$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft File: 5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json) Hash identifier: OdwZCdsGhM3RdwRp6pgfd3M1c9vZV/0NGnklnzAx85k= Subject key identifier: B6:34:70:A9:AC:E2:8C:00:2B:61:3A:3F:36:A3:D3:98:1B:FF:52:85 Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 Certificate issuer: /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft Manifest number: 08AB Signing time: Fri 22 Nov 2024 20:15:41 +0000 Manifest this update: Fri 22 Nov 2024 20:15:40 +0000 Manifest next update: Fri 29 Nov 2024 20:15:40 +0000 Files and hashes: 1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: 2vCThbksJlfwMpYeuqWD5Y9nFSa+7IvMRdg82XhZJDY=) 2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: 39k4BNBm3rB0SX8JoQ9K/8CWlJ/A9ku+Hc5oGt3yP94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Validity Not Before: Nov 22 20:15:40 2024 GMT Not After : Nov 29 20:15:40 2024 GMT Subject: CN=6740e66c-9ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:da:c2:de:9f:c4:2d:9b:2e:f2:98:75:82:a5: 85:a4:01:49:ee:21:51:74:67:ee:c7:90:b4:36:e3: ab:32:cc:35:a7:4e:90:7f:4f:1c:8b:34:55:5d:80: e3:27:c7:30:3e:57:8f:95:93:31:67:fe:49:df:1c: c8:9c:60:27:69:27:42:ea:4e:30:a0:1c:a3:7e:16: d7:6e:dc:d3:d7:7c:7f:c5:2a:ce:b0:69:8b:86:b6: 01:91:3b:45:79:64:2a:7a:a4:01:13:3d:9e:7f:72: 3c:40:8f:e2:e9:40:d2:3b:d5:0f:42:19:0d:31:7c: 59:67:16:8f:f2:3e:62:4b:a0:4f:b2:c7:bf:c7:35: 49:7c:a0:bc:ed:f0:47:2c:68:14:41:2d:52:eb:3d: db:41:fe:b9:ee:54:57:63:fb:9e:35:6e:73:8a:e4: 7b:06:77:fd:6e:10:33:48:4e:7e:ad:df:28:a0:59: 6e:bf:e5:a4:54:57:a7:63:96:d8:c5:e0:6a:49:5a: 0a:af:f3:79:cc:7f:7e:86:e3:b2:3f:a4:cd:10:78: e2:81:77:08:ce:6d:b5:0c:69:a8:2f:04:95:2b:f8: 49:f4:31:f8:c0:0f:35:65:e2:64:aa:e4:74:44:cd: 8c:32:ad:36:aa:59:e9:63:37:be:93:e9:c0:88:ff: 24:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:34:70:A9:AC:E2:8C:00:2B:61:3A:3F:36:A3:D3:98:1B:FF:52:85 X509v3 Authority Key Identifier: keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:49:42:37:6b:af:91:4e:5b:00:c9:fd:14:02:60:17:42:3e: 0f:2c:51:ed:76:e0:90:a5:f6:8d:bd:9e:0f:a5:8a:80:4f:ad: 56:b4:3c:87:a9:24:d9:f0:5e:d2:d9:63:1a:d4:fa:9f:86:f1: 32:7a:4f:3f:be:fe:92:8a:32:e2:4e:63:ed:82:9d:b5:57:be: bf:80:15:50:b8:db:5f:6e:3c:e0:b6:91:e2:22:9f:53:d5:fe: d4:02:91:66:2d:1e:9a:d9:e3:dc:5e:37:f3:d2:06:cd:7e:80: 47:1c:39:7c:25:33:7e:ef:de:33:d2:c7:f2:ef:be:57:b1:c6: 9f:70:9d:3d:a2:cf:96:be:d8:66:d1:f0:dd:3b:fe:14:96:08: 6d:f1:a9:a5:85:10:f3:0c:ab:ba:bf:59:f9:ef:96:7d:6b:fa: 36:24:a4:b0:51:90:9b:c5:47:17:d3:63:19:76:df:c0:b1:4e: 4e:1b:0c:bd:c1:e2:e0:3c:03:4b:7d:c5:54:e9:84:d6:7e:27: 7c:75:f8:64:39:51:81:2a:b0:3d:d5:85:03:ed:61:40:06:61: 4b:60:17:08:1b:58:bc:eb:67:b9:cc:0f:a1:7d:09:43:ad:33: 72:ce:97:97:ac:f3:13:70:23:d3:f2:f8:27:7c:aa:a7:20:c0: 2d:77:23:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwOTAxMTAvBgNVBAUTKEU1NUE1OTU3Mzg1QjZDRjhDQTBDMDQ4MUQ2MkRERkZE QUIxMkMxRjQwHhcNMjQxMTIyMjAxNTQwWhcNMjQxMTI5MjAxNTQwWjAYMRYwFAYD VQQDEw02NzQwZTY2Yy05ZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NrC3p/ELZsu8ph1gqWFpAFJ7iFRdGfux5C0NuOrMsw1p06Qf08cizRVXYDj J8cwPlePlZMxZ/5J3xzInGAnaSdC6k4woByjfhbXbtzT13x/xSrOsGmLhrYBkTtF eWQqeqQBEz2ef3I8QI/i6UDSO9UPQhkNMXxZZxaP8j5iS6BPsse/xzVJfKC87fBH LGgUQS1S6z3bQf657lRXY/ueNW5ziuR7Bnf9bhAzSE5+rd8ooFluv+WkVFenY5bY xeBqSVoKr/N5zH9+huOyP6TNEHjigXcIzm21DGmoLwSVK/hJ9DH4wA81ZeJkquR0 RM2MMq02qlnpYze+k+nAiP8k7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLY0cKms 4owAK2E6Pzaj05gb/1KFMB8GA1UdIwQYMBaAFOVaWVc4W2z4ygwEgdYt3/2rEsH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDA5MC8yRENFMDQ4Q0E2 NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQaktEQVNCMWkzZl9hc1N3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWcFpWemhiYlBqS0RBU0IxaTNmX2FzU3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDA5MC8yRENFMDQ4Q0E2NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQ aktEQVNCMWkzZl9hc1N3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDSUI3a6+RTlsAyf0UAmAXQj4PLFHtduCQpfaNvZ4PpYqAT61WtDyH qSTZ8F7S2WMa1PqfhvEyek8/vv6SijLiTmPtgp21V76/gBVQuNtfbjzgtpHiIp9T 1f7UApFmLR6a2ePcXjfz0gbNfoBHHDl8JTN+794z0sfy775XscafcJ09os+Wvthm 0fDdO/4Ulght8amlhRDzDKu6v1n575Z9a/o2JKSwUZCbxUcX02MZdt/AsU5OGwy9 weLgPANLfcVU6YTWfid8dfhkOVGBKrA91YUD7WFABmFLYBcIG1i862e5zA+hfQlD rTNyzpeXrPMTcCPT8vgnfKqnIMAtdyP4 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org