$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft File: v-RhN13CI9T3snBV4rNHRf5hAdQ.mft (raw, json) Hash identifier: 4ChQoOrpRn51ATmZLux/FNqUAxfuEdndBEXAzvDiCjY= Subject key identifier: 64:5F:F0:9C:2C:2C:63:79:62:32:9E:05:DA:DA:85:03:FA:99:E8:9D Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 Certificate issuer: /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft Manifest number: 0692 Signing time: Fri 22 Nov 2024 21:50:34 +0000 Manifest this update: Fri 22 Nov 2024 21:50:33 +0000 Manifest next update: Fri 29 Nov 2024 21:50:33 +0000 Files and hashes: 1: v-RhN13CI9T3snBV4rNHRf5hAdQ.crl (hash: qN24gNM0am4iBliMJcV9MjcKqalwW5hoMZC0y5Ws3e0=) 2: 44E601A48AE411EB9FA47119C4F9AE02.roa (hash: RqWjIzRpTkG4RIhz0EwkHDJkKT6pzO4pTDtTG0aBM94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Validity Not Before: Nov 22 21:50:33 2024 GMT Not After : Nov 29 21:50:33 2024 GMT Subject: CN=6740fca9-ecbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:75:6b:1d:31:fb:04:49:44:a9:63:f6:57:57: 75:2d:67:d2:60:d6:ca:04:8d:97:ba:de:d8:73:9e: d0:12:60:d2:31:ed:bc:da:85:50:59:2d:24:f2:80: 36:40:e8:b0:56:b6:ce:7e:4d:3a:e5:55:44:e5:30: 22:68:c9:93:35:63:77:41:5d:ab:de:41:2b:57:6b: 61:f3:21:f9:d4:f0:50:65:7c:71:58:b9:44:54:92: 16:60:3d:c5:92:71:47:d2:0b:9e:68:6b:ec:39:36: 6a:0a:0b:34:b8:6a:1e:5d:f7:70:c2:94:c2:0e:62: 87:58:6e:74:d9:3c:84:6c:9a:07:29:d9:c1:9e:f5: 40:22:78:40:50:b0:fb:c8:0f:d8:d5:ef:d1:5b:17: 63:5a:b5:5c:13:f1:a5:a5:91:29:e5:9a:ec:a0:f6: b5:c4:7e:07:0c:d8:95:f0:83:af:66:98:8e:74:0a: 91:76:ee:10:6f:9b:28:11:2e:8e:45:1b:64:12:f2: ff:12:b3:33:58:f0:3b:9d:36:01:09:02:63:ee:c9: ee:c6:7c:5f:98:f8:8a:23:05:06:ff:a7:b5:65:29: 46:88:ba:77:13:63:7c:bf:87:b9:a7:88:5f:2d:f7: 34:f7:f5:0d:27:d1:f2:e9:d9:f1:26:f8:9c:47:6b: 22:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5F:F0:9C:2C:2C:63:79:62:32:9E:05:DA:DA:85:03:FA:99:E8:9D X509v3 Authority Key Identifier: keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:fc:a0:ff:05:bd:0b:41:de:74:a7:0d:cc:d7:d5:22:cc:42: 74:14:00:c8:f8:76:22:8b:aa:7f:c9:88:ab:c8:2e:06:1d:57: 09:b7:5d:75:be:84:8b:00:f2:44:6e:25:c8:55:3f:8f:79:c9: 0e:53:a0:3a:ce:bb:19:b7:ae:da:73:87:21:0d:70:4b:ae:93: d1:4e:0c:af:0e:13:98:0b:c3:2d:88:99:11:3c:68:81:6e:f4: f7:00:ff:80:56:22:53:df:d2:e7:51:ad:6d:1a:69:ef:52:27: 70:06:78:97:6a:70:24:42:4d:85:c4:dc:e0:23:18:14:31:3b: 98:8b:74:00:eb:14:c0:1c:ed:a0:33:b8:fc:8c:f2:c6:d8:0c: 82:d8:13:54:94:bc:eb:04:1f:96:61:12:27:db:5b:7c:3f:3f: b9:8b:84:2c:54:70:53:36:bc:88:a3:17:02:11:7d:26:b1:f9: 74:d7:ab:64:36:4b:4d:31:8a:5a:0d:51:ce:9c:bc:91:31:16: d8:b2:1b:5c:88:da:89:79:f8:e6:e7:70:ea:e7:d1:ef:fa:e0: f0:95:15:8d:44:7a:a5:b0:58:1b:23:f0:ad:d0:12:cc:c0:77: 28:84:8d:d4:6f:56:48:ee:20:8f:ee:ad:cb:c6:8b:5c:c4:f7: e8:72:f0:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q5OEQxMTAvBgNVBAUTKEJGRTQ2MTM3NURDMjIzRDRGN0IyNzA1NUUyQjM0NzQ1 RkU2MTAxRDQwHhcNMjQxMTIyMjE1MDMzWhcNMjQxMTI5MjE1MDMzWjAYMRYwFAYD VQQDEw02NzQwZmNhOS1lY2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HVrHTH7BElEqWP2V1d1LWfSYNbKBI2Xut7Yc57QEmDSMe282oVQWS0k8oA2 QOiwVrbOfk065VVE5TAiaMmTNWN3QV2r3kErV2th8yH51PBQZXxxWLlEVJIWYD3F knFH0gueaGvsOTZqCgs0uGoeXfdwwpTCDmKHWG502TyEbJoHKdnBnvVAInhAULD7 yA/Y1e/RWxdjWrVcE/GlpZEp5ZrsoPa1xH4HDNiV8IOvZpiOdAqRdu4Qb5soES6O RRtkEvL/ErMzWPA7nTYBCQJj7snuxnxfmPiKIwUG/6e1ZSlGiLp3E2N8v4e5p4hf Lfc09/UNJ9Hy6dnxJvicR2siOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRf8Jws LGN5YjKeBdrahQP6meidMB8GA1UdIwQYMBaAFL/kYTddwiPU97JwVeKzR0X+YQHU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDk4RC80NjE0NTdCNDUw MEMxMUVCQTcyREJFMjRDNEY5QUUwMi92LVJoTjEzQ0k5VDNzbkJWNHJOSFJmNWhB ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YtUmhOMTNDSTlUM3NuQlY0ck5IUmY1aEFkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDk4RC80NjE0NTdCNDUwMEMxMUVCQTcyREJFMjRDNEY5QUUwMi92LVJoTjEzQ0k5 VDNzbkJWNHJOSFJmNWhBZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2/KD/Bb0LQd50pw3M19UizEJ0FADI+HYii6p/yYiryC4GHVcJt111 voSLAPJEbiXIVT+PeckOU6A6zrsZt67ac4chDXBLrpPRTgyvDhOYC8MtiJkRPGiB bvT3AP+AViJT39LnUa1tGmnvUidwBniXanAkQk2FxNzgIxgUMTuYi3QA6xTAHO2g M7j8jPLG2AyC2BNUlLzrBB+WYRIn21t8Pz+5i4QsVHBTNryIoxcCEX0msfl016tk NktNMYpaDVHOnLyRMRbYshtciNqJefjm53Dq59Hv+uDwlRWNRHqlsFgbI/Ct0BLM wHcohI3Ub1ZI7iCP7q3LxotcxPfocvBI -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org