$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: MJFB//iG7buLlHrMu/MmrDCe+7VKDY6ln1RQQ2kxb6s= Subject key identifier: F4:7C:7E:B4:13:AD:1F:01:A9:47:C1:BB:F8:E8:E9:E0:6E:1F:97:E4 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0C03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0BED Signing time: Fri 22 Nov 2024 18:30:13 +0000 Manifest this update: Fri 22 Nov 2024 18:30:13 +0000 Manifest next update: Fri 29 Nov 2024 18:30:13 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: MdOE/7OP1Ss2RXwHuuV0gERE1qFQtdSZBMUYUoGDx4M=) 2: FB170730324211EFA9B5F949C4F9AE02.roa (hash: RkMRmNqmHZ9s0oSB72MGnOxEbYhdY42Vffpm2UpowTM=) 3: B430443A324211EFB14FB614C4F9AE02.roa (hash: CYY0LXP9X4xKQBGfZAofQe57hCMYIiU/YbWGmHYH8e0=) 4: 1FD5F86A393211EF9219871BC4F9AE02.roa (hash: jnKfsdo1U2S4LHnsFK2WZMt9mRXWSr6kj8WlzIUcDlY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3075 (0xc03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Nov 22 18:30:13 2024 GMT Not After : Nov 29 18:30:13 2024 GMT Subject: CN=6740cdb5-3369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:bd:93:1a:6a:07:8b:ed:98:62:33:d2:b1: d0:18:d0:9f:3e:c6:c1:24:ab:a3:b7:64:57:cf:68: 51:ac:30:94:af:a4:81:6d:01:73:84:66:b5:43:87: 91:ea:83:44:87:76:6c:4a:90:a3:ed:b7:3f:f1:0b: 0b:8c:47:e9:1e:7d:29:24:fb:f7:a5:06:8c:a7:36: b9:a9:05:02:fc:ff:ee:62:a0:37:5d:23:cd:c0:59: 5d:a4:1f:12:27:d1:2c:77:6b:c3:0e:8b:0c:60:bf: 38:1c:34:2e:85:75:1e:55:d1:ce:80:ab:1b:1e:02: 79:cf:09:bd:a1:b1:ea:3e:63:b1:6d:7b:ac:15:ce: fb:3b:4f:16:fb:32:b6:08:98:0f:92:d1:69:cd:90: 92:1e:e0:a4:03:0b:1c:c5:1f:6c:f6:32:6d:fc:09: ff:98:ad:ee:8a:4b:9a:c4:36:76:9a:88:e8:33:d4: 04:98:3f:46:f8:4f:e6:9d:f0:88:4c:29:3e:01:f0: 20:75:a2:7a:9e:69:9d:ed:d4:4d:08:64:5a:b3:05: 5a:f5:6b:97:84:4e:5a:39:1b:bd:fb:ae:f7:55:21: 91:9f:d4:1c:df:28:9b:bf:95:68:9f:88:fd:f2:c2: 8a:81:58:32:3e:b1:8a:22:fa:97:ca:37:b7:d9:f4: 42:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7C:7E:B4:13:AD:1F:01:A9:47:C1:BB:F8:E8:E9:E0:6E:1F:97:E4 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:3c:28:6e:c0:91:91:f7:1f:f6:75:79:ef:2e:11:23:8c:ea: 53:84:5b:79:07:7d:23:fb:e6:61:0a:f6:68:dd:ce:fb:7d:27: 83:1d:1e:6b:83:11:a5:20:ba:32:c4:16:ca:14:8b:40:9a:1f: ba:4a:10:e2:4e:9d:41:12:1e:f3:16:42:06:8b:ff:f3:b8:d8: e3:02:a3:20:df:76:c0:a9:7b:c6:dc:a7:0d:e9:11:fc:35:4d: 84:23:1a:ed:d1:9c:8c:3c:57:71:8a:87:f9:18:4d:7a:17:fa: 39:41:0e:0c:5f:0b:30:84:bd:f8:e1:7d:f8:00:c4:03:e7:19: 6d:3c:13:b2:a2:7f:61:fc:a0:9b:fd:88:6d:3b:a9:5c:85:90: 16:0b:e3:e1:dd:5f:c8:d2:08:48:2a:f3:bf:78:53:5b:31:c8: a6:ac:2a:67:e1:b7:ae:2d:f8:eb:3c:cc:4f:d0:78:81:7c:9b: ca:d8:29:64:af:38:09:93:13:e0:2b:69:5a:52:76:cc:68:b4: 32:28:4a:92:50:b3:88:1c:f1:03:b6:fd:8f:29:ce:5b:63:92: 10:2b:22:1a:84:79:59:65:7b:bf:e4:43:a1:ec:86:95:a4:b8: 99:a6:0c:83:32:62:da:fd:88:4b:f8:19:9b:af:d2:a1:5a:1a: cd:10:36:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjQxMTIyMTgzMDEzWhcNMjQxMTI5MTgzMDEzWjAYMRYwFAYD VQQDEw02NzQwY2RiNS0zMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpW9kxpqB4vtmGIz0rHQGNCfPsbBJKujt2RXz2hRrDCUr6SBbQFzhGa1Q4eR 6oNEh3ZsSpCj7bc/8QsLjEfpHn0pJPv3pQaMpza5qQUC/P/uYqA3XSPNwFldpB8S J9Esd2vDDosMYL84HDQuhXUeVdHOgKsbHgJ5zwm9obHqPmOxbXusFc77O08W+zK2 CJgPktFpzZCSHuCkAwscxR9s9jJt/An/mK3uikuaxDZ2mojoM9QEmD9G+E/mnfCI TCk+AfAgdaJ6nmmd7dRNCGRaswVa9WuXhE5aORu9+673VSGRn9Qc3yibv5Von4j9 8sKKgVgyPrGKIvqXyje32fRCuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPR8frQT rR8BqUfBu/jo6eBuH5fkMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYPChuwJGR9x/2dXnvLhEjjOpThFt5B30j++ZhCvZo3c77fSeDHR5r gxGlILoyxBbKFItAmh+6ShDiTp1BEh7zFkIGi//zuNjjAqMg33bAqXvG3KcN6RH8 NU2EIxrt0ZyMPFdxiof5GE16F/o5QQ4MXwswhL344X34AMQD5xltPBOyon9h/KCb /YhtO6lchZAWC+Ph3V/I0ghIKvO/eFNbMcimrCpn4beuLfjrPMxP0HiBfJvK2Clk rzgJkxPgK2laUnbMaLQyKEqSULOIHPEDtv2PKc5bY5IQKyIahHlZZXu/5EOh7IaV pLiZpgyDMmLa/YhL+Bmbr9KhWhrNEDaB -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org