$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json) Hash identifier: dOJ6ONI83t17BLhRLfuf4CIp25FlhSqUYteJcuC5YIU= Subject key identifier: 95:E5:24:AE:8D:8E:86:36:CF:C5:12:45:7D:02:CB:38:DB:E0:AE:0B Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft Manifest number: D9 Signing time: Thu 21 Nov 2024 03:51:42 +0000 Manifest this update: Thu 21 Nov 2024 03:51:42 +0000 Manifest next update: Thu 28 Nov 2024 03:51:42 +0000 Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: Cvpqt8MX3WLbxRUPEe41hovppFhFv9aRa8A+Fh9yrV0=) 2: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: fJph6uiOIJRzgAFIwvKPO3OGbJctKCAUncAfZis1/Jo=) 3: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: j6e518IrFLggTcXwdzTc/DnExHzZEsAGE1ciCOFgyjQ=) 4: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: wLIv2CUnu/H9syGldsXh3/b3aDnFK9VWU8J3766MXj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4 Validity Not Before: Nov 21 03:51:42 2024 GMT Not After : Nov 28 03:51:42 2024 GMT Subject: CN=673eae4e-8ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:d8:6d:b2:45:ee:b7:88:a0:d5:8a:41:c3: de:ea:86:c6:8b:c1:85:cc:40:0b:71:34:04:51:fe: bf:11:9c:9a:a0:c8:dd:0e:2d:6d:d7:ef:43:ab:9d: 63:a6:43:4b:b0:71:9f:e1:42:f9:f6:8e:c2:9d:4c: 5b:0b:dc:74:c0:cb:29:3e:69:b3:d4:ff:16:9f:29: a4:83:69:99:2e:c7:f7:86:c8:13:e8:41:50:69:fe: 70:18:25:90:15:ec:23:9e:3c:73:6b:ac:9c:bf:1b: d1:d6:ed:02:e6:8c:ad:e4:b1:ee:e6:89:80:7b:69: bd:75:df:98:b4:95:0e:f8:c5:c3:13:a7:6d:33:04: c0:26:dd:17:60:04:ad:59:23:ab:31:b5:c3:34:c1: e5:77:99:ab:94:21:c4:af:44:4f:39:25:78:a4:46: 5f:c4:ce:c3:9c:5f:c6:03:ec:22:5c:cd:39:d8:c1: 09:ac:a2:40:17:f0:a6:26:e1:a8:3f:ec:d0:3b:88: 4b:7c:51:97:fa:a9:a3:3a:a8:2e:c7:64:1a:33:8b: 2f:cd:7c:6d:a8:4a:46:eb:ba:45:44:8c:1f:88:d0: a9:8f:86:c5:e4:8e:a4:10:93:17:7f:72:ef:59:99: b0:0e:9f:8b:24:01:4a:ef:3c:6f:21:2c:3d:c8:ec: 48:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E5:24:AE:8D:8E:86:36:CF:C5:12:45:7D:02:CB:38:DB:E0:AE:0B X509v3 Authority Key Identifier: keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:aa:1d:9c:0d:22:2b:66:5f:67:f7:c9:4a:85:17:d1:e4:29: 0c:4e:38:cc:c7:cf:d3:e2:95:ad:ce:b3:df:56:25:ca:38:07: af:8c:dc:ad:42:bb:4f:f6:c5:5f:4d:e8:45:ce:9d:67:1c:ed: 18:5c:a7:2f:79:b0:f5:5f:9a:e6:1b:e5:cd:40:08:53:aa:bd: b6:c7:0c:91:71:49:8f:73:68:69:d6:b1:69:97:d8:17:03:cd: b4:bc:e4:55:f9:8b:08:7f:be:3e:c9:0a:d3:cd:92:59:51:2a: 09:b3:a3:f4:b1:ca:9c:9f:1c:cd:d1:12:32:ce:ab:d2:53:7d: c0:a4:e8:03:c0:37:32:a8:90:ab:08:6d:fe:d3:69:05:fd:21: a3:ca:7d:ae:76:ab:08:6e:94:40:a9:53:17:e8:ff:17:2b:7a: 90:b3:ba:3e:69:16:3b:6a:be:1c:65:30:bd:1f:1f:a8:65:bf: 08:6b:38:3d:46:27:ef:1e:3f:fa:0a:dc:aa:8d:6d:69:f9:98: fa:23:7f:93:09:4d:6c:66:33:e9:38:3c:0b:c8:d4:d8:35:d2: d1:0c:d0:ff:47:a1:53:d5:d0:3c:b5:e7:ed:5b:d4:d8:3f:a9: f5:c6:a1:fb:a7:d3:fa:3a:26:a8:e1:45:72:44:4d:66:52:b6: df:eb:e4:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI3RTkxMTAvBgNVBAUTKERGNTE0NzBCMTVFOEMxNDFBRjJGQTg0NkEyOEMwM0Iz ODU5MUJBQjQwHhcNMjQxMTIxMDM1MTQyWhcNMjQxMTI4MDM1MTQyWjAYMRYwFAYD VQQDEw02NzNlYWU0ZS04ZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuG/YbbJF7reIoNWKQcPe6obGi8GFzEALcTQEUf6/EZyaoMjdDi1t1+9Dq51j pkNLsHGf4UL59o7CnUxbC9x0wMspPmmz1P8Wnymkg2mZLsf3hsgT6EFQaf5wGCWQ Fewjnjxza6ycvxvR1u0C5oyt5LHu5omAe2m9dd+YtJUO+MXDE6dtMwTAJt0XYASt WSOrMbXDNMHld5mrlCHEr0RPOSV4pEZfxM7DnF/GA+wiXM052MEJrKJAF/CmJuGo P+zQO4hLfFGX+qmjOqgux2QaM4svzXxtqEpG67pFRIwfiNCpj4bF5I6kEJMXf3Lv WZmwDp+LJAFK7zxvISw9yOxIMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXlJK6N joY2z8USRX0Cyzjb4K4LMB8GA1UdIwQYMBaAFN9RRwsV6MFBry+oRqKMA7OFkbq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjdFOS9FOTlFN0Y1MjZF MkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dVR3ZMNmhHb293RHM0V1J1 clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxRkhDeFhvd1VHdkw2aEdvb3dEczRXUnVyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjdFOS9FOTlFN0Y1MjZFMkUxMUVFODVEOTJEMzJDNEY5QUUwMi8zMUZIQ3hYb3dV R3ZMNmhHb293RHM0V1J1clEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvqh2cDSIrZl9n98lKhRfR5CkMTjjMx8/T4pWtzrPfViXKOAevjNyt QrtP9sVfTehFzp1nHO0YXKcvebD1X5rmG+XNQAhTqr22xwyRcUmPc2hp1rFpl9gX A820vORV+YsIf74+yQrTzZJZUSoJs6P0scqcnxzN0RIyzqvSU33ApOgDwDcyqJCr CG3+02kF/SGjyn2udqsIbpRAqVMX6P8XK3qQs7o+aRY7ar4cZTC9Hx+oZb8Iazg9 RifvHj/6CtyqjW1p+Zj6I3+TCU1sZjPpODwLyNTYNdLRDND/R6FT1dA8teftW9TY P6n1xqH7p9P6Oiao4UVyRE1mUrbf6+Qd -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:18 2024 by rpki-client on console-ams.rpki-client.org