$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft File: t3KDxTMROjkeMdlFJxhqz4OZol8.mft (raw, json) Hash identifier: 7Aa/V37m/lbwPcPQEN94laqVsz1sm8eefkflcPcZQPw= Subject key identifier: 2C:06:B0:9F:14:73:28:78:51:A4:E7:72:17:FE:AD:4A:D4:D7:1C:AD Authority key identifier: B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F Certificate issuer: /CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F Certificate serial: 0AA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft Manifest number: 0A99 Signing time: Fri 22 Nov 2024 19:19:17 +0000 Manifest this update: Fri 22 Nov 2024 19:19:17 +0000 Manifest next update: Fri 29 Nov 2024 19:19:17 +0000 Files and hashes: 1: t3KDxTMROjkeMdlFJxhqz4OZol8.crl (hash: Q1ctftuVu/CoZRJ4QVZXKdwhZyS4O/eygTENQ6ixgRQ=) 2: 02F1850E45A611EA81CD145AC4F9AE02.roa (hash: +dnFv6At/j+rB10C6K34OqDt094wwEbkgdTC71u4hkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2722 (0xaa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F Validity Not Before: Nov 22 19:19:17 2024 GMT Not After : Nov 29 19:19:17 2024 GMT Subject: CN=6740d935-d64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fd:eb:a9:b8:9f:c3:f5:2c:5b:96:85:22:7b: b4:ce:ba:15:d2:eb:46:ad:8b:7d:07:f9:9a:a4:5d: fe:1b:70:2a:4f:ac:1e:30:a5:34:d3:2d:7e:20:40: 3a:3d:0e:06:36:14:6f:ac:d2:3b:3a:fa:76:c1:0a: bd:ee:63:49:52:aa:79:a9:c2:97:bc:4b:3f:14:94: d6:35:39:d9:f4:2a:c8:ad:2f:7c:c1:1c:ed:64:ef: 51:37:4d:f9:25:ca:ba:df:17:c0:18:42:ad:7e:98: b3:ce:05:f1:9c:c9:e3:b3:36:10:b0:c1:b1:45:84: 79:29:5a:90:a5:8a:f3:f8:c5:2b:9b:ef:fc:60:8a: 96:38:bd:e2:78:f7:51:87:ec:14:c9:e7:27:92:ac: 54:2b:ce:d2:0d:70:cd:bd:17:32:ab:8b:19:cb:69: 92:19:57:88:07:5f:1e:34:d1:9f:bc:c7:5c:ee:d2: db:be:91:d3:7a:83:a4:0f:8a:2e:de:d3:74:0f:e0: 85:12:e1:3b:13:3b:5c:53:ca:0a:fc:3b:e6:f2:4a: 7e:1d:4e:df:03:3c:e4:0f:b8:99:45:3d:e4:e7:b8: ee:44:94:51:68:a0:a8:f2:06:72:f6:75:08:65:e4: 0c:a3:cd:6a:06:ff:a8:4d:36:cd:55:1a:a7:a4:69: 14:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:06:B0:9F:14:73:28:78:51:A4:E7:72:17:FE:AD:4A:D4:D7:1C:AD X509v3 Authority Key Identifier: keyid:B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9e:b9:98:ba:98:a3:88:62:8a:02:4c:fd:d1:92:63:0f:6b: f5:e0:17:ea:4c:b0:6f:08:d5:4f:c8:98:d8:fe:d4:10:46:c7: c6:ae:3d:53:56:80:7b:62:d5:4e:2f:57:fa:b9:ae:65:80:b3: 2c:f9:e8:b3:3b:48:55:78:f6:88:95:fc:18:50:53:0b:57:00: 7f:64:56:5b:38:a9:fc:dd:6e:40:89:65:d8:3e:65:ba:d3:78: 27:10:f3:e9:f1:c3:0d:aa:a8:20:1e:58:09:0e:92:f9:a2:da: 28:d2:88:e4:9c:c2:71:93:1b:92:09:c4:7f:82:af:a4:51:3f: a9:c2:de:77:cc:28:d7:2b:83:75:d2:81:02:84:5c:0f:ab:54: f4:d3:7f:c3:88:87:12:08:7b:68:ad:3f:8e:2b:fa:98:29:14: 7a:85:6e:e6:bf:b5:09:48:af:27:44:93:64:ba:b9:30:35:c3: fa:7d:5e:ec:ef:66:a9:c6:c8:03:75:29:f8:5a:b0:06:4a:7a: 94:e9:b2:74:85:96:9a:a3:f9:e2:4f:cf:52:43:72:ee:4e:d0: d9:5b:30:ae:72:0a:d5:a5:03:ed:db:b8:3c:5e:e4:bc:1b:2d: 79:b3:9b:c9:72:b2:2b:8f:dc:ba:3d:90:ee:dc:4f:c6:c6:83: 7a:09:12:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFNEIxMTAvBgNVBAUTKEI3NzI4M0M1MzMxMTNBMzkxRTMxRDk0NTI3MTg2QUNG ODM5OUEyNUYwHhcNMjQxMTIyMTkxOTE3WhcNMjQxMTI5MTkxOTE3WjAYMRYwFAYD VQQDEw02NzQwZDkzNS1kNjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/3rqbifw/UsW5aFInu0zroV0utGrYt9B/mapF3+G3AqT6weMKU00y1+IEA6 PQ4GNhRvrNI7Ovp2wQq97mNJUqp5qcKXvEs/FJTWNTnZ9CrIrS98wRztZO9RN035 Jcq63xfAGEKtfpizzgXxnMnjszYQsMGxRYR5KVqQpYrz+MUrm+/8YIqWOL3iePdR h+wUyecnkqxUK87SDXDNvRcyq4sZy2mSGVeIB18eNNGfvMdc7tLbvpHTeoOkD4ou 3tN0D+CFEuE7EztcU8oK/Dvm8kp+HU7fAzzkD7iZRT3k57juRJRRaKCo8gZy9nUI ZeQMo81qBv+oTTbNVRqnpGkUUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwGsJ8U cyh4UaTnchf+rUrU1xytMB8GA1UdIwQYMBaAFLdyg8UzETo5HjHZRScYas+DmaJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0Qi82M0RGRjgwMjQ1 QTQxMUVBOTQyRTA5NTdDNEY5QUUwMi90M0tEeFRNUk9qa2VNZGxGSnhocXo0T1pv bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS0R4VE1ST2prZU1kbEZKeGhxejRPWm9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUU0Qi82M0RGRjgwMjQ1QTQxMUVBOTQyRTA5NTdDNEY5QUUwMi90M0tEeFRNUk9q a2VNZGxGSnhocXo0T1pvbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOnrmYupijiGKKAkz90ZJjD2v14BfqTLBvCNVPyJjY/tQQRsfGrj1T VoB7YtVOL1f6ua5lgLMs+eizO0hVePaIlfwYUFMLVwB/ZFZbOKn83W5AiWXYPmW6 03gnEPPp8cMNqqggHlgJDpL5otoo0ojknMJxkxuSCcR/gq+kUT+pwt53zCjXK4N1 0oEChFwPq1T003/DiIcSCHtorT+OK/qYKRR6hW7mv7UJSK8nRJNkurkwNcP6fV7s 72apxsgDdSn4WrAGSnqU6bJ0hZaao/niT89SQ3LuTtDZWzCucgrVpQPt27g8XuS8 Gy15s5vJcrIrj9y6PZDu3E/GxoN6CRIj -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:38 2024 by rpki-client on console-ams.rpki-client.org