$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: /dmtSgXkh3BX4fn8Ammbpnsc8DGh4chhC3yilmKU0CA= Subject key identifier: 74:9B:D2:0D:62:A3:B0:8D:C2:4B:60:BA:D1:11:4E:ED:A1:D7:53:0C Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 017A Signing time: Thu 21 Nov 2024 02:09:39 +0000 Manifest this update: Thu 21 Nov 2024 02:09:38 +0000 Manifest next update: Thu 28 Nov 2024 02:09:38 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: fmeb/U9xn7EFrCUXISLFiojCGb3iLDbpRrmIKd3eU5E=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: zXr6NOZcCRqEcE9Pgk6RR5qOsx1G0XavR+U4MW0E+MQ=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: DV9Gdp3YkASaDfgSFkYwRK6BKaUQSr3ziC7H6K89rT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Nov 21 02:09:38 2024 GMT Not After : Nov 28 02:09:38 2024 GMT Subject: CN=673e9663-89ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:5a:81:bc:60:54:d7:ee:d9:1d:58:4d:47: 72:5e:cd:f7:d4:11:44:01:29:43:3e:01:3a:bc:1f: eb:69:42:1e:22:22:6b:c6:3b:2d:97:40:83:32:b5: c2:d2:16:3f:ab:32:16:15:8b:74:05:59:6e:e9:b3: bc:39:1e:a9:11:1a:45:aa:2f:06:dd:8f:0d:fc:7c: 56:2b:e9:13:fb:b1:c1:1d:d1:1d:de:3a:59:9c:7e: 09:15:12:d2:27:e0:c9:cf:cd:d5:3d:0e:87:a4:c6: d2:8b:b5:8d:5a:4e:25:1b:4e:c8:3e:61:7d:97:b3: b2:c9:99:ff:95:cb:fd:86:9d:5a:03:f0:4a:64:8a: 99:0c:16:bb:32:03:a2:9e:f9:84:54:27:6d:31:ac: f8:ff:91:ed:ab:8e:6e:b6:21:bc:b7:94:8f:81:41: 1e:19:5e:c3:96:04:a3:e7:e1:02:b3:b2:cd:22:b6: 2b:20:e9:09:70:6d:db:d8:52:09:96:82:90:46:a8: 12:95:06:5c:4d:fc:cf:f8:76:ab:3b:c6:5b:d4:24: a8:24:4f:02:59:e0:b2:22:07:d9:83:68:de:ef:f7: 2b:94:60:88:60:80:e0:49:be:59:7b:3f:43:90:6e: b6:0a:c9:61:41:38:10:e4:af:30:30:67:7c:ed:c1: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9B:D2:0D:62:A3:B0:8D:C2:4B:60:BA:D1:11:4E:ED:A1:D7:53:0C X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:b5:30:1e:d8:d8:ee:39:78:92:37:99:69:22:78:ef:2d:94: 80:39:78:e4:d7:26:fa:b8:39:93:bb:7d:88:66:38:05:e3:07: a0:21:f7:85:1b:1f:23:79:b0:78:f0:79:f3:a5:23:d2:62:15: b3:d6:10:53:ad:39:b6:87:68:a6:01:f4:18:b2:4d:98:c5:67: 4e:02:6c:d3:ee:f4:0b:f6:a4:b5:c6:db:90:56:57:ab:3d:14: 4e:ac:0c:79:07:1b:c7:36:d6:a0:df:1c:7a:8e:32:8f:bb:ad: e9:cf:61:de:76:f9:76:2f:44:22:16:ec:76:3c:e5:a2:0a:db: e2:77:9e:66:5d:dd:91:9d:8a:86:24:ae:7c:a6:1c:04:df:b4: 20:cd:5a:48:58:fe:59:0d:ab:fe:eb:5e:9a:43:47:e4:f1:eb: 6f:c7:f9:ca:45:66:b2:3b:f3:89:31:1c:01:51:ff:fa:8d:91: e0:8e:9e:15:b9:6c:4c:44:30:3c:cc:b6:94:24:5c:a4:48:4a: 0a:77:fc:2c:77:04:8d:1c:5a:b9:b5:bf:6b:b5:79:86:fd:3b: 4b:0b:c3:bd:36:5d:62:13:3c:53:77:2c:2a:4a:59:d8:7c:d4: a5:e3:3f:da:f9:25:d3:8a:a3:bc:3d:ae:ea:de:a6:73:33:e6: ca:cc:67:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjQxMTIxMDIwOTM4WhcNMjQxMTI4MDIwOTM4WjAYMRYwFAYD VQQDEw02NzNlOTY2My04OWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfxagbxgVNfu2R1YTUdyXs331BFEASlDPgE6vB/raUIeIiJrxjstl0CDMrXC 0hY/qzIWFYt0BVlu6bO8OR6pERpFqi8G3Y8N/HxWK+kT+7HBHdEd3jpZnH4JFRLS J+DJz83VPQ6HpMbSi7WNWk4lG07IPmF9l7OyyZn/lcv9hp1aA/BKZIqZDBa7MgOi nvmEVCdtMaz4/5Htq45utiG8t5SPgUEeGV7DlgSj5+ECs7LNIrYrIOkJcG3b2FIJ loKQRqgSlQZcTfzP+HarO8Zb1CSoJE8CWeCyIgfZg2je7/crlGCIYIDgSb5Zez9D kG62CslhQTgQ5K8wMGd87cGZVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSb0g1i o7CNwktgutERTu2h11MMMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDqtTAe2NjuOXiSN5lpInjvLZSAOXjk1yb6uDmTu32IZjgF4wegIfeF Gx8jebB48HnzpSPSYhWz1hBTrTm2h2imAfQYsk2YxWdOAmzT7vQL9qS1xtuQVler PRROrAx5BxvHNtag3xx6jjKPu63pz2Hedvl2L0QiFux2POWiCtvid55mXd2RnYqG JK58phwE37QgzVpIWP5ZDav+616aQ0fk8etvx/nKRWayO/OJMRwBUf/6jZHgjp4V uWxMRDA8zLaUJFykSEoKd/wsdwSNHFq5tb9rtXmG/TtLC8O9Nl1iEzxTdywqSlnY fNSl4z/a+SXTiqO8Pa7q3qZzM+bKzGdQ -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:50 2024 by rpki-client on console-ams.rpki-client.org