uiZP6xGYxV6JJWGTw= Subject key identifier: E1:95:30:C2:DD:5F:61:0E:55:E8:E3:01:F7:CC:CA:91:5C:56:31:5A Authority key identifier: B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90 Certificate issuer: /CN=A9188D2D/serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft Manifest number: 015D Signing time: Sat 23 Nov 2024 02:22:38 +0000 Manifest this update: Sat 23 Nov 2024 02:22:37 +0000 Manifest next update: Sat 30 Nov 2024 02:22:37 +0000 Files and hashes: 1: tYgfusqd6_Rspghj0pd8U_3WwZA.crl (hash: dbQa0jC/B/ReBv5uESg02JmrvZEUE+nAcNhFj6LixlI=) 2: D9D943568FFC11ED9776CB38C4F9AE02.roa (hash: m8z9odaUiOzo2Q6HnCo0kOXTVmgFRhiSBzilAVOt71c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188D2D/serialNumber=B5881FBACA9DEBF46CA60863D2977C53FDD6C190 Validity Not Before: Nov 23 02:22:37 2024 GMT Not After : Nov 30 02:22:37 2024 GMT Subject: CN=67413c6e-7f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:cd:fc:96:5b:60:35:ad:4d:0d:77:6c:b0: 56:80:9f:c9:a7:85:f9:fb:d7:31:19:b8:aa:fc:01: b3:e6:4f:6a:9d:ab:7e:c2:02:d6:72:31:11:be:08: 57:92:fa:47:7a:2f:a3:d3:92:87:60:fc:39:28:1f: e5:76:cb:90:70:2d:77:13:63:89:00:0c:96:3c:67: 79:5e:75:a0:9a:9f:91:73:8a:64:98:5c:7f:37:f4: 6e:ea:3a:63:82:ae:1e:ef:c7:ce:d7:b3:f9:cf:6e: 98:d0:53:74:43:92:0e:ab:c5:17:0d:2f:13:57:59: 1a:95:ec:e6:00:3d:f0:a3:3a:a0:79:de:9d:04:f5: 15:1f:38:cc:15:74:2b:5d:da:df:d6:66:c2:4d:98: 91:d2:cf:70:84:6b:92:6d:44:1c:95:24:ed:a4:05: 81:bd:17:dc:e2:53:99:bc:fc:31:9f:59:a8:c2:44: e9:a2:13:7f:02:51:de:e5:07:d9:eb:22:18:2c:1a: aa:c7:3a:33:0f:06:ad:bc:ec:14:4d:62:db:b0:ac: 3a:9c:f6:86:53:7c:2d:83:c5:39:5e:57:6b:8a:84: fe:33:81:06:86:c2:05:60:86:a9:9e:8a:8b:1e:c1: 8e:f3:4c:ce:ec:84:cd:ad:7a:e2:d0:5e:9b:4b:95: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:95:30:C2:DD:5F:61:0E:55:E8:E3:01:F7:CC:CA:91:5C:56:31:5A X509v3 Authority Key Identifier: keyid:B5:88:1F:BA:CA:9D:EB:F4:6C:A6:08:63:D2:97:7C:53:FD:D6:C1:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tYgfusqd6_Rspghj0pd8U_3WwZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D2D/A0682A048FF911EDABEC2537C4F9AE02/tYgfusqd6_Rspghj0pd8U_3WwZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:fe:a2:9a:4f:8f:f0:fa:69:59:8b:fd:22:29:1c:94:de:b5: 20:5f:45:a6:71:e5:8d:77:e5:5f:d7:a7:1a:d2:98:1b:f7:59: 