$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: 4UUPMVhsXhzqjN1BPvDw/oyLNDqmQCWYUEJ55VX83Mg= Subject key identifier: 37:38:1F:79:75:EC:70:B8:BF:B1:1E:75:FD:DF:B9:01:94:5E:01:25 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: C3 Signing time: Tue 03 Dec 2024 04:20:40 +0000 Manifest this update: Tue 03 Dec 2024 04:20:40 +0000 Manifest next update: Tue 10 Dec 2024 04:20:40 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: mec1PXGFZWZjGHHPpHpHyfwwnzKUz0zIfwluwQppBD0=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: fqQ31/qOlQbVRdFg/IGLKLBtYoggj1UqF62l07KeedI=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: f5VfDcB3d9zHr/WXZ8PP2XQ84b5VP9He8VEWcfe+B7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Dec 2024 04:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Dec 3 04:20:40 2024 GMT Not After : Dec 10 04:20:40 2024 GMT Subject: CN=674e8718-580d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:0c:b8:7c:a9:15:50:89:e1:6e:ea:58:7f: 80:a2:33:e8:83:a8:4a:32:89:f2:29:c6:c4:9f:4c: 6b:2c:8c:60:f8:78:cb:d4:46:91:8b:57:65:f5:d8: be:b8:a2:a5:00:82:c3:2e:ba:04:5b:ea:18:61:1e: e8:e0:a6:dc:ef:ab:65:89:b5:f9:34:6b:ff:93:4b: a6:7e:6e:dc:51:80:84:a3:3b:6a:27:e5:1e:63:fc: bf:95:92:51:92:2d:d9:66:ec:6b:e7:e6:99:a2:11: 32:49:e4:3d:24:84:32:75:e4:72:75:5f:f1:bf:34: 46:88:92:e4:69:19:09:8f:14:da:bb:af:ba:6b:0f: 72:06:79:bd:27:ce:99:ae:65:e0:a2:e7:63:1d:8f: 07:86:ab:e0:ca:b7:97:58:e5:ae:50:4b:f9:6f:d2: fb:e5:b0:78:b7:98:b8:11:65:b3:63:93:3a:f1:d7: 13:e2:1c:a5:af:12:00:84:df:54:dd:a2:b6:f0:79: 15:98:fb:d7:7f:f8:db:8e:53:9b:51:43:04:d2:20: 58:aa:64:f1:f6:b4:20:7f:92:6d:12:ad:56:81:cd: 76:33:13:b5:46:df:5d:49:af:96:8a:2f:9f:a0:f4: 77:41:be:5b:4f:41:c0:fb:06:08:d9:c3:73:32:58: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:38:1F:79:75:EC:70:B8:BF:B1:1E:75:FD:DF:B9:01:94:5E:01:25 X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:77:d6:7b:de:f8:15:2c:3c:b4:f7:30:19:9c:39:35:26:a9: 84:57:8e:32:f9:49:ea:61:39:08:2e:6a:70:2f:4c:e4:ca:4c: f6:44:fa:f0:49:b5:35:b1:ab:4e:91:93:ee:97:d9:73:f0:a4: f8:f8:3a:07:10:d5:89:49:18:8a:c9:46:e6:75:18:3b:a1:c1: e1:d0:2a:85:94:74:90:2f:57:06:0a:5c:70:08:81:df:c2:37: a6:02:0f:87:07:1d:3f:c3:b8:f9:ba:82:28:4f:85:3e:89:e5: 0b:a1:10:db:d7:5d:9f:b1:f4:09:d3:5b:a1:cb:07:82:a8:d9: c3:a9:f2:2a:34:46:5a:13:86:c4:d5:fc:9c:42:c3:d2:7b:99: 69:00:04:70:d3:a9:44:37:e0:bf:e7:3e:24:c0:45:fa:ba:94: 7c:42:6a:2d:af:ba:d1:be:f4:ba:66:94:2e:c1:17:96:09:44: d7:d0:f8:27:2d:a3:39:fc:96:fc:45:5d:b8:1a:88:a2:bd:1f: 86:d0:02:24:24:c0:53:1b:92:26:fc:04:45:ca:f4:1d:ab:7d: 39:b1:44:b4:48:c6:af:66:3b:f1:fc:33:f4:01:ac:92:71:03: 16:8a:36:22:2c:51:06:cc:99:1b:47:c5:ac:b5:0c:66:aa:60: c1:15:a9:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjQxMjAzMDQyMDQwWhcNMjQxMjEwMDQyMDQwWjAYMRYwFAYD VQQDEw02NzRlODcxOC01ODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjcMuHypFVCJ4W7qWH+AojPog6hKMonyKcbEn0xrLIxg+HjL1EaRi1dl9di+ uKKlAILDLroEW+oYYR7o4Kbc76tlibX5NGv/k0umfm7cUYCEoztqJ+UeY/y/lZJR ki3ZZuxr5+aZohEySeQ9JIQydeRydV/xvzRGiJLkaRkJjxTau6+6aw9yBnm9J86Z rmXgoudjHY8HhqvgyreXWOWuUEv5b9L75bB4t5i4EWWzY5M68dcT4hylrxIAhN9U 3aK28HkVmPvXf/jbjlObUUME0iBYqmTx9rQgf5JtEq1Wgc12MxO1Rt9dSa+Wii+f oPR3Qb5bT0HA+wYI2cNzMli4hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDc4H3l1 7HC4v7Eedf3fuQGUXgElMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFd9Z73vgVLDy09zAZnDk1JqmEV44y+UnqYTkILmpwL0zkykz2RPrw SbU1satOkZPul9lz8KT4+DoHENWJSRiKyUbmdRg7ocHh0CqFlHSQL1cGClxwCIHf wjemAg+HBx0/w7j5uoIoT4U+ieULoRDb112fsfQJ01uhyweCqNnDqfIqNEZaE4bE 1fycQsPSe5lpAARw06lEN+C/5z4kwEX6upR8Qmotr7rRvvS6ZpQuwReWCUTX0Pgn LaM5/Jb8RV24GoiivR+G0AIkJMBTG5Im/ARFyvQdq305sUS0SMavZjvx/DP0AayS cQMWijYiLFEGzJkbR8WstQxmqmDBFanj -----END CERTIFICATE-----Generated at Tue Dec 3 07:47:51 2024 by rpki-client on console-ams.rpki-client.org