$ rpki-client -vvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft File: 91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json) Hash identifier: uNlAehabWa1Ipkjh/76ja6hQ/3Cl1rYy4kazxD+vGJ8= Subject key identifier: FD:35:7D:23:B6:78:D1:66:57:42:2F:65:02:DD:66:95:42:59:3B:D9 Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 Certificate issuer: /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft Manifest number: 013B Signing time: Sat 23 Nov 2024 02:42:36 +0000 Manifest this update: Sat 23 Nov 2024 02:42:36 +0000 Manifest next update: Sat 30 Nov 2024 02:42:36 +0000 Files and hashes: 1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: 4bJER4bCGX8NOjnurvoNLiY6bPumaL0T9memHHYAOE0=) 2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: aE6qh2l0CGRNRGlr9iC0PdOnxV9hvH0OTe2MxwwE0Qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033 Validity Not Before: Nov 23 02:42:36 2024 GMT Not After : Nov 30 02:42:36 2024 GMT Subject: CN=6741411c-90d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1f:77:ad:69:e7:79:bf:70:9b:12:af:42:d8: 4a:30:bd:e1:34:b5:e9:b4:95:a4:e9:fe:74:cd:f5: 57:4b:d1:0c:0b:e8:9a:25:6d:50:6d:c4:ab:62:4d: 87:31:8f:f1:fb:1c:9b:bf:57:b9:d4:60:05:d0:cc: cf:4c:b9:ca:7f:f2:f8:d2:21:e9:4a:ea:e7:db:ea: c8:bc:af:cb:ef:c9:8b:fa:b6:be:cb:25:aa:5d:1c: c1:57:76:d1:aa:8c:73:46:55:6d:53:49:84:56:1f: 3d:39:0b:ff:87:29:c4:cd:02:23:8d:25:c0:96:79: e7:82:e6:c9:26:89:aa:8b:65:e6:82:d9:36:89:ce: a6:e0:09:1c:de:d0:0a:7f:c9:d8:86:e5:d2:8a:ee: 84:c8:90:af:4e:5d:71:77:a3:e6:73:3c:4f:64:b5: c7:52:58:71:73:06:9d:c5:71:91:ca:4c:68:7e:f4: 96:03:45:05:9c:62:66:f0:f1:ea:a7:fd:1e:c3:d8: 0f:21:bc:99:eb:7f:c6:70:07:c2:8c:4e:5b:4e:ee: dd:0c:a1:ab:7b:1c:d6:a2:ef:8e:67:75:b6:17:30: 25:bc:ae:58:6c:2c:15:1e:20:59:ad:f0:31:79:1f: 04:5a:30:d8:5c:21:1a:eb:4e:6a:fd:73:c7:7b:31: e6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:35:7D:23:B6:78:D1:66:57:42:2F:65:02:DD:66:95:42:59:3B:D9 X509v3 Authority Key Identifier: keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:17:11:af:cf:79:5c:fc:af:4e:6e:59:bd:46:03:dd:fa:99: d2:9f:eb:00:64:5c:61:ee:f3:05:0c:99:c5:9c:1b:ce:29:00: be:ec:24:64:5b:e7:ee:34:44:1e:70:d5:e0:02:3f:52:c5:4a: a7:23:c5:25:b3:45:de:49:49:47:d9:9c:4c:29:9c:6e:34:02: 9a:a5:c2:54:8a:fa:8e:1f:95:ac:ed:da:24:1e:44:73:c1:36: 56:16:03:7a:1d:e6:53:20:5f:13:3f:ae:68:f9:1a:a8:55:17: 27:5f:10:ed:08:3a:2f:35:d9:66:b8:83:84:8a:90:12:44:11: 09:58:67:f4:d3:87:04:80:bf:2a:8c:98:be:fd:4c:86:77:c6: 10:80:5f:2b:92:4a:52:20:cb:db:4f:8c:8e:9c:38:31:2b:f0: ff:4c:5b:de:98:76:62:73:9e:6f:2c:4f:72:a6:41:f2:62:74: bb:8a:22:7b:fb:94:c6:9f:0d:78:0b:b0:6a:71:ec:fb:a2:8b: a0:df:f0:e3:70:36:86:e0:0e:24:7f:bd:1d:26:2d:86:8e:5a: 94:6f:2a:67:96:9d:d2:62:9d:2a:35:54:7b:b8:d2:2b:6f:a3: 1c:a4:71:70:4a:10:0f:d8:b9:00:8a:f8:1b:04:1a:1a:fc:cf: a6:88:52:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNERTQxMTAvBgNVBAUTKEY3NUFDOERDMDQ0OTU3QjFCMTVBMEIxNUM2RURBMzE4 QjIzQjQwMzMwHhcNMjQxMTIzMDI0MjM2WhcNMjQxMTMwMDI0MjM2WjAYMRYwFAYD VQQDEw02NzQxNDExYy05MGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzx93rWnneb9wmxKvQthKML3hNLXptJWk6f50zfVXS9EMC+iaJW1QbcSrYk2H MY/x+xybv1e51GAF0MzPTLnKf/L40iHpSurn2+rIvK/L78mL+ra+yyWqXRzBV3bR qoxzRlVtU0mEVh89OQv/hynEzQIjjSXAlnnngubJJomqi2Xmgtk2ic6m4Akc3tAK f8nYhuXSiu6EyJCvTl1xd6PmczxPZLXHUlhxcwadxXGRykxofvSWA0UFnGJm8PHq p/0ew9gPIbyZ63/GcAfCjE5bTu7dDKGrexzWou+OZ3W2FzAlvK5YbCwVHiBZrfAx eR8EWjDYXCEa605q/XPHezHmqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP01fSO2 eNFmV0IvZQLdZpVCWTvZMB8GA1UdIwQYMBaAFPdayNwESVexsVoLFcbtoxiyO0Az MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0RFNC9CNUE0NzM5MEM5 OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3R3hXZ3NWeHUyakdMSTdR RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxckkzQVJKVjdHeFdnc1Z4dTJqR0xJN1FETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0RFNC9CNUE0NzM5MEM5OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3 R3hXZ3NWeHUyakdMSTdRRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXFxGvz3lc/K9Oblm9RgPd+pnSn+sAZFxh7vMFDJnFnBvOKQC+7CRk W+fuNEQecNXgAj9SxUqnI8Uls0XeSUlH2ZxMKZxuNAKapcJUivqOH5Ws7dokHkRz wTZWFgN6HeZTIF8TP65o+RqoVRcnXxDtCDovNdlmuIOEipASRBEJWGf004cEgL8q jJi+/UyGd8YQgF8rkkpSIMvbT4yOnDgxK/D/TFvemHZic55vLE9ypkHyYnS7iiJ7 +5TGnw14C7Bqcez7ooug3/DjcDaG4A4kf70dJi2GjlqUbypnlp3SYp0qNVR7uNIr b6McpHFwShAP2LkAivgbBBoa/M+miFIx -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org