$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json) Hash identifier: JZJRIRCfXhM+orPbK+yxBZ9PMAfPDSdAokqWAR9G+9Y= Subject key identifier: 89:C6:2C:04:80:A8:EA:7B:C7:1D:60:B0:66:6F:71:77:98:3F:FA:1B Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft Manifest number: 022B Signing time: Sat 23 Nov 2024 01:27:25 +0000 Manifest this update: Sat 23 Nov 2024 01:27:25 +0000 Manifest next update: Sat 30 Nov 2024 01:27:25 +0000 Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: KvShamR39tK2BATWXqkpwD39aYeF7S4kh0trqgyOIoM=) 2: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: uXjCh7TkzA4xr6P8TlTEkjQ53fF7fy/5V3MP61ICuDM=) 3: 471C89308C6511EFAC934F0EC4F9AE02.roa (hash: 5c9B76+5C6joPYyYP8goTlB4qsKhmpS+f3k7D3rK+D0=) 4: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: LJgcF5ukT6mBdzEM26be8zREGTvnZs0KmOcJarcZEy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: Nov 23 01:27:25 2024 GMT Not After : Nov 30 01:27:25 2024 GMT Subject: CN=67412f7d-f179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:b6:fe:57:09:34:65:cf:c7:90:4e:73:32: f3:bd:bb:b6:c5:a0:f6:c2:c1:1d:bd:2d:e3:11:9b: 8b:9d:76:f4:aa:85:3f:d6:38:5f:d3:2b:ae:38:c3: 76:7c:81:e6:c0:dd:e9:12:4c:9c:29:d3:bf:fb:54: 94:fa:c6:db:5e:0f:ff:a0:c9:88:5b:0a:4b:07:6f: 60:f8:6d:f3:c3:3a:15:dc:a3:72:31:71:79:14:52: 19:c0:ed:fd:bb:6f:c3:d7:65:f3:29:cf:1e:a8:e9: ee:49:c0:97:54:df:4f:da:05:23:36:4e:d5:f6:7d: 2b:6d:65:08:74:69:53:ca:dd:da:af:50:39:47:34: 59:b3:64:42:22:d9:80:c5:19:39:e4:95:e7:d9:5d: 44:1b:73:90:85:d0:10:37:2a:3b:52:14:f1:7c:68: 32:ab:e8:20:d8:01:b9:e8:c9:7b:e3:d0:d3:bd:c4: e2:0a:f5:05:24:b6:31:57:0b:50:2a:4f:a0:99:c9: ca:3a:5f:d2:ae:50:c4:6f:85:cc:f2:db:82:e3:4d: 0f:67:35:9d:1f:29:c2:4d:2d:e1:90:24:ce:dc:bd: 40:47:b3:5b:18:ed:0c:22:29:ef:af:d4:2e:b5:b9: 68:66:ac:94:e6:ac:bd:34:99:c7:79:cf:82:d0:6d: 6c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C6:2C:04:80:A8:EA:7B:C7:1D:60:B0:66:6F:71:77:98:3F:FA:1B X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:f6:82:c8:c9:00:13:97:74:2c:0a:67:5a:14:2e:cf:3c:db: 66:66:95:9c:35:5d:54:09:54:96:6d:aa:40:36:35:63:7a:c0: 7b:ce:69:8f:99:33:d8:83:7c:5d:b0:86:e2:67:a8:27:e7:e0: 05:7e:30:af:2e:2b:ea:62:49:7b:ba:01:e8:ae:b8:57:3c:63: 25:6c:9c:32:e0:da:91:6d:b7:1e:ee:15:16:42:47:27:8a:4f: 72:d7:6d:f7:61:6b:2a:37:d7:a1:40:8a:92:b1:7a:f3:19:52: 90:29:ad:d3:98:e5:c4:da:ef:b5:b2:c0:8f:a3:b9:f6:b0:85: 7f:1c:23:ac:e3:75:21:da:9c:21:40:39:63:bc:b4:7a:91:ab: 8c:f8:2f:a8:f9:f1:8a:ab:d3:1a:a0:c5:04:22:3b:d4:a8:c2: ec:1f:9d:40:3e:2e:72:2c:e2:97:50:fb:60:4f:c3:05:d9:89: 06:2e:61:cc:4e:3c:19:fc:0e:49:e8:11:c0:a0:b1:22:f5:ff: eb:16:56:fe:22:77:b1:dc:69:21:1e:dc:f4:62:51:fa:f7:05: cf:05:cc:d0:8c:53:0b:c2:c3:74:d9:7f:ea:6a:cd:89:2a:8c: bf:f4:14:c5:09:7c:a6:b7:ac:7c:c8:c0:2d:16:23:df:8d:ac: e0:fa:ca:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjQxMTIzMDEyNzI1WhcNMjQxMTMwMDEyNzI1WjAYMRYwFAYD VQQDEw02NzQxMmY3ZC1mMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4u2/lcJNGXPx5BOczLzvbu2xaD2wsEdvS3jEZuLnXb0qoU/1jhf0yuuOMN2 fIHmwN3pEkycKdO/+1SU+sbbXg//oMmIWwpLB29g+G3zwzoV3KNyMXF5FFIZwO39 u2/D12XzKc8eqOnuScCXVN9P2gUjNk7V9n0rbWUIdGlTyt3ar1A5RzRZs2RCItmA xRk55JXn2V1EG3OQhdAQNyo7UhTxfGgyq+gg2AG56Ml749DTvcTiCvUFJLYxVwtQ Kk+gmcnKOl/SrlDEb4XM8tuC400PZzWdHynCTS3hkCTO3L1AR7NbGO0MIinvr9Qu tbloZqyU5qy9NJnHec+C0G1sXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInGLASA qOp7xx1gsGZvcXeYP/obMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF dEcyaVdhdC10bUtxSWxzTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv9oLIyQATl3QsCmdaFC7PPNtmZpWcNV1UCVSWbapANjVjesB7zmmP mTPYg3xdsIbiZ6gn5+AFfjCvLivqYkl7ugHorrhXPGMlbJwy4NqRbbce7hUWQkcn ik9y1233YWsqN9ehQIqSsXrzGVKQKa3TmOXE2u+1ssCPo7n2sIV/HCOs43Uh2pwh QDljvLR6kauM+C+o+fGKq9MaoMUEIjvUqMLsH51APi5yLOKXUPtgT8MF2YkGLmHM TjwZ/A5J6BHAoLEi9f/rFlb+Inex3GkhHtz0YlH69wXPBczQjFMLwsN02X/qas2J Koy/9BTFCXymt6x8yMAtFiPfjazg+soc -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:51 2024 by rpki-client on console-ams.rpki-client.org