$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: 5sApvW30mYuV4WQ+f4uN/mOOnvbtMY06RKJh5VK2Rjw= Subject key identifier: 87:8F:9B:8F:BB:D1:79:3A:9C:67:72:50:9C:72:8A:BC:21:FB:3A:6B Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: 1C Signing time: Thu 21 Nov 2024 06:01:52 +0000 Manifest this update: Thu 21 Nov 2024 06:01:51 +0000 Manifest next update: Thu 28 Nov 2024 06:01:51 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: e0XPaKv07ZBlhq6f6wSbfWjwuDqAqFx7hZ45xqOjrZ8=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: xlW1WRvz7DCMXZZnV+rfb+Ls8+ewucJliDacTm3Al7M=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Nov 21 06:01:51 2024 GMT Not After : Nov 28 06:01:51 2024 GMT Subject: CN=673ecccf-f67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:5e:03:90:fd:ec:b9:e6:ae:59:69:fd:ed: 74:f8:28:74:20:f2:c6:c3:d7:84:99:d1:7a:e1:b3: 92:cf:77:61:9e:a1:88:97:31:c6:e5:f1:82:3a:3f: 5e:9c:ce:93:c6:5c:f8:b0:85:43:97:5d:39:3a:5a: f4:ee:eb:15:0f:c2:f1:f8:ba:c1:97:a1:90:5a:49: d2:7b:52:e8:36:2c:3a:a9:53:45:40:c8:d3:29:b2: 14:3a:5b:a6:aa:0b:ab:2a:92:31:81:75:a1:66:78: 83:bd:5c:cc:c1:27:95:0f:a0:85:dc:89:99:4d:85: 5d:3a:7a:2d:3e:b7:46:d9:c4:7f:dd:e1:cf:58:6d: bf:58:dc:32:0d:1f:d0:e9:b0:14:41:16:48:5b:8f: 0b:2c:76:94:46:43:09:f1:e0:c0:ee:a7:cd:6c:db: 93:49:c6:af:a2:33:ca:2e:76:13:bb:e1:c3:6a:bf: 76:b6:ed:96:9f:33:48:df:33:89:dc:ce:2f:89:6d: a8:12:6d:3c:24:29:5d:f1:2f:af:dd:cf:53:48:df: e0:0e:40:0c:56:a6:f1:36:ac:0c:72:e2:94:39:b9: 44:89:9e:0e:ea:b5:84:19:0b:85:f4:98:26:e8:bd: 07:16:17:8b:c3:bf:bf:57:a6:cc:eb:2f:b4:33:7a: 94:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8F:9B:8F:BB:D1:79:3A:9C:67:72:50:9C:72:8A:BC:21:FB:3A:6B X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ba:9a:49:b9:81:10:0d:08:77:a4:9b:b1:f6:04:1c:70:0f: 9b:ce:fa:14:22:f1:64:05:ff:f7:f4:59:5e:14:a6:cd:34:c6: 16:c1:6b:3f:65:4e:72:50:55:60:ee:35:7b:8c:18:eb:bd:14: 08:fb:08:1e:9b:36:f9:c8:77:16:40:ea:70:63:83:96:c5:4a: 22:b8:5f:6a:f6:ad:fa:f4:33:9a:6e:5d:e5:a6:04:32:c6:a1: d0:d5:29:d6:d5:82:0e:22:72:88:d2:64:9a:23:a5:ba:d2:01: 6f:aa:79:33:88:c2:ae:47:77:07:b2:9c:8c:b5:60:8d:64:f7: 0d:a8:a6:d8:26:1e:db:0d:26:42:5e:02:5e:73:e2:9a:1e:cc: d7:ad:2c:57:96:1f:b5:4a:88:0c:36:68:7c:bd:72:8f:e1:86: 98:58:4f:59:1f:25:96:9b:33:6c:9b:e2:93:c0:a9:c4:9b:16: 30:69:4a:64:8a:e9:14:8f:7c:9b:97:24:1f:7a:c3:6b:65:f1: 92:0f:8d:9b:d4:0b:85:a7:d2:fe:96:40:bf:05:c8:e6:4b:d6: ba:19:b2:3d:ba:29:3e:3b:9b:b7:56:6f:5d:d1:ed:66:5b:59: be:cb:33:03:35:ec:99:dd:31:63:16:e2:29:bf:66:8d:14:05: 60:46:c2:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjNFNzExMC8GA1UEBRMoQTU5RjdFRTJGQTI3NTkzN0YzRTFDMkRCQTVCQjhGQkY2 M0QzN0MzNDAeFw0yNDExMjEwNjAxNTFaFw0yNDExMjgwNjAxNTFaMBgxFjAUBgNV BAMTDTY3M2VjY2NmLWY2N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxqF4DkP3sueauWWn97XT4KHQg8sbD14SZ0Xrhs5LPd2GeoYiXMcbl8YI6P16c zpPGXPiwhUOXXTk6WvTu6xUPwvH4usGXoZBaSdJ7Uug2LDqpU0VAyNMpshQ6W6aq C6sqkjGBdaFmeIO9XMzBJ5UPoIXciZlNhV06ei0+t0bZxH/d4c9Ybb9Y3DINH9Dp sBRBFkhbjwssdpRGQwnx4MDup81s25NJxq+iM8oudhO74cNqv3a27ZafM0jfM4nc zi+JbagSbTwkKV3xL6/dz1NI3+AOQAxWpvE2rAxy4pQ5uUSJng7qtYQZC4X0mCbo vQcWF4vDv79XpszrL7QzepQVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh4+bj7vR eTqcZ3JQnHKKvCH7OmswHwYDVR0jBBgwFoAUpZ9+4vonWTfz4cLbpbuPv2PTfDQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2M0U3LzQxQjBDOTg2ODg3 MTExRUZBNzA4RDE3REM0RjlBRTAyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZE US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcFo5LTR2b25XVGZ6NGNMYnBidVB2MlBUZkRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 M0U3LzQxQjBDOTg2ODg3MTExRUZBNzA4RDE3REM0RjlBRTAyL3BaOS00dm9uV1Rm ejRjTGJwYnVQdjJQVGZEUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGy6mkm5gRANCHekm7H2BBxwD5vO+hQi8WQF//f0WV4Ups00xhbBaz9l TnJQVWDuNXuMGOu9FAj7CB6bNvnIdxZA6nBjg5bFSiK4X2r2rfr0M5puXeWmBDLG odDVKdbVgg4icojSZJojpbrSAW+qeTOIwq5HdweynIy1YI1k9w2optgmHtsNJkJe Al5z4poezNetLFeWH7VKiAw2aHy9co/hhphYT1kfJZabM2yb4pPAqcSbFjBpSmSK 6RSPfJuXJB96w2tl8ZIPjZvUC4Wn0v6WQL8FyOZL1roZsj26KT47m7dWb13R7WZb Wb7LMwM17JndMWMW4im/Zo0UBWBGwn0= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:39 2024 by rpki-client on console-ams.rpki-client.org