$ rpki-client -vvf rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft File: _cYTVRXV0BXJRDu0xZvL-20Gk9E.mft (raw, json) Hash identifier: MtYOY3uY9crbbCgXpP3NW7qVkKMlMDRcEljqA+2dmas= Subject key identifier: 7E:E3:D6:C7:9E:2E:1E:C7:B4:71:70:EF:D8:F0:6D:AF:21:DA:1A:E3 Authority key identifier: FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 Certificate issuer: /CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Certificate serial: 0AAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft Manifest number: 0AA5 Signing time: Fri 22 Nov 2024 19:16:13 +0000 Manifest this update: Fri 22 Nov 2024 19:16:12 +0000 Manifest next update: Fri 29 Nov 2024 19:16:12 +0000 Files and hashes: 1: _cYTVRXV0BXJRDu0xZvL-20Gk9E.crl (hash: NQjWQrwP/Zs0r+scv3aN17T1pVSitDTgG4Qm2XxQuro=) 2: 2FD08C3244C511EAB6D6A36FC4F9AE02.roa (hash: w61W+nCijTD4DUuaZsDj1z3Nw3QZ2ZeANbtzBR4toqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2732 (0xaac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DF6F/serialNumber=FDC6135515D5D015C9443BB4C59BCBFB6D0693D1 Validity Not Before: Nov 22 19:16:12 2024 GMT Not After : Nov 29 19:16:12 2024 GMT Subject: CN=6740d87d-98fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:fa:0f:3e:06:65:c6:f8:5e:d0:15:91:19: 04:2e:5f:b7:bd:2c:63:20:6d:3a:d6:b6:30:c5:b4: 05:25:eb:4d:dc:59:3d:e2:d5:53:8e:54:72:4d:42: 5b:c5:f3:1f:76:47:42:7d:22:49:ce:4b:57:50:bd: 0b:ed:a6:da:9b:53:b1:de:3b:a5:71:e1:b2:63:1c: 97:d6:df:46:ec:c6:1c:45:04:c9:ce:79:71:d5:b6: 8e:83:b3:e3:ac:10:58:d2:74:87:44:46:7f:c3:ad: 43:34:13:99:a7:a5:4b:8b:b2:bb:39:00:15:b6:f7: e2:3b:63:28:fd:ab:73:11:0d:d6:9f:8e:99:0f:4f: 06:9c:62:a8:59:d9:cc:25:c5:25:89:a9:ed:5d:54: 1e:34:a3:72:00:fd:3f:f1:4c:4d:da:7e:11:e7:f3: ba:53:c9:4a:f7:18:17:3f:dc:3f:6f:b4:15:5c:10: 80:24:a3:5b:fb:2f:e7:70:04:33:f7:f7:47:a1:95: d0:2e:63:b2:e2:d8:20:0f:9e:bd:d0:0e:5d:bc:78: c1:58:57:a2:34:62:2e:e0:d9:6c:fe:1e:31:45:91: d3:ff:e6:16:a6:ba:d4:09:44:26:e3:9e:1f:91:81: 8c:3d:36:5b:76:fb:4c:28:27:8c:17:e1:c7:ad:3f: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E3:D6:C7:9E:2E:1E:C7:B4:71:70:EF:D8:F0:6D:AF:21:DA:1A:E3 X509v3 Authority Key Identifier: keyid:FD:C6:13:55:15:D5:D0:15:C9:44:3B:B4:C5:9B:CB:FB:6D:06:93:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cYTVRXV0BXJRDu0xZvL-20Gk9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DF6F/DA40A8E8429811EAB7A22A12C4F9AE02/_cYTVRXV0BXJRDu0xZvL-20Gk9E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:17:cc:6b:38:2a:02:4e:3b:cd:83:ba:51:33:74:e2:d2:3e: 