$ rpki-client -vvf rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft File: nJSl3M9qZbaJhscEOEbHIb0zvpk.mft (raw, json) Hash identifier: eK/Gn0vGw4vLha1hlsTzFno7gueoX14xvSmNt7pZhjc= Subject key identifier: 19:E9:A4:13:C4:98:CE:B5:92:EC:68:34:53:C8:27:E2:B5:06:B7:DB Authority key identifier: 9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 Certificate issuer: /CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Certificate serial: 0CD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft Manifest number: 0CC0 Signing time: Sun 24 Nov 2024 17:53:36 +0000 Manifest this update: Sun 24 Nov 2024 17:53:36 +0000 Manifest next update: Sun 01 Dec 2024 17:53:36 +0000 Files and hashes: 1: nJSl3M9qZbaJhscEOEbHIb0zvpk.crl (hash: /xVz+a18M5RavJdKuuUcTFEY0GMeH1m9E/O2TXn11VQ=) 2: 064D129A56EA11EA84DC982BC4F9AE02.roa (hash: 6Rm16lqV7D8ogEdcWjZlICaxyf3FBMg+FZuEOmrvZ+E=) 3: 2B17862A82EE11EAB170FD4BC4F9AE02.roa (hash: Kvq9xzCrVcc/vYKOgXHbGDUWHenbRQHuJZ7CogmXIPc=) 4: 2BABEEB482EE11EAB170FD4BC4F9AE02.roa (hash: 7Q5TQ0GutKyzM0PazgyPbgCiIYVuSp/HifdYRSL6/UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3283 (0xcd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D66A0/serialNumber=9C94A5DCCF6A65B68986C7043846C721BD33BE99 Validity Not Before: Nov 24 17:53:36 2024 GMT Not After : Dec 1 17:53:36 2024 GMT Subject: CN=67436820-6214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:81:09:61:74:3c:f3:2f:1f:c9:b9:a6:3c: 81:3c:e9:3a:d8:89:5f:d9:72:ed:79:68:b4:da:99: ef:3a:1e:81:1a:83:c7:18:0b:fc:d3:9c:eb:57:dc: 80:54:67:5b:54:4e:ba:32:b2:05:84:e8:56:db:72: 94:13:d1:d6:84:d0:cd:d2:23:7b:5f:aa:08:71:c2: b9:78:df:b2:5f:20:69:7a:5f:64:d4:a2:4e:b0:1b: 93:33:03:fe:a6:3d:4f:a0:4f:ba:96:93:b1:83:40: d9:22:98:57:9c:a8:12:c8:ae:d7:be:58:2d:85:a0: 80:5e:f4:45:bf:af:5e:a8:c8:de:96:77:fa:11:86: e3:87:4f:3a:60:12:5b:58:fe:59:b6:cc:7d:c1:75: 91:bf:e3:21:9e:cf:f9:5c:a9:14:5a:49:bd:19:f6: 27:a7:39:12:e9:f1:5a:dd:f0:57:a8:53:30:9b:2c: 29:08:ea:d0:5a:9a:d5:c8:ee:a5:d1:27:dd:e7:2d: 09:66:c0:c3:36:34:04:72:bc:11:c2:08:cc:93:6b: c5:b7:5c:c1:24:6b:3a:1d:67:dc:72:22:a0:62:c9: a6:dd:e2:ec:4a:35:77:24:48:7b:d3:0c:68:31:8b: 83:59:37:90:83:75:ed:78:e1:62:cb:e3:13:29:e6: 3d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E9:A4:13:C4:98:CE:B5:92:EC:68:34:53:C8:27:E2:B5:06:B7:DB X509v3 Authority Key Identifier: keyid:9C:94:A5:DC:CF:6A:65:B6:89:86:C7:04:38:46:C7:21:BD:33:BE:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nJSl3M9qZbaJhscEOEbHIb0zvpk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D66A0/625FF726D9E711E988054016C4F9AE02/nJSl3M9qZbaJhscEOEbHIb0zvpk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:4f:39:1b:a5:b4:be:e3:80:2d:e1:1c:a9:cb:31:ef:87:08: