$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json) Hash identifier: EVqPKd+Qyb0Fvev5mIuJV7yiKPUxoZ73O+/n+tbCOlc= Subject key identifier: 83:10:57:E9:B2:75:2C:F2:F5:CA:0B:D4:8B:B8:9F:73:4D:5C:B1:31 Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Certificate serial: 146B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft Manifest number: 145C Signing time: Wed 20 Nov 2024 15:33:31 +0000 Manifest this update: Wed 20 Nov 2024 15:33:30 +0000 Manifest next update: Wed 27 Nov 2024 15:33:30 +0000 Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: b9q/Alomy95Yy0ZkY/+BlI49vptOaE2lEf+qLSqoZaQ=) 2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YNZrHGd8UkVm/DTmJOLPzWf76BUdR5xOiCV0HPKmn3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5227 (0x146b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Validity Not Before: Nov 20 15:33:30 2024 GMT Not After : Nov 27 15:33:30 2024 GMT Subject: CN=673e014b-985b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:29:24:5a:48:4c:d7:17:c3:96:34:10:2f:d2: 18:3f:42:19:eb:67:16:f6:95:bb:e7:3a:4d:dc:d9: 0c:4b:78:dc:37:0a:89:dd:f9:3f:da:46:df:a9:75: 5f:02:88:1b:6f:a0:f9:ee:e7:9b:ae:43:c3:7f:61: 97:88:19:51:ef:ce:e0:2f:b8:b9:53:c5:17:2d:52: c0:3b:b5:be:fd:67:ae:f9:b1:32:f9:d9:ba:a7:33: 33:57:a4:9c:de:47:b7:45:9b:53:2a:6b:73:89:f5: fc:a7:de:64:e1:ec:d4:5c:03:5d:0f:40:10:b1:8e: 13:94:dc:6a:1b:a8:d8:1d:a6:85:da:35:7c:95:0e: 2b:3f:8f:16:6c:93:4d:14:d7:f1:67:c8:5a:09:fe: 97:54:72:32:75:46:53:58:17:ee:6a:57:cf:6c:88: 47:c7:14:1e:17:98:1a:4a:b6:2f:27:5c:2a:7e:b3: 50:4e:d3:25:fa:b5:78:80:ff:92:4d:1a:0f:ab:db: bc:d7:4a:bc:c9:45:cf:88:9b:97:e7:a4:24:aa:46: 80:20:2e:75:8b:93:8d:3f:f6:26:98:81:34:e2:91: 6d:42:f3:8a:3d:83:29:43:60:c1:3b:25:b9:a7:39: 8d:8b:2e:4b:e0:e1:ec:3c:03:54:01:66:eb:5c:f1: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:10:57:E9:B2:75:2C:F2:F5:CA:0B:D4:8B:B8:9F:73:4D:5C:B1:31 X509v3 Authority Key Identifier: keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b3:b4:5b:1e:c4:a3:72:37:e2:fc:7f:f6:f1:04:4c:d0:90: 1f:8b:b1:1b:ef:8c:3d:51:db:a8:76:26:ca:a0:0b:1f:41:67: 20:7c:de:8e:a3:eb:3b:6b:df:88:f3:83:c6:ea:be:d7:04:32: 3d:cf:3d:a0:8d:f5:da:9a:2e:c1:88:9a:d3:e5:7d:01:9e:52: ed:8b:f1:81:8e:8f:90:25:e9:3e:bb:68:a6:3a:e9:93:9c:25: c6:41:54:eb:26:58:d4:ee:8b:e4:fd:9c:5b:27:f1:37:60:74: 5b:e0:65:e3:18:21:34:d1:f3:22:0b:6e:42:94:66:c2:94:c5: f8:e2:be:86:7d:7e:f2:df:d1:de:4b:63:d9:44:aa:a2:33:15: b6:78:47:14:61:07:73:96:d6:ab:84:b1:e1:6b:8c:65:e2:e3: af:29:d0:cd:01:02:87:6c:96:68:dd:da:09:fa:c7:2e:b3:38: 7c:28:98:11:36:14:9f:7b:09:b5:e3:87:c7:68:0b:7b:fe:b8: bd:ec:de:93:09:ef:17:cc:e5:e0:83:d9:b8:46:57:f7:1d:25: 72:e2:5e:95:a4:d6:b6:11:0f:b2:39:01:54:a1:fe:c9:70:af: b8:4f:1a:3c:96:3d:4f:ae:39:a9:30:f5:f6:68:8b:a7:1d:0c: a3:f2:af:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0 RTY5OURERjQwHhcNMjQxMTIwMTUzMzMwWhcNMjQxMTI3MTUzMzMwWjAYMRYwFAYD VQQDEw02NzNlMDE0Yi05ODViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CkkWkhM1xfDljQQL9IYP0IZ62cW9pW75zpN3NkMS3jcNwqJ3fk/2kbfqXVf Aogbb6D57uebrkPDf2GXiBlR787gL7i5U8UXLVLAO7W+/Weu+bEy+dm6pzMzV6Sc 3ke3RZtTKmtzifX8p95k4ezUXANdD0AQsY4TlNxqG6jYHaaF2jV8lQ4rP48WbJNN FNfxZ8haCf6XVHIydUZTWBfualfPbIhHxxQeF5gaSrYvJ1wqfrNQTtMl+rV4gP+S TRoPq9u810q8yUXPiJuX56QkqkaAIC51i5ONP/YmmIE04pFtQvOKPYMpQ2DBOyW5 pzmNiy5L4OHsPANUAWbrXPFqIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMQV+my dSzy9coL1Iu4n3NNXLExMB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H N3EwR0liZ2o3UTlPYVozZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+s7RbHsSjcjfi/H/28QRM0JAfi7Eb74w9UduodibKoAsfQWcgfN6O o+s7a9+I84PG6r7XBDI9zz2gjfXami7BiJrT5X0BnlLti/GBjo+QJek+u2imOumT nCXGQVTrJljU7ovk/ZxbJ/E3YHRb4GXjGCE00fMiC25ClGbClMX44r6GfX7y39He S2PZRKqiMxW2eEcUYQdzltarhLHha4xl4uOvKdDNAQKHbJZo3doJ+scuszh8KJgR NhSfewm144fHaAt7/ri97N6TCe8XzOXgg9m4Rlf3HSVy4l6VpNa2EQ+yOQFUof7J cK+4Txo8lj1PrjmpMPX2aIunHQyj8q/S -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:09 2024 by rpki-client on console-ams.rpki-client.org