$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft File: 7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json) Hash identifier: eEKgDVL4yWn5cOf4r+gBdRhVQuYaiYc9kY+QrwgoPn8= Subject key identifier: 61:0F:2B:38:0E:7F:A1:C1:7E:61:0B:1A:D5:BC:FD:BF:8B:26:C7:3C Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Certificate serial: 0A90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft Manifest number: 0A8B Signing time: Fri 22 Nov 2024 19:21:09 +0000 Manifest this update: Fri 22 Nov 2024 19:21:08 +0000 Manifest next update: Fri 29 Nov 2024 19:21:08 +0000 Files and hashes: 1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: 3ElJltD6faDJPvBP9vIvflYxBBFHSRnglV9YFtHycO4=) 2: 2791E5FC476811EA943F5A66C4F9AE02.roa (hash: k4+lsY8L02z32iF+UWjCQvZeaHHhQdbaThZCLODRGV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:21:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2704 (0xa90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Validity Not Before: Nov 22 19:21:08 2024 GMT Not After : Nov 29 19:21:08 2024 GMT Subject: CN=6740d9a5-a4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:de:2d:41:4e:3d:a7:e6:df:39:89:ec:46: 0f:c0:f0:91:6b:bd:68:b8:ab:f0:66:17:1d:50:86: b2:aa:31:e9:64:3f:bd:a7:4a:79:4d:0c:21:dc:90: 0b:55:28:15:f8:90:c4:be:3e:d8:65:62:84:8c:33: 3c:7e:dc:b3:25:fa:b1:3a:60:da:9e:b3:ae:41:81: e3:51:80:76:9e:9f:11:3d:59:bc:c6:f5:5b:ee:c9: 98:4d:e5:16:e5:21:1a:ce:58:df:2f:f9:5a:58:c0: 4a:26:11:77:b5:b6:11:e7:3d:53:0e:04:4e:5f:7f: 0e:cd:fd:b8:6f:eb:26:b6:8a:07:00:15:a9:fc:b5: 7e:b1:52:e9:03:1f:b8:29:70:61:38:69:6e:fc:81: 4a:e6:8a:fe:f4:0e:ac:86:dd:fa:1b:4d:3c:d9:fd: 9e:2d:04:15:31:37:e2:56:5e:8d:78:ad:a4:43:06: 50:76:c1:8b:54:fe:bd:6c:d8:25:98:08:96:6d:bd: 52:aa:93:96:a3:4a:26:71:42:79:96:b8:bf:f8:79: 27:d9:4f:84:5a:31:84:d1:89:db:e0:a4:40:42:17: f9:61:c8:af:5f:70:6d:90:d6:b7:12:ce:f5:0f:15: 5a:a0:16:fc:41:78:98:e9:f7:be:ad:fd:2b:ba:94: 26:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0F:2B:38:0E:7F:A1:C1:7E:61:0B:1A:D5:BC:FD:BF:8B:26:C7:3C X509v3 Authority Key Identifier: keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:fa:a5:81:b5:35:74:9b:89:4d:25:78:34:2d:ac:59:9d:7a: 55:4c:91:e1:60:22:cf:20:da:74:57:c9:fd:3a:66:54:51:9e: 38:d0:18:12:1d:30:90:6e:6f:15:11:2f:9c:38:76:36:12:75: 7f:18:10:c7:e2:c2:2d:b4:48:81:2b:f0:a3:48:08:dc:ca:fb: 5e:0f:99:af:ad:82:b5:74:5e:ae:b6:ed:eb:64:5c:c3:26:12: 77:f4:5a:f9:74:40:d5:b1:05:af:d3:d2:90:45:a8:5b:3d:b0: 15:42:6b:4e:90:5f:b9:1d:84:96:ea:fe:39:21:7e:90:90:41: 98:df:18:11:6f:23:6e:a4:4d:33:d9:87:e7:cd:04:5b:db:ec: 59:70:46:65:83:5f:80:4a:c6:57:67:53:1e:e1:a9:93:aa:10: 5e:dd:c3:77:46:3d:de:60:20:69:6a:70:15:9e:2d:15:23:be: 5a:2e:5f:b7:2a:25:2f:c6:e8:2a:95:27:ea:93:5e:3c:5a:a8: 95:37:a3:d5:63:35:ca:b5:9f:54:b0:58:45:6b:a4:4b:08:90: 9c:57:f7:30:d3:02:7e:66:a7:90:62:de:86:be:d8:0e:b7:39: 0b:a2:d1:67:42:41:97:97:51:28:37:4f:b2:ed:a4:d5:be:82: ff:fa:bb:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2 Qzk0MjlGMjEwHhcNMjQxMTIyMTkyMTA4WhcNMjQxMTI5MTkyMTA4WjAYMRYwFAYD VQQDEw02NzQwZDlhNS1hNGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/zeLUFOPafm3zmJ7EYPwPCRa71ouKvwZhcdUIayqjHpZD+9p0p5TQwh3JAL VSgV+JDEvj7YZWKEjDM8ftyzJfqxOmDanrOuQYHjUYB2np8RPVm8xvVb7smYTeUW 5SEazljfL/laWMBKJhF3tbYR5z1TDgROX38Ozf24b+smtooHABWp/LV+sVLpAx+4 KXBhOGlu/IFK5or+9A6sht36G0082f2eLQQVMTfiVl6NeK2kQwZQdsGLVP69bNgl mAiWbb1SqpOWo0omcUJ5lri/+Hkn2U+EWjGE0Ynb4KRAQhf5YcivX3BtkNa3Es71 DxVaoBb8QXiY6fe+rf0rupQmZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEPKzgO f6HBfmELGtW8/b+LJsc8MB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3 NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQwRC9GMDM3QkQwODQ3NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0 dU14RHN0MzVxbDlzbENueUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg+qWBtTV0m4lNJXg0LaxZnXpVTJHhYCLPINp0V8n9OmZUUZ440BgS HTCQbm8VES+cOHY2EnV/GBDH4sIttEiBK/CjSAjcyvteD5mvrYK1dF6utu3rZFzD JhJ39Fr5dEDVsQWv09KQRahbPbAVQmtOkF+5HYSW6v45IX6QkEGY3xgRbyNupE0z 2YfnzQRb2+xZcEZlg1+ASsZXZ1Me4amTqhBe3cN3Rj3eYCBpanAVni0VI75aLl+3 KiUvxugqlSfqk148WqiVN6PVYzXKtZ9UsFhFa6RLCJCcV/cw0wJ+ZqeQYt6GvtgO tzkLotFnQkGXl1EoN0+y7aTVvoL/+rvA -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:35 2024 by rpki-client on console-ams.rpki-client.org