$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft File: bRdadMGgmL-i337kNxYF_2owQkk.mft (raw, json) Hash identifier: 1KxgnHNwdCWs9t2IyzvnrkW/VBXuFcft+phna3Fw/kU= Subject key identifier: 13:44:07:A4:E7:BD:14:3A:55:51:FB:2F:7B:F6:EB:F8:0B:41:A2:46 Authority key identifier: 6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49 Certificate issuer: /CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249 Certificate serial: 04C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft Manifest number: 04B3 Signing time: Fri 22 Nov 2024 23:28:48 +0000 Manifest this update: Fri 22 Nov 2024 23:28:48 +0000 Manifest next update: Fri 29 Nov 2024 23:28:48 +0000 Files and hashes: 1: bRdadMGgmL-i337kNxYF_2owQkk.crl (hash: rAZxOgIvhg9UB48LHbJlMLJpjfInuGoy9GnqdCyi6Vg=) 2: D76E91DE093411ECAA6B6714C4F9AE02.roa (hash: qUak/G5CE95rx8enDR7HzImHJJvHnA+ExD0yKsDxa8A=) 3: A26BC92C09F511EC8F20233BC4F9AE02.roa (hash: aF6v+/1YX32zwi/hMnMaYg+3hri5AIMnlhYo0H+VwpM=) 4: 80379A8A09EA11EC8762242CC4F9AE02.roa (hash: bLDcJFTKOtM843ZtxHRVBda6/t9v0F+nd+NQWcmzuYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1221 (0x4c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6CB0/serialNumber=6D175A74C1A098BFA2DF7EE4371605FF6A304249 Validity Not Before: Nov 22 23:28:48 2024 GMT Not After : Nov 29 23:28:48 2024 GMT Subject: CN=674113b0-f9ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:48:67:ea:e1:0b:d3:7a:1e:af:65:b5:3e: 7b:af:10:cd:f9:d4:c0:fd:49:4c:9e:a5:ba:2b:9b: e2:b5:2c:f8:fc:a8:85:7d:d9:bd:31:e9:a4:75:27: 1c:72:a9:ba:64:ef:0f:16:95:9f:37:03:bc:db:fd: 00:7a:29:29:ee:7a:8b:e5:58:fa:49:cd:62:15:47: c1:d3:b5:a0:01:6a:44:95:0b:13:63:b8:ac:e0:b8: a3:68:30:83:c7:3a:f8:25:45:92:a3:c8:c5:b3:a5: 3a:c2:ac:67:7c:5c:13:67:59:a6:a5:cf:d6:37:73: 17:28:15:55:d4:69:1f:cb:69:22:5d:68:17:69:b3: 3d:16:6d:88:01:22:71:18:b8:5b:76:37:f2:3d:11: 03:1f:de:df:b2:0f:2c:f9:72:fe:ac:11:1d:ea:3f: 84:0a:ed:fe:e2:c4:9d:17:b9:20:27:33:37:77:48: 71:e1:be:85:d1:6b:d5:0c:d2:49:4c:08:f9:d3:ef: c2:58:ab:4c:ef:a9:17:07:8c:85:5f:c9:c5:ba:e1: 15:03:6a:9b:a9:31:7c:d5:0a:5f:86:a5:b1:2b:2c: 8e:a2:2e:f7:9a:88:6c:ab:7e:96:45:45:3d:79:61: 59:94:d6:62:7f:e7:ce:14:85:91:6a:0e:8c:0d:bc: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:44:07:A4:E7:BD:14:3A:55:51:FB:2F:7B:F6:EB:F8:0B:41:A2:46 X509v3 Authority Key Identifier: keyid:6D:17:5A:74:C1:A0:98:BF:A2:DF:7E:E4:37:16:05:FF:6A:30:42:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRdadMGgmL-i337kNxYF_2owQkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6CB0/3556201C093211EC98B8DF0EC4F9AE02/bRdadMGgmL-i337kNxYF_2owQkk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ed:99:38:c7:95:92:74:a7:61:67:bc:6b:78:0d:b3:20:8f:5a: 