$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft File: dfDxcTIKeOUHAm-fL1T0smcMYhE.mft (raw, json) Hash identifier: 0MMMztGxAoQbCslhWm6pONeWqhR7xLKu4I9+xkXGA7w= Subject key identifier: DC:25:E5:C3:D7:CD:C2:EF:C3:F2:FA:7A:E3:B7:B4:6C:65:B1:A9:61 Authority key identifier: 75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 Certificate issuer: /CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Certificate serial: 1A08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft Manifest number: 19FE Signing time: Fri 22 Nov 2024 16:21:56 +0000 Manifest this update: Fri 22 Nov 2024 16:21:56 +0000 Manifest next update: Fri 29 Nov 2024 16:21:56 +0000 Files and hashes: 1: dfDxcTIKeOUHAm-fL1T0smcMYhE.crl (hash: zKjg90YU8ifP8ld/cVmFqCrdCZKtIW/aaMa9J6Qd55s=) 2: 95A226D0EF3C11E9A7190355C4F9AE02.roa (hash: RisbfuJJzaRwnSTXbblXr9BK361KaCscEIHy8SrD2Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6664 (0x1a08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9161/serialNumber=75F0F171320A78E507026F9F2F54F4B2670C6211 Validity Not Before: Nov 22 16:21:56 2024 GMT Not After : Nov 29 16:21:56 2024 GMT Subject: CN=6740afa4-f6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:7e:f1:70:69:fa:0d:ea:93:b0:0b:26:fd: 3d:83:29:49:6d:f2:24:f8:fe:24:f9:38:21:9a:e3: 42:5a:87:81:5e:f8:21:16:60:08:b9:7e:d6:6d:33: d8:5e:99:ba:fa:bf:a5:5d:e2:55:4c:34:ee:fe:2d: 4e:06:c5:7a:55:b1:62:3e:8f:31:f3:e7:69:cf:bb: 7c:4d:82:e2:42:5a:32:1f:1b:21:31:a3:d2:54:c0: ea:a8:62:fc:7e:b8:af:53:dd:b7:09:cb:26:59:8e: a0:a5:c3:a9:13:6e:0b:db:7a:01:80:d6:4a:4a:4e: af:7a:20:d5:5e:99:02:05:9d:17:aa:81:02:3c:65: 04:14:5d:f6:26:c8:fe:75:b8:e3:9e:97:0c:94:36: 5d:3d:da:84:c7:2d:48:19:bb:e6:c8:62:a4:53:2a: de:c5:53:6d:fe:07:7e:9c:da:0a:dc:1c:38:01:cb: be:d6:f8:15:7c:d6:82:f6:29:ef:e1:1c:f5:ae:9f: 3a:0a:a8:89:2e:df:d0:5d:90:b3:0b:cb:38:de:a4: df:2a:9f:f3:4a:cf:71:b6:02:54:54:e7:b5:09:31: ab:42:d9:73:a1:f7:5a:af:e9:3f:1d:9d:da:89:4b: 42:6f:8a:10:f1:3b:ab:e8:55:de:56:67:6b:f7:e3: a5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:25:E5:C3:D7:CD:C2:EF:C3:F2:FA:7A:E3:B7:B4:6C:65:B1:A9:61 X509v3 Authority Key Identifier: keyid:75:F0:F1:71:32:0A:78:E5:07:02:6F:9F:2F:54:F4:B2:67:0C:62:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfDxcTIKeOUHAm-fL1T0smcMYhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9161/70CC24863F8B11E7A9E67244C4F9AE02/dfDxcTIKeOUHAm-fL1T0smcMYhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:12:37:57:71:18:66:60:60:47:6c:0b:e2:3c:af:fe:ac:b0: 