$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: wEfY/kFkcXX8eg/XYxoxAic8BVlfjPYFiHP9i6RW7i8= Subject key identifier: A5:3B:CE:4A:6E:FF:F7:7C:7D:82:2A:73:C0:FF:2A:A3:35:70:11:C0 Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 0111 Signing time: Thu 21 Nov 2024 03:10:47 +0000 Manifest this update: Thu 21 Nov 2024 03:10:47 +0000 Manifest next update: Thu 28 Nov 2024 03:10:47 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: wXFu/DWx2gRn2W6wnMgOHp4E/PLiNgyZwHTE/B9rO5Y=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: +NXIJ3XAp8BvWngt2c/RnkPBxhwMNcZtq308qJwKx8k=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: Wkz//5KDfJfxYrwNIm5g/VaiBGq0PmVllCjJzHHJxNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Nov 21 03:10:47 2024 GMT Not After : Nov 28 03:10:47 2024 GMT Subject: CN=673ea4b7-e641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:27:a3:24:83:34:00:ec:a9:54:7c:ea:cf:c1: cd:92:13:1f:99:a2:39:e0:56:32:a0:24:e5:83:a1: 8e:76:7f:50:bd:fe:e9:78:9f:76:23:30:45:c3:d6: cd:83:68:c3:20:0a:15:61:8b:44:b6:17:eb:79:ba: 95:e6:6e:67:d6:e8:7a:00:18:a8:07:f5:33:ed:63: 59:36:72:7f:3c:5e:f2:a7:eb:ea:e0:66:53:4f:8f: f3:43:ce:e7:7b:51:50:3d:7e:93:72:fc:e4:34:9b: e9:00:48:e4:3f:40:07:45:ef:b3:6e:f1:27:a7:b8: 66:31:b5:c2:2e:83:d5:8e:3d:41:6c:fd:51:97:f8: 98:37:0f:1c:10:64:95:c2:b9:7d:7b:c8:3d:a2:45: 9f:6e:e6:15:b0:a0:65:1f:b7:4d:1a:90:8c:af:c4: 32:97:58:0d:60:e5:83:2f:5d:e4:ec:c9:36:dc:89: 47:45:fe:8d:74:75:56:4b:2e:e8:44:97:73:86:86: d2:ba:8e:ea:82:21:ea:e2:86:7e:dd:f9:22:14:aa: ef:01:ac:ff:a4:13:dd:a2:99:7b:f6:89:ef:47:9b: 53:42:08:21:2b:76:c2:da:07:0a:05:96:5f:93:56: c9:b4:b5:ff:32:20:9e:a8:ea:19:26:be:9e:d7:82: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3B:CE:4A:6E:FF:F7:7C:7D:82:2A:73:C0:FF:2A:A3:35:70:11:C0 X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:d4:bc:bc:1a:f9:63:29:22:b5:98:9e:87:1e:c4:d6:a8:56: b1:22:5a:10:8a:3a:e9:c7:fb:18:43:aa:b8:7f:1d:88:02:92: c3:65:62:0d:0f:a6:55:13:1b:c7:57:0d:e9:18:1f:d9:d9:4a: 19:3a:73:7f:f8:86:9c:2a:3e:9b:48:c0:2b:58:72:25:f2:5d: a0:7f:24:cc:05:83:17:ce:96:27:70:b7:84:a1:c8:3e:e0:43: 2a:cf:68:04:e4:84:a3:a1:a7:a4:c9:8c:7e:b5:b6:af:9a:07: 46:1c:1f:6f:b6:11:60:b8:d5:57:ba:c7:8c:99:da:fa:d8:2a: 36:8f:3d:c3:e5:7d:c2:2b:3b:58:23:45:7d:6c:7b:03:17:5b: cd:72:12:63:d3:4d:fb:3b:f3:c0:7e:87:13:20:ba:ef:ba:c2: 36:45:41:53:1d:77:8d:6e:36:6b:31:94:43:7e:ac:a0:7a:b7: b9:10:b8:5c:15:98:13:fe:e2:a3:71:55:87:8a:eb:30:f4:61: 48:05:6d:8f:f7:65:b7:85:39:d5:32:eb:d1:de:fc:10:75:ff: f0:99:8a:b8:92:0f:f0:8e:87:80:89:4f:74:72:a0:73:7f:78: d2:b9:ed:a9:aa:fe:62:8b:47:28:38:5e:f7:8c:f2:0f:15:46: 65:da:e5:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjQxMTIxMDMxMDQ3WhcNMjQxMTI4MDMxMDQ3WjAYMRYwFAYD VQQDEw02NzNlYTRiNy1lNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yejJIM0AOypVHzqz8HNkhMfmaI54FYyoCTlg6GOdn9Qvf7peJ92IzBFw9bN g2jDIAoVYYtEthfrebqV5m5n1uh6ABioB/Uz7WNZNnJ/PF7yp+vq4GZTT4/zQ87n e1FQPX6TcvzkNJvpAEjkP0AHRe+zbvEnp7hmMbXCLoPVjj1BbP1Rl/iYNw8cEGSV wrl9e8g9okWfbuYVsKBlH7dNGpCMr8Qyl1gNYOWDL13k7Mk23IlHRf6NdHVWSy7o RJdzhobSuo7qgiHq4oZ+3fkiFKrvAaz/pBPdopl79onvR5tTQgghK3bC2gcKBZZf k1bJtLX/MiCeqOoZJr6e14JIvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU7zkpu //d8fYIqc8D/KqM1cBHAMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI1Ly8GvljKSK1mJ6HHsTWqFaxIloQijrpx/sYQ6q4fx2IApLDZWIN D6ZVExvHVw3pGB/Z2UoZOnN/+IacKj6bSMArWHIl8l2gfyTMBYMXzpYncLeEocg+ 4EMqz2gE5ISjoaekyYx+tbavmgdGHB9vthFguNVXuseMmdr62Co2jz3D5X3CKztY I0V9bHsDF1vNchJj0037O/PAfocTILrvusI2RUFTHXeNbjZrMZRDfqygere5ELhc FZgT/uKjcVWHiusw9GFIBW2P92W3hTnVMuvR3vwQdf/wmYq4kg/wjoeAiU90cqBz f3jSue2pqv5ii0coOF73jPIPFUZl2uXo -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:16 2024 by rpki-client on console-ams.rpki-client.org