$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft File: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json) Hash identifier: b3Hl5jfuk2/23otSspmBDLEncIQfV71XjQqpkXkeAoI= Subject key identifier: 89:00:35:34:81:F3:A4:52:D0:AE:73:B2:B8:F9:F3:E2:FC:E1:78:99 Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 Certificate issuer: /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Certificate serial: 0296 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft Manifest number: 0283 Signing time: Sat 23 Nov 2024 01:14:27 +0000 Manifest this update: Sat 23 Nov 2024 01:14:26 +0000 Manifest next update: Sat 30 Nov 2024 01:14:26 +0000 Files and hashes: 1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: Q/c78vkFstOJ/E4R7Icl8VUYv+yp+nmbpIYuM0f6w6M=) 2: 5C236C16552611EFA2BEAC53C4F9AE02.roa (hash: iZ6c16QJfgq60QRYgFglwDZaB7UfKpWeC5/RltitIB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 662 (0x296) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Validity Not Before: Nov 23 01:14:26 2024 GMT Not After : Nov 30 01:14:26 2024 GMT Subject: CN=67412c72-4c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b6:42:fe:8b:92:79:b5:95:17:d4:b7:9d:71: 39:62:45:3d:5e:02:a9:33:c3:cf:6d:8a:60:46:dd: 75:7d:a7:b4:e3:4a:96:00:82:2c:93:aa:3d:5e:3c: b2:28:ea:65:d0:a3:7e:0b:ed:0e:7f:5a:58:76:3b: 5c:6c:99:07:de:71:5d:0b:0e:fb:d3:85:c7:3f:52: 08:ec:45:be:d7:33:be:64:71:89:0d:43:5f:5e:94: 63:46:ea:54:42:ff:cd:82:31:4d:3b:a3:d0:34:a1: aa:ca:f0:71:bb:07:22:85:a2:5e:e0:27:8a:6b:9a: 6a:c3:33:08:b4:ca:76:59:14:51:16:60:82:cb:a2: 96:0e:e2:ce:72:bb:19:d1:06:6f:18:07:e8:e3:6d: b1:7e:a1:22:b2:4b:3c:ad:76:f9:74:a0:93:6e:12: f6:f0:86:5c:69:c0:9e:af:e8:11:8a:f0:49:e1:2f: 4a:ba:ee:7d:ef:17:4a:7a:f9:07:74:3d:ed:8b:ea: cb:6e:cf:d1:91:59:33:fd:d0:1d:d5:15:ca:1c:06: de:49:28:26:a6:2d:52:49:f0:65:3b:77:df:ee:a6: f7:1a:4c:a3:0b:aa:9b:28:7a:6f:31:69:cf:c9:8c: d8:f8:0a:38:76:a7:92:74:ee:a7:4d:01:49:fc:ec: 9b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:00:35:34:81:F3:A4:52:D0:AE:73:B2:B8:F9:F3:E2:FC:E1:78:99 X509v3 Authority Key Identifier: keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:92:66:0f:d2:2d:02:73:7d:0a:47:84:23:b7:5a:a1:fd:38: 3e:be:0f:3a:96:ba:d7:3f:27:e1:b3:19:e0:41:24:dc:eb:42: 52:c4:73:3c:0f:ff:33:ee:13:2d:55:49:3e:d8:f0:fb:5f:48: b3:45:7f:d8:30:c3:47:14:0c:6d:79:55:b4:26:71:77:8c:56: f5:fd:ec:b8:e3:eb:d3:52:a1:3f:6a:1f:39:82:61:43:41:46: 78:9d:c6:67:d1:40:e7:5d:46:2f:ae:b6:cf:19:9d:34:69:30: 79:6a:93:36:30:b9:40:95:f4:86:7b:df:f1:72:00:9e:3b:f9: a8:90:3b:8e:3e:9f:ab:b7:d2:6f:3e:d6:b1:2d:60:2f:ad:5e: 47:67:a9:e1:25:69:8f:d8:eb:7d:97:9f:c0:be:00:92:0d:25: cf:e8:0c:20:99:46:c8:a1:40:81:c7:66:d5:75:5c:bb:d1:79: 8d:5e:79:f4:2f:6b:79:b2:11:ec:e0:e0:b8:50:7e:a2:3f:77: 4f:44:b9:c0:0a:fc:a0:27:85:19:5c:55:e8:0f:fb:e9:96:e2: dd:03:b2:5a:7c:03:30:84:b1:a3:ab:a4:6d:10:3a:85:f6:8b: b8:d2:80:62:dd:85:73:60:e6:f0:eb:44:9d:17:e3:c8:f6:35: 67:a2:92:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFMjUxMTAvBgNVBAUTKEE3NjBBREUwQzlEMDVFRTY3OUVDMzA0MTIyQkMzMzUw QzhEMkE0MzkwHhcNMjQxMTIzMDExNDI2WhcNMjQxMTMwMDExNDI2WjAYMRYwFAYD VQQDEw02NzQxMmM3Mi00YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7ZC/ouSebWVF9S3nXE5YkU9XgKpM8PPbYpgRt11fae040qWAIIsk6o9Xjyy KOpl0KN+C+0Of1pYdjtcbJkH3nFdCw7704XHP1II7EW+1zO+ZHGJDUNfXpRjRupU Qv/NgjFNO6PQNKGqyvBxuwcihaJe4CeKa5pqwzMItMp2WRRRFmCCy6KWDuLOcrsZ 0QZvGAfo422xfqEisks8rXb5dKCTbhL28IZcacCer+gRivBJ4S9Kuu597xdKevkH dD3ti+rLbs/RkVkz/dAd1RXKHAbeSSgmpi1SSfBlO3ff7qb3GkyjC6qbKHpvMWnP yYzY+Ao4dqeSdO6nTQFJ/OybxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkANTSB 86RS0K5zsrj58+L84XiZMB8GA1UdIwQYMBaAFKdgreDJ0F7meewwQSK8M1DI0qQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkUyNS9EOTA1MjZFNEVF MTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1WjU3REJCSXJ3elVNalNw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AyQ3Q0TW5RWHVaNTdEQkJJcnd6VU1qU3BEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkUyNS9EOTA1MjZFNEVFMTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1 WjU3REJCSXJ3elVNalNwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTkmYP0i0Cc30KR4Qjt1qh/Tg+vg86lrrXPyfhsxngQSTc60JSxHM8 D/8z7hMtVUk+2PD7X0izRX/YMMNHFAxteVW0JnF3jFb1/ey44+vTUqE/ah85gmFD QUZ4ncZn0UDnXUYvrrbPGZ00aTB5apM2MLlAlfSGe9/xcgCeO/mokDuOPp+rt9Jv PtaxLWAvrV5HZ6nhJWmP2Ot9l5/AvgCSDSXP6AwgmUbIoUCBx2bVdVy70XmNXnn0 L2t5shHs4OC4UH6iP3dPRLnACvygJ4UZXFXoD/vpluLdA7JafAMwhLGjq6RtEDqF 9ou40oBi3YVzYObw60SdF+PI9jVnopIB -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:32 2024 by rpki-client on console-fra.rpki-client.org