$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft File: cOo3wZMr00-ztIWaNIMaEOYR0PY.mft (raw, json) Hash identifier: /4RDrEPz8sOPMfb/whBMhP0W80yOBcbzanqJxKvPlEk= Subject key identifier: A6:F9:59:79:45:BD:13:6A:93:2D:51:70:74:4F:C9:37:91:2E:09:B5 Authority key identifier: 70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 Certificate issuer: /CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft Manifest number: CB Signing time: Thu 21 Nov 2024 04:07:55 +0000 Manifest this update: Thu 21 Nov 2024 04:07:54 +0000 Manifest next update: Thu 28 Nov 2024 04:07:54 +0000 Files and hashes: 1: cOo3wZMr00-ztIWaNIMaEOYR0PY.crl (hash: DsBhEIivWh7qqdnlYoms7SOtCugxYuckYOypgF0yk6U=) 2: BC630BAE84FC11EE9887345FC4F9AE02.roa (hash: E3DVtUK4PKLNRTNWPdaED3S506iNVROikAhxbftKIaQ=) 3: 7C58D40872CD11EE81C60650C4F9AE02.roa (hash: hhVy8VlS8PQRYDzu0z2SFqVi4xOaWLt/VFPzg2LCqTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA1BF/serialNumber=70EA37C1932BD34FB3B4859A34831A10E611D0F6 Validity Not Before: Nov 21 04:07:54 2024 GMT Not After : Nov 28 04:07:54 2024 GMT Subject: CN=673eb21b-b774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:35:60:86:94:8a:74:58:4a:d1:df:91:69: 94:f1:a5:1b:ce:ac:51:89:e6:dc:98:0d:3c:4d:9d: 42:c0:ec:ec:d5:45:f3:dd:70:f0:d4:c8:f7:6f:fc: 84:a8:c9:8d:48:46:26:63:e9:ff:fd:81:35:85:0e: 80:5e:ef:02:1d:f8:c0:9b:03:e3:bc:99:8a:90:cc: e0:21:6a:ba:f0:f1:bb:af:3b:a2:ed:f0:21:99:6d: c5:96:03:5d:de:68:04:a1:ca:d1:f3:ed:fb:6b:9f: 86:fc:c3:0b:36:ad:1b:ae:84:79:85:65:c1:6b:41: 0c:10:35:59:a8:9d:8a:99:91:4c:69:fe:35:8d:05: e9:4d:a1:ec:2a:36:d3:a5:e8:77:1e:5c:4b:be:a8: e7:83:16:84:fd:e4:b8:84:a9:aa:d9:ed:0f:3b:64: a4:80:bf:eb:31:de:65:01:8c:b6:9a:0e:61:c5:74: 83:28:88:5a:78:f3:91:68:e7:47:9d:4d:6f:d1:6b: 52:b3:5c:4b:1c:69:8d:5d:59:07:e8:e2:cd:8d:92: c7:b7:80:93:b9:1a:2a:d2:90:d2:e8:d6:d8:f4:c0: 85:91:23:37:b8:33:e3:58:c6:c1:80:f5:91:12:ec: 27:92:fe:e7:c5:6f:fb:41:95:f4:cc:1f:0f:e8:10: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F9:59:79:45:BD:13:6A:93:2D:51:70:74:4F:C9:37:91:2E:09:B5 X509v3 Authority Key Identifier: keyid:70:EA:37:C1:93:2B:D3:4F:B3:B4:85:9A:34:83:1A:10:E6:11:D0:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cOo3wZMr00-ztIWaNIMaEOYR0PY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA1BF/84E10A4272CC11EEB7945A4DC4F9AE02/cOo3wZMr00-ztIWaNIMaEOYR0PY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:cd:36:ac:d3:4e:eb:f8:6f:60:8b:cf:9f:57:65:3a:8c:7f: