$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json) Hash identifier: jQF9wMQ96UXwNAVBQwC/dIpcP28vGKFD/IdRJ34hybc= Subject key identifier: DF:F4:65:FF:F4:D1:3A:44:B3:2F:C4:4A:C5:A6:97:CE:C1:1A:16:E3 Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft Manifest number: F9 Signing time: Sat 23 Nov 2024 03:22:48 +0000 Manifest this update: Sat 23 Nov 2024 03:22:47 +0000 Manifest next update: Sat 30 Nov 2024 03:22:47 +0000 Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: JSsBQHGF0GDnr6Dqhw3ETzr9gxRQSbWNofFqhi+7zco=) 2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: TQNp4VPkd2Y3kuSHIh/mgixwhnfBshqTtBcaPCauLtM=) 3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: GR3/5CWBDLCFuFXDR1pBqo7ZS4ZffgNTqP5rw3l7jgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3 Validity Not Before: Nov 23 03:22:47 2024 GMT Not After : Nov 30 03:22:47 2024 GMT Subject: CN=67414a88-3a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:4b:23:e2:a8:b2:fd:8a:27:6c:89:aa:95: a5:88:ce:76:63:8f:65:3c:45:5c:cb:52:3b:8d:e8: a7:16:48:19:5e:9c:d5:61:34:98:6b:d8:5e:5e:a2: e5:5b:3a:53:c9:69:18:3b:a1:79:f4:80:3f:73:e4: 04:c8:cf:0a:ef:3f:8d:bf:c0:ff:f4:04:aa:96:be: b6:44:7f:16:8b:61:11:6d:4e:87:4d:74:57:df:f1: 41:eb:f2:6f:22:b4:da:46:5d:1e:bd:ff:e7:87:5c: d9:9d:38:85:38:c2:9f:5b:fd:0b:5e:da:5f:5f:ee: 61:b5:b0:37:b2:bc:84:9b:dd:a1:87:70:e8:73:6e: e2:6a:61:96:70:58:ed:a1:67:69:11:dd:98:b5:27: 99:72:ce:6f:df:af:6e:c7:89:92:c1:9c:48:19:34: a4:aa:44:a8:0a:2a:a7:54:9b:09:33:8b:44:37:4f: 52:e9:fd:17:40:61:9f:ce:b3:3a:58:2e:45:ad:b8: b0:97:b2:44:80:9d:86:f9:1b:63:18:81:fd:4c:f1: dc:ab:5a:88:19:f3:c6:7e:fb:b2:81:80:46:b7:5c: 85:2d:1f:86:69:3f:6b:51:f8:a3:9f:62:82:ed:a8: cf:e0:32:7e:09:65:34:bd:56:31:5e:f8:d2:ef:c3: 14:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F4:65:FF:F4:D1:3A:44:B3:2F:C4:4A:C5:A6:97:CE:C1:1A:16:E3 X509v3 Authority Key Identifier: keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:d5:1c:59:29:a1:96:2e:a7:69:d2:bd:22:60:66:1b:f5:3b: b3:e0:d5:3b:e5:59:ab:a7:b1:71:e6:c1:c8:b2:36:60:84:30: 6c:eb:92:af:9c:07:b4:52:21:90:27:af:c4:bd:9d:35:f1:31: bb:08:dd:c4:8e:f1:45:d3:8a:42:f2:4a:3c:2f:47:c9:1f:b9: 3c:4f:3c:04:2e:5f:70:2c:9d:f4:0e:bb:25:db:fc:5e:a1:d5: a2:6e:d9:23:42:5b:f6:6a:65:23:57:bb:ae:78:da:e1:94:b1: 83:d5:44:6a:98:7d:bb:40:5a:6f:03:e1:d1:18:e4:6b:cc:d1: c5:90:24:fa:0a:2f:c8:81:62:42:23:d0:a9:e9:2d:26:c6:4e: d9:75:33:d3:85:39:87:f1:64:c6:df:d6:76:7b:17:ad:25:70: 22:a2:37:8a:6b:45:8d:81:7f:8b:8f:31:b6:98:4c:d0:12:be: 37:fb:a4:77:df:df:b2:a4:5e:c2:ed:0a:c9:c4:7a:0b:0e:80: 52:30:59:ed:e8:20:72:47:42:41:8f:5a:19:dc:4d:0c:2f:f2: c0:58:4c:43:d6:a3:24:d3:2a:6c:38:24:9d:7b:6c:b0:53:7d: 91:39:6c:68:fe:e9:f7:1c:63:d8:3a:85:b6:07:0d:e8:f0:e9: 89:10:4e:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3MzcxMTAvBgNVBAUTKEUxRTc3OUNCMzFGRkU3NzMxQTMzQjVFQjdFQUZDNkIy QUJEQjQ0RTMwHhcNMjQxMTIzMDMyMjQ3WhcNMjQxMTMwMDMyMjQ3WjAYMRYwFAYD VQQDEw02NzQxNGE4OC0zYTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTRLI+Kosv2KJ2yJqpWliM52Y49lPEVcy1I7jeinFkgZXpzVYTSYa9heXqLl WzpTyWkYO6F59IA/c+QEyM8K7z+Nv8D/9ASqlr62RH8Wi2ERbU6HTXRX3/FB6/Jv IrTaRl0evf/nh1zZnTiFOMKfW/0LXtpfX+5htbA3sryEm92hh3Doc27iamGWcFjt oWdpEd2YtSeZcs5v369ux4mSwZxIGTSkqkSoCiqnVJsJM4tEN09S6f0XQGGfzrM6 WC5Frbiwl7JEgJ2G+RtjGIH9TPHcq1qIGfPGfvuygYBGt1yFLR+GaT9rUfijn2KC 7ajP4DJ+CWU0vVYxXvjS78MUOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/0Zf/0 0TpEsy/ESsWml87BGhbjMB8GA1UdIwQYMBaAFOHnecsx/+dzGjO1636vxrKr20Tj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzczNy84Mjk0MzYzRTMz NTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUzTWFNN1hyZnFfR3NxdmJS T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlZDV5ekhfNTNNYU03WHJmcV9Hc3F2YlJPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzczNy84Mjk0MzYzRTMzNTExMUVFQTExRjkxMjZDNEY5QUUwMi80ZWQ1eXpIXzUz TWFNN1hyZnFfR3NxdmJST00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg1RxZKaGWLqdp0r0iYGYb9Tuz4NU75Vmrp7Fx5sHIsjZghDBs65Kv nAe0UiGQJ6/EvZ018TG7CN3EjvFF04pC8ko8L0fJH7k8TzwELl9wLJ30Drsl2/xe odWibtkjQlv2amUjV7uueNrhlLGD1URqmH27QFpvA+HRGORrzNHFkCT6Ci/IgWJC I9Cp6S0mxk7ZdTPThTmH8WTG39Z2exetJXAiojeKa0WNgX+LjzG2mEzQEr43+6R3 39+ypF7C7QrJxHoLDoBSMFnt6CByR0JBj1oZ3E0ML/LAWExD1qMk0ypsOCSde2yw U32ROWxo/un3HGPYOoW2Bw3o8OmJEE6o -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:24 2024 by rpki-client on console-ams.rpki-client.org