$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft File: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft (raw, json) Hash identifier: KjxmqEJg+T+nTXYC90kN9NTPYPr0HUOunsvl476Zdpg= Subject key identifier: 8E:4A:DD:4D:9D:17:31:EB:03:18:67:53:AF:EE:6E:BE:3D:6F:63:81 Authority key identifier: F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 Certificate issuer: /CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Certificate serial: 3457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft Manifest number: 3442 Signing time: Fri 22 Nov 2024 14:48:40 +0000 Manifest this update: Fri 22 Nov 2024 14:48:40 +0000 Manifest next update: Fri 29 Nov 2024 14:48:40 +0000 Files and hashes: 1: -XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl (hash: MLg4XVvoIdStTxoMQpbevLyTJkJZSxCue54G1qZmLiE=) 2: 49036D2CB0D711E58B185E0FC4F9AE02.roa (hash: YazdyMwHOwoF8umaAipXjtQtje6WJc0WXJZNFJEXGA0=) 3: FFC89DF8CECD11EEA4AA6D44C4F9AE02.roa (hash: 2NUudbVYezITXTQtX0YxAZtsoAo14kkfj/OCaZq7JSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13399 (0x3457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484/serialNumber=F972E75E3D03E5CE1901930C43D16DC4A89C4792 Validity Not Before: Nov 22 14:48:40 2024 GMT Not After : Nov 29 14:48:40 2024 GMT Subject: CN=674099c8-532e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:27:bd:64:93:71:9b:96:52:f1:86:14:c4:19: 6e:0a:47:7a:f2:b4:f7:dd:d6:01:46:06:8a:c4:90: 49:43:f3:d9:6d:6b:81:1e:c1:5c:20:c7:c4:a4:a4: 54:69:69:96:92:45:04:d8:d6:68:af:c9:0c:ca:e5: 63:97:b8:47:c8:60:79:fe:19:d6:6d:f1:de:29:12: a6:60:df:08:1e:20:fe:60:17:2e:2b:81:0c:ce:64: 5a:55:f2:c3:8a:33:05:21:c8:dd:31:07:9d:c1:03: 8f:4e:c2:83:82:bd:80:e2:c9:71:b9:ac:9f:a5:b2: 5b:9b:9e:94:93:3b:d0:19:df:9e:eb:9f:2e:2b:18: 79:8c:3f:98:69:f4:1e:1e:23:80:23:c8:d1:15:63: 82:a4:ed:2e:99:8c:d0:13:06:e6:1c:87:dd:ec:9f: d9:01:64:fb:92:ab:86:cd:20:af:63:91:1e:7e:88: eb:1d:6e:09:99:b7:3e:b4:ad:c5:80:d4:59:25:9d: 0e:be:4e:0e:73:2a:39:2a:c2:cb:16:9e:5a:be:53: c0:52:13:66:b2:6d:5d:61:7f:33:4f:12:2a:3a:a5: 04:6f:e7:a5:aa:b7:d5:55:16:8a:f5:0d:ee:61:47: 8b:1c:b5:67:b4:93:66:3a:38:ab:af:c4:15:33:bf: c0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4A:DD:4D:9D:17:31:EB:03:18:67:53:AF:EE:6E:BE:3D:6F:63:81 X509v3 Authority Key Identifier: