$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json) Hash identifier: 0QGAWOkkyaW8MmQ99oKuXZZSGJIv7VVboV7LtuxflKE= Subject key identifier: A6:44:20:31:A3:A4:70:8F:DD:FE:51:95:C1:C1:41:FE:BE:0D:03:41 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 35AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft Manifest number: 3503 Signing time: Fri 22 Nov 2024 14:17:45 +0000 Manifest this update: Fri 22 Nov 2024 14:17:45 +0000 Manifest next update: Fri 29 Nov 2024 14:17:45 +0000 Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: qm7p678blGvgzynthVp1KtgG/MnrsKmXQ5L2O1YSjKc=) 2: 119B023E80A111EFAC559545C4F9AE02.roa (hash: UcLab4fcVSxFTCKz9jwV2FcIwBHm9AwWLQOJArqJHjI=) 3: D06D852C0E8411EFB653657DC4F9AE02.roa (hash: SywI770ENl7TLzZPS+7Qd4FzLZZohYfrrDDPXPl1a7g=) 4: 4703352E2BC311EEA3EEFA66C4F9AE02.roa (hash: GhMpIsuZe6UWSXVhxx0gZ7LGDFuMOBfOpEr3szGlSIw=) 5: 5E05FB54A8FE11E990A7E27FC4F9AE02.roa (hash: mkS8yistQSPi7NMH1JehepWmWxUa6l17roNRXFEiwqI=) 6: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: MXTujm5bxVtwRR2qRhwfBiQo+U60HZqoc/46+Q9rCqg=) 7: 88978730772311EBB972032EC4F9AE02.roa (hash: nz3/6k7N3mPNzs0DFxh1VvDXVpDIjk6/7OQf5UZ/EgA=) 8: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: WuXzJGatSIhxLLVFJYnAc7zb2/GN+pIVoHOaMyICWzI=) 9: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: 4Q3os1Mfu8xIUdVQK6hTBnRWzUONxabmo1fE2pyLLXE=) 10: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: ch1wPAb/c25q+6cdmEAHM5pjXCNPqiccski5eE5WXDs=) 11: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: mPli45HHzDhlWzD7+vX8/tUBtrWHY58J4/XZrbS0zeo=) 12: 89A73D46772311EBB972032EC4F9AE02.roa (hash: 9hXnGMU3WUCKM3WK6+9iFLRQ6N17p8pM/kmtF91qcvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13741 (0x35ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Nov 22 14:17:45 2024 GMT Not After : Nov 29 14:17:45 2024 GMT Subject: CN=67409289-b92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:49:72:70:a4:6f:56:8f:38:67:f3:a6:5c:e4: d8:4b:8b:c2:c8:5a:05:e4:43:bb:bd:4c:6f:91:de: c3:e3:98:56:7e:58:ef:b8:0d:ad:34:3f:f3:72:7b: 10:e0:b2:85:c1:c9:3b:1d:6a:ad:4e:14:1f:d2:b1: 0e:43:af:8d:77:b5:50:9a:ed:34:ea:e7:b2:7c:a7: a3:68:f6:16:cb:38:1e:94:c8:8b:79:74:cb:8c:e0: 47:ba:42:ef:e3:2b:83:76:d3:4e:50:00:ca:9b:61: 2e:cd:cb:37:cb:6e:92:fe:35:3a:9e:20:f6:f9:eb: c9:8d:e7:28:2d:1d:f0:36:d7:58:5c:48:f3:88:a2: 0a:06:3c:6c:d9:a3:71:19:b6:37:bd:f7:52:1c:32: 0a:d0:4c:2f:3f:80:a2:6d:69:34:8e:8a:2e:c1:92: af:c6:11:89:3f:ae:3d:b2:b7:5c:49:2d:92:08:db: