$ rpki-client -vvf rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft File: dNMDVT5gXDFRHphkxWZZnU24o5M.mft (raw, json) Hash identifier: YIAXM1RUIz5NaMyFX6bfOIarVaPP1s+K/LXeHlrUawg= Subject key identifier: 4A:21:7A:03:2A:71:51:DA:92:E0:15:3F:00:C7:61:07:4B:6C:A4:17 Authority key identifier: 74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 Certificate issuer: /CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Certificate serial: 048D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft Manifest number: 0486 Signing time: Fri 22 Nov 2024 23:35:51 +0000 Manifest this update: Fri 22 Nov 2024 23:35:51 +0000 Manifest next update: Fri 29 Nov 2024 23:35:51 +0000 Files and hashes: 1: dNMDVT5gXDFRHphkxWZZnU24o5M.crl (hash: 8fqNA4Z3nZNnUPWYs/SdG/83vxi2qfwakVw44LsrxPI=) 2: 92C0558C1A3B11EC91C03279C4F9AE02.roa (hash: Po8XNqivSX/apsQ6A8498+GiwjVmcu8yptq2jnYeJQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C1EC/serialNumber=74D303553E605C31511E9864C566599D4DB8A393 Validity Not Before: Nov 22 23:35:51 2024 GMT Not After : Nov 29 23:35:51 2024 GMT Subject: CN=67411557-2780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:df:15:ce:f3:57:ca:36:0a:a7:5f:19:eb:34: fd:d3:3f:43:05:9b:31:c7:34:7f:e2:ba:da:4e:0c: 11:cb:6d:57:88:ae:eb:90:0b:fa:99:54:09:1a:c9: 3e:31:7e:43:3a:96:68:87:86:f7:98:b6:a6:f1:73: 72:6b:ee:50:fd:fc:3e:c0:cf:f3:05:02:4d:24:82: 89:0d:09:d5:07:b4:3d:0b:2d:fd:5f:2b:72:25:40: 70:f0:14:f0:20:64:59:ce:9a:67:db:6b:5d:9e:7a: b3:4d:4c:1d:0e:9c:56:02:c8:81:eb:da:35:48:87: 08:97:70:5c:89:85:c7:f5:30:a7:ac:d9:85:91:02: 2a:5b:82:b5:b9:bf:4f:bb:92:c9:50:dc:52:69:7f: ed:1b:d1:bd:bb:15:01:ba:9e:f6:a7:cc:8d:8f:85: 58:7a:77:07:ea:62:c8:b9:25:33:62:23:a0:22:21: a1:2c:d8:93:3f:dd:0f:e3:6c:f1:27:36:44:fa:03: 03:59:84:05:71:62:e5:58:42:3f:7a:40:3f:69:39: 87:cc:39:4b:20:98:d5:3a:b6:43:83:85:7e:7d:da: ee:30:ba:6c:03:15:a4:dd:b0:3a:1e:4c:6d:3d:78: b3:6d:69:89:25:ec:b2:c7:54:c9:29:70:d3:5d:5a: 4c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:7A:03:2A:71:51:DA:92:E0:15:3F:00:C7:61:07:4B:6C:A4:17 X509v3 Authority Key Identifier: keyid:74:D3:03:55:3E:60:5C:31:51:1E:98:64:C5:66:59:9D:4D:B8:A3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNMDVT5gXDFRHphkxWZZnU24o5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C1EC/C25318C41A2811ECBCCF5010C4F9AE02/dNMDVT5gXDFRHphkxWZZnU24o5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:d0:07:fb:3c:5b:ed:fd:18:e7:3f:3f:67:32:4a:55:5b:fe: 