$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft File: AJko8LjNMO2gVjCoumdOdiqdKDM.mft (raw, json) Hash identifier: kSmhagg/7zyGrfOUAD+jOoHx44m7vd0vh2UIs6QUfjQ= Subject key identifier: 25:7C:3E:2A:E6:9D:19:CB:3E:3D:2D:D2:1A:03:2C:3D:26:4A:CE:9F Authority key identifier: 00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 Certificate issuer: /CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft Manifest number: DB Signing time: Thu 21 Nov 2024 03:42:32 +0000 Manifest this update: Thu 21 Nov 2024 03:42:32 +0000 Manifest next update: Thu 28 Nov 2024 03:42:32 +0000 Files and hashes: 1: AJko8LjNMO2gVjCoumdOdiqdKDM.crl (hash: gUWwIcrMiFuCIYtpteuJr3xiXmhVhgWVxIxtdiIbYIM=) 2: EC56413A5B4B11EE9A031C81C4F9AE02.roa (hash: Hh0/f6NytDdeyTGJ1ZKz3ERIyV3jDbMOhWYWKs/vNpU=) 3: 7022F6EE5B4611EE9093F11EC4F9AE02.roa (hash: e0200w8zEsZ5WKCdPwZ5CedunKufXXzWVfu8693DHy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6/serialNumber=009928F0B8CD30EDA05630A8BA674E762A9D2833 Validity Not Before: Nov 21 03:42:32 2024 GMT Not After : Nov 28 03:42:32 2024 GMT Subject: CN=673eac28-db1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:19:c6:80:bf:9f:da:d7:9b:d0:e3:2f:b5:09: c0:7d:1e:10:26:bf:d8:46:e7:80:0b:78:c8:1e:7a: 3e:10:32:a0:b8:6a:be:fd:12:a8:e3:0e:b2:86:01: 78:1a:70:35:5c:64:80:11:7b:95:78:ea:8c:66:6e: 66:73:72:9e:7b:cf:4b:a2:a7:f8:6d:6d:d3:5a:7d: 4f:69:32:31:9d:5f:5b:de:8c:26:14:12:8e:98:d0: fc:97:81:1e:81:11:b1:d2:8f:c4:3e:8b:b9:93:64: 4a:40:e5:7c:de:09:a6:11:48:0c:53:c8:9e:f2:f5: 71:5b:99:cc:a9:d1:ff:39:cb:84:d6:a8:57:ce:7a: 49:a6:5f:24:92:13:26:c6:f8:92:9d:0c:1d:53:c6: 23:90:25:35:f6:b3:f7:e9:84:bd:1c:1e:84:c1:64: c1:4a:ac:08:41:bd:e2:2e:82:ba:a0:24:91:a5:96: 7b:a6:97:76:14:2e:0a:39:ff:32:c0:69:fb:e0:4e: 0f:53:59:46:fc:e9:f3:2e:3d:55:2b:fb:f6:af:8e: 94:b8:05:32:b9:bc:9f:db:d6:c7:c0:9c:78:86:09: 92:ea:80:a6:8d:9e:90:a4:bc:7a:d8:a3:f0:46:60: 82:42:b0:a2:02:1c:d7:ef:16:2f:dc:85:73:23:26: 3f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7C:3E:2A:E6:9D:19:CB:3E:3D:2D:D2:1A:03:2C:3D:26:4A:CE:9F X509v3 Authority Key Identifier: keyid:00:99:28:F0:B8:CD:30:ED:A0:56:30:A8:BA:67:4E:76:2A:9D:28:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJko8LjNMO2gVjCoumdOdiqdKDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/B37497105B3F11EE8F1D3D6EC4F9AE02/AJko8LjNMO2gVjCoumdOdiqdKDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d3:c7:3b:15:2a:bc:af:ed:97:24:ee:7a:4a:aa:e8:5b:84: 