$ rpki-client -vvf rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft File: V1ikE1VlgvhZjh9F_GM3maex0Qc.mft (raw, json) Hash identifier: wRB6PgbAjJbbim9hIHWV1A1c6iu7Wk7Ksus98J9DJII= Subject key identifier: ED:10:5E:12:18:E3:E3:82:51:99:32:0D:60:5A:07:00:75:39:78:58 Authority key identifier: 57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07 Certificate issuer: /CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107 Certificate serial: 1041 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft Manifest number: 1037 Signing time: Fri 22 Nov 2024 17:23:00 +0000 Manifest this update: Fri 22 Nov 2024 17:22:59 +0000 Manifest next update: Fri 29 Nov 2024 17:22:59 +0000 Files and hashes: 1: V1ikE1VlgvhZjh9F_GM3maex0Qc.crl (hash: QxKQ5yX9tCGMeyXOFz7aCnHiERv9HpnxpzA2XkiTcK8=) 2: 8FA6DAE02C5B11E99B8B114EC4F9AE02.roa (hash: qxrPSY85HQzoS5SwzTHbqWN+Z7CNWTWllsLf46VBiDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4161 (0x1041) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107 Validity Not Before: Nov 22 17:22:59 2024 GMT Not After : Nov 29 17:22:59 2024 GMT Subject: CN=6740bdf3-ec8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fe:cd:7c:3d:00:41:76:c0:b2:31:ed:0b:68: 17:50:ca:fd:b4:75:b9:82:8a:f8:6d:c4:4c:b0:35: c0:6d:00:56:e2:9d:35:ea:f6:9e:4b:52:1a:a3:cf: af:51:55:8f:40:fe:e4:cb:f0:57:60:d9:74:39:fc: 45:f3:72:4c:d0:c9:4f:62:0e:43:e4:ad:2b:e1:c2: db:33:6b:0e:f0:66:da:5e:77:b9:e7:26:be:a7:fa: 6f:c6:74:3d:2d:17:c0:e8:08:9a:11:92:f5:d4:9b: 8b:3a:e4:e4:c6:26:ee:e2:48:d6:fb:9b:cd:fc:55: ed:b7:b3:de:b9:40:af:3c:fe:e2:94:38:fa:40:ea: 11:68:ef:a1:8d:65:