$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft File: rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json) Hash identifier: fbbENBAMHqUj+UINgnk4TAzYRnaMDT7Ee4z4Qd3inSM= Subject key identifier: 04:E2:FB:B8:8C:6A:43:70:98:7A:6A:4B:58:EB:14:8D:72:97:F4:59 Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft Manifest number: 04A9 Signing time: Wed 20 Nov 2024 16:22:15 +0000 Manifest this update: Wed 20 Nov 2024 16:22:15 +0000 Manifest next update: Wed 27 Nov 2024 16:22:15 +0000 Files and hashes: 1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: LPUQdDvtfx9zWdCInrV3xh2nOiMopHeS69cZj7uRFGg=) 2: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: yR/rS2v+MnuPsp4IAeWDDgPbPiNnjwU9wDh4QYZV4SU=) 3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: qkuJyiuag7r0VmHzzxIeNNPZvE1YemZEbkXs9TYwx5o=) 4: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: YZwNutRVemyQTlte1eEv/AcDXWm1xtlx4204L/kTObo=) 5: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: ACLXZnrak+BWFZVdvvziA50vZItebg8EqCvB342Th1I=) 6: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: Cywfb2Rnt+MB9wFrcD0/BbNel0gnNnVhinHv2K8l9OM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Nov 20 16:22:15 2024 GMT Not After : Nov 27 16:22:15 2024 GMT Subject: CN=673e0cb7-4a58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:cc:d1:54:5a:0e:fb:ba:af:fc:2c:ca:c4: 80:43:33:ef:37:63:f1:40:be:36:bf:89:0f:3d:56: bf:6d:af:2c:c1:07:1a:98:d9:4a:8e:f3:ee:e6:6f: 86:44:10:8d:99:16:df:35:1f:9a:9b:ab:84:bb:14: 90:7d:93:76:55:9d:38:44:3d:70:d4:5a:14:3e:af: 9c:a7:65:ae:49:1f:68:c8:6b:19:6a:38:cf:97:09: 0f:d4:fc:1c:1a:0a:fb:9d:da:ee:ae:a5:8e:bc:9c: 89:24:46:5c:8f:6a:d1:fd:b0:e4:a0:31:0b:30:73: 0d:cc:52:57:2b:2c:35:fa:36:6a:ff:63:a1:c2:cd: cd:48:89:67:00:34:60:c1:2f:c9:ac:39:ab:0f:d8: 1c:64:a2:7b:41:bf:21:57:9e:41:38:35:ed:c5:36: f6:34:85:5d:5d:5a:73:01:0b:cc:15:00:1f:ce:20: 54:1d:2c:d6:6d:04:b8:c9:0c:2a:b6:bf:ea:a0:54: ea:d8:cc:79:4e:46:d6:9f:4a:b7:b8:d7:51:4a:72: cb:3a:14:72:ac:ac:f5:84:1d:39:48:79:30:5f:62: 50:16:6e:5e:79:95:fd:57:36:af:63:a1:29:87:5d: 46:c7:8d:0a:a4:3a:37:43:17:40:a3:ff:be:5a:9a: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E2:FB:B8:8C:6A:43:70:98:7A:6A:4B:58:EB:14:8D:72:97:F4:59 X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e4:30:e9:a9:74:c5:73:54:90:71:81:5b:54:fe:09:3f:7d: 6a:9c:a4:ef:91:24:57:a6:ed:e1:59:47:e9:a1:d2:68:d3:ab: 98:57:c5:f8:b1:24:64:cd:7d:4a:49:88:54:c3:62:b1:98:b4: bb:e8:95:97:6a:93:b1:6e:84:77:54:d7:43:8e:54:58:ff:bb: 23:e4:46:3d:65:c3:90:b7:9b:ec:83:4c:23:a1:14:8b:ea:94: 67:f1:05:90:72:e3:be:b0:96:10:07:60:29:f4:b4:85:3a:a5: 60:d1:7c:20:9e:f0:a8:d1:d3:ea:5a:c8:e4:fe:91:f0:6c:e0: 89:d7:9b:62:6d:58:9d:60:eb:fe:df:ae:25:ac:d9:20:65:99: 1c:11:ed:41:6b:e0:6c:98:3b:84:de:90:a8:6b:0e:48:4b:11: a8:7e:a9:5d:d2:b7:f1:d6:02:18:74:c9:40:46:09:ba:6c:38: ef:4b:9b:58:0f:07:c1:b7:06:98:4f:90:11:f0:2e:2d:8e:78: b7:08:88:6d:fa:76:2c:af:01:91:82:23:55:ef:c6:0d:d7:81: 24:d0:3e:67:44:fa:c4:7d:d1:19:dc:14:1c:18:77:31:77:41: 9a:3d:f0:c7:4e:5f:4c:dd:9b:0f:f7:1b:d7:57:30:ef:a3:aa: dd:fd:3b:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjQxMTIwMTYyMjE1WhcNMjQxMTI3MTYyMjE1WjAYMRYwFAYD VQQDEw02NzNlMGNiNy00YTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9TM0VRaDvu6r/wsysSAQzPvN2PxQL42v4kPPVa/ba8swQcamNlKjvPu5m+G RBCNmRbfNR+am6uEuxSQfZN2VZ04RD1w1FoUPq+cp2WuSR9oyGsZajjPlwkP1Pwc Ggr7ndrurqWOvJyJJEZcj2rR/bDkoDELMHMNzFJXKyw1+jZq/2Ohws3NSIlnADRg wS/JrDmrD9gcZKJ7Qb8hV55BODXtxTb2NIVdXVpzAQvMFQAfziBUHSzWbQS4yQwq tr/qoFTq2Mx5TkbWn0q3uNdRSnLLOhRyrKz1hB05SHkwX2JQFm5eeZX9VzavY6Ep h11Gx40KpDo3QxdAo/++Wpru5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATi+7iM akNwmHpqS1jrFI1yl/RZMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0QwOS9FQUM3RUVBMDExMkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1 blpxT3NxNXkwOERGVUVVNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd5DDpqXTFc1SQcYFbVP4JP31qnKTvkSRXpu3hWUfpodJo06uYV8X4 sSRkzX1KSYhUw2KxmLS76JWXapOxboR3VNdDjlRY/7sj5EY9ZcOQt5vsg0wjoRSL 6pRn8QWQcuO+sJYQB2Ap9LSFOqVg0XwgnvCo0dPqWsjk/pHwbOCJ15tibVidYOv+ 364lrNkgZZkcEe1Ba+BsmDuE3pCoaw5ISxGofqld0rfx1gIYdMlARgm6bDjvS5tY DwfBtwaYT5AR8C4tjni3CIht+nYsrwGRgiNV78YN14Ek0D5nRPrEfdEZ3BQcGHcx d0GaPfDHTl9M3ZsP9xvXVzDvo6rd/TvB -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:08 2024 by rpki-client on console-ams.rpki-client.org