$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json) Hash identifier: imrm8U3okC8UazYJw1hTlNTzpvKpjEBf3SWpaoeMx3E= Subject key identifier: F8:C4:33:D4:FB:C4:42:5E:CE:28:8E:80:F8:FA:BA:74:A5:78:4C:FA Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 303A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft Manifest number: 2FDE Signing time: Wed 20 Nov 2024 15:28:24 +0000 Manifest this update: Wed 20 Nov 2024 15:28:23 +0000 Manifest next update: Wed 27 Nov 2024 15:28:23 +0000 Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: HqkNp/iSFiX/i34GyD7JtAkaa30MkA/3gOAxnn22PkI=) 2: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: uJNCEpY3N5D9PZUEznOLtgfDSFjB7pvoPkUdCD232AQ=) 3: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: zRK4kX65qOi1Aodd7QFDhTlHcyGoisJrEVR5AqT4AMk=) 4: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: A0f9mWgkbPinXWu1IPE7w1z8pvu79vZv+CBSMmbLkD8=) 5: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: d0jtpCmAVMShKujtRhiYarGgYODIMpgrPMB25oxFrNc=) 6: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: nMCODmmNHRPyTJQL+suYw2CsRxIUVmpXezulX/rRiwk=) 7: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: 8DE/TKExM2of42c5A8xqnIH3WAtnX8iCbZG5rmNILIM=) 8: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: 4KS8xS3AoLtWAkjMFU1X5ErcnDLiIanRQAMHWzBnzUQ=) 9: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: 4kqqMewm+jC0EciEckuPYWUSQBV8lI1snIcJos5k7f0=) 10: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: HpYoD/7amrQw23qk7qiGVySn5/tkgSZijl5VcOrQDaU=) 11: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: 0GtekBL2dOHyHHnoJe/8fq1ahw3kmkZ3Jf2VXcQA8mI=) 12: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: wzNvofUysU9whi/bJ2KtDbO6Z+B2td019urJnh0Ecvg=) 13: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: N55Tj23wiJHKM+RuMh/sRp6P2rhFoWqUz2hSoTlSuVU=) 14: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: R4ybNnQ0mwoL4B+2xlweOTID4tc0Szqka+nYeqTHQpg=) 15: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: PXdJkWNxL0C8ezvM4V8PU0QpElSJqET+Lz8pr56x7DU=) 16: 3CD678D6104311EE899B815AC4F9AE02.roa (hash: il5RXZBdTgJ65vM8vpH1Itd4MrOA07wR8q4WavIOuUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12346 (0x303a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Nov 20 15:28:23 2024 GMT Not After : Nov 27 15:28:23 2024 GMT Subject: CN=673e0018-e96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:00:66:47:8b:3f:43:33:90:5b:6d:85:ca: aa:89:dc:94:66:9e:d4:7c:63:cc:50:4d:b7:77:7b: 66:2f:cd:83:ac:6d:f2:b8:d1:8e:01:fa:ac:6b:4e: 88:a4:b3:4c:70:65:79:da:78:0d:9c:4b:fb:c1:f9: 6b:89:52:8d:40:0f:4b:bd:58:2a:34:e9:67:9d:e4: f1:6f:2a:84:32:bd:5e:85:9a:55:be:2b:28:8d:45: 