$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json) Hash identifier: dmYvPs8xdG5N+KZc6HJrK+0SrMuEnXNSi1i0yWDHex8= Subject key identifier: CA:29:01:86:40:1E:AB:F6:3D:A1:E1:90:09:37:B6:AB:4D:35:A9:E0 Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft Manifest number: 07B5 Signing time: Fri 22 Nov 2024 20:43:54 +0000 Manifest this update: Fri 22 Nov 2024 20:43:54 +0000 Manifest next update: Fri 29 Nov 2024 20:43:54 +0000 Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: nqNc9KUkAW2fU/uodWbjq1VyHwWllIMJUXVV8EoV78s=) 2: 5A020E1229E011EB80A2FF13C4F9AE02.roa (hash: cqbI01oJRPBEH+/wJOlpiaUkORzn2kWmqx1uTWAfIc8=) 3: 5B1534BE29E011EB80A2FF13C4F9AE02.roa (hash: 1CIYo//bwjYUMyQBStYQUQ8rbC/A2KlKjD1S8BvGyiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Validity Not Before: Nov 22 20:43:54 2024 GMT Not After : Nov 29 20:43:54 2024 GMT Subject: CN=6740ed0a-c8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:8a:3d:72:39:dd:41:26:a9:8c:b6:85:e3: 52:59:65:b3:6d:2e:e0:54:e6:aa:5e:39:04:a6:f5: 9e:1b:4d:77:21:a9:f7:59:94:ac:ff:0e:db:51:23: 9a:35:c5:75:11:4c:81:e8:59:4f:4e:7e:e8:e3:61: e9:7a:9b:a1:46:95:65:cd:d4:48:b8:c6:e0:27:24: c6:a1:16:15:ea:54:2d:a7:49:36:27:90:70:92:09: f3:53:b8:f8:ac:c7:ce:0a:8e:35:1b:6d:33:fd:ed: 2b:76:e8:8b:f5:93:9b:94:da:6b:b4:f8:c4:c5:1b: 84:47:66:af:55:c2:08:55:ef:09:a0:62:bd:88:4d: b3:d8:a3:ec:61:0c:b3:57:4f:bc:ea:45:8c:92:21: 47:59:5c:14:42:af:6c:81:36:75:87:dc:aa:54:c7: ec:35:5d:52:88:cd:40:8f:e7:16:9e:50:e9:d2:05: 7c:8f:23:82:8c:46:14:cd:40:2b:38:b6:a3:ad:3f: 76:af:e0:8e:b1:ab:9c:b3:dc:a6:34:30:79:bc:0c: f8:e0:e6:fc:ce:c7:d1:af:01:28:06:86:82:62:a8: a0:8a:5b:47:47:90:fd:77:11:74:5c:43:1a:75:db: 7e:b7:b7:09:dc:72:9c:1a:10:72:3e:1d:f9:c0:f0: 6c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:29:01:86:40:1E:AB:F6:3D:A1:E1:90:09:37:B6:AB:4D:35:A9:E0 X509v3 Authority Key Identifier: keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:51:4f:e9:4f:71:db:77:01:f1:2b:77:f0:4c:76:2b:8d:bd: df:2b:40:fe:89:0d:c5:76:97:9e:1a:96:63:dd:11:02:89:09: 1c:b7:83:0d:26:ef:66:0e:20:1b:de:a2:d1:2a:ae:a9:d6:43: 36:4b:25:4f:05:b5:aa:9f:02:40:07:e7:05:5f:1f:2f:9b:3b: b1:c0:8e:f5:13:d8:d4:0d:c9:69:f1:11:0e:e3:05:fd:df:60: 09:3d:78:a7:33:61:c1:f9:cd:02:e5:96:0e:3c:c5:17:f8:12: ca:0a:12:6d:3a:c6:2b:dc:5f:cb:cf:07:26:b3:1b:7d:84:bf: 80:11:e7:93:29:36:96:9f:b4:26:27:49:e8:34:98:7f:ea:73: bb:0a:43:0e:79:b3:03:2e:a1:6c:41:f4:16:81:75:01:7a:5e: e5:96:5b:6a:0d:f9:86:61:f5:67:9c:f4:1c:bb:72:83:a8:e9: e9:a2:6f:64:dc:e3:7e:1b:25:eb:4e:fd:9c:00:7e:1b:09:d1: 11:1d:5f:a4:2a:1d:c7:a6:ef:09:f8:73:67:2d:1c:f7:35:95: 73:a2:65:ff:8e:c3:4e:da:4b:44:c8:1f:4a:8e:b4:ab:20:94: c0:26:b1:01:23:e0:9b:c8:13:d5:c6:e5:fd:06:61:d3:a6:07: ff:2f:cc:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz NzE5MDgyRTcwHhcNMjQxMTIyMjA0MzU0WhcNMjQxMTI5MjA0MzU0WjAYMRYwFAYD VQQDEw02NzQwZWQwYS1jOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptOKPXI53UEmqYy2heNSWWWzbS7gVOaqXjkEpvWeG013Ian3WZSs/w7bUSOa NcV1EUyB6FlPTn7o42HpepuhRpVlzdRIuMbgJyTGoRYV6lQtp0k2J5BwkgnzU7j4 rMfOCo41G20z/e0rduiL9ZOblNprtPjExRuER2avVcIIVe8JoGK9iE2z2KPsYQyz V0+86kWMkiFHWVwUQq9sgTZ1h9yqVMfsNV1SiM1Aj+cWnlDp0gV8jyOCjEYUzUAr OLajrT92r+COsaucs9ymNDB5vAz44Ob8zsfRrwEoBoaCYqigiltHR5D9dxF0XEMa ddt+t7cJ3HKcGhByPh35wPBstQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMopAYZA Hqv2PaHhkAk3tqtNNangMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3 MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTFBNi9CQTRDQ0UwRUQ3MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlR a012SFU0MTd0eEkzR1FndWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdUU/pT3HbdwHxK3fwTHYrjb3fK0D+iQ3FdpeeGpZj3RECiQkct4MN Ju9mDiAb3qLRKq6p1kM2SyVPBbWqnwJAB+cFXx8vmzuxwI71E9jUDclp8REO4wX9 32AJPXinM2HB+c0C5ZYOPMUX+BLKChJtOsYr3F/Lzwcmsxt9hL+AEeeTKTaWn7Qm J0noNJh/6nO7CkMOebMDLqFsQfQWgXUBel7llltqDfmGYfVnnPQcu3KDqOnpom9k 3ON+GyXrTv2cAH4bCdERHV+kKh3Hpu8J+HNnLRz3NZVzomX/jsNO2ktEyB9KjrSr IJTAJrEBI+CbyBPVxuX9BmHTpgf/L8xR -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:40 2024 by rpki-client on console-ams.rpki-client.org