$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json) Hash identifier: FwMEQyCAGPr6+rT0M187nJfcIQfE1qPQBcEo9tJi1nc= Subject key identifier: C3:9E:44:1D:61:ED:06:80:1A:D1:AD:1B:92:5E:FB:18:D9:06:BE:68 Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft Manifest number: 93 Signing time: Mon 25 Nov 2024 04:26:05 +0000 Manifest this update: Mon 25 Nov 2024 04:26:04 +0000 Manifest next update: Mon 02 Dec 2024 04:26:04 +0000 Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: 3IEE2WMEC12+iOg4UCBljV37LYPf3HgAlqMInjdcbeQ=) 2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: 3XSRq2gf3Qq1teYkUqCY6q4aLkAm0S7clGDEwM9Zv2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Validity Not Before: Nov 25 04:26:04 2024 GMT Not After : Dec 2 04:26:04 2024 GMT Subject: CN=6743fc5c-b23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:cf:5a:25:99:36:93:e6:31:ef:14:ce:23: d9:2b:40:cf:93:5b:5b:c2:32:e5:12:4c:27:04:53: 8f:db:d8:d5:cf:7e:35:45:52:6e:c3:c7:9d:6c:57: 47:7f:e7:7e:a4:b5:91:6d:c5:de:17:47:b5:96:3f: 3e:f7:05:df:73:24:60:57:68:69:c8:f2:dd:84:e9: 4b:c9:b1:30:54:8a:fe:27:83:e9:01:82:7b:f4:23: 68:96:76:5f:06:4a:e6:0d:4d:e7:e4:07:1f:e6:ea: 33:23:83:c3:31:05:bf:0a:65:06:d7:39:13:bb:12: 97:04:ab:02:62:5d:63:6e:91:a7:5a:06:b9:da:34: db:80:4e:55:c6:97:09:9b:1c:6a:86:c3:f9:f7:de: e2:66:57:e2:a7:de:90:30:d1:c6:2b:59:d7:b2:8b: 40:e1:b7:93:ff:cb:ca:65:e2:9a:d0:68:0b:8f:46: 7d:4e:f7:69:fc:06:46:d0:17:27:64:59:c0:26:30: 85:42:b5:68:4b:de:7b:33:51:53:1d:b5:ea:a6:91: 6b:d2:0c:48:4f:3c:83:8c:ab:14:1e:fd:3b:2f:7f: 8d:18:ae:16:5f:13:b6:d3:13:89:96:da:d8:67:7d: 3e:fc:70:19:8e:83:e7:8c:53:80:ab:a7:ee:5d:1b: ad:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9E:44:1D:61:ED:06:80:1A:D1:AD:1B:92:5E:FB:18:D9:06:BE:68 X509v3 Authority Key Identifier: keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:35:a0:fb:1c:ae:f5:c8:b7:f8:ab:22:52:0a:51:aa:47:bc: 70:05:dd:99:64:bb:7a:93:39:3b:15:2e:63:77:26:ed:d9:da: 0a:c1:0b:ed:37:3b:29:3e:8e:d2:78:1f:36:56:37:21:d5:3b: 78:a0:db:f2:4d:78:bf:30:48:04:61:ba:1a:74:b9:e4:ed:9a: df:e6:6b:f6:47:b5:4c:c9:b3:2f:68:86:8a:81:a3:df:d6:dc: b1:86:26:b3:80:48:0c:b7:68:c6:e0:70:d8:89:4b:d0:3c:4d: 02:ef:a6:ed:a1:3e:2f:7b:30:ad:28:68:e5:bc:54:e7:93:df: f2:6f:65:16:a1:df:9c:cf:f4:9d:be:45:58:0c:c7:e4:92:06: 27:e9:44:fe:ff:b0:f6:ff:35:c7:54:2c:84:fc:8e:6d:08:1e: f1:f2:17:b7:43:2a:19:91:e0:a9:4c:4f:07:51:64:9a:f5:b5: bc:8f:2a:f8:79:f5:4f:30:70:0d:11:67:97:04:93:e0:b2:37: c5:1d:41:b0:da:e9:18:05:f1:0d:7f:59:28:7f:4d:1b:91:e6: 6f:3c:80:79:65:85:d7:6e:42:a6:c9:da:d1:ba:3a:68:5c:bb: 9f:18:ad:79:b1:5e:a2:8c:c1:12:f8:e9:52:6e:8d:e5:3b:18: 03:f7:98:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4ODUxMTAvBgNVBAUTKEFFNThFM0YzMjREOTQ2QzY4M0Y0QTM4RjhENEUxQ0Q3 MjU3NDgzMEEwHhcNMjQxMTI1MDQyNjA0WhcNMjQxMjAyMDQyNjA0WjAYMRYwFAYD VQQDEw02NzQzZmM1Yy1iMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPDPWiWZNpPmMe8UziPZK0DPk1tbwjLlEkwnBFOP29jVz341RVJuw8edbFdH f+d+pLWRbcXeF0e1lj8+9wXfcyRgV2hpyPLdhOlLybEwVIr+J4PpAYJ79CNolnZf BkrmDU3n5Acf5uozI4PDMQW/CmUG1zkTuxKXBKsCYl1jbpGnWga52jTbgE5VxpcJ mxxqhsP5997iZlfip96QMNHGK1nXsotA4beT/8vKZeKa0GgLj0Z9Tvdp/AZG0Bcn ZFnAJjCFQrVoS957M1FTHbXqppFr0gxITzyDjKsUHv07L3+NGK4WXxO20xOJltrY Z30+/HAZjoPnjFOAq6fuXRutbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOeRB1h 7QaAGtGtG5Je+xjZBr5oMB8GA1UdIwQYMBaAFK5Y4/Mk2UbGg/Sjj41OHNcldIMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ERkEwNDA3OEM5 RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJzYUQ5S09QalU0YzF5VjBn d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jsamo4eVRaUnNhRDlLT1BqVTRjMXlWMGd3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4NS9ERkEwNDA3OEM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJz YUQ5S09QalU0YzF5VjBnd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4NaD7HK71yLf4qyJSClGqR7xwBd2ZZLt6kzk7FS5jdybt2doKwQvt NzspPo7SeB82Vjch1Tt4oNvyTXi/MEgEYboadLnk7Zrf5mv2R7VMybMvaIaKgaPf 1tyxhiazgEgMt2jG4HDYiUvQPE0C76btoT4vezCtKGjlvFTnk9/yb2UWod+cz/Sd vkVYDMfkkgYn6UT+/7D2/zXHVCyE/I5tCB7x8he3QyoZkeCpTE8HUWSa9bW8jyr4 efVPMHANEWeXBJPgsjfFHUGw2ukYBfENf1kof00bkeZvPIB5ZYXXbkKmydrRujpo XLufGK15sV6ijMES+OlSbo3lOxgD95jI -----END CERTIFICATE-----Generated at Mon Nov 25 06:04:13 2024 by rpki-client on console-ams.rpki-client.org