$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: gK8jxxOCpIPkhK81sSpiq6A9wNgAqCJx5Sxu0ZynoO0= Subject key identifier: C1:42:3B:57:22:A1:71:CD:33:29:53:9E:31:0C:2E:3B:95:BE:1F:E6 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 089F Signing time: Fri 22 Nov 2024 20:35:25 +0000 Manifest this update: Fri 22 Nov 2024 20:35:24 +0000 Manifest next update: Fri 29 Nov 2024 20:35:24 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: EEFBhvTMCXdYc6i/OnHvf+KIDUZJBb7aDeERqpZLdzM=) 2: C24E9F9CE0BE11EEA90D1B0EC4F9AE02.roa (hash: nGTad7rOatH730ExgJ+vC4JnrAa/jLbnM0rZQKdXWqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Nov 22 20:35:24 2024 GMT Not After : Nov 29 20:35:24 2024 GMT Subject: CN=6740eb0d-5269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:a9:06:0d:6f:90:c3:49:2d:7c:14:23:d9: 25:fd:7c:3b:c6:38:a3:af:1f:2e:41:4e:df:35:cd: 5a:59:ce:30:08:88:08:cd:f5:72:a1:d2:a7:30:fe: 32:87:14:7f:54:9a:58:17:81:19:88:0c:11:de:e0: 4a:ef:f6:69:9c:8f:08:5f:b8:ec:c5:f5:8f:96:2c: b0:3f:4e:f7:bb:55:fc:c9:29:de:0e:d9:35:b1:64: c2:8e:b0:a1:ef:cd:56:0f:76:68:d1:63:69:f9:54: 8e:e5:f7:6a:a5:e2:ed:7e:83:4e:4e:f4:17:8b:24: 13:d1:a4:79:5a:ff:7a:d0:4b:6a:0b:08:7e:c3:c6: f8:50:64:43:dd:a5:bb:36:03:d9:bb:ec:e7:8d:30: 42:76:44:a5:e4:4e:5b:d1:2e:57:1f:3e:32:20:7e: 84:bc:ab:08:48:1e:19:0f:83:70:e7:b8:db:44:81: 7a:33:fc:46:27:08:99:b7:83:3b:21:6e:3f:07:c7: 91:4b:74:c6:18:e7:64:4a:77:32:f6:f8:81:f2:02: 0d:f8:35:f6:ca:18:04:37:4f:aa:46:88:13:48:9f: 50:c3:99:eb:01:25:b5:a7:19:4e:36:dc:16:b5:50: 8f:f1:31:94:38:a9:cf:19:fa:83:15:3c:2f:a3:fb: b3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:42:3B:57:22:A1:71:CD:33:29:53:9E:31:0C:2E:3B:95:BE:1F:E6 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:48:97:a9:dc:09:01:a4:a8:ea:91:c8:d7:81:e7:90:13:1a: 04:b7:68:8e:0f:1f:f2:c5:58:52:1b:a6:82:9c:32:83:c3:82: 02:8c:28:4e:96:70:11:29:41:38:80:01:6c:ba:a8:96:f3:0e: bd:14:a1:d3:10:18:64:7f:06:78:c2:37:06:49:5e:cc:72:a7: 7d:34:1d:6d:48:c9:cd:cf:15:b2:f8:92:fd:b9:db:d6:dc:f1: 0f:80:c2:57:01:cf:34:21:f1:36:62:7c:1f:b0:f6:a2:cb:23: 34:57:a6:d8:fa:2f:52:04:7a:d1:9d:49:20:e8:7c:0f:93:4e: d4:d8:58:dc:3f:83:83:e2:33:8b:24:27:15:26:34:7b:26:8e: b4:d0:0a:13:eb:3f:16:43:e4:04:4f:47:76:b4:07:1c:2d:05: b2:af:fc:3f:7b:8a:60:52:9d:8a:58:41:64:b6:fe:9e:04:43: 50:89:07:a2:e0:20:44:c5:0f:88:af:29:48:e2:69:c8:19:f7: 24:27:be:27:d1:d2:ef:0d:25:80:c5:4c:e5:9d:62:26:57:de: 82:b9:a0:b1:40:ea:17:74:73:d3:ea:b5:ed:85:23:01:73:ae: 03:f1:4d:fb:5a:b6:f7:3e:c7:a7:6e:9d:6d:e5:78:ac:6a:f8: 1d:92:9d:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjQxMTIyMjAzNTI0WhcNMjQxMTI5MjAzNTI0WjAYMRYwFAYD VQQDEw02NzQwZWIwZC01MjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRupBg1vkMNJLXwUI9kl/Xw7xjijrx8uQU7fNc1aWc4wCIgIzfVyodKnMP4y hxR/VJpYF4EZiAwR3uBK7/ZpnI8IX7jsxfWPliywP073u1X8ySneDtk1sWTCjrCh 781WD3Zo0WNp+VSO5fdqpeLtfoNOTvQXiyQT0aR5Wv960EtqCwh+w8b4UGRD3aW7 NgPZu+znjTBCdkSl5E5b0S5XHz4yIH6EvKsISB4ZD4Nw57jbRIF6M/xGJwiZt4M7 IW4/B8eRS3TGGOdkSncy9viB8gIN+DX2yhgEN0+qRogTSJ9Qw5nrASW1pxlONtwW tVCP8TGUOKnPGfqDFTwvo/uzMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFCO1ci oXHNMylTnjEMLjuVvh/mMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBySJep3AkBpKjqkcjXgeeQExoEt2iODx/yxVhSG6aCnDKDw4ICjChO lnARKUE4gAFsuqiW8w69FKHTEBhkfwZ4wjcGSV7Mcqd9NB1tSMnNzxWy+JL9udvW 3PEPgMJXAc80IfE2YnwfsPaiyyM0V6bY+i9SBHrRnUkg6HwPk07U2FjcP4OD4jOL JCcVJjR7Jo600AoT6z8WQ+QET0d2tAccLQWyr/w/e4pgUp2KWEFktv6eBENQiQei 4CBExQ+IrylI4mnIGfckJ74n0dLvDSWAxUzlnWImV96CuaCxQOoXdHPT6rXthSMB c64D8U37Wrb3Psenbp1t5Xisavgdkp2F -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:40 2024 by rpki-client on console-ams.rpki-client.org