$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft File: aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json) Hash identifier: 8kUg91/EQWNdQZh264rOHoHksDfvW3wj5tNrzW4tq9M= Subject key identifier: 9F:93:67:C8:98:C2:18:45:25:13:98:ED:71:4A:46:4E:D1:0D:B1:5F Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 Certificate issuer: /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951 Certificate serial: 0595 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft Manifest number: 0591 Signing time: Fri 22 Nov 2024 22:46:34 +0000 Manifest this update: Fri 22 Nov 2024 22:46:33 +0000 Manifest next update: Fri 29 Nov 2024 22:46:33 +0000 Files and hashes: 1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: 9NoaemliqkUEQdJWYbNB5OmcHktTJR9iaofjDmbAA6k=) 2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: mMnOi+eys5qq8N+NeN/zjXPwIANf7lKUZxSBya3MUE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1429 (0x595) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951 Validity Not Before: Nov 22 22:46:33 2024 GMT Not After : Nov 29 22:46:33 2024 GMT Subject: CN=674109c9-dfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b1:e6:e2:d9:37:83:dc:c9:43:39:6e:6c:24: 76:4b:ee:18:56:68:de:2d:57:ff:80:bf:fa:81:f0: 37:b3:22:cd:ab:16:44:48:57:0e:e1:e9:c4:d1:00: b7:8c:19:1a:0e:ed:9b:eb:c2:a0:0e:55:59:91:40: 08:eb:5b:7b:60:d0:d9:d5:f7:a3:24:42:59:7b:0f: b5:91:b7:a0:1a:19:71:76:1d:c8:b6:e3:85:86:ff: fe:9b:d3:fc:a1:f7:f1:11:0b:5b:c1:99:67:4c:13: 34:f8:12:cd:3e:dc:db:bd:63:d7:6f:4b:b0:67:cd: 66:7f:f2:9b:40:a0:b1:15:56:4d:e5:03:9c:0b:c9: e9:02:fa:de:85:90:67:6c:fb:18:b6:02:5f:8d:8a: 1e:9c:58:91:18:ec:d7:90:8c:81:da:0d:2b:1d:fe: 32:fd:d9:b6:02:ec:f3:0d:11:1b:36:ab:0f:5d:94: f1:df:4a:92:ca:3b:6a:9b:15:e5:ed:d9:26:b2:56: 03:eb:81:5c:2c:90:04:3f:3a:e5:ce:0c:ab:42:6b: 22:bf:e9:c4:54:b2:89:ce:22:83:26:7a:8a:17:0b: 35:fd:64:0e:a4:6b:20:0b:45:56:b5:34:3f:d3:a5: 34:99:b5:61:bc:30:c4:67:c5:e1:da:21:94:3d:83: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:93:67:C8:98:C2:18:45:25:13:98:ED:71:4A:46:4E:D1:0D:B1:5F X509v3 Authority Key Identifier: keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:63:5f:19:73:cc:61:7e:22:fe:2c:d9:ef:92:ca:6f:02:29: 64:8b:48:5d:c3:26:b0:85:46:0b:8f:c0:a0:b5:26:07:6e:47: 14:1d:ae:50:6d:cc:26:89:94:4d:3b:96:f1:3b:27:0c:b0:61: 02:e8:80:3a:4f:94:9a:2a:de:c9:dc:11:f7:c1:0a:f6:7b:10: be:ea:6d:6d:87:4d:ff:24:e2:e5:74:22:8f:80:c3:79:92:78: f2:9f:73:2d:b2:f8:57:37:39:78:18:be:c6:e9:a5:6a:83:6f: 71:e6:4b:53:8e:77:5d:ad:a4:01:f6:5c:e5:16:05:42:cd:a3: 89:30:ba:36:ca:e0:9a:af:5f:d7:f7:42:73:9c:56:25:06:b6: 59:98:2b:36:73:bb:ff:5b:6e:e6:b7:63:db:5e:f0:ac:ce:56: 45:14:e6:4e:46:cb:69:00:f6:a8:69:f3:2a:37:52:53:ea:c8: a3:11:00:b4:47:9a:07:46:77:86:3e:a6:50:07:cb:28:04:f2: 93:de:db:f2:14:73:a6:49:91:51:60:2b:e0:6e:11:a8:ac:6f: a8:bd:f2:56:9b:c7:8f:ce:0a:52:d8:aa:3b:0b:b4:48:1e:91: 0d:e9:8a:d0:32:46:bc:51:17:1b:57:74:31:af:aa:cc:09:4a: 4c:ac:36:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMxNDYxMTAvBgNVBAUTKDY5MEM3MjlGMTgzOTA1NjRENjcwQjE4Rjc3NzQ3NTRF NUQyNzk5NTEwHhcNMjQxMTIyMjI0NjMzWhcNMjQxMTI5MjI0NjMzWjAYMRYwFAYD VQQDEw02NzQxMDljOS1kZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbHm4tk3g9zJQzlubCR2S+4YVmjeLVf/gL/6gfA3syLNqxZESFcO4enE0QC3 jBkaDu2b68KgDlVZkUAI61t7YNDZ1fejJEJZew+1kbegGhlxdh3ItuOFhv/+m9P8 offxEQtbwZlnTBM0+BLNPtzbvWPXb0uwZ81mf/KbQKCxFVZN5QOcC8npAvrehZBn bPsYtgJfjYoenFiRGOzXkIyB2g0rHf4y/dm2AuzzDREbNqsPXZTx30qSyjtqmxXl 7dkmslYD64FcLJAEPzrlzgyrQmsiv+nEVLKJziKDJnqKFws1/WQOpGsgC0VWtTQ/ 06U0mbVhvDDEZ8Xh2iGUPYO8WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+TZ8iY whhFJROY7XFKRk7RDbFfMB8GA1UdIwQYMBaAFGkMcp8YOQVk1nCxj3d0dU5dJ5lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzE0Ni9EQUE3NjQ5MkFF MEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJXVFdjTEdQZDNSMVRsMG5t VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FReHlueGc1QldUV2NMR1BkM1IxVGwwbm1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzE0Ni9EQUE3NjQ5MkFFMEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJX VFdjTEdQZDNSMVRsMG5tVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Y18Zc8xhfiL+LNnvkspvAilki0hdwyawhUYLj8CgtSYHbkcUHa5Q bcwmiZRNO5bxOycMsGEC6IA6T5SaKt7J3BH3wQr2exC+6m1th03/JOLldCKPgMN5 knjyn3MtsvhXNzl4GL7G6aVqg29x5ktTjnddraQB9lzlFgVCzaOJMLo2yuCar1/X 90JznFYlBrZZmCs2c7v/W27mt2PbXvCszlZFFOZORstpAPaoafMqN1JT6sijEQC0 R5oHRneGPqZQB8soBPKT3tvyFHOmSZFRYCvgbhGorG+ovfJWm8ePzgpS2Ko7C7RI HpEN6YrQMka8URcbV3Qxr6rMCUpMrDYt -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:51 2024 by rpki-client on console-ams.rpki-client.org