1d:86:76:f7:0f:a2:a6:4d:37:01:a5:3d:2e:84:cb:ac:18:91: 9d:51:eb:9a:4e:c9:32:86:28:9a:89:81:64:29:99:f8:a3:6c: 63:b5:2c:9f:31:02:6e:5b:d5:3d:ff:a9:b8:26:f5:93:96:5a: 79:dc:9f:cb:db:15:9b:c2:4d:17:79:b2:ac:ee:02:42:b5:ff: 09:0c:19:f7:ba:f4:f4:53:82:11:fd:46:71:22:40:2b:69:47: 82:f5:79:b1:47:48:3d:5f:2f:18:3a:3c:88:9c:2e:a2:31:68: ab:7a:c2:15:0f:7d:77:00:e6:71:99:01:0d:da:18:d9:f4:d1: 7c:93:8d:34:49:7f:08:8f:34:34:2d:67:2b:3a:43:43:1c:1e: e3:c6:34:9d:b6:7d:88:c0:ca:35:55:50:44:8a:17:7e:b8:d2: cb:15:15:6e:8e:77:ae:7a:9f:95:03:a2:eb:56:a0:a9:f9:44: a1:8e:a1:6b:93:90:0d:82:70:6c:98:f2:ef:a3:a0:34:4f:29: ed:b4:c4:34:6a:92:3e:55:60:9a:20:7d:44:f2:43:4b:60:f7: 31:0d:ff:38:d4:5f:9d:a4:b3:82:e9:7b:40:c3:15:48:21:b0: 17:02:22:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxRUMxMTAvBgNVBAUTKDc0RDMwMzU1M0U2MDVDMzE1MTFFOTg2NEM1NjY1OTlE NERCOEEzOTMwHhcNMjQxMTIyMjMzNTUxWhcNMjQxMTI5MjMzNTUxWjAYMRYwFAYD VQQDEw02NzQxMTU1Ny0yNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA298VzvNXyjYKp18Z6zT90z9DBZsxxzR/4rraTgwRy21XiK7rkAv6mVQJGsk+ MX5DOpZoh4b3mLam8XNya+5Q/fw+wM/zBQJNJIKJDQnVB7Q9Cy39XytyJUBw8BTw IGRZzppn22tdnnqzTUwdDpxWAsiB69o1SIcIl3BciYXH9TCnrNmFkQIqW4K1ub9P u5LJUNxSaX/tG9G9uxUBup72p8yNj4VYencH6mLIuSUzYiOgIiGhLNiTP90P42zx JzZE+gMDWYQFcWLlWEI/ekA/aTmHzDlLIJjVOrZDg4V+fdruMLpsAxWk3bA6Hkxt PXizbWmJJeyyx1TJKXDTXVpM1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEohegMq cVHakuAVPwDHYQdLbKQXMB8GA1UdIwQYMBaAFHTTA1U+YFwxUR6YZMVmWZ1NuKOT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzFFQy9DMjUzMThDNDFB MjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hERlJIcGhreFdaWm5VMjRv NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ROTURWVDVnWERGUkhwaGt4V1pablUyNG81TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzFFQy9DMjUzMThDNDFBMjgxMUVDQkNDRjUwMTBDNEY5QUUwMi9kTk1EVlQ1Z1hE RlJIcGhreFdaWm5VMjRvNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC80Af7PFvt/RjnPz9nMkpVW/4dhnb3D6KmTTcBpT0uhMusGJGdUeua TskyhiiaiYFkKZn4o2xjtSyfMQJuW9U9/6m4JvWTllp53J/L2xWbwk0XebKs7gJC tf8JDBn3uvT0U4IR/UZxIkAraUeC9XmxR0g9Xy8YOjyInC6iMWiresIVD313AOZx mQEN2hjZ9NF8k400SX8IjzQ0LWcrOkNDHB7jxjSdtn2IwMo1VVBEihd+uNLLFRVu jneuep+VA6LrVqCp+UShjqFrk5ANgnBsmPLvo6A0TynttMQ0apI+VWCaIH1E8kNL YPcxDf841F+dpLOC6XtAwxVIIbAXAiJI -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org