4f:34:2c:e9:ae:68:26:d9:56:3f:cb:5d:1e:d8:35:e6:23:d4: bc:76:26:32:c3:59:a0:d2:71:b5:a2:79:8f:c0:19:8a:71:b0: b2:ad:0f:2a:2e:18:e6:67:cf:03:3b:8f:ea:31:e9:19:3f:f2: a9:57:f0:0b:31:37:71:15:06:d0:d2:44:61:52:3f:79:9a:c4: 54:91:15:2c:ab:c6:85:2d:57:3a:96:b4:95:1a:74:50:33:e3: a4:30:07:24:92:a5:32:8f:96:71:c7:b3:25:a8:e5:10:bc:09: 62:10:63:b7:9e:72:1f:3a:0a:b1:ca:8f:08:34:78:c5:a1:19: 71:3f:b8:a9:e2:8a:81:b8:30:bc:df:d1:59:32:9d:bf:7a:ef: 0d:5b:ae:16:97:ad:71:0b:f4:e5:08:2d:f7:1f:05:2b:59:f7: c9:9a:8d:bb:dc:5f:02:5f:a0:33:68:0b:b1:10:25:ca:c4:72: c7:f4:42:90:e5:6d:6f:f9:07:7e:62:a4:8f:61:0d:9c:22:bd: ce:e9:ad:18:64:67:bb:63:91:92:1e:83:a5:fe:e8:b7:bb:b6: e1:f9:93:e3:da:37:37:1f:f6:31:e9:b1:f9:d1:c3:03:a3:94: cd:96:cc:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURGNkYxMTAvBgNVBAUTKEZEQzYxMzU1MTVENUQwMTVDOTQ0M0JCNEM1OUJDQkZC NkQwNjkzRDEwHhcNMjQxMTIyMTkxNjEyWhcNMjQxMTI5MTkxNjEyWjAYMRYwFAYD VQQDEw02NzQwZDg3ZC05OGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4b6Dz4GZcb4XtAVkRkELl+3vSxjIG061rYwxbQFJetN3Fk94tVTjlRyTUJb xfMfdkdCfSJJzktXUL0L7abam1Ox3julceGyYxyX1t9G7MYcRQTJznlx1baOg7Pj rBBY0nSHREZ/w61DNBOZp6VLi7K7OQAVtvfiO2Mo/atzEQ3Wn46ZD08GnGKoWdnM JcUliantXVQeNKNyAP0/8UxN2n4R5/O6U8lK9xgXP9w/b7QVXBCAJKNb+y/ncAQz 9/dHoZXQLmOy4tggD5690A5dvHjBWFeiNGIu4Nls/h4xRZHT/+YWprrUCUQm454f kYGMPTZbdvtMKCeMF+HHrT/K6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7j1see Lh7HtHFw79jwba8h2hrjMB8GA1UdIwQYMBaAFP3GE1UV1dAVyUQ7tMWby/ttBpPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REY2Ri9EQTQwQThFODQy OTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBCWEpSRHUweFp2TC0yMEdr OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19jWVRWUlhWMEJYSlJEdTB4WnZMLTIwR2s5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REY2Ri9EQTQwQThFODQyOTgxMUVBQjdBMjJBMTJDNEY5QUUwMi9fY1lUVlJYVjBC WEpSRHUweFp2TC0yMEdrOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTF8xrOCoCTjvNg7pRM3Ti0j5PNCzprmgm2VY/y10e2DXmI9S8diYy w1mg0nG1onmPwBmKcbCyrQ8qLhjmZ88DO4/qMekZP/KpV/ALMTdxFQbQ0kRhUj95 msRUkRUsq8aFLVc6lrSVGnRQM+OkMAckkqUyj5Zxx7MlqOUQvAliEGO3nnIfOgqx yo8INHjFoRlxP7ip4oqBuDC839FZMp2/eu8NW64Wl61xC/TlCC33HwUrWffJmo27 3F8CX6AzaAuxECXKxHLH9EKQ5W1v+Qd+YqSPYQ2cIr3O6a0YZGe7Y5GSHoOl/ui3 u7bh+ZPj2jc3H/Yx6bH50cMDo5TNlswP -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:36 2024 by rpki-client on console-ams.rpki-client.org