$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft File: h6EudRSbPYpNJyoTCT72rJslLPM.mft (raw, json) Hash identifier: KI9jTgDdNtE9wiS/1hYaIOncTjRYxED5FN3QVWzGouw= Subject key identifier: 9E:E3:BD:7D:0F:76:C2:BD:A8:37:83:52:0E:D0:2F:44:60:07:90:40 Authority key identifier: 87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3 Certificate issuer: /CN=A919BC76/serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3 Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft Manifest number: 0128 Signing time: Sat 23 Nov 2024 02:52:48 +0000 Manifest this update: Sat 23 Nov 2024 02:52:47 +0000 Manifest next update: Sat 30 Nov 2024 02:52:47 +0000 Files and hashes: 1: h6EudRSbPYpNJyoTCT72rJslLPM.crl (hash: HIt0TMR/IBCsRrABFNcPelvKyefwSnTJN+kHn78OB74=) 2: 91A7AB90D79F11EE8DB3B465C4F9AE02.roa (hash: 2HWdv17EpTEWjq5kuiP/dX72VR2GQ0qIyejXonfT4f4=) 3: 62DD62F6D09111EE87557671C4F9AE02.roa (hash: jNpa+dAr3QW+U0IxiZkpakx746GE32XZB4uy5TxxMOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BC76/serialNumber=87A12E75149B3D8A4D272A13093EF6AC9B252CF3 Validity Not Before: Nov 23 02:52:47 2024 GMT Not After : Nov 30 02:52:47 2024 GMT Subject: CN=67414380-ee02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c5:c0:63:36:36:0f:f2:c6:dd:0d:44:5c:3d: 99:b1:47:1b:4a:28:7f:85:66:41:76:a3:ed:0e:69: 8e:ab:c8:c7:d5:41:2e:38:11:6f:69:9b:04:25:80: 21:ec:d6:2e:73:d3:6f:54:57:1f:4e:c0:23:2c:df: de:52:d0:a1:b8:e9:0a:ff:c7:17:a5:8b:ad:60:b4: 4f:06:a1:9d:89:28:1c:85:06:24:db:04:97:a7:43: 6e:de:52:d8:bb:2d:25:fb:dd:f9:e9:fb:4f:c0:93: e5:60:8c:13:bf:0b:ff:7e:3a:ed:e1:b5:4d:49:64: 34:4a:06:5f:f1:98:a0:f6:32:76:48:92:a3:2d:97: af:6a:8a:09:01:2d:8b:0a:1c:1a:44:10:98:94:d5: bb:ba:ee:51:74:f7:39:1e:e1:a6:7d:09:5a:fb:28: 84:1d:0b:d0:63:e1:09:be:6e:9e:94:d8:d2:d7:4c: 0c:f1:ea:8d:63:0e:35:be:06:6d:4c:7d:ff:c9:93: f9:05:36:35:40:d5:ee:03:f8:b3:36:9e:af:cf:08: d3:8d:57:08:f6:51:23:c5:fb:54:e7:a4:c0:6f:e9: 42:5d:9d:39:84:d9:84:a6:c4:87:e4:35:8c:03:38: fa:17:5c:a9:e7:1b:91:9b:4e:1e:27:0d:96:71:c2: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E3:BD:7D:0F:76:C2:BD:A8:37:83:52:0E:D0:2F:44:60:07:90:40 X509v3 Authority Key Identifier: keyid:87:A1:2E:75:14:9B:3D:8A:4D:27:2A:13:09:3E:F6:AC:9B:25:2C:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6EudRSbPYpNJyoTCT72rJslLPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC76/F1AD3E3EE8BB11ED8538DA1FC4F9AE02/h6EudRSbPYpNJyoTCT72rJslLPM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:53:ad:f3:03:a0:a0:27:af:a1:17:ac:81:13:b4:1e:10:34: