$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft File: SPEydjLX2-8zHA4kie7j9b77hFI.mft (raw, json) Hash identifier: ysVhWvS8vWPtgA9+EPnfUd/GSTyxiiSr1nCjEoH3d1A= Subject key identifier: C9:1B:A8:C7:AC:DA:A9:D0:91:73:A5:D8:C1:78:A6:5F:76:13:4A:D1 Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Certificate serial: 057F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft Manifest number: 0574 Signing time: Fri 22 Nov 2024 22:53:44 +0000 Manifest this update: Fri 22 Nov 2024 22:53:43 +0000 Manifest next update: Fri 29 Nov 2024 22:53:43 +0000 Files and hashes: 1: SPEydjLX2-8zHA4kie7j9b77hFI.crl (hash: TFopv+13YE8hAX+4GsWVYAK0aClDcZXpxvS08WpTWF0=) 2: 2E809260BFC511EBAD79ED25C4F9AE02.roa (hash: kP9B9Apke28RlHv6p4FMMVLBhFiruagPm8D1uCysx10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1407 (0x57f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452 Validity Not Before: Nov 22 22:53:43 2024 GMT Not After : Nov 29 22:53:43 2024 GMT Subject: CN=67410b78-fa5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:7d:e9:fd:b8:7d:83:6f:fc:b6:13:ce:56: 67:67:23:bb:64:e0:aa:1b:5d:0a:66:7b:93:1e:70: dd:db:9a:01:b9:9e:8e:b2:68:19:24:52:ba:40:16: cb:e3:69:4d:98:7b:a8:1e:8c:6e:bf:0c:00:94:16: 9f:90:9e:70:5e:b3:8d:09:68:8c:28:fc:1e:05:cf: 68:d8:00:fd:a8:89:0a:ac:f1:97:c1:06:62:bf:b4: 84:a6:e1:3f:cf:b6:34:a1:9d:9a:41:55:13:94:43: 61:9e:44:0c:b3:e3:20:8e:58:c4:ef:c5:e8:2a:0d: d8:2e:fd:cc:e9:f7:ce:1f:f0:4a:91:7b:23:77:a4: eb:5e:38:35:44:42:b4:23:28:b8:db:46:d4:5c:2f: b3:d1:10:26:90:c1:cb:5c:27:d8:9c:a6:ff:46:21: 9c:62:c2:e4:91:6a:20:0c:2e:8b:c8:8f:b1:7e:23: f9:9d:ba:b7:80:ff:d4:72:14:19:0c:25:6f:ac:2b: 6d:0b:5f:6f:d2:b3:f5:61:16:c5:ed:ee:d4:25:d8: a1:fc:f4:59:e7:db:db:cd:86:18:20:1c:9b:1c:d2: 6c:9b:5b:53:7c:be:73:b5:df:5a:da:24:54:92:e1: 19:b1:b4:f3:0a:c8:84:ac:dc:0d:08:33:de:16:26: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1B:A8:C7:AC:DA:A9:D0:91:73:A5:D8:C1:78:A6:5F:76:13:4A:D1 X509v3 Authority Key Identifier: keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:44:ec:67:c5:ce:fa:c3:91:62:86:a3:ac:fa:59:94:46:76: 6c:a0:1c:f8:89:90:d2:08:c6:36:26:04:d7:29:7e:4b:bf:87: 44:45:4f:3c:ee:75:ec:b9:a2:8a:e8:e6:7b:52:0d:c1:55:04: 1b:2c:cb:a9:6e:d7:81:62:04:9b:32:96:43:03:2b:24:6f:f0: 97:a3:78:2c:aa:9f:ef:34:78:c9:72:83:68:2d:1e:12:bb:fc: 82:54:b7:99:fd:00:84:f6:45:a6:c2:3e:52:4e:f7:e7:3b:89: cf:af:dc:01:15:1a:d1:3f:ed:01:e2:ed:a5:8a:9c:49:fb:a8: 17:7e:bb:c7:16:38:c4:d5:ce:bc:7d:28:b4:5f:e4:be:90:ac: 87:86:d1:b5:58:27:f7:6d:b6:0e:21:6d:06:a7:38:f4:72:d2: 52:c8:cf:f1:1a:c9:59:e1:e3:6c:8f:9c:6c:e2:bd:ea:8c:82: f0:1c:86:95:ec:95:c0:b0:29:42:48:96:3f:ad:af:e9:16:60: a7:3a:66:db:16:26:f5:42:d2:6b:1d:20:02:d2:6b:ae:3d:0e: a5:cd:86:e5:80:1b:c7:8f:06:8f:83:b5:07:70:d2:85:68:df: e8:e5:f2:9a:09:f2:d4:81:58:6b:38:f0:35:be:3f:ca:02:0a: dc:e1:87:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1 QkVGQjg0NTIwHhcNMjQxMTIyMjI1MzQzWhcNMjQxMTI5MjI1MzQzWjAYMRYwFAYD VQQDEw02NzQxMGI3OC1mYTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwV96f24fYNv/LYTzlZnZyO7ZOCqG10KZnuTHnDd25oBuZ6OsmgZJFK6QBbL 42lNmHuoHoxuvwwAlBafkJ5wXrONCWiMKPweBc9o2AD9qIkKrPGXwQZiv7SEpuE/ z7Y0oZ2aQVUTlENhnkQMs+MgjljE78XoKg3YLv3M6ffOH/BKkXsjd6TrXjg1REK0 Iyi420bUXC+z0RAmkMHLXCfYnKb/RiGcYsLkkWogDC6LyI+xfiP5nbq3gP/UchQZ DCVvrCttC19v0rP1YRbF7e7UJdih/PRZ59vbzYYYIBybHNJsm1tTfL5ztd9a2iRU kuEZsbTzCsiErNwNCDPeFiYi1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkbqMes 2qnQkXOl2MF4pl92E0rRMB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjBBNy80RTAwRkU5QUJEMUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDIt OHpIQTRraWU3ajliNzdoRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqROxnxc76w5FihqOs+lmURnZsoBz4iZDSCMY2JgTXKX5Lv4dERU88 7nXsuaKK6OZ7Ug3BVQQbLMupbteBYgSbMpZDAyskb/CXo3gsqp/vNHjJcoNoLR4S u/yCVLeZ/QCE9kWmwj5STvfnO4nPr9wBFRrRP+0B4u2lipxJ+6gXfrvHFjjE1c68 fSi0X+S+kKyHhtG1WCf3bbYOIW0Gpzj0ctJSyM/xGslZ4eNsj5xs4r3qjILwHIaV 7JXAsClCSJY/ra/pFmCnOmbbFib1QtJrHSAC0muuPQ6lzYblgBvHjwaPg7UHcNKF aN/o5fKaCfLUgVhrOPA1vj/KAgrc4Ycg -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:54 2024 by rpki-client on console-ams.rpki-client.org