b2:2b:77:e3:c9:d5:1b:64:bb:c9:18:af:d8:ae:e2: 6f:93:a4:9c:7c:3f:a6:00:e2:ae:ce:24:a0:63:5f: 58:cf:34:74:cb:36:42:d2:df:b7:0c:3b:6c:3e:f2: e3:bd:0e:6f:ec:80:77:e5:81:a7:19:d9:7c:ea:bd: 47:7d:ad:da:9f:75:1e:fe:64:fb:60:2f:a4:eb:a7: 6e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:44:20:31:A3:A4:70:8F:DD:FE:51:95:C1:C1:41:FE:BE:0D:03:41 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:53:c5:95:fb:85:8a:fc:62:02:1a:92:8b:81:9d:25:d4:46: d6:25:4e:8d:6d:69:86:b1:97:c2:ee:a2:fc:d4:09:cf:0c:ba: 1e:93:5c:4c:42:db:c1:33:31:18:d7:51:f9:90:0d:70:68:fb: e1:84:51:6d:f7:52:f7:65:36:37:4e:e2:10:67:c9:b2:ce:15: 84:74:6b:dc:09:95:0c:59:f5:7a:6b:b4:cb:dd:3c:37:97:a1: 34:51:98:a5:e2:19:6d:b0:2d:65:da:bc:a2:de:05:65:e0:bd: 29:35:ac:fc:ae:3c:c8:6c:59:39:52:8c:78:70:3d:49:67:02: a0:29:58:29:ba:24:9a:02:20:9e:7c:10:0c:93:b8:b2:04:01: 1e:d5:6e:b4:ba:4a:6e:85:74:34:e7:70:d2:a5:46:ca:da:32: 79:aa:15:48:15:aa:a8:c3:f3:f6:f6:85:59:66:f0:80:4f:c8: 3d:08:d3:33:6e:7f:d2:7c:1d:95:f9:4e:f1:a6:db:9c:22:e4: 25:3d:00:4a:d9:11:e5:a1:96:fd:f9:74:8e:14:51:83:d3:8e: 6c:89:38:d5:44:84:c3:6c:05:27:f9:00:bf:4e:95:74:49:fe: ad:ad:2e:ec:c2:25:fb:56:60:a1:a5:63:0f:08:bd:fd:86:d5: 35:4f:e7:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjQxMTIyMTQxNzQ1WhcNMjQxMTI5MTQxNzQ1WjAYMRYwFAYD VQQDEw02NzQwOTI4OS1iOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsklycKRvVo84Z/OmXOTYS4vCyFoF5EO7vUxvkd7D45hWfljvuA2tND/zcnsQ 4LKFwck7HWqtThQf0rEOQ6+Nd7VQmu006ueyfKejaPYWyzgelMiLeXTLjOBHukLv 4yuDdtNOUADKm2Euzcs3y26S/jU6niD2+evJjecoLR3wNtdYXEjziKIKBjxs2aNx GbY3vfdSHDIK0EwvP4CibWk0joouwZKvxhGJP649srdcSS2SCNuyK3fjydUbZLvJ GK/YruJvk6ScfD+mAOKuziSgY19YzzR0yzZC0t+3DDtsPvLjvQ5v7IB35YGnGdl8 6r1Hfa3an3Ue/mT7YC+k66duZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZEIDGj pHCP3f5RlcHBQf6+DQNBMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcwQi85N0FGNkRGMDFENkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJU MllTSEduTWhxZEZwWUw0bWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZU8WV+4WK/GICGpKLgZ0l1EbWJU6NbWmGsZfC7qL81AnPDLoek1xM QtvBMzEY11H5kA1waPvhhFFt91L3ZTY3TuIQZ8myzhWEdGvcCZUMWfV6a7TL3Tw3 l6E0UZil4hltsC1l2ryi3gVl4L0pNaz8rjzIbFk5Uox4cD1JZwKgKVgpuiSaAiCe fBAMk7iyBAEe1W60ukpuhXQ053DSpUbK2jJ5qhVIFaqow/P29oVZZvCAT8g9CNMz bn/SfB2V+U7xptucIuQlPQBK2RHloZb9+XSOFFGD045siTjVRITDbAUn+QC/TpV0 Sf6trS7swiX7VmChpWMPCL39htU1T+f6 -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:05 2024 by rpki-client on console-ams.rpki-client.org