$ rpki-client -vvf rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft File: FOvueS5AUhzVGx8DIDp_jiq7EtI.mft (raw, json) Hash identifier: XOqz0SuYuSpOy8st2apC7a4R3wPcCw3j/uo5u0YdJeg= Subject key identifier: 14:87:43:32:C2:43:9D:DC:80:89:D0:0D:0F:6F:25:43:0A:F9:B7:E2 Authority key identifier: 14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 Certificate issuer: /CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Certificate serial: 09DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft Manifest number: 09D5 Signing time: Fri 22 Nov 2024 19:42:38 +0000 Manifest this update: Fri 22 Nov 2024 19:42:38 +0000 Manifest next update: Fri 29 Nov 2024 19:42:38 +0000 Files and hashes: 1: FOvueS5AUhzVGx8DIDp_jiq7EtI.crl (hash: eE7q5HKi8Fok/bFCqu6PvJZ0JTDQM71sDNnq07mrgaE=) 2: 6677438E6B7B11EA908F7C82C4F9AE02.roa (hash: MSUgG3YpJNbihj2Swmi1mDO3TB3FswBz5L2+dcR+N7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2523 (0x9db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F40E/serialNumber=14EBEE792E40521CD51B1F03203A7F8E2ABB12D2 Validity Not Before: Nov 22 19:42:38 2024 GMT Not After : Nov 29 19:42:38 2024 GMT Subject: CN=6740deae-bef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ba:b2:eb:7b:9a:2c:cb:bf:8e:07:37:42:cd: 4a:d0:d0:84:5e:6d:ea:54:94:95:99:0a:7e:34:08: e9:73:0b:37:a8:fe:5b:d0:6f:7c:7f:55:aa:a7:46: 0f:3a:04:97:d0:0e:c0:04:89:c2:f0:09:79:4f:fc: 0f:88:d5:88:f2:c8:69:b7:1a:0f:b1:ee:70:b8:4c: 5d:83:9f:2e:8b:da:7c:47:7e:5a:cd:36:d4:ba:c7: b4:fd:a5:aa:45:1f:e6:fd:ce:ed:5e:04:d4:3d:33: 69:37:b1:a4:cc:bf:5d:b0:03:6b:0d:6c:66:d2:4e: ae:3e:72:ea:77:da:85:74:23:c5:e7:ee:7a:42:22: f7:e8:92:cd:34:b0:19:42:9e:e9:b0:1e:b7:da:28: 89:dd:22:99:28:98:b0:92:1d:fe:58:42:c3:68:a3: a4:b9:92:59:57:13:b7:22:e4:93:52:eb:3b:cc:d2: dc:e8:16:91:71:18:df:0a:6c:9f:5c:64:8c:26:d1: d9:24:e1:99:c7:63:46:78:48:db:f3:aa:6c:1e:61: e2:93:c4:0f:3e:7d:48:ea:43:ff:bf:a5:3e:77:f3: c0:5b:2e:b9:a5:65:ce:b1:85:2f:4e:e2:1b:11:01: a5:81:a5:85:7e:cd:85:57:e8:17:70:87:82:fb:a2: e9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:87:43:32:C2:43:9D:DC:80:89:D0:0D:0F:6F:25:43:0A:F9:B7:E2 X509v3 Authority Key Identifier: keyid:14:EB:EE:79:2E:40:52:1C:D5:1B:1F:03:20:3A:7F:8E:2A:BB:12:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOvueS5AUhzVGx8DIDp_jiq7EtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F40E/303B3D786B7811EAA713D778C4F9AE02/FOvueS5AUhzVGx8DIDp_jiq7EtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:f9:a1:94:b5:69:2e:f9:56:df:4b:b1:94:b8:d1:65:f0:f3: