$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: +JMq9OQiKeAGEuqmw20COMHVkO4c8fyMNtw2Q3srLPE= Subject key identifier: DC:4D:BE:2D:86:0C:7C:0E:80:C6:83:21:DB:09:2A:6D:91:B8:BE:EB Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 08C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 08C0 Signing time: Fri 22 Nov 2024 20:13:52 +0000 Manifest this update: Fri 22 Nov 2024 20:13:51 +0000 Manifest next update: Fri 29 Nov 2024 20:13:51 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: H6bfLZPUszxNUuJX6J7U5vSJ3YjF+B7MD8sit2EQ20M=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: jfGEyrs8irz34ZW5qDRzJ5sduiRp3kjnfVg2NZqBN9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2246 (0x8c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Nov 22 20:13:51 2024 GMT Not After : Nov 29 20:13:51 2024 GMT Subject: CN=6740e600-ab0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:17:8e:8b:20:57:9f:aa:ac:76:e7:9b:91: 1e:3f:df:d2:82:fd:7f:e9:7d:5c:58:49:f7:a5:94: e2:eb:02:ed:8f:71:6e:3e:0c:df:69:5a:2f:06:e7: 22:7f:21:fd:a6:d0:3a:9a:45:d0:06:b1:d3:57:4f: 75:d0:23:7b:b4:8d:36:1e:d0:bf:c5:66:5e:1d:60: 05:cc:ae:9e:d8:34:d2:26:71:64:0a:57:9a:1d:81: 53:b5:75:7e:42:0a:8e:de:3d:6c:74:0e:3f:45:fa: 66:7a:70:a2:bd:60:72:ef:d7:92:19:75:84:1e:5b: f7:b8:42:22:06:e5:69:ed:d6:7c:95:34:09:25:a3: 20:10:4f:85:e6:f2:e9:75:50:42:ca:c0:33:c6:02: 7a:fc:9f:09:e7:19:07:45:bc:ee:b5:52:69:33:05: 0b:8b:82:27:ef:d0:33:5f:7a:90:03:4c:16:37:73: 35:e8:83:5a:54:6b:fe:d4:ba:fc:82:b4:d7:46:19: 34:7e:49:c6:e8:2d:22:d1:c0:1b:84:67:24:75:2f: f1:7a:6a:35:21:27:ef:86:4f:98:4f:94:ab:f6:dd: f6:a8:71:a2:45:24:0d:70:aa:b5:ec:63:1c:fb:17: 97:3c:64:f9:56:74:af:ba:b0:c3:ef:55:c6:4e:f1: 3d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4D:BE:2D:86:0C:7C:0E:80:C6:83:21:DB:09:2A:6D:91:B8:BE:EB X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:f0:86:60:4a:ad:db:c1:90:65:d8:aa:b3:8c:8e:23:0f:9d: 03:8b:1c:61:4c:9e:66:3b:cc:c5:b4:da:dc:3a:34:0f:f0:38: 53:57:48:85:74:75:be:8d:37:9a:0d:f4:29:36:a7:a7:ee:46: c9:3d:cb:fd:49:83:d2:62:b5:0f:63:e8:25:32:24:9b:c6:03: 1e:36:5c:d6:32:9f:aa:30:43:81:ea:5d:6d:f5:ee:da:7d:61: 12:81:17:f4:1b:34:83:c5:67:0e:8f:d0:bd:51:de:8a:7b:4e: c4:e1:38:74:91:72:a9:f7:a5:59:8d:79:4f:f1:f7:1b:cf:2f: b6:b6:0d:9e:95:52:28:4d:6d:8a:70:85:65:ba:5c:07:59:76: 4f:40:6a:cd:f2:2b:82:9b:61:86:90:84:a6:a3:a0:4e:ef:33: 02:19:d2:f6:bf:7e:7d:24:07:b0:4d:20:12:92:e2:45:f9:98: 9f:37:31:4a:a5:85:f5:3e:17:b6:a2:a6:b0:1e:f9:25:28:97: 6e:24:05:57:a1:a8:6b:d0:20:d8:b5:4d:0c:cc:8e:d2:4d:8a: 11:90:e1:1e:68:dc:cc:6d:c5:5b:86:aa:01:70:80:e1:44:a5: 38:0c:7d:71:52:8f:cb:42:55:fd:13:68:36:02:03:1b:fb:70: 5e:4a:3c:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjQxMTIyMjAxMzUxWhcNMjQxMTI5MjAxMzUxWjAYMRYwFAYD VQQDEw02NzQwZTYwMC1hYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1y4XjosgV5+qrHbnm5EeP9/Sgv1/6X1cWEn3pZTi6wLtj3FuPgzfaVovBuci fyH9ptA6mkXQBrHTV0910CN7tI02HtC/xWZeHWAFzK6e2DTSJnFkCleaHYFTtXV+ QgqO3j1sdA4/RfpmenCivWBy79eSGXWEHlv3uEIiBuVp7dZ8lTQJJaMgEE+F5vLp dVBCysAzxgJ6/J8J5xkHRbzutVJpMwULi4In79AzX3qQA0wWN3M16INaVGv+1Lr8 grTXRhk0fknG6C0i0cAbhGckdS/xemo1ISfvhk+YT5Sr9t32qHGiRSQNcKq17GMc +xeXPGT5VnSvurDD71XGTvE9hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxNvi2G DHwOgMaDIdsJKm2RuL7rMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF8IZgSq3bwZBl2KqzjI4jD50DixxhTJ5mO8zFtNrcOjQP8DhTV0iF dHW+jTeaDfQpNqen7kbJPcv9SYPSYrUPY+glMiSbxgMeNlzWMp+qMEOB6l1t9e7a fWESgRf0GzSDxWcOj9C9Ud6Ke07E4Th0kXKp96VZjXlP8fcbzy+2tg2elVIoTW2K cIVlulwHWXZPQGrN8iuCm2GGkISmo6BO7zMCGdL2v359JAewTSASkuJF+ZifNzFK pYX1Phe2oqawHvklKJduJAVXoahr0CDYtU0MzI7STYoRkOEeaNzMbcVbhqoBcIDh RKU4DH1xUo/LQlX9E2g2AgMb+3BeSjxC -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org