$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json) Hash identifier: xrbzICs1ODTmkVQz2WuwX8iTYRqJU7KrG0HLvn57c4Y= Subject key identifier: CA:59:F1:DC:37:13:C7:2D:75:1C:1A:D9:E4:7B:D4:D3:9D:5F:92:17 Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0B25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft Manifest number: 0B20 Signing time: Fri 22 Nov 2024 18:59:35 +0000 Manifest this update: Fri 22 Nov 2024 18:59:35 +0000 Manifest next update: Fri 29 Nov 2024 18:59:35 +0000 Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: PP1I3NvTZQ5j1tx1m3ZG5AHqHOPQEMIhHb70N0M7gtQ=) 2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: UrQLK1EA1WcvJrkNSpWHXgKfB78ZZNO0hE+SH1PfHhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2853 (0xb25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: Nov 22 18:59:35 2024 GMT Not After : Nov 29 18:59:35 2024 GMT Subject: CN=6740d497-d80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:35:44:71:87:38:03:a6:b8:fb:da:81:f6: 92:98:ae:73:1c:33:a7:71:ad:77:41:d4:7d:c2:e3: df:5c:da:80:e2:b0:07:b3:bc:32:90:68:e7:71:70: e9:cf:8a:24:cd:c9:aa:ef:72:ea:76:37:17:4e:a4: 4e:4e:c3:36:15:31:c1:fe:75:c1:49:9b:c4:c0:58: 51:a6:d9:00:1a:b1:1e:32:d2:f5:f4:6b:f0:54:c5: b2:bd:1f:12:df:c5:80:18:f0:1b:74:f4:6d:f9:6c: 77:19:5d:6f:e3:1b:58:5a:72:9f:c8:d1:cb:b6:c3: c0:6b:f4:04:f0:ae:58:e8:38:c9:50:1f:26:37:26: c7:a1:4e:8a:86:49:23:0c:d5:11:4c:42:24:34:9e: bd:c5:bd:85:94:81:63:35:d5:08:09:fc:04:97:c9: eb:2f:e5:26:1e:df:6e:5d:2a:b4:27:4f:55:5c:2a: d0:8e:83:d6:7d:8a:b8:80:96:5d:ac:4d:76:6d:e5: 91:42:f0:18:ad:84:d1:a9:fb:2c:e1:0c:0d:07:dc: 98:cc:30:7f:cf:0a:41:40:b5:ae:c6:46:fe:b8:38: 39:37:9d:8b:04:40:62:72:ad:e6:e9:cf:1e:a2:a1: 44:68:41:99:1d:0e:66:6f:37:75:64:1f:0e:dc:0b: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:59:F1:DC:37:13:C7:2D:75:1C:1A:D9:E4:7B:D4:D3:9D:5F:92:17 X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ee:86:b8:9e:f3:8a:2a:25:fe:77:18:45:3a:fb:64:e8:b0: 0d:a6:f0:04:aa:70:74:57:db:0b:68:cb:cc:d8:b6:5c:a7:9b: 5b:3f:fd:e8:b7:92:7b:fe:ff:e4:c8:15:58:23:c8:05:fd:3d: e3:db:99:26:5b:f9:81:36:4d:f5:9b:d0:b9:aa:be:4a:7f:cf: 87:e7:84:35:5b:b3:61:89:ca:97:03:15:62:e5:c8:a2:ce:26: f3:7a:47:1a:c1:04:8d:a0:59:f9:03:c8:df:0b:ee:b0:0d:06: e1:10:18:cb:2c:09:e5:f7:b9:bf:14:6c:3b:a6:89:a9:46:34: e5:a1:d3:bc:80:b6:1f:5b:16:4f:ed:3c:2e:07:ab:4a:71:e4: eb:11:f9:12:87:5d:be:48:ac:2b:64:7d:75:01:90:71:b2:a4: 88:2d:6e:b0:13:aa:e4:41:cd:94:39:cf:69:19:3a:c8:b2:a3: 18:9c:bb:11:14:c9:51:28:4a:e1:58:c4:fd:5b:21:60:84:a0: 02:a6:d4:67:e1:20:fa:9d:b3:f6:ff:f0:01:bb:bd:8b:95:5d: f5:b7:3c:d8:cf:79:c9:9d:af:7b:ce:30:f4:53:27:42:0b:40: 59:ad:9b:86:70:15:9c:12:43:6f:ad:6c:7e:69:2c:36:7b:17: bd:a3:6f:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjQxMTIyMTg1OTM1WhcNMjQxMTI5MTg1OTM1WjAYMRYwFAYD VQQDEw02NzQwZDQ5Ny1kODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOc1RHGHOAOmuPvagfaSmK5zHDOnca13QdR9wuPfXNqA4rAHs7wykGjncXDp z4okzcmq73LqdjcXTqROTsM2FTHB/nXBSZvEwFhRptkAGrEeMtL19GvwVMWyvR8S 38WAGPAbdPRt+Wx3GV1v4xtYWnKfyNHLtsPAa/QE8K5Y6DjJUB8mNybHoU6Khkkj DNURTEIkNJ69xb2FlIFjNdUICfwEl8nrL+UmHt9uXSq0J09VXCrQjoPWfYq4gJZd rE12beWRQvAYrYTRqfss4QwNB9yYzDB/zwpBQLWuxkb+uDg5N52LBEBicq3m6c8e oqFEaEGZHQ5mbzd1ZB8O3AurzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpZ8dw3 E8ctdRwa2eR71NOdX5IXMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh7oa4nvOKKiX+dxhFOvtk6LANpvAEqnB0V9sLaMvM2LZcp5tbP/3o t5J7/v/kyBVYI8gF/T3j25kmW/mBNk31m9C5qr5Kf8+H54Q1W7NhicqXAxVi5cii zibzekcawQSNoFn5A8jfC+6wDQbhEBjLLAnl97m/FGw7pompRjTlodO8gLYfWxZP 7TwuB6tKceTrEfkSh12+SKwrZH11AZBxsqSILW6wE6rkQc2UOc9pGTrIsqMYnLsR FMlRKErhWMT9WyFghKACptRn4SD6nbP2//ABu72LlV31tzzYz3nJna97zjD0UydC C0BZrZuGcBWcEkNvrWx+aSw2exe9o2+Z -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org