50:2b:62:9e:66:57:f3:2b:5d:bf:b5:7e:80:fc:c3:97:44:e2: 13:bb:44:2f:02:d1:bc:92:5d:af:37:c1:0f:ac:22:67:e9:89: 42:9f:e6:cf:16:6a:44:3c:60:0a:18:11:32:eb:4d:c2:08:6c: c8:63:97:54:b4:ad:cb:97:cf:e8:73:fb:2b:7d:6d:d2:a7:ea: 24:ef:7f:27:f0:02:18:c5:b3:72:8e:00:e7:7a:87:93:96:0c: e4:92:46:39:50:fb:68:f7:f9:1e:0c:21:4f:8f:83:66:f9:de: 57:9f:0c:07:3e:0d:ac:95:a0:8a:9f:1c:d6:47:0a:05:c6:29: 7e:73:27:8d:aa:7a:c7:95:0c:fe:93:ae:94:c4:62:82:f5:41: 81:cf:bd:81:39:6c:10:53:07:e3:c6:cb:9f:bd:9a:d0:16:35: 02:be:00:0f:2c:1b:55:cf:7e:73:96:fb:9c:8b:71:95:f0:47: 89:8d:12:ee:95:87:a3:c5:b6:fc:3b:60:fd:7e:2d:84:e7:09: 6c:40:72:c0:71:d9:35:a2:d8:22:1f:df:56:cd:79:e8:66:fa: ce:f0:bc:c9:5a:07:90:8d:82:a4:56:14:73:42:4d:08:04:dd: eb:b3:6a:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxNjExMTAvBgNVBAUTKDc1RjBGMTcxMzIwQTc4RTUwNzAyNkY5RjJGNTRGNEIy NjcwQzYyMTEwHhcNMjQxMTIyMTYyMTU2WhcNMjQxMTI5MTYyMTU2WjAYMRYwFAYD VQQDEw02NzQwYWZhNC1mNmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykl+8XBp+g3qk7ALJv09gylJbfIk+P4k+TghmuNCWoeBXvghFmAIuX7WbTPY Xpm6+r+lXeJVTDTu/i1OBsV6VbFiPo8x8+dpz7t8TYLiQloyHxshMaPSVMDqqGL8 frivU923CcsmWY6gpcOpE24L23oBgNZKSk6veiDVXpkCBZ0XqoECPGUEFF32Jsj+ dbjjnpcMlDZdPdqExy1IGbvmyGKkUyrexVNt/gd+nNoK3Bw4Acu+1vgVfNaC9inv 4Rz1rp86CqiJLt/QXZCzC8s43qTfKp/zSs9xtgJUVOe1CTGrQtlzofdar+k/HZ3a iUtCb4oQ8Tur6FXeVmdr9+OlaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwl5cPX zcLvw/L6euO3tGxlsalhMB8GA1UdIwQYMBaAFHXw8XEyCnjlBwJvny9U9LJnDGIR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTE2MS83MENDMjQ4NjNG OEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VPVUhBbS1mTDFUMHNtY01Z aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmRHhjVElLZU9VSEFtLWZMMVQwc21jTVloRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTE2MS83MENDMjQ4NjNGOEIxMUU3QTlFNjcyNDRDNEY5QUUwMi9kZkR4Y1RJS2VP VUhBbS1mTDFUMHNtY01ZaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQEjdXcRhmYGBHbAviPK/+rLBQK2KeZlfzK12/tX6A/MOXROITu0Qv AtG8kl2vN8EPrCJn6YlCn+bPFmpEPGAKGBEy603CCGzIY5dUtK3Ll8/oc/srfW3S p+ok738n8AIYxbNyjgDneoeTlgzkkkY5UPto9/keDCFPj4Nm+d5XnwwHPg2slaCK nxzWRwoFxil+cyeNqnrHlQz+k66UxGKC9UGBz72BOWwQUwfjxsufvZrQFjUCvgAP LBtVz35zlvuci3GV8EeJjRLulYejxbb8O2D9fi2E5wlsQHLAcdk1otgiH99WzXno ZvrO8LzJWgeQjYKkVhRzQk0IBN3rs2rW -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org