$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json) Hash identifier: 3aGlxUnIgpJjCGAzZkVTuGr8WLCbWvOLVN/+y4WZBeo= Subject key identifier: 9E:AE:7B:05:74:B9:19:E7:C7:FE:7C:57:37:3C:56:31:4E:EA:04:6B Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft Manifest number: 8C Signing time: Thu 21 Nov 2024 04:39:59 +0000 Manifest this update: Thu 21 Nov 2024 04:39:58 +0000 Manifest next update: Thu 28 Nov 2024 04:39:58 +0000 Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: iAqsT5y36JX9FIl2z12aqoIgPRxigvfJKuwxjUOQjY4=) 2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: wSSqQMMKuW18jGVxI6I4it07IVNzD9AIIVQr7WyPhLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Validity Not Before: Nov 21 04:39:58 2024 GMT Not After : Nov 28 04:39:58 2024 GMT Subject: CN=673eb99f-6596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:ae:c2:23:b9:57:23:ae:a6:9c:0a:f0:48: dc:be:ad:b2:3d:3d:61:14:1c:b3:f9:0e:52:7f:8a: 51:5f:5f:88:4c:4e:85:10:51:77:44:b9:c2:78:f8: a0:8f:89:65:ef:b1:7a:bd:c2:ec:cd:a2:f3:2c:e2: 52:c3:61:11:5e:f8:ed:e0:2a:0d:ac:8d:c1:63:fa: fa:c9:49:6d:bf:b5:3e:b4:18:75:72:55:23:ac:df: ac:e9:8d:05:34:8f:bf:84:43:b7:ec:bd:22:83:a8: ab:98:74:9a:b0:e4:b6:68:0c:1d:55:a5:39:b4:6d: b5:ba:91:4a:39:83:76:78:92:bc:09:bf:99:f9:2a: 12:aa:50:cd:db:d7:df:02:6e:99:b3:e8:e3:0a:d7: 8b:93:57:c5:7f:9e:6d:d5:7e:a3:47:d1:4a:09:41: 4f:7a:cf:ba:d4:89:bd:37:21:b6:2e:66:3c:5a:d3: dd:5e:63:c3:e4:15:0f:88:f2:3b:b1:62:f5:6a:44: e9:e6:9b:97:c3:4e:98:2a:89:1d:23:7c:e5:55:11: de:c7:34:8e:ae:2d:4f:7b:ab:0c:86:6a:4d:01:93: 9a:29:c7:bd:49:a7:15:8b:31:0c:e9:45:cf:4c:bf: bd:3e:33:75:ca:3c:ff:af:dd:2e:c9:98:a9:e7:48: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AE:7B:05:74:B9:19:E7:C7:FE:7C:57:37:3C:56:31:4E:EA:04:6B X509v3 Authority Key Identifier: keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:de:6e:76:f4:40:83:60:2f:63:70:1f:3d:0e:d8:02:d2:77: 63:d2:63:5d:45:f7:29:65:f1:67:13:00:e8:d4:95:2b:a4:6f: d4:a7:65:44:9a:4b:d1:5a:ae:ed:6b:35:58:d1:11:4f:98:3c: 7c:d9:91:d0:67:28:58:ac:4e:a9:9e:75:06:89:f8:55:67:12: b6:d5:e5:59:84:7a:b6:73:81:e0:96:b4:20:c7:15:9b:8b:5e: c5:87:fa:ee:70:e4:7f:f7:ce:2e:d6:94:5e:6d:91:6b:54:4c: a9:78:f8:bb:14:08:bf:99:d1:ca:f1:e2:c8:cd:c2:fd:e3:5e: 53:6b:2d:08:a2:f8:6f:e9:a5:03:5a:cc:49:ac:fc:21:32:c5: b3:78:7a:02:21:7e:0e:8a:cd:5a:36:ec:d4:46:a7:6c:c1:08: 8e:28:b0:25:61:1b:8f:4d:25:48:ca:4a:f6:0b:81:f3:a2:3a: a3:74:73:95:dc:f1:44:7b:fc:1f:33:9e:b4:bf:8a:a5:1c:39: cb:e7:d2:11:06:c8:b1:54:56:1d:3e:5f:99:74:3f:95:c8:37: 1d:6d:bc:7c:cf:da:dc:80:85:19:70:80:9f:0e:cf:bb:54:42: 87:35:a8:81:29:a1:27:bf:c6:6c:f0:1c:ca:c6:fd:60:7e:30: 56:d1:a5:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKEE1NENCNzc0MkFBQkNGNEU1OEU1RDRDMUYzQjlEMTJE QUQ5MUI0MDYwHhcNMjQxMTIxMDQzOTU4WhcNMjQxMTI4MDQzOTU4WjAYMRYwFAYD VQQDEw02NzNlYjk5Zi02NTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEOuwiO5VyOuppwK8Ejcvq2yPT1hFByz+Q5Sf4pRX1+ITE6FEFF3RLnCePig j4ll77F6vcLszaLzLOJSw2ERXvjt4CoNrI3BY/r6yUltv7U+tBh1clUjrN+s6Y0F NI+/hEO37L0ig6irmHSasOS2aAwdVaU5tG21upFKOYN2eJK8Cb+Z+SoSqlDN29ff Am6Zs+jjCteLk1fFf55t1X6jR9FKCUFPes+61Im9NyG2LmY8WtPdXmPD5BUPiPI7 sWL1akTp5puXw06YKokdI3zlVRHexzSOri1Pe6sMhmpNAZOaKce9SacVizEM6UXP TL+9PjN1yjz/r90uyZip50iu1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6uewV0 uRnnx/58Vzc8VjFO6gRrMB8GA1UdIwQYMBaAFKVMt3Qqq89OWOXUwfO50S2tkbQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi82QUM5ODlGMEQ0 ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnowNVk1ZFRCODduUkxhMlJ0 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi82QUM5ODlGMEQ0ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnow NVk1ZFRCODduUkxhMlJ0QVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm3m529ECDYC9jcB89DtgC0ndj0mNdRfcpZfFnEwDo1JUrpG/Up2VE mkvRWq7tazVY0RFPmDx82ZHQZyhYrE6pnnUGifhVZxK21eVZhHq2c4HglrQgxxWb i17Fh/rucOR/984u1pRebZFrVEypePi7FAi/mdHK8eLIzcL9415Tay0Iovhv6aUD WsxJrPwhMsWzeHoCIX4Ois1aNuzURqdswQiOKLAlYRuPTSVIykr2C4HzojqjdHOV 3PFEe/wfM560v4qlHDnL59IRBsixVFYdPl+ZdD+VyDcdbbx8z9rcgIUZcICfDs+7 VEKHNaiBKaEnv8Zs8BzKxv1gfjBW0aX9 -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:08 2024 by rpki-client on console-ams.rpki-client.org