$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: Ky3xr5gz1R1Vn8YTtYeho07SyeTJH/VtHcIyM2FZD5Q= Subject key identifier: 03:DA:5F:C5:F4:3F:40:D5:58:D2:B8:63:88:E3:AB:31:D3:AF:7A:09 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0BD2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0BC5 Signing time: Fri 22 Nov 2024 17:38:18 +0000 Manifest this update: Fri 22 Nov 2024 17:38:18 +0000 Manifest next update: Fri 29 Nov 2024 17:38:18 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: AA3qZsh+3cUvZxdk7ey3gclXZHpMGR8CAuP6eDanUaQ=) 2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3026 (0xbd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Nov 22 17:38:18 2024 GMT Not After : Nov 29 17:38:18 2024 GMT Subject: CN=6740c18a-5fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:d4:5b:c1:65:5c:f8:06:ae:9e:0f:28:f6: 0a:cb:ee:9a:72:a3:f9:df:02:11:d6:20:df:eb:7c: b9:6a:c8:e0:fa:1c:e0:08:9f:fd:13:3a:63:16:76: 92:17:c0:d3:09:cf:01:45:8f:6d:1d:20:9b:87:c1: 40:6c:7d:25:31:c4:3f:5b:0f:de:80:22:8b:99:7e: 6a:82:76:47:b4:55:40:ca:b6:5b:9b:07:6b:f9:b1: 7d:29:c7:6d:c7:6b:96:dc:6f:b7:f5:fc:75:ac:3d: 45:29:9b:b2:64:60:0f:1d:92:47:04:e5:b9:c1:ab: fb:19:8b:88:35:73:ee:be:50:63:98:6c:2c:6d:64: 55:b7:36:47:3d:65:02:25:61:2f:fb:dd:89:06:66: ec:b5:51:74:a6:77:3b:4e:e7:29:a1:37:2c:98:fe: 09:32:4f:e8:bc:8f:9f:ae:e5:dd:0d:53:0c:dd:cc: 06:bc:c9:87:c9:ab:2c:30:76:49:9d:45:91:06:95: 84:e4:f1:cc:4e:35:68:b1:b6:e7:03:76:70:3d:9a: 42:67:1c:7c:62:b2:d5:66:b0:50:bd:99:28:27:f8: d3:11:c5:56:dd:51:c1:78:ad:54:85:f8:92:08:82: 55:23:77:12:ac:34:60:27:1e:20:4b:57:94:0f:fb: c6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DA:5F:C5:F4:3F:40:D5:58:D2:B8:63:88:E3:AB:31:D3:AF:7A:09 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4b:25:70:c5:74:7a:79:fa:39:b5:66:2c:24:b0:ce:60:88: e7:41:48:4d:75:42:6c:99:1f:06:e4:60:c1:fd:3d:60:fd:64: d3:e5:e9:14:d6:7a:a6:39:83:e6:ae:ed:ee:7f:2a:95:8b:21: fc:52:dc:d5:f0:ba:13:85:fb:a6:0a:f4:08:99:20:dc:9b:7e: b5:22:d3:37:d4:4d:be:4f:02:f3:e0:d2:fc:3b:3a:e1:16:1b: f5:65:99:36:77:2d:d3:59:b3:75:07:59:e4:db:ed:de:a6:16: 17:25:bd:1a:f8:73:f9:28:43:77:29:c9:bb:41:df:1c:7e:95: b6:41:12:12:5c:5b:23:43:f1:94:30:f8:04:25:a1:64:86:9c: e5:e4:ec:20:b6:06:4f:27:89:d0:45:a8:7d:35:8c:e5:9c:6a: ba:5e:1d:18:a9:d4:af:4a:50:74:3d:19:e0:af:1e:46:8a:96: 7a:5f:4d:15:ea:c7:1a:65:ba:b5:f6:6b:95:e8:86:3d:49:63: 81:f2:69:ad:ef:73:b0:d8:17:a5:d1:33:f1:40:78:db:7f:ec: 6c:aa:d5:5b:03:c1:7b:49:ca:74:2c:46:7c:b3:ee:45:6a:db: dd:e2:40:67:05:65:46:ad:a0:19:7e:e0:80:99:3a:73:33:0d: 9c:a3:c6:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjQxMTIyMTczODE4WhcNMjQxMTI5MTczODE4WjAYMRYwFAYD VQQDEw02NzQwYzE4YS01ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMvUW8FlXPgGrp4PKPYKy+6acqP53wIR1iDf63y5asjg+hzgCJ/9EzpjFnaS F8DTCc8BRY9tHSCbh8FAbH0lMcQ/Ww/egCKLmX5qgnZHtFVAyrZbmwdr+bF9Kcdt x2uW3G+39fx1rD1FKZuyZGAPHZJHBOW5wav7GYuINXPuvlBjmGwsbWRVtzZHPWUC JWEv+92JBmbstVF0pnc7TucpoTcsmP4JMk/ovI+fruXdDVMM3cwGvMmHyassMHZJ nUWRBpWE5PHMTjVosbbnA3ZwPZpCZxx8YrLVZrBQvZkoJ/jTEcVW3VHBeK1UhfiS CIJVI3cSrDRgJx4gS1eUD/vGrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPaX8X0 P0DVWNK4Y4jjqzHTr3oJMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqSyVwxXR6efo5tWYsJLDOYIjnQUhNdUJsmR8G5GDB/T1g/WTT5ekU 1nqmOYPmru3ufyqViyH8UtzV8LoThfumCvQImSDcm361ItM31E2+TwLz4NL8Ozrh Fhv1ZZk2dy3TWbN1B1nk2+3ephYXJb0a+HP5KEN3Kcm7Qd8cfpW2QRISXFsjQ/GU MPgEJaFkhpzl5OwgtgZPJ4nQRah9NYzlnGq6Xh0YqdSvSlB0PRngrx5GipZ6X00V 6scaZbq19muV6IY9SWOB8mmt73Ow2Bel0TPxQHjbf+xsqtVbA8F7Scp0LEZ8s+5F atvd4kBnBWVGraAZfuCAmTpzMw2co8ZP -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org