cf:e3:44:f1:a6:16:76:7c:6e:15:b2:7e:fc:65:14:1b:ee:78: 9c:c0:a5:95:c3:61:c0:62:55:fd:57:da:61:cc:8c:a1:fe:e0: 7c:83:0f:dd:66:ff:49:1c:d0:54:36:b7:e9:53:d7:07:ad:ab: 83:0d:8a:21:03:36:12:96:28:87:69:33:3c:09:cb:f0:19:38: 33:66:89:d7:47:13:f0:b7:2d:c1:84:2d:6b:1c:df:7a:9f:d4: 58:d2:86:48:72:01:bd:4a:c9:6f:bb:b4:31:b1:ee:cb:3c:c8: 02:c5:2a:af:7f:8b:63:9c:ea:c5:80:1b:ed:c4:a1:18:4c:65: 09:dd:74:98:8a:fa:51:bb:52:e9:67:be:e4:e6:72:67:71:0f: 94:63:f5:72:94:80:87:b9:df:e3:6e:ae:9c:35:c9:d7:c5:52: 38:93:28:90:b2:b9:5e:4e:13:34:ec:b8:13:37:26:67:d9:37: 8e:54:a6:89:0f:36:06:2f:47:d3:0c:95:e2:1b:0b:bf:7d:0b: ef:2f:9e:e6:f3:8f:15:c7:65:27:5c:3b:d7:d0:2e:f4:b1:20: ea:ec:3a:bb:ff:a3:9e:c7:a2:e5:a7:11:bd:56:3b:27:97:c1: d8:0f:b2:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY0MEUxMTAvBgNVBAUTKDE0RUJFRTc5MkU0MDUyMUNENTFCMUYwMzIwM0E3RjhF MkFCQjEyRDIwHhcNMjQxMTIyMTk0MjM4WhcNMjQxMTI5MTk0MjM4WjAYMRYwFAYD VQQDEw02NzQwZGVhZS1iZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7qy63uaLMu/jgc3Qs1K0NCEXm3qVJSVmQp+NAjpcws3qP5b0G98f1Wqp0YP OgSX0A7ABInC8Al5T/wPiNWI8shptxoPse5wuExdg58ui9p8R35azTbUuse0/aWq RR/m/c7tXgTUPTNpN7GkzL9dsANrDWxm0k6uPnLqd9qFdCPF5+56QiL36JLNNLAZ Qp7psB632iiJ3SKZKJiwkh3+WELDaKOkuZJZVxO3IuSTUus7zNLc6BaRcRjfCmyf XGSMJtHZJOGZx2NGeEjb86psHmHik8QPPn1I6kP/v6U+d/PAWy65pWXOsYUvTuIb EQGlgaWFfs2FV+gXcIeC+6LpuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSHQzLC Q53cgInQDQ9vJUMK+bfiMB8GA1UdIwQYMBaAFBTr7nkuQFIc1RsfAyA6f44quxLS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjQwRS8zMDNCM0Q3ODZC NzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVoelZHeDhESURwX2ppcTdF dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZPdnVlUzVBVWh6Vkd4OERJRHBfamlxN0V0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjQwRS8zMDNCM0Q3ODZCNzgxMUVBQTcxM0Q3NzhDNEY5QUUwMi9GT3Z1ZVM1QVVo elZHeDhESURwX2ppcTdFdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7+aGUtWku+VbfS7GUuNFl8PPP40TxphZ2fG4Vsn78ZRQb7nicwKWV w2HAYlX9V9phzIyh/uB8gw/dZv9JHNBUNrfpU9cHrauDDYohAzYSliiHaTM8Ccvw GTgzZonXRxPwty3BhC1rHN96n9RY0oZIcgG9Sslvu7Qxse7LPMgCxSqvf4tjnOrF gBvtxKEYTGUJ3XSYivpRu1LpZ77k5nJncQ+UY/VylICHud/jbq6cNcnXxVI4kyiQ srleThM07LgTNyZn2TeOVKaJDzYGL0fTDJXiGwu/fQvvL57m848Vx2UnXDvX0C70 sSDq7Dq7/6Oex6LlpxG9Vjsnl8HYD7KG -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org