ea:7e:ce:44:e8:8c:aa:87:b9:d9:8f:4a:b6:77:0a:18:72:83: f6:cb:d3:73:6b:ff:44:b4:90:11:25:32:a2:84:78:b8:53:98: 00:bf:71:ce:62:5a:c6:04:1c:da:b2:cb:a3:fb:3f:fd:2e:ce: 93:08:d7:f9:86:37:ca:5b:14:a4:a5:18:2c:13:06:a1:ec:ca: dc:81:bf:3d:96:51:95:74:79:a5:73:e8:53:a2:f6:0e:4a:68: 45:94:c5:4d:e4:b7:ba:10:da:a5:62:8e:b7:7d:3c:2a:fc:d2: ee:c9:ae:3a:28:7d:4c:94:b6:fa:01:50:37:46:66:a4:3f:fb: 7f:b5:0b:64:4d:60:1e:85:d9:76:c4:5f:54:7b:33:d9:be:3d: d7:30:fa:cd:50:f3:a3:87:07:13:1b:9d:d5:45:01:3a:50:f0: df:09:b4:3d:ea:9c:69:45:16:4f:1d:ee:08:ec:12:db:8e:c0: f5:49:76:4e:a1:a5:7c:57:0f:6e:88:0d:db:0b:ba:70:53:51: 01:d5:c3:df:6c:94:c8:67:1b:7d:83:e1:f1:35:25:91:45:0e: 52:4a:2c:9a:53:ba:16:79:db:97:b1:76:1e:d4:37:2e:24:71: 78:96:e7:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExQkYxMTAvBgNVBAUTKDcwRUEzN0MxOTMyQkQzNEZCM0I0ODU5QTM0ODMxQTEw RTYxMUQwRjYwHhcNMjQxMTIxMDQwNzU0WhcNMjQxMTI4MDQwNzU0WjAYMRYwFAYD VQQDEw02NzNlYjIxYi1iNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQA1YIaUinRYStHfkWmU8aUbzqxRiebcmA08TZ1CwOzs1UXz3XDw1Mj3b/yE qMmNSEYmY+n//YE1hQ6AXu8CHfjAmwPjvJmKkMzgIWq68PG7rzui7fAhmW3FlgNd 3mgEocrR8+37a5+G/MMLNq0broR5hWXBa0EMEDVZqJ2KmZFMaf41jQXpTaHsKjbT peh3HlxLvqjngxaE/eS4hKmq2e0PO2SkgL/rMd5lAYy2mg5hxXSDKIhaePORaOdH nU1v0WtSs1xLHGmNXVkH6OLNjZLHt4CTuRoq0pDS6NbY9MCFkSM3uDPjWMbBgPWR Euwnkv7nxW/7QZX0zB8P6BD70wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKb5WXlF vRNqky1RcHRPyTeRLgm1MB8GA1UdIwQYMBaAFHDqN8GTK9NPs7SFmjSDGhDmEdD2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTFCRi84NEUxMEE0Mjcy Q0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAwLXp0SVdhTklNYUVPWVIw UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NPbzN3Wk1yMDAtenRJV2FOSU1hRU9ZUjBQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTFCRi84NEUxMEE0MjcyQ0MxMUVFQjc5NDVBNERDNEY5QUUwMi9jT28zd1pNcjAw LXp0SVdhTklNYUVPWVIwUFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMzTas007r+G9gi8+fV2U6jH/qfs5E6Iyqh7nZj0q2dwoYcoP2y9Nz a/9EtJARJTKihHi4U5gAv3HOYlrGBBzassuj+z/9Ls6TCNf5hjfKWxSkpRgsEwah 7Mrcgb89llGVdHmlc+hTovYOSmhFlMVN5Le6ENqlYo63fTwq/NLuya46KH1MlLb6 AVA3RmakP/t/tQtkTWAehdl2xF9UezPZvj3XMPrNUPOjhwcTG53VRQE6UPDfCbQ9 6pxpRRZPHe4I7BLbjsD1SXZOoaV8Vw9uiA3bC7pwU1EB1cPfbJTIZxt9g+HxNSWR RQ5SSiyaU7oWeduXsXYe1DcuJHF4lueo -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:16 2024 by rpki-client on console-ams.rpki-client.org