43:f2:e1:ef:f8:de:9c:91:b4:1a:ea:e7:3e:9b:56: 6e:71:05:98:98:61:f2:be:77:a7:5d:53:ab:89:6c: c7:69:97:e7:2f:f1:3b:73:a1:81:70:be:78:da:ff: b1:9c:cc:dd:a9:85:8e:ba:40:36:5f:b0:cd:52:6d: 63:d9:3b:9b:b9:e2:fc:5f:54:78:8e:ae:62:03:11: f5:57:d7:8f:fe:1c:49:b3:88:3a:d2:0c:cd:5b:32: 83:c1:6e:59:6b:93:89:f1:a1:8f:6e:7b:0f:62:ed: 05:b7:9c:3d:25:30:5b:97:88:2b:d6:58:04:cf:d9: 1c:41:8c:c2:7a:56:16:19:c3:2d:98:88:9e:e3:53: 7e:f8:d0:88:7c:df:4c:1c:5e:e4:45:25:6b:38:2c: 74:a0:77:00:c9:31:fe:90:77:ce:fc:7f:d8:65:66: 94:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C4:33:D4:FB:C4:42:5E:CE:28:8E:80:F8:FA:BA:74:A5:78:4C:FA X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:a9:ac:63:04:41:14:62:ec:84:01:ce:78:37:b5:21:3e:1a: de:00:c2:98:55:8f:9e:33:73:2b:86:c5:2c:b7:a5:31:77:5e: 84:2e:cc:27:5f:27:81:05:86:7f:56:d5:1d:3d:fe:a4:7b:5d: 2a:f0:08:5a:ea:b8:b4:37:1b:07:70:cb:5b:b9:43:87:c6:3a: 6b:e1:de:79:57:68:54:a3:2c:1c:f3:00:bb:64:7b:65:03:46: 45:57:b7:53:d5:f2:9a:bb:9b:65:d4:50:4b:73:83:04:5d:de: 7a:da:7d:c7:99:68:1b:ec:fa:6c:61:01:20:1b:c4:74:76:2a: 93:91:c6:25:5f:d5:54:ea:67:dd:9f:82:eb:1e:60:dd:38:a4: 0b:1d:79:21:71:2a:8c:de:cb:25:60:e0:af:d5:11:6e:ac:c1: 28:5c:25:f5:77:f3:27:43:da:86:33:95:00:5f:6b:ab:6b:87: d8:0e:19:ea:f9:4a:4c:34:6f:36:e9:4b:d9:22:fb:8d:23:c8: e7:f8:65:6b:a5:5d:bc:b3:6f:db:4e:dd:b9:73:d0:93:00:45: 30:01:ba:15:cb:5a:fe:fe:97:88:17:77:eb:ea:b3:63:1e:56: e4:bd:20:c3:c4:ac:1a:1b:e5:61:31:c4:f5:ec:84:55:6b:07: 77:80:30:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjQxMTIwMTUyODIzWhcNMjQxMTI3MTUyODIzWjAYMRYwFAYD VQQDEw02NzNlMDAxOC1lOTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3AAZkeLP0MzkFtthcqqidyUZp7UfGPMUE23d3tmL82DrG3yuNGOAfqsa06I pLNMcGV52ngNnEv7wflriVKNQA9LvVgqNOlnneTxbyqEMr1ehZpVvisojUVD8uHv +N6ckbQa6uc+m1ZucQWYmGHyvnenXVOriWzHaZfnL/E7c6GBcL542v+xnMzdqYWO ukA2X7DNUm1j2TubueL8X1R4jq5iAxH1V9eP/hxJs4g60gzNWzKDwW5Za5OJ8aGP bnsPYu0Ft5w9JTBbl4gr1lgEz9kcQYzCelYWGcMtmIie41N++NCIfN9MHF7kRSVr OCx0oHcAyTH+kHfO/H/YZWaUJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjEM9T7 xEJeziiOgPj6unSleEz6MB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw WjA5ZlhyX0wtakc3bGs5a3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWqaxjBEEUYuyEAc54N7UhPhreAMKYVY+eM3MrhsUst6Uxd16ELswn XyeBBYZ/VtUdPf6ke10q8Aha6ri0NxsHcMtbuUOHxjpr4d55V2hUoywc8wC7ZHtl A0ZFV7dT1fKau5tl1FBLc4MEXd562n3HmWgb7PpsYQEgG8R0diqTkcYlX9VU6mfd n4LrHmDdOKQLHXkhcSqM3sslYOCv1RFurMEoXCX1d/MnQ9qGM5UAX2ura4fYDhnq +UpMNG826UvZIvuNI8jn+GVrpV28s2/bTt25c9CTAEUwAboVy1r+/peIF3fr6rNj HlbkvSDDxKwaG+VhMcT17IRVawd3gDDQ -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:01 2024 by rpki-client on console-ams.rpki-client.org