$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft File: EvkubHLmyiXAdQVbSP43tlq24FI.mft (raw, json) Hash identifier: pOet8zAzAD9EJGqjI11BjnXWbPJtsfARkHfYqOZ6pFw= Subject key identifier: E7:16:51:F2:2A:05:5C:7C:D9:AF:95:D7:15:AA:98:78:57:67:07:59 Authority key identifier: 12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 Certificate issuer: /CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Certificate serial: 1279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft Manifest number: 1251 Signing time: Wed 20 Nov 2024 17:04:52 +0000 Manifest this update: Wed 20 Nov 2024 17:04:51 +0000 Manifest next update: Wed 27 Nov 2024 17:04:51 +0000 Files and hashes: 1: EvkubHLmyiXAdQVbSP43tlq24FI.crl (hash: fdXEInlJGi5DpR34yFcs+9t7U4qsaRitgw61+rYQGjw=) 2: D67D6C12D09611ECAE4FA90AC4F9AE02.roa (hash: ohfZG59sEvFb3B98TJzWsPWyWdsfQxGqekH2JoxH6gQ=) 3: D5BE6FF6D09611ECAE4FA90AC4F9AE02.roa (hash: QtJIcs1O/DIjF/Awmfs8kNbcOWbla/g4nCBWN3yn5TE=) 4: 2AD29284D22A11E8B6E99987C4F9AE02.roa (hash: 3q5R1J4djCmGk92jrHGge8u1JnUcb5OYOxif13zqZng=) 5: D82E5F1ADBC211E99D686940C4F9AE02.roa (hash: At2TYBc2mB9m2KMar1RnpPwLIC3piw2pCnJKYNvU7DI=) 6: 8ECD16D0CE7211ED84D09A78C4F9AE02.roa (hash: T7RO7bDELeuxgYKkuydZy/+SJnNf8qDQvOpkzhWcvjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4729 (0x1279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Validity Not Before: Nov 20 17:04:51 2024 GMT Not After : Nov 27 17:04:51 2024 GMT Subject: CN=673e16b3-e7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:8f:4c:54:76:06:75:72:0c:b1:94:45:1e: c9:cb:46:90:6d:18:dd:6e:37:07:10:a6:7d:46:8b: 3a:d6:3d:e9:9e:20:b5:78:e6:4a:fb:28:1c:5a:ca: 81:c1:49:8e:e8:da:f5:75:92:0c:5e:7c:f4:f9:18: 80:92:b8:8d:a2:73:5a:48:63:ee:15:ae:c7:df:ce: 60:c1:95:37:ce:63:ac:c7:d9:b7:c0:15:40:97:a7: 22:45:12:ae:87:9e:8f:4f:76:0c:fc:00:44:ac:91: 67:be:76:14:86:3a:f5:0c:2f:2a:af:7c:d4:8b:fb: 1c:29:87:3d:72:69:a1:dc:ea:95:b8:7b:ca:d1:4b: eb:72:37:87:9a:17:49:47:82:65:85:d6:1d:41:f2: b5:80:aa:33:70:5f:52:9c:9d:58:f1:6d:33:af:28: 24:28:35:01:11:66:64:ca:e1:e7:4d:5b:6e:fb:86: ea:94:ab:d2:bd:61:20:00:a1:60:86:f5:31:21:a6: 30:62:46:2d:77:9b:c7:1c:e6:76:e8:81:40:b7:c0: bb:46:b9:84:6b:17:de:ef:90:2b:88:16:f3:43:d4: 06:dd:54:48:92:ce:db:50:d0:51:9b:7e:da:f1:29: 72:d0:98:b2:b4:06:d5:62:8e:69:89:ec:71:12:e9: fc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:16:51:F2:2A:05:5C:7C:D9:AF:95:D7:15:AA:98:78:57:67:07:59 X509v3 Authority Key Identifier: keyid:12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ec:33:93:d2:d3:d3:f1:71:da:e3:37:56:97:88:b3:0c:5e: d6:57:5e:35:b8:50:1a:d3:b9:d9:b4:bc:1d:75:90:92:7d:ff: 62:0f:69:59:c5:4e:be:3c:0e:1e:32:53:2d:56:1e:e3:dc:5a: d9:c2:3e:8f:a6:59:c7:61:7e:a9:11:da:21:7d:22:51:b4:75: 7c:54:55:e2:c6:30:f3:ee:c4:9b:2f:67:b7:96:14:aa:f3:a8: c6:40:c9:1b:b7:4b:ce:a4:27:aa:cd:c8:bd:ce:9f:1e:2e:7a: 7f:b6:50:cf:c1:ac:dc:33:7b:46:5d:66:1c:35:ef:d4:67:e8: 3d:d4:34:4d:47:97:61:e3:ed:f7:57:94:01:88:61:02:ea:67: 35:e1:a1:58:0f:d9:32:d0:aa:63:fa:36:8c:98:fa:f1:86:da: 16:b4:00:4e:87:db:9d:98:db:1c:88:54:8d:ac:50:85:87:94: 14:8e:bc:ae:f7:c6:53:e9:08:73:ba:f4:85:c9:9c:e4:4a:2a: 58:46:8e:8e:61:bc:36:14:0a:9f:8b:6c:6c:67:0d:ab:69:9a: 25:47:a1:3d:f4:3b:3b:2b:3f:3b:f1:9c:31:2c:7a:46:4f:83: 8a:70:9a:7e:0e:c8:c3:e6:0e:ec:26:fd:9f:53:d6:86:92:ad: be:47:c9:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYwMDYxMTAvBgNVBAUTKDEyRjkyRTZDNzJFNkNBMjVDMDc1MDU1QjQ4RkUzN0I2 NUFCNkUwNTIwHhcNMjQxMTIwMTcwNDUxWhcNMjQxMTI3MTcwNDUxWjAYMRYwFAYD VQQDEw02NzNlMTZiMy1lN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArV+PTFR2BnVyDLGURR7Jy0aQbRjdbjcHEKZ9Ros61j3pniC1eOZK+ygcWsqB wUmO6Nr1dZIMXnz0+RiAkriNonNaSGPuFa7H385gwZU3zmOsx9m3wBVAl6ciRRKu h56PT3YM/ABErJFnvnYUhjr1DC8qr3zUi/scKYc9cmmh3OqVuHvK0UvrcjeHmhdJ R4JlhdYdQfK1gKozcF9SnJ1Y8W0zrygkKDUBEWZkyuHnTVtu+4bqlKvSvWEgAKFg hvUxIaYwYkYtd5vHHOZ26IFAt8C7RrmEaxfe75AriBbzQ9QG3VRIks7bUNBRm37a 8Sly0JiytAbVYo5piexxEun8xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcWUfIq BVx82a+V1xWqmHhXZwdZMB8GA1UdIwQYMBaAFBL5Lmxy5solwHUFW0j+N7ZatuBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjAwNi9FNEZERTQ2QUMz RTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlpWEFkUVZiU1A0M3RscTI0 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V2a3ViSExteWlYQWRRVmJTUDQzdGxxMjRGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjAwNi9FNEZERTQ2QUMzRTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlp WEFkUVZiU1A0M3RscTI0RkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE7DOT0tPT8XHa4zdWl4izDF7WV141uFAa07nZtLwddZCSff9iD2lZ xU6+PA4eMlMtVh7j3FrZwj6PplnHYX6pEdohfSJRtHV8VFXixjDz7sSbL2e3lhSq 86jGQMkbt0vOpCeqzci9zp8eLnp/tlDPwazcM3tGXWYcNe/UZ+g91DRNR5dh4+33 V5QBiGEC6mc14aFYD9ky0Kpj+jaMmPrxhtoWtABOh9udmNsciFSNrFCFh5QUjryu 98ZT6QhzuvSFyZzkSipYRo6OYbw2FAqfi2xsZw2raZolR6E99Ds7Kz878ZwxLHpG T4OKcJp+DsjD5g7sJv2fU9aGkq2+R8n2 -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:05 2024 by rpki-client on console-ams.rpki-client.org