$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json) Hash identifier: 0bvz7/Fz42pZVK1jurc94N4+Yh6Y5fkyntQACX7uz6c= Subject key identifier: C2:80:50:B9:3A:90:26:B4:7F:BD:DD:F3:14:8B:47:8B:38:A4:DD:AE Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft Manifest number: 4E Signing time: Thu 17 Oct 2024 05:42:07 +0000 Manifest this update: Thu 17 Oct 2024 05:42:05 +0000 Manifest next update: Thu 24 Oct 2024 05:42:05 +0000 Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: tc8DqankgV2yJ7loZOm20GW1xRNvGMWO6VxUYONpYZU=) 2: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: nq8ODXuG2X1On3FZK6D1Ybw7+HTqr1F1kxAZ6zyabRU=) 3: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: 1y/ITkoFaBAOp9EAsg22Me68ifQMXDcby23ipO0Xd9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Oct 2024 05:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Validity Not Before: Oct 17 05:42:05 2024 GMT Not After : Oct 24 05:42:05 2024 GMT Subject: CN=6710a3ae-6f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:0a:16:49:81:c1:6b:30:42:33:ce:7b:77: 8c:cd:c7:10:ba:3a:35:bb:93:5c:ad:81:be:cc:ae: c7:e2:4a:1e:d7:0c:4d:19:a0:77:67:e1:32:86:ae: 1c:9f:60:c1:37:2c:5a:86:3a:74:7d:eb:9e:eb:4e: d5:aa:c8:55:c5:26:4c:e6:ba:4e:5b:db:84:f1:77: ac:a6:44:7d:ae:8a:e2:33:cf:b6:c8:15:ba:81:52: 68:4b:01:36:c9:f0:42:d4:bf:25:a3:b1:a4:8b:8e: 37:0b:ee:4b:5a:22:4e:54:60:e1:75:d6:71:36:d0: f1:8d:0e:37:5d:e6:d0:e2:75:4d:67:91:97:68:87: e8:70:87:d4:9a:cb:a5:e3:45:6a:8f:66:31:3e:82: 5c:33:45:eb:61:dc:0e:55:af:01:94:ba:c9:76:22: 10:f4:f7:27:f9:25:c1:02:f9:b0:82:95:a4:03:c6: ad:dd:ef:81:fb:60:ab:ce:95:73:fb:aa:27:02:18: 82:a5:ca:aa:6c:33:4c:f5:0a:10:af:61:2c:bd:ca: 81:c0:9a:1d:61:cd:2c:ef:65:4d:72:78:2b:71:2a: 73:4d:63:e5:aa:3d:e9:ef:b9:dc:3b:24:08:21:a4: 83:a9:b7:58:37:93:ab:b3:9f:7f:2e:4b:29:0c:ee: 00:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:80:50:B9:3A:90:26:B4:7F:BD:DD:F3:14:8B:47:8B:38:A4:DD:AE X509v3 Authority Key Identifier: keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:72:f7:ab:a6:4d:90:7d:fd:0d:5e:e9:fe:67:91:a7:40:05: 9b:a4:62:31:1e:6d:9a:18:68:5e:8a:b7:1b:7e:8b:63:0f:73: 58:e1:8a:12:f4:3e:0a:98:d8:71:ad:fd:90:ca:79:d5:0e:75: d1:e6:f3:8d:46:c4:19:08:ad:1b:c2:69:18:05:9d:96:7c:51: df:cd:7a:f4:45:dc:4a:66:1c:c4:d3:7c:ff:3c:20:0d:14:ff: 99:10:49:67:7a:4c:3a:84:7b:f1:f8:9d:7b:74:6d:48:c1:66: ab:71:23:6b:e4:f6:82:d6:00:f7:d1:9f:d2:cf:aa:2f:06:5b: ff:46:3a:e8:60:2c:57:0e:6c:c8:3d:34:88:70:a0:fd:69:e8: eb:42:88:b0:5f:fd:f8:21:08:1c:13:6a:a6:2d:ab:52:e1:51: 6c:3e:62:32:c0:9d:c6:c1:ac:33:98:c2:0f:ef:1f:65:9d:4d: ba:6a:23:67:3c:dc:02:0e:14:7a:20:f6:22:9f:eb:35:04:61: 4d:fc:9a:04:28:ea:27:30:a6:ac:25:ac:36:3d:57:a9:bc:3c: c2:bd:f7:a4:84:cc:38:b6:cc:40:be:26:8c:ac:3a:dc:74:6d: 8c:05:b1:61:cb:cf:1a:45:0f:95:07:08:11:cd:29:8b:c5:45: 30:b9:b3:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDNGQzExMC8GA1UEBRMoMEY1OTE0Q0JCOTZBNzBEQTA2QjExRUYzREQyQjYzQzlF NDA3QjMxQzAeFw0yNDEwMTcwNTQyMDVaFw0yNDEwMjQwNTQyMDVaMBgxFjAUBgNV BAMTDTY3MTBhM2FlLTZmNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDugoWSYHBazBCM857d4zNxxC6OjW7k1ytgb7MrsfiSh7XDE0ZoHdn4TKGrhyf YME3LFqGOnR9657rTtWqyFXFJkzmuk5b24Txd6ymRH2uiuIzz7bIFbqBUmhLATbJ 8ELUvyWjsaSLjjcL7ktaIk5UYOF11nE20PGNDjdd5tDidU1nkZdoh+hwh9Say6Xj RWqPZjE+glwzReth3A5VrwGUusl2IhD09yf5JcEC+bCClaQDxq3d74H7YKvOlXP7 qicCGIKlyqpsM0z1ChCvYSy9yoHAmh1hzSzvZU1yeCtxKnNNY+WqPenvudw7JAgh pIOpt1g3k6uzn38uSykM7gAHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwoBQuTqQ JrR/vd3zFItHizik3a4wHwYDVR0jBBgwFoAUD1kUy7lqcNoGsR7z3StjyeQHsxww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwM0ZDL0M3QjA5MzU2MUQ3 MTExRUY5NUUyNjg0MEM0RjlBRTAyL0Qxa1V5N2xxY05vR3NSN3ozU3RqeWVRSHN4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRDFrVXk3bHFjTm9Hc1I3ejNTdGp5ZVFIc3h3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw M0ZDL0M3QjA5MzU2MUQ3MTExRUY5NUUyNjg0MEM0RjlBRTAyL0Qxa1V5N2xxY05v R3NSN3ozU3RqeWVRSHN4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEhy96umTZB9/Q1e6f5nkadABZukYjEebZoYaF6Ktxt+i2MPc1jhihL0 PgqY2HGt/ZDKedUOddHm841GxBkIrRvCaRgFnZZ8Ud/NevRF3EpmHMTTfP88IA0U /5kQSWd6TDqEe/H4nXt0bUjBZqtxI2vk9oLWAPfRn9LPqi8GW/9GOuhgLFcObMg9 NIhwoP1p6OtCiLBf/fghCBwTaqYtq1LhUWw+YjLAncbBrDOYwg/vH2WdTbpqI2c8 3AIOFHog9iKf6zUEYU38mgQo6icwpqwlrDY9V6m8PMK996SEzDi2zEC+JoysOtx0 bYwFsWHLzxpFD5UHCBHNKYvFRTC5sws= -----END CERTIFICATE-----Generated at Thu Oct 17 08:06:29 2024 by rpki-client on console-ams.rpki-client.org