keyid:F9:72:E7:5E:3D:03:E5:CE:19:01:93:0C:43:D1:6D:C4:A8:9C:47:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/6FF0DDE01D9411E29DECB5F808B02CD2/-XLnXj0D5c4ZAZMMQ9FtxKicR5I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:9e:27:0c:67:3a:45:5a:24:b0:ab:c6:d0:d8:d8:3e:93:e7: 57:6c:a2:ec:62:cc:2d:64:3c:14:52:83:8c:5c:e4:8d:44:c9: 1d:d8:6b:9f:b7:b4:8c:5b:2d:3c:fa:44:85:b6:45:2c:13:e0: e8:a1:c6:87:1f:04:7a:df:86:68:ed:71:e7:f5:cc:7f:1b:05: fa:89:92:4d:5b:99:5f:57:3c:76:c4:b1:b9:4e:5c:7d:8f:cd: 29:16:fe:08:d1:c2:d6:1b:30:f5:84:2a:27:dd:28:fc:a1:de: 28:50:0f:6e:4b:24:92:b8:9c:15:79:0a:fc:43:9f:4b:b9:f5: b4:98:74:73:c1:13:db:0b:db:f4:70:3b:dd:a3:07:db:d0:29: a7:c0:d4:fd:51:87:cb:b4:fa:6c:d1:cb:5f:19:0c:f2:37:33: 7b:1a:e2:f6:cd:bb:f1:58:4b:2b:3e:53:4b:01:06:92:5e:c5: 59:5d:e3:93:e1:16:9d:17:04:5b:7b:25:5d:27:40:6c:48:98: 0d:2d:78:3a:85:ca:52:4a:41:64:bd:3b:a4:7b:0e:51:b9:af: 57:d7:7a:19:39:26:b3:2a:1e:7d:24:b2:80:68:22:a9:29:5b: ce:a8:b6:bf:42:e7:18:cd:88:54:47:62:68:d5:fa:31:5e:a5: 34:e2:c9:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKEY5NzJFNzVFM0QwM0U1Q0UxOTAxOTMwQzQzRDE2REM0 QTg5QzQ3OTIwHhcNMjQxMTIyMTQ0ODQwWhcNMjQxMTI5MTQ0ODQwWjAYMRYwFAYD VQQDEw02NzQwOTljOC01MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ie9ZJNxm5ZS8YYUxBluCkd68rT33dYBRgaKxJBJQ/PZbWuBHsFcIMfEpKRU aWmWkkUE2NZor8kMyuVjl7hHyGB5/hnWbfHeKRKmYN8IHiD+YBcuK4EMzmRaVfLD ijMFIcjdMQedwQOPTsKDgr2A4slxuayfpbJbm56UkzvQGd+e658uKxh5jD+YafQe HiOAI8jRFWOCpO0umYzQEwbmHIfd7J/ZAWT7kquGzSCvY5EefojrHW4Jmbc+tK3F gNRZJZ0Ovk4Ocyo5KsLLFp5avlPAUhNmsm1dYX8zTxIqOqUEb+elqrfVVRaK9Q3u YUeLHLVntJNmOjirr8QVM7/AAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5K3U2d FzHrAxhnU6/ubr49b2OBMB8GA1UdIwQYMBaAFPly5149A+XOGQGTDEPRbcSonEeS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC82RkYwRERFMDFE OTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVjNFpBWk1NUTlGdHhLaWNS NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTG5YajBENWM0WkFaTU1ROUZ0eEtpY1I1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC82RkYwRERFMDFEOTQxMUUyOURFQ0I1RjgwOEIwMkNEMi8tWExuWGowRDVj NFpBWk1NUTlGdHhLaWNSNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClnicMZzpFWiSwq8bQ2Ng+k+dXbKLsYswtZDwUUoOMXOSNRMkd2Guf t7SMWy08+kSFtkUsE+DoocaHHwR634Zo7XHn9cx/GwX6iZJNW5lfVzx2xLG5Tlx9 j80pFv4I0cLWGzD1hCon3Sj8od4oUA9uSySSuJwVeQr8Q59LufW0mHRzwRPbC9v0 cDvdowfb0CmnwNT9UYfLtPps0ctfGQzyNzN7GuL2zbvxWEsrPlNLAQaSXsVZXeOT 4RadFwRbeyVdJ0BsSJgNLXg6hcpSSkFkvTukew5Rua9X13oZOSazKh59JLKAaCKp KVvOqLa/QucYzYhUR2Jo1foxXqU04smc -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org