$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft File: SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json) Hash identifier: YQtzerX85Ous4HOXjEeX2l9aYXG2pL7StUDXiWEkWww= Subject key identifier: 75:7C:34:BB:BE:3D:31:77:36:FD:13:8D:35:03:6C:F5:43:D2:5D:45 Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 Certificate issuer: /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft Manifest number: 0295 Signing time: Sat 23 Nov 2024 01:07:20 +0000 Manifest this update: Sat 23 Nov 2024 01:07:20 +0000 Manifest next update: Sat 30 Nov 2024 01:07:20 +0000 Files and hashes: 1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: HYFjeaX5STUygY3oNNE4e+cIkA6Gsa6HAuTApA/y1UQ=) 2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: IM38OEcY+pvCX+wnXvhRbSuzND147HKpkLnhoMrBbCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Validity Not Before: Nov 23 01:07:20 2024 GMT Not After : Nov 30 01:07:20 2024 GMT Subject: CN=67412ac8-a300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b6:e5:05:98:13:9d:f4:1a:65:5e:3f:ae:6c: 39:2f:1c:4f:a4:fd:6c:53:1f:77:5f:78:35:34:a0: 9d:12:49:bf:8b:29:43:7c:92:57:19:3a:78:ae:4a: 64:ad:5b:e6:fd:84:9f:20:8e:60:42:c6:7d:05:f6: 90:07:b2:d2:b2:26:30:d1:ac:91:5f:de:48:8b:27: 91:a0:8d:f4:b4:c6:43:ec:c2:0d:c4:1a:dd:eb:32: 28:3a:c1:1b:78:bc:61:30:f3:8c:6d:85:d3:d4:80: cf:29:2c:a0:75:89:07:b7:e1:8b:99:cd:8b:2b:4e: 37:74:67:54:53:b9:13:8f:90:a7:ab:50:4d:e2:0f: 29:38:b5:54:d2:be:19:cf:b6:27:ef:af:ce:36:7d: b0:68:49:0f:29:c1:f6:2b:47:dc:a5:ca:ea:49:04: d5:04:17:af:17:5f:f5:14:54:81:b6:cf:78:27:bc: ea:49:93:99:3d:ab:12:6f:30:e2:d1:2a:72:56:79: 98:1b:bd:69:f9:7a:4d:b2:99:8b:db:5f:82:96:c5: cc:82:f9:12:37:bf:f3:3d:bc:76:e4:4a:79:e1:62: 0d:97:b8:76:25:0d:9c:15:ff:69:0f:94:3e:3c:de: e5:a9:be:b4:64:2c:c2:80:0c:09:fa:9c:3f:0a:28: 3d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7C:34:BB:BE:3D:31:77:36:FD:13:8D:35:03:6C:F5:43:D2:5D:45 X509v3 Authority Key Identifier: keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:85:68:73:81:53:2f:14:f1:ba:06:55:a2:f5:79:2c:95:00: 2f:49:00:76:d6:b9:64:f1:b4:d8:ce:bf:1a:7d:62:72:2e:cd: b9:a7:6c:71:d2:dd:26:57:1e:8c:41:b0:60:c0:65:ba:16:a5: 41:83:01:b7:8c:29:a8:0a:d6:9b:4b:3a:69:08:9e:66:04:2a: 33:e7:9d:32:36:2c:7a:8d:8e:cd:f3:0d:c8:8e:cf:b7:80:38: 4b:36:8d:89:32:3c:ec:46:00:19:8c:5f:51:2d:5e:1d:f5:40: 0f:dd:97:33:47:1a:46:51:9c:65:e7:01:d5:30:ac:75:65:bf: f4:7b:3d:97:90:3c:61:fc:b7:1f:d4:a3:d5:bf:9d:ca:70:ab: 4d:9c:0a:03:ce:08:b8:82:2d:35:95:3c:5f:ce:fc:31:34:58: da:e8:5a:b2:73:92:a2:8c:a0:32:79:89:32:b9:9c:4c:84:bc: 87:0d:14:b3:c2:86:c0:73:1a:83:f9:91:5d:f2:2d:87:b9:42: 51:9b:1a:34:2f:d2:2e:d4:8c:47:84:24:90:4b:f2:77:7d:fe: 71:b0:e8:d0:d9:30:80:08:13:ea:45:d4:14:8a:1a:74:a6:3c: f9:e9:e3:5e:88:94:22:d4:17:ee:cb:70:26:b4:d3:8b:37:8e: d5:a1:7d:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwRDAxMTAvBgNVBAUTKDRCM0M2OTU2QjA0NDkwMDEwMDg1OEMwREU1MEVCOUE0 NjJCMDhDQzcwHhcNMjQxMTIzMDEwNzIwWhcNMjQxMTMwMDEwNzIwWjAYMRYwFAYD VQQDEw02NzQxMmFjOC1hMzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67blBZgTnfQaZV4/rmw5LxxPpP1sUx93X3g1NKCdEkm/iylDfJJXGTp4rkpk rVvm/YSfII5gQsZ9BfaQB7LSsiYw0ayRX95IiyeRoI30tMZD7MINxBrd6zIoOsEb eLxhMPOMbYXT1IDPKSygdYkHt+GLmc2LK043dGdUU7kTj5Cnq1BN4g8pOLVU0r4Z z7Yn76/ONn2waEkPKcH2K0fcpcrqSQTVBBevF1/1FFSBts94J7zqSZOZPasSbzDi 0SpyVnmYG71p+XpNspmL21+ClsXMgvkSN7/zPbx25Ep54WINl7h2JQ2cFf9pD5Q+ PN7lqb60ZCzCgAwJ+pw/Cig9VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHV8NLu+ PTF3Nv0TjTUDbPVD0l1FMB8GA1UdIwQYMBaAFEs8aVawRJABAIWMDeUOuaRisIzH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjBEMC85M0ZCN0Y0RURC RjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtBRUFoWXdONVE2NXBHS3dq TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6eHBWckJFa0FFQWhZd041UTY1cEdLd2pNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjBEMC85M0ZCN0Y0RURCRjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtB RUFoWXdONVE2NXBHS3dqTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2hWhzgVMvFPG6BlWi9XkslQAvSQB21rlk8bTYzr8afWJyLs25p2xx 0t0mVx6MQbBgwGW6FqVBgwG3jCmoCtabSzppCJ5mBCoz550yNix6jY7N8w3Ijs+3 gDhLNo2JMjzsRgAZjF9RLV4d9UAP3ZczRxpGUZxl5wHVMKx1Zb/0ez2XkDxh/Lcf 1KPVv53KcKtNnAoDzgi4gi01lTxfzvwxNFja6Fqyc5KijKAyeYkyuZxMhLyHDRSz wobAcxqD+ZFd8i2HuUJRmxo0L9Iu1IxHhCSQS/J3ff5xsOjQ2TCACBPqRdQUihp0 pjz56eNeiJQi1Bfuy3AmtNOLN47VoX2Q -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:59 2024 by rpki-client on console-ams.rpki-client.org