8e:f1:e9:d1:13:cc:73:ec:75:26:f9:25:b3:d2:c6:35:c6:7e: 13:4a:75:48:55:ba:92:d6:ba:3f:ef:3f:9d:fe:89:4d:49:84: 10:76:e7:d4:5a:68:13:67:97:cd:ed:ba:98:60:99:2d:4b:42: 1f:66:ed:5d:ee:85:73:12:71:da:24:e8:72:9d:22:48:9c:fb: 7b:81:f2:fd:65:73:84:0c:bb:09:00:81:a1:76:05:fb:67:3a: 7f:7f:9d:8c:68:c8:fd:7b:ff:2f:04:4a:13:61:41:d5:db:ef: 2f:9b:21:2a:2c:5a:d4:e2:d0:80:67:fa:cc:14:a0:e4:92:7e: bf:82:5b:90:75:56:87:79:46:d2:d2:da:3a:ff:29:af:98:76: f5:8d:88:b2:06:1a:88:3a:51:30:b3:ab:02:87:08:ef:7b:0e: 34:f5:37:61:07:f5:b4:30:68:d4:6f:5d:7a:e9:41:a4:fb:3a: f6:15:5b:55:54:57:78:19:92:c3:6a:fe:e0:36:4d:c7:57:97: 87:87:06:92:ee:f2:7a:3a:73:0b:73:0c:52:36:40:77:2c:a0: fe:56:67:2c:f5:f2:8f:a3:7f:b6:b4:f8:f1:f8:f0:cf:e7:ab: 6a:d1:a4:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDQjAxMTAvBgNVBAUTKDZEMTc1QTc0QzFBMDk4QkZBMkRGN0VFNDM3MTYwNUZG NkEzMDQyNDkwHhcNMjQxMTIyMjMyODQ4WhcNMjQxMTI5MjMyODQ4WjAYMRYwFAYD VQQDEw02NzQxMTNiMC1mOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dNIZ+rhC9N6Hq9ltT57rxDN+dTA/UlMnqW6K5vitSz4/KiFfdm9MemkdScc cqm6ZO8PFpWfNwO82/0Aeikp7nqL5Vj6Sc1iFUfB07WgAWpElQsTY7is4LijaDCD xzr4JUWSo8jFs6U6wqxnfFwTZ1mmpc/WN3MXKBVV1Gkfy2kiXWgXabM9Fm2IASJx GLhbdjfyPREDH97fsg8s+XL+rBEd6j+ECu3+4sSdF7kgJzM3d0hx4b6F0WvVDNJJ TAj50+/CWKtM76kXB4yFX8nFuuEVA2qbqTF81QpfhqWxKyyOoi73mohsq36WRUU9 eWFZlNZif+fOFIWRag6MDby+1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNEB6Tn vRQ6VVH7L3v26/gLQaJGMB8GA1UdIwQYMBaAFG0XWnTBoJi/ot9+5DcWBf9qMEJJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkNCMC8zNTU2MjAxQzA5 MzIxMUVDOThCOERGMEVDNEY5QUUwMi9iUmRhZE1HZ21MLWkzMzdrTnhZRl8yb3dR a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JSZGFkTUdnbUwtaTMzN2tOeFlGXzJvd1Fray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkNCMC8zNTU2MjAxQzA5MzIxMUVDOThCOERGMEVDNEY5QUUwMi9iUmRhZE1HZ21M LWkzMzdrTnhZRl8yb3dRa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDtmTjHlZJ0p2FnvGt4DbMgj1qO8enRE8xz7HUm+SWz0sY1xn4TSnVI VbqS1ro/7z+d/olNSYQQdufUWmgTZ5fN7bqYYJktS0IfZu1d7oVzEnHaJOhynSJI nPt7gfL9ZXOEDLsJAIGhdgX7Zzp/f52MaMj9e/8vBEoTYUHV2+8vmyEqLFrU4tCA Z/rMFKDkkn6/gluQdVaHeUbS0to6/ymvmHb1jYiyBhqIOlEws6sChwjvew409Tdh B/W0MGjUb1166UGk+zr2FVtVVFd4GZLDav7gNk3HV5eHhwaS7vJ6OnMLcwxSNkB3 LKD+Vmcs9fKPo3+2tPjx+PDP56tq0aSP -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:30 2024 by rpki-client on console-ams.rpki-client.org