$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json) Hash identifier: P5sDcHlOytRGhZppQ8HX3Zuhfbyl9xC0KolSHOo+wMw= Subject key identifier: D7:74:43:75:02:B3:17:BF:B6:FE:3F:D4:5B:6F:6A:64:2E:6D:3F:1F Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Certificate serial: 1DD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft Manifest number: 1DBA Signing time: Fri 22 Nov 2024 16:07:07 +0000 Manifest this update: Fri 22 Nov 2024 16:07:07 +0000 Manifest next update: Fri 29 Nov 2024 16:07:07 +0000 Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: j2Vzz8RZY5mQkgEEtBdSAIHz+LJo3kvemI1RWOr54Ic=) 2: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 3kkH5EW9k5TTFg+XHHqI2feA7kJawsJC4SpKye1S2b4=) 3: BD314CEA619711EE81211277C4F9AE02.roa (hash: pyylUNX9LlmDbhjQ7Mn/l8NCaA1ACQcAW5FWWwcceq0=) 4: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: 01F6A8KAEiWwfIj9UacQjLscVPBcvyK/XHWq85nJWZg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:07:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7641 (0x1dd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467 Validity Not Before: Nov 22 16:07:07 2024 GMT Not After : Nov 29 16:07:07 2024 GMT Subject: CN=6740ac2b-0dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:a6:76:c3:44:f5:65:f1:2f:20:e7:da:13: 98:fb:f7:09:e6:2e:f1:bb:f2:09:aa:b3:ec:51:eb: 84:7e:ae:20:75:c9:90:68:6c:8a:e6:c4:74:28:b5: d0:f8:06:20:9c:59:fb:b1:14:ef:d7:7c:3d:fb:df: 43:dc:b7:e0:13:6a:a9:d5:ac:7e:69:bb:c3:89:75: 0a:67:c2:ef:da:ed:bb:18:95:f1:8d:f7:ac:bd:7e: 64:9f:b1:04:44:e4:34:b9:7c:ca:0c:85:4b:1e:6b: f2:d1:5b:5b:02:83:69:28:1e:4e:31:db:c2:33:c1: 5e:dc:23:f2:37:78:8d:74:1b:4a:e3:6a:45:db:42: 42:46:d2:d4:1a:f5:31:32:47:bc:cb:9f:c3:7a:a3: bc:db:48:4f:45:07:9a:ab:21:4c:30:62:e7:0a:ea: e8:f1:1d:4e:ad:f8:75:44:8a:54:5e:eb:d9:ac:37: 48:4f:45:3d:6c:9c:c1:5e:05:f7:91:f1:7b:d9:0a: fc:7b:8b:58:58:fe:f3:35:16:2e:f0:1e:ac:9d:05: d3:49:a1:b0:0d:80:18:e1:41:7a:cc:1b:92:12:ae: a7:16:36:e0:33:4f:2a:f1:40:71:b9:e4:a5:39:e0: bf:e6:78:0a:28:3c:10:42:11:f5:bd:ab:a5:8d:17: 2c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:74:43:75:02:B3:17:BF:B6:FE:3F:D4:5B:6F:6A:64:2E:6D:3F:1F X509v3 Authority Key Identifier: keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d2:7a:6e:6d:a6:ce:d5:2a:23:49:7d:dd:d0:a8:41:f2:39: 7b:24:05:61:46:71:fa:e1:4f:a6:56:83:da:54:e8:df:af:5d: 71:8f:92:60:6a:2e:c3:59:92:e6:dd:99:12:20:7e:4c:69:9d: fa:5c:16:11:01:08:cd:a2:7d:25:44:a6:41:76:97:57:6c:b2: 46:7b:9c:67:bb:6e:cc:88:26:d7:bc:54:b4:c7:82:09:19:a2: 5b:de:98:60:d3:69:aa:d0:16:db:67:7b:0a:1b:f1:eb:2a:36: e0:24:b9:aa:eb:35:06:1f:a9:6e:8d:35:d7:cf:ff:2a:a3:1a: aa:ae:1e:54:33:a9:10:43:64:7b:40:0d:f7:12:f9:95:ab:93: db:fe:c9:8b:83:a4:7c:64:61:96:83:b7:a4:29:6a:15:47:95: 2c:75:b1:9e:66:46:93:9d:0b:a0:1d:10:dd:a1:3d:cc:fb:c1: b7:3f:66:98:e8:19:6c:42:31:09:b3:57:b8:bb:65:8f:06:a6: 9e:1f:9b:5f:7a:e6:c4:92:4d:a7:10:96:cc:68:b2:30:fe:3b: 34:68:11:7b:0d:fd:5c:a8:99:65:e7:df:78:f5:5e:b1:19:84: 07:0a:6b:e5:cb:a5:55:f0:6e:fe:e1:b1:af:45:3e:75:4f:6f: cb:a0:a9:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RDQjYxMTAvBgNVBAUTKDA3ODE2NzVDQzY0RkFCMkI4NDVEQTdGNTExNTU0OTgw NDJFQ0U0NjcwHhcNMjQxMTIyMTYwNzA3WhcNMjQxMTI5MTYwNzA3WjAYMRYwFAYD VQQDEw02NzQwYWMyYi0wZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6mmdsNE9WXxLyDn2hOY+/cJ5i7xu/IJqrPsUeuEfq4gdcmQaGyK5sR0KLXQ +AYgnFn7sRTv13w9+99D3LfgE2qp1ax+abvDiXUKZ8Lv2u27GJXxjfesvX5kn7EE ROQ0uXzKDIVLHmvy0VtbAoNpKB5OMdvCM8Fe3CPyN3iNdBtK42pF20JCRtLUGvUx Mke8y5/DeqO820hPRQeaqyFMMGLnCuro8R1Orfh1RIpUXuvZrDdIT0U9bJzBXgX3 kfF72Qr8e4tYWP7zNRYu8B6snQXTSaGwDYAY4UF6zBuSEq6nFjbgM08q8UBxueSl OeC/5ngKKDwQQhH1vauljRcsLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd0Q3UC sxe/tv4/1FtvamQubT8fMB8GA1UdIwQYMBaAFAeBZ1zGT6srhF2n9RFVSYBC7ORn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRENCNi82N0M2QUE0QThB RjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5dUVYYWYxRVZWSmdFTHM1 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0Rm5YTVpQcXl1RVhhZjFFVlZKZ0VMczVHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RENCNi82N0M2QUE0QThBRjExMUU2OTgwNzgzNTVDNEY5QUUwMi9CNEZuWE1aUHF5 dUVYYWYxRVZWSmdFTHM1R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/0npubabO1SojSX3d0KhB8jl7JAVhRnH64U+mVoPaVOjfr11xj5Jg ai7DWZLm3ZkSIH5MaZ36XBYRAQjNon0lRKZBdpdXbLJGe5xnu27MiCbXvFS0x4IJ GaJb3phg02mq0BbbZ3sKG/HrKjbgJLmq6zUGH6lujTXXz/8qoxqqrh5UM6kQQ2R7 QA33EvmVq5Pb/smLg6R8ZGGWg7ekKWoVR5UsdbGeZkaTnQugHRDdoT3M+8G3P2aY 6BlsQjEJs1e4u2WPBqaeH5tfeubEkk2nEJbMaLIw/js0aBF7Df1cqJll59949V6x GYQHCmvly6VV8G7+4bGvRT51T2/LoKkI -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org