$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft File: 88hJQLK99AJViHBvWcHm7D0hR_A.mft (raw, json) Hash identifier: 3t3VQ9qRfyF1LEkPVkqjdrPB16Xfaj2roKcfN800xdI= Subject key identifier: A1:FF:1E:F5:56:28:9E:ED:42:F8:B9:DD:AB:7C:79:02:B6:E1:92:9C Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 Certificate issuer: /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft Manifest number: C1 Signing time: Sat 23 Nov 2024 03:55:37 +0000 Manifest this update: Sat 23 Nov 2024 03:55:37 +0000 Manifest next update: Sat 30 Nov 2024 03:55:37 +0000 Files and hashes: 1: 88hJQLK99AJViHBvWcHm7D0hR_A.crl (hash: WEFIBQ+iqhOM5u5EictF15Vy3lEdfjmbDYEznpj6OdQ=) 2: D36C048A81E211EEAF423C87C4F9AE02.roa (hash: AgEcJkKDpEPBaGjrS9V0jt2iST6E+qzc3K1SEhivhc4=) 3: FC3C8A6A81E211EE963BAB87C4F9AE02.roa (hash: 548P4XWsPS3JTWuhyip3nqsrffc51BRt/khZw2JCljI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0 Validity Not Before: Nov 23 03:55:37 2024 GMT Not After : Nov 30 03:55:37 2024 GMT Subject: CN=67415239-5e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:09:f1:a4:cd:f7:80:2c:ee:92:ce:aa:b1: 23:8a:db:e8:1f:3f:e1:d1:c2:24:9d:f1:17:59:2c: 0f:bd:a4:a7:46:fb:73:95:53:2e:87:ec:1e:18:b5: 3a:5b:4d:ce:be:50:94:fc:09:40:60:91:ad:08:e9: 5e:66:42:80:f7:e1:35:bf:ed:74:92:60:fa:42:aa: f3:8d:00:91:55:68:dc:46:de:fe:1b:74:91:d9:f3: 9a:18:9e:f8:fc:d6:29:7c:71:4d:64:3c:b8:4a:f1: 69:af:cc:a2:64:cd:9a:ac:be:d1:25:06:2c:9a:07: 5e:37:da:08:f2:ba:15:88:a7:5d:56:1e:a5:cf:98: 78:43:18:64:71:6d:4a:d5:cb:54:0f:a5:14:5c:f4: 65:35:8e:c2:99:a3:25:ee:51:86:15:14:54:3f:1e: 59:7d:25:a5:c9:d0:2a:f8:21:b7:07:95:30:5b:19: f2:7f:3d:2c:52:7e:cb:f6:d0:dc:7a:b4:83:51:e7: c9:0b:d7:c5:b9:b5:d8:4e:fe:60:df:86:63:09:3f: 7e:d2:0a:11:be:31:ed:49:01:da:11:78:38:22:31: c7:98:0a:ed:13:8c:01:63:69:8f:b8:09:75:72:d2: 70:6b:86:2e:5f:15:83:d2:ed:04:43:b1:3f:3d:66: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FF:1E:F5:56:28:9E:ED:42:F8:B9:DD:AB:7C:79:02:B6:E1:92:9C X509v3 Authority Key Identifier: keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:97:c9:53:7e:31:93:58:6c:bd:31:5e:ea:14:13:f2:b2:59: 07:8d:4e:e6:22:8f:c3:f8:91:d2:08:9b:31:83:83:99:3e:d7: 6d:69:a5:b7:b7:49:58:74:a8:bb:9b:48:46:ae:6b:d0:3a:d7: aa:f6:09:d3:60:d0:e4:55:e2:f8:69:ad:e6:d4:9e:98:21:b2: 01:87:0e:f7:33:90:08:2e:d3:8a:70:07:9c:22:4f:2a:c8:14: d0:68:96:9d:a7:c1:7a:db:4e:05:82:1a:dd:f2:4e:2a:68:15: 2f:2c:f6:c5:51:bb:72:3d:e8:bc:e5:42:e9:18:ef:44:24:a2: 7f:e7:66:8c:40:32:d7:fb:85:92:2a:54:42:bf:3d:c0:82:84: 0d:0a:8a:8c:2a:5a:a5:69:13:a9:61:4e:7b:0e:34:1e:ba:ed: 0a:3d:de:74:85:9c:f3:73:37:1f:81:ee:ed:a1:94:62:92:00: 78:15:bd:b6:58:d4:ea:27:17:a0:71:91:f7:bf:52:b0:b6:64: 6c:7d:0e:e0:ae:28:58:32:f6:a5:0e:df:84:ba:e9:9d:32:ea: d5:53:4b:0b:1b:94:cd:4e:47:20:0b:8d:bc:48:ec:7a:2a:23: c1:f9:ee:67:c1:5d:5b:9a:a5:d3:00:dc:11:a1:81:d6:44:7a: b8:3e:93:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNDMjMxMTAvBgNVBAUTKEYzQzg0OTQwQjJCREY0MDI1NTg4NzA2RjU5QzFFNkVD M0QyMTQ3RjAwHhcNMjQxMTIzMDM1NTM3WhcNMjQxMTMwMDM1NTM3WjAYMRYwFAYD VQQDEw02NzQxNTIzOS01ZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDsJ8aTN94As7pLOqrEjitvoHz/h0cIknfEXWSwPvaSnRvtzlVMuh+weGLU6 W03OvlCU/AlAYJGtCOleZkKA9+E1v+10kmD6QqrzjQCRVWjcRt7+G3SR2fOaGJ74 /NYpfHFNZDy4SvFpr8yiZM2arL7RJQYsmgdeN9oI8roViKddVh6lz5h4QxhkcW1K 1ctUD6UUXPRlNY7CmaMl7lGGFRRUPx5ZfSWlydAq+CG3B5UwWxnyfz0sUn7L9tDc erSDUefJC9fFubXYTv5g34ZjCT9+0goRvjHtSQHaEXg4IjHHmArtE4wBY2mPuAl1 ctJwa4YuXxWD0u0EQ7E/PWZvvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKH/HvVW KJ7tQvi53at8eQK24ZKcMB8GA1UdIwQYMBaAFPPISUCyvfQCVYhwb1nB5uw9IUfw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0MyMy85MjVDODBDRTgx RTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlBSlZpSEJ2V2NIbTdEMGhS X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg4aEpRTEs5OUFKVmlIQnZXY0htN0QwaFJfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0MyMy85MjVDODBDRTgxRTExMUVFOENGNjZCMEFDNEY5QUUwMi84OGhKUUxLOTlB SlZpSEJ2V2NIbTdEMGhSX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyl8lTfjGTWGy9MV7qFBPyslkHjU7mIo/D+JHSCJsxg4OZPtdtaaW3 t0lYdKi7m0hGrmvQOteq9gnTYNDkVeL4aa3m1J6YIbIBhw73M5AILtOKcAecIk8q yBTQaJadp8F6204Fghrd8k4qaBUvLPbFUbtyPei85ULpGO9EJKJ/52aMQDLX+4WS KlRCvz3AgoQNCoqMKlqlaROpYU57DjQeuu0KPd50hZzzczcfge7toZRikgB4Fb22 WNTqJxegcZH3v1KwtmRsfQ7grihYMvalDt+EuumdMurVU0sLG5TNTkcgC428SOx6 KiPB+e5nwV1bmqXTANwRoYHWRHq4PpNC -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:21 2024 by rpki-client on console-ams.rpki-client.org