e8:46:f4:1a:71:e9:7e:e0:7f:e7:4f:85:17:ee:ce:df:3d:82: 44:10:67:7c:c2:6e:78:30:de:56:6c:5d:c4:00:83:97:d6:79: 26:d3:2a:96:7a:c4:0b:e0:ef:2b:12:cc:f0:0d:cd:2f:53:3a: 03:ee:8a:ee:10:68:08:b5:24:2c:61:14:d6:96:25:cf:98:59: 90:19:fd:58:58:66:03:3a:dc:de:bd:ef:0f:42:d1:04:b8:2d: d9:e8:09:3d:96:95:68:c8:e7:76:3c:39:02:e9:8c:c4:3c:19: c4:bc:05:05:37:cc:c9:11:17:04:76:3f:3f:b9:47:a8:c8:87: 02:d7:5c:5b:63:8d:6c:b0:14:16:65:eb:4a:43:64:31:53:95: 82:7b:f8:72:dd:64:2a:81:02:6a:b3:8a:65:79:9a:82:1f:44: 6c:36:76:c1:c1:db:cd:b6:e6:73:f1:da:53:ca:f9:33:88:db: e2:a1:f2:72:f8:09:dd:60:d9:b5:d4:4e:76:0d:ca:ae:b3:ec: a0:97:d2:8a:e7:74:62:79:03:22:58:00:ac:6c:2e:7b:14:49: 9b:ed:b4:0e:6c:55:ee:25:3a:a2:a6:89:7e:eb:aa:64:76:ce: f0:92:3a:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDNzYxMTAvBgNVBAUTKDg3QTEyRTc1MTQ5QjNEOEE0RDI3MkExMzA5M0VGNkFD OUIyNTJDRjMwHhcNMjQxMTIzMDI1MjQ3WhcNMjQxMTMwMDI1MjQ3WjAYMRYwFAYD VQQDEw02NzQxNDM4MC1lZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MXAYzY2D/LG3Q1EXD2ZsUcbSih/hWZBdqPtDmmOq8jH1UEuOBFvaZsEJYAh 7NYuc9NvVFcfTsAjLN/eUtChuOkK/8cXpYutYLRPBqGdiSgchQYk2wSXp0Nu3lLY uy0l+9356ftPwJPlYIwTvwv/fjrt4bVNSWQ0SgZf8Zig9jJ2SJKjLZevaooJAS2L ChwaRBCYlNW7uu5RdPc5HuGmfQla+yiEHQvQY+EJvm6elNjS10wM8eqNYw41vgZt TH3/yZP5BTY1QNXuA/izNp6vzwjTjVcI9lEjxftU56TAb+lCXZ05hNmEpsSH5DWM Azj6F1yp5xuRm04eJw2WccIxmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7jvX0P dsK9qDeDUg7QL0RgB5BAMB8GA1UdIwQYMBaAFIehLnUUmz2KTScqEwk+9qybJSzz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkM3Ni9GMUFEM0UzRUU4 QkIxMUVEODUzOERBMUZDNEY5QUUwMi9oNkV1ZFJTYlBZcE5KeW9UQ1Q3MnJKc2xM UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2RXVkUlNiUFlwTkp5b1RDVDcyckpzbExQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkM3Ni9GMUFEM0UzRUU4QkIxMUVEODUzOERBMUZDNEY5QUUwMi9oNkV1ZFJTYlBZ cE5KeW9UQ1Q3MnJKc2xMUE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhU63zA6CgJ6+hF6yBE7QeEDToRvQacel+4H/nT4UX7s7fPYJEEGd8 wm54MN5WbF3EAIOX1nkm0yqWesQL4O8rEszwDc0vUzoD7oruEGgItSQsYRTWliXP mFmQGf1YWGYDOtzeve8PQtEEuC3Z6Ak9lpVoyOd2PDkC6YzEPBnEvAUFN8zJERcE dj8/uUeoyIcC11xbY41ssBQWZetKQ2QxU5WCe/hy3WQqgQJqs4pleZqCH0RsNnbB wdvNtuZz8dpTyvkziNviofJy+AndYNm11E52Dcqus+ygl9KK53RieQMiWACsbC57 FEmb7bQObFXuJTqipol+66pkds7wkjrh -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org