4f:60:f2:3c:e0:41:3a:20:7b:87:c0:12:e3:56:f2:ed:b1:ff: 9b:5a:14:26:0d:67:c6:2d:46:04:31:5c:e2:fa:5f:ac:77:23: 51:8c:cd:4d:2a:a1:51:3d:b6:4f:2f:4d:09:14:65:3d:cb:76: 02:d7:0f:98:14:42:d7:55:c5:db:21:d1:8e:f1:13:27:16:56: 79:da:4a:fd:9f:58:77:63:28:34:1b:ea:68:0f:04:7f:c8:c0: 8e:eb:1e:1e:01:77:b8:9e:0f:cc:15:e3:10:f3:04:24:2f:0a: da:4b:5f:a4:c8:b3:42:d0:a6:fe:bd:bb:14:8f:a5:29:5d:21: 5e:e0:4c:f7:de:be:7d:80:b5:95:81:dd:45:5f:6f:bb:6f:18: 08:6c:7f:dd:b9:dd:82:a8:ff:0a:00:73:84:58:00:17:c0:6b: 64:33:47:91:6c:a5:14:78:16:ab:b4:ee:5e:27:d0:11:7d:dd: 0c:f2:65:8c:15:17:c1:99:d1:84:97:4d:7d:d6:f3:20:98:54: f0:a1:73:88:b7:bd:8b:d6:af:da:1f:6b:69:ae:69:c2:08:e4: 0e:f1:2f:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhEMkQxMTAvBgNVBAUTKEI1ODgxRkJBQ0E5REVCRjQ2Q0E2MDg2M0QyOTc3QzUz RkRENkMxOTAwHhcNMjQxMTIzMDIyMjM3WhcNMjQxMTMwMDIyMjM3WjAYMRYwFAYD VQQDEw02NzQxM2M2ZS03ZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqojN/JZbYDWtTQ13bLBWgJ/Jp4X5+9cxGbiq/AGz5k9qnat+wgLWcjERvghX kvpHei+j05KHYPw5KB/ldsuQcC13E2OJAAyWPGd5XnWgmp+Rc4pkmFx/N/Ru6jpj gq4e78fO17P5z26Y0FN0Q5IOq8UXDS8TV1kalezmAD3wozqged6dBPUVHzjMFXQr Xdrf1mbCTZiR0s9whGuSbUQclSTtpAWBvRfc4lOZvPwxn1mowkTpohN/AlHe5QfZ 6yIYLBqqxzozDwatvOwUTWLbsKw6nPaGU3wtg8U5XldrioT+M4EGhsIFYIapnoqL HsGO80zO7ITNrXri0F6bS5UifwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGVMMLd X2EOVejjAffMypFcVjFaMB8GA1UdIwQYMBaAFLWIH7rKnev0bKYIY9KXfFP91sGQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEQyRC9BMDY4MkEwNDhG RjkxMUVEQUJFQzI1MzdDNEY5QUUwMi90WWdmdXNxZDZfUnNwZ2hqMHBkOFVfM1d3 WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RZZ2Z1c3FkNl9Sc3BnaGowcGQ4VV8zV3daQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEQyRC9BMDY4MkEwNDhGRjkxMUVEQUJFQzI1MzdDNEY5QUUwMi90WWdmdXNxZDZf UnNwZ2hqMHBkOFVfM1d3WkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3/qKaT4/w+mlZi/0iKRyU3rUgX0WmceWNd+Vf16ca0pgb91lPYPI8 4EE6IHuHwBLjVvLtsf+bWhQmDWfGLUYEMVzi+l+sdyNRjM1NKqFRPbZPL00JFGU9 y3YC1w+YFELXVcXbIdGO8RMnFlZ52kr9n1h3Yyg0G+poDwR/yMCO6x4eAXe4ng/M FeMQ8wQkLwraS1+kyLNC0Kb+vbsUj6UpXSFe4Ez33r59gLWVgd1FX2+7bxgIbH/d ud2CqP8KAHOEWAAXwGtkM0eRbKUUeBartO5eJ9ARfd0M8mWMFRfBmdGEl0191vMg mFTwoXOIt72L1q/aH2tprmnCCOQO8S99 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:44 2024 by rpki-client on console-ams.rpki-client.org