$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json) Hash identifier: dF5VUak/fMOvbhMRoBI+9BpuVL1IpP5HA73hQ/6xsSw= Subject key identifier: 3E:56:D0:F8:FE:25:DB:68:DE:75:1D:0C:4F:E7:1C:27:B0:66:87:89 Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft Manifest number: A6 Signing time: Thu 21 Nov 2024 04:20:13 +0000 Manifest this update: Thu 21 Nov 2024 04:20:12 +0000 Manifest next update: Thu 28 Nov 2024 04:20:12 +0000 Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: Md52lzCO6ocqs2FARDYWCRBN2sq2zEKoJWS6LiGIwGk=) 2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: +k0dkwBV5BP94B6BUgpVoB0be897Zoj226MQkW27NOg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F Validity Not Before: Nov 21 04:20:12 2024 GMT Not After : Nov 28 04:20:12 2024 GMT Subject: CN=673eb4fd-2f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6e:8f:97:0f:2f:c7:5f:e5:b5:31:91:08:4f: 98:b2:77:ff:28:c1:94:0b:51:b7:f6:b8:30:17:10: de:b4:fc:d6:68:f2:e6:18:cd:bf:f3:9a:74:51:d4: 44:cd:44:fb:e1:1b:c4:5e:b5:d4:ed:a5:70:2b:fa: 28:f2:40:70:56:5a:0d:e9:dd:d9:d1:0c:fc:1e:59: 87:64:ce:85:0f:73:1b:80:fa:3b:45:e1:33:63:23: 30:44:96:d3:5a:d9:e8:63:5b:ae:df:3e:0f:33:2a: b1:e1:47:ab:4a:d2:72:96:1e:2d:4f:95:7f:3b:3e: c1:cc:c3:38:49:aa:40:b9:94:d7:84:57:b4:d6:1a: a2:ad:04:a7:88:cd:ac:bf:e1:72:ad:f6:cd:e8:e5: 01:64:2a:a7:1c:6e:32:82:d9:c7:36:a7:b6:2d:97: 1b:d3:b2:09:11:c9:f3:85:84:38:60:4d:35:64:33: 18:6c:af:73:27:87:f1:f3:28:d1:04:99:80:f4:54: b3:a4:fb:c6:f7:de:01:c3:f7:38:16:f6:f2:d0:5f: ed:86:66:67:cd:c4:6c:ff:c4:2c:73:24:61:72:1f: 4d:78:a4:af:c0:48:27:24:d9:df:ad:30:a9:33:e8: d7:e9:b6:18:86:01:74:a2:1e:c8:d9:07:db:c3:89: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:56:D0:F8:FE:25:DB:68:DE:75:1D:0C:4F:E7:1C:27:B0:66:87:89 X509v3 Authority Key Identifier: keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ea:57:d4:22:de:68:9a:b7:a6:73:3f:ae:b3:52:8a:6d:9e: ee:ad:59:0a:0d:c9:81:00:1a:84:44:8c:09:55:ee:cc:dd:3a: 76:e6:59:f0:fe:05:9a:82:5a:45:6f:76:0c:f0:21:8f:42:49: 1b:28:7e:67:97:62:8e:b9:53:7f:aa:a7:60:55:7c:5b:de:61: bf:3b:d7:7f:42:5f:51:25:38:ca:c2:25:d6:54:aa:2b:88:dd: f8:ff:5b:f9:2c:ad:b9:87:7b:41:d1:cd:d6:96:66:9e:d3:c4: 50:7b:89:11:ec:e7:7a:55:ad:a6:fa:33:b8:cf:73:77:c8:4a: b7:fe:d0:76:09:b8:5c:f4:bd:75:f0:db:bc:62:76:f0:55:77: 83:c7:d5:ab:1f:6b:67:66:93:0a:30:8f:6d:5c:52:5a:85:df: b2:22:04:3f:bd:91:35:0b:3a:87:af:60:78:4d:55:1c:72:e7: 74:7a:01:fd:b5:16:20:66:ed:2e:3e:f3:96:49:e4:1b:38:91: ed:03:18:b3:c1:15:31:65:59:83:cb:66:d9:9e:e2:69:f2:c9: c8:77:ec:d1:8b:73:d8:b5:89:76:ef:53:31:8b:58:5e:83:b2: 5d:3c:2b:ad:bc:3e:9a:af:53:4c:e8:67:20:67:99:a4:ce:67: 0e:66:1f:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQzNUUxMTAvBgNVBAUTKEJFNkQ3NzI2RjlENzM5RTZFQzlBRjkzNDdFQ0VDQjQy MTdBRjdBM0YwHhcNMjQxMTIxMDQyMDEyWhcNMjQxMTI4MDQyMDEyWjAYMRYwFAYD VQQDEw02NzNlYjRmZC0yZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW6Plw8vx1/ltTGRCE+Ysnf/KMGUC1G39rgwFxDetPzWaPLmGM2/85p0UdRE zUT74RvEXrXU7aVwK/oo8kBwVloN6d3Z0Qz8HlmHZM6FD3MbgPo7ReEzYyMwRJbT WtnoY1uu3z4PMyqx4UerStJylh4tT5V/Oz7BzMM4SapAuZTXhFe01hqirQSniM2s v+FyrfbN6OUBZCqnHG4ygtnHNqe2LZcb07IJEcnzhYQ4YE01ZDMYbK9zJ4fx8yjR BJmA9FSzpPvG994Bw/c4Fvby0F/thmZnzcRs/8QscyRhch9NeKSvwEgnJNnfrTCp M+jX6bYYhgF0oh7I2Qfbw4lC9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5W0Pj+ Jdto3nUdDE/nHCewZoeJMB8GA1UdIwQYMBaAFL5tdyb51znm7Jr5NH7Oy0IXr3o/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDM1RS8yMDhERkMzNkFD NDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9lYnNtdmswZnM3TFFoZXZl ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZtMTNKdm5YT2Vic212azBmczdMUWhldmVqOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDM1RS8yMDhERkMzNkFDNDExMUVFQkVFMkExMzJDNEY5QUUwMi92bTEzSnZuWE9l YnNtdmswZnM3TFFoZXZlajgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN6lfUIt5omremcz+us1KKbZ7urVkKDcmBABqERIwJVe7M3Tp25lnw /gWaglpFb3YM8CGPQkkbKH5nl2KOuVN/qqdgVXxb3mG/O9d/Ql9RJTjKwiXWVKor iN34/1v5LK25h3tB0c3Wlmae08RQe4kR7Od6Va2m+jO4z3N3yEq3/tB2Cbhc9L11 8Nu8YnbwVXeDx9WrH2tnZpMKMI9tXFJahd+yIgQ/vZE1CzqHr2B4TVUccud0egH9 tRYgZu0uPvOWSeQbOJHtAxizwRUxZVmDy2bZnuJp8snId+zRi3PYtYl271Mxi1he g7JdPCutvD6ar1NM6GcgZ5mkzmcOZh+y -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:18 2024 by rpki-client on console-ams.rpki-client.org