8f:66:51:6c:64:8d:ef:b9:b2:a7:4b:02:50:d1:fb:af:6c:ff: 7a:99:3a:ce:26:4c:78:88:33:dd:3d:8c:8b:a2:4b:28:62:0f: f9:a2:2c:5a:b5:f0:80:2a:7f:7a:46:eb:cc:50:12:86:e5:37: 2b:58:c4:a0:53:0e:61:fe:38:8d:a9:2e:ff:92:1d:82:3c:51: 5c:64:d6:0d:5a:38:21:de:ec:ba:99:2e:a6:c7:22:ea:a9:e1: 53:37:3f:22:6a:e1:6d:44:f5:79:07:28:9a:b7:8f:11:88:0d: 55:75:39:74:0d:27:3d:60:f1:9c:04:c0:3e:c9:7d:3f:c9:c3: f1:21:3d:e9:93:b0:c8:b9:b7:67:0a:ea:08:90:89:c9:39:4b: 3e:4c:b7:4b:a6:1c:51:f5:e8:7f:d4:52:b7:60:72:88:1c:b7: af:22:45:89:1d:a9:60:2f:5b:66:f1:3c:63:54:e5:cd:f8:b3: 0a:a7:dd:7f:87:8b:87:e7:b7:73:88:fc:27:62:94:a4:8a:67: 74:25:52:60:0a:c9:13:92:c7:d9:25:85:97:bf:f4:6c:bf:12: eb:24:a7:09:b6:dc:58:26:9b:d0:ae:b7:80:ab:55:1e:7a:9b: c2:c2:69:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDAwOTkyOEYwQjhDRDMwRURBMDU2MzBBOEJBNjc0RTc2 MkE5RDI4MzMwHhcNMjQxMTIxMDM0MjMyWhcNMjQxMTI4MDM0MjMyWjAYMRYwFAYD VQQDEw02NzNlYWMyOC1kYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xnGgL+f2teb0OMvtQnAfR4QJr/YRueAC3jIHno+EDKguGq+/RKo4w6yhgF4 GnA1XGSAEXuVeOqMZm5mc3Kee89Loqf4bW3TWn1PaTIxnV9b3owmFBKOmND8l4Ee gRGx0o/EPou5k2RKQOV83gmmEUgMU8ie8vVxW5nMqdH/OcuE1qhXznpJpl8kkhMm xviSnQwdU8YjkCU19rP36YS9HB6EwWTBSqwIQb3iLoK6oCSRpZZ7ppd2FC4KOf8y wGn74E4PU1lG/OnzLj1VK/v2r46UuAUyubyf29bHwJx4hgmS6oCmjZ6QpLx62KPw RmCCQrCiAhzX7xYv3IVzIyY/6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCV8Pirm nRnLPj0t0hoDLD0mSs6fMB8GA1UdIwQYMBaAFACZKPC4zTDtoFYwqLpnTnYqnSgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9CMzc0OTcxMDVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1PMmdWakNvdW1kT2RpcWRL RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FKa284TGpOTU8yZ1ZqQ291bWRPZGlxZEtETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9CMzc0OTcxMDVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9BSmtvOExqTk1P MmdWakNvdW1kT2RpcWRLRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI08c7FSq8r+2XJO56SqroW4SPZlFsZI3vubKnSwJQ0fuvbP96mTrO Jkx4iDPdPYyLoksoYg/5oixatfCAKn96RuvMUBKG5TcrWMSgUw5h/jiNqS7/kh2C PFFcZNYNWjgh3uy6mS6mxyLqqeFTNz8iauFtRPV5Byiat48RiA1VdTl0DSc9YPGc BMA+yX0/ycPxIT3pk7DIubdnCuoIkInJOUs+TLdLphxR9eh/1FK3YHKIHLevIkWJ HalgL1tm8TxjVOXN+LMKp91/h4uH57dziPwnYpSkimd0JVJgCskTksfZJYWXv/Rs vxLrJKcJttxYJpvQrreAq1UeepvCwmkv -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:17 2024 by rpki-client on console-ams.rpki-client.org