$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft File: SU13HlEeEgBTuwmx8nS9j1nXOqg.mft (raw, json) Hash identifier: OifUcLvfJDaByvag6vGc2ELP4lnrc3jS3NreT4d0XFY= Subject key identifier: 23:2B:03:A2:01:05:F3:55:9C:6F:F0:7B:90:0D:9E:F9:52:DD:30:E0 Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Certificate serial: 0C3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft Manifest number: 0C35 Signing time: Fri 22 Nov 2024 18:13:07 +0000 Manifest this update: Fri 22 Nov 2024 18:13:07 +0000 Manifest next update: Fri 29 Nov 2024 18:13:07 +0000 Files and hashes: 1: SU13HlEeEgBTuwmx8nS9j1nXOqg.crl (hash: q6VGgp4r/Eu0JmCrAUykZP/aPOxos7LYRrBejmQVe0k=) 2: B4CAE5D68D2B11EBA4296045C4F9AE02.roa (hash: z0Ht9jQD6tZErae0IWpwL/x58QPGb/Hqz7mBC7e9a7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8 Validity Not Before: Nov 22 18:13:07 2024 GMT Not After : Nov 29 18:13:07 2024 GMT Subject: CN=6740c9b3-f571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:13:7d:f0:82:32:0a:f4:cc:15:c8:76:d6: 9e:7d:93:6f:8d:d8:fb:f3:34:69:b7:f2:fd:6f:9c: 83:3e:10:0b:7b:53:ae:6d:b3:87:d4:2c:22:01:54: d1:17:0c:97:64:68:93:34:c0:62:74:4d:b7:9b:e2: cc:f2:b8:15:34:e4:12:fe:b3:eb:03:28:62:58:41: 8a:9d:7a:31:62:21:75:2c:b2:e6:eb:14:2b:30:b8: a4:56:9b:df:f8:c7:ce:53:1c:c1:3e:02:e6:03:36: ec:87:86:46:d0:d3:cf:65:de:e6:24:2d:90:19:d7: 42:4d:78:67:42:64:4b:71:d6:00:32:3b:ae:a4:da: e3:0b:70:d3:36:21:74:6a:ef:07:77:75:5c:7d:ff: 5a:c5:86:f1:a0:ad:ab:e1:fd:06:da:a3:fd:bf:aa: 8b:11:f9:27:2a:00:06:07:b7:ce:21:03:b8:98:af: a7:f7:da:60:4e:17:fd:b4:5a:1c:cb:cf:ee:34:78: 6a:5c:74:a2:82:23:5d:6b:41:a8:ba:b5:04:a8:22: ae:10:04:e9:60:75:ec:17:06:cb:64:2a:f7:a1:b8: b9:da:ab:f1:7f:34:b6:78:da:73:51:2c:6d:05:43: 0f:79:3f:6c:0a:87:39:2a:6e:42:9d:e9:b7:36:25: 4f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2B:03:A2:01:05:F3:55:9C:6F:F0:7B:90:0D:9E:F9:52:DD:30:E0 X509v3 Authority Key Identifier: keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:5a:fd:98:78:c0:57:ff:25:d6:91:b9:9e:12:6e:d4:c6:66: 12:cf:c8:22:d5:29:7a:12:55:31:36:e9:f2:b0:7c:4f:3f:bc: a9:eb:8f:87:92:df:86:c9:ff:e9:75:dc:c8:ab:91:aa:fa:0c: 0d:cf:26:95:25:6d:8d:7c:ec:4a:14:0b:cb:8e:b0:76:99:24: 74:50:fe:03:13:6d:99:9d:01:1a:f4:a8:b4:86:5c:f8:a5:0e: 6e:50:81:34:42:af:7d:0a:38:39:9d:85:08:45:0b:7a:93:3d: 34:6e:de:80:b5:c7:80:52:15:6f:2c:bc:10:6d:2b:46:37:fd: 41:ec:74:4d:06:1b:c3:33:9c:76:d7:8a:67:a3:74:36:7e:bc: 20:29:4c:11:d2:c2:57:f5:f3:41:82:c0:80:bf:7a:81:8e:f6: cf:20:11:4b:93:d5:6c:67:3a:70:b1:ec:d7:4f:55:f3:98:fa: 81:80:17:47:b6:a4:10:98:6e:44:cd:60:43:a1:87:96:24:f5: 95:69:d5:86:04:c9:68:35:6d:b6:26:96:6a:aa:e0:40:01:25: 56:09:0a:4d:6d:3c:a6:7b:81:d1:76:9a:f6:a4:56:53:a4:8a: 34:58:57:4c:6f:9d:ec:e7:33:7e:77:b3:4f:7c:3a:07:ee:68: a6:77:75:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2MTQxMTAvBgNVBAUTKDQ5NEQ3NzFFNTExRTEyMDA1M0JCMDlCMUYyNzRCRDhG NTlENzNBQTgwHhcNMjQxMTIyMTgxMzA3WhcNMjQxMTI5MTgxMzA3WjAYMRYwFAYD VQQDEw02NzQwYzliMy1mNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6ITffCCMgr0zBXIdtaefZNvjdj78zRpt/L9b5yDPhALe1OubbOH1CwiAVTR FwyXZGiTNMBidE23m+LM8rgVNOQS/rPrAyhiWEGKnXoxYiF1LLLm6xQrMLikVpvf +MfOUxzBPgLmAzbsh4ZG0NPPZd7mJC2QGddCTXhnQmRLcdYAMjuupNrjC3DTNiF0 au8Hd3Vcff9axYbxoK2r4f0G2qP9v6qLEfknKgAGB7fOIQO4mK+n99pgThf9tFoc y8/uNHhqXHSigiNda0GourUEqCKuEATpYHXsFwbLZCr3obi52qvxfzS2eNpzUSxt BUMPeT9sCoc5Km5Cnem3NiVPvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMrA6IB BfNVnG/we5ANnvlS3TDgMB8GA1UdIwQYMBaAFElNdx5RHhIAU7sJsfJ0vY9Z1zqo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDYxNC8xQzk0ODk5QUY0 RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVnQlR1d214OG5TOWoxblhP cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NVMTNIbEVlRWdCVHV3bXg4blM5ajFuWE9xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDYxNC8xQzk0ODk5QUY0RjAxMUU5QUMyMDJCMURDNEY5QUUwMi9TVTEzSGxFZUVn QlR1d214OG5TOWoxblhPcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Wv2YeMBX/yXWkbmeEm7UxmYSz8gi1Sl6ElUxNunysHxPP7yp64+H kt+Gyf/pddzIq5Gq+gwNzyaVJW2NfOxKFAvLjrB2mSR0UP4DE22ZnQEa9Ki0hlz4 pQ5uUIE0Qq99Cjg5nYUIRQt6kz00bt6AtceAUhVvLLwQbStGN/1B7HRNBhvDM5x2 14pno3Q2frwgKUwR0sJX9fNBgsCAv3qBjvbPIBFLk9VsZzpwsezXT1XzmPqBgBdH tqQQmG5EzWBDoYeWJPWVadWGBMloNW22JpZqquBAASVWCQpNbTyme4HRdpr2pFZT pIo0WFdMb53s5zN+d7NPfDoH7mimd3XI -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org