cd:54:4a:2d:08:3b:e4:68:0b:c7:b9:07:2c:8f:63:89:2f:84: 0b:f9:27:2a:50:ef:75:aa:3c:e2:5e:22:53:c4:cd:07:4a:9a: 09:04:21:1b:c5:5b:9c:49:21:cf:ef:10:a2:a6:61:cb:29:9f: 5d:62:3b:3f:b1:cc:7e:6d:65:9e:cd:f8:3e:79:22:c4:2f:b6: e6:55:12:b8:97:56:5b:ea:c4:f8:5f:c7:80:07:e9:22:b7:6f: 02:15:2e:55:2a:ee:cf:a3:32:2f:70:a6:22:c2:7b:60:61:56: 28:aa:a6:73:7f:e4:e5:3a:3a:4f:c5:9e:32:59:f1:59:34:70: 22:b2:1d:b1:2b:18:cd:52:5f:3d:d7:af:27:a5:c0:09:75:c4: fc:91:92:c7:b4:a7:4b:45:3b:54:c3:de:4e:21:70:3b:48:dd: 37:af:27:82:04:c7:95:e4:41:40:00:8b:a8:70:b8:f3:be:bd: f8:9e:6e:d4:33:22:90:60:fd:c1:81:20:4e:c8:6a:49:3b:25: 2b:f1:f1:01:a6:46:3f:d4:49:b1:8c:90:fd:f6:3a:5e:1e:1b: 5c:11:ba:a3:7e:af:d2:7e:4c:1e:f0:6a:90:31:e9:c5:d1:b5: 91:47:14:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY2QTAxMTAvBgNVBAUTKDlDOTRBNURDQ0Y2QTY1QjY4OTg2QzcwNDM4NDZDNzIx QkQzM0JFOTkwHhcNMjQxMTI0MTc1MzM2WhcNMjQxMjAxMTc1MzM2WjAYMRYwFAYD VQQDEw02NzQzNjgyMC02MjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHGBCWF0PPMvH8m5pjyBPOk62Ilf2XLteWi02pnvOh6BGoPHGAv805zrV9yA VGdbVE66MrIFhOhW23KUE9HWhNDN0iN7X6oIccK5eN+yXyBpel9k1KJOsBuTMwP+ pj1PoE+6lpOxg0DZIphXnKgSyK7XvlgthaCAXvRFv69eqMjelnf6EYbjh086YBJb WP5Ztsx9wXWRv+Mhns/5XKkUWkm9GfYnpzkS6fFa3fBXqFMwmywpCOrQWprVyO6l 0Sfd5y0JZsDDNjQEcrwRwgjMk2vFt1zBJGs6HWfcciKgYsmm3eLsSjV3JEh70wxo MYuDWTeQg3XteOFiy+MTKeY9DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnppBPE mM61kuxoNFPIJ+K1BrfbMB8GA1UdIwQYMBaAFJyUpdzPamW2iYbHBDhGxyG9M76Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjZBMC82MjVGRjcyNkQ5 RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpiYUpoc2NFT0ViSEliMHp2 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25KU2wzTTlxWmJhSmhzY0VPRWJISWIwenZway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjZBMC82MjVGRjcyNkQ5RTcxMUU5ODgwNTQwMTZDNEY5QUUwMi9uSlNsM005cVpi YUpoc2NFT0ViSEliMHp2cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtTzkbpbS+44At4RypyzHvhwjNVEotCDvkaAvHuQcsj2OJL4QL+Scq UO91qjziXiJTxM0HSpoJBCEbxVucSSHP7xCipmHLKZ9dYjs/scx+bWWezfg+eSLE L7bmVRK4l1Zb6sT4X8eAB+kit28CFS5VKu7PozIvcKYiwntgYVYoqqZzf+TlOjpP xZ4yWfFZNHAish2xKxjNUl89168npcAJdcT8kZLHtKdLRTtUw95OIXA7SN03ryeC BMeV5EFAAIuocLjzvr34nm7UMyKQYP3BgSBOyGpJOyUr8fEBpkY/1EmxjJD99jpe HhtcEbqjfq/Sfkwe8GqQMenF0bWRRxSV -----END CERTIFICATE-----Generated at Sun Nov 24 20:09:57 2024 by rpki-client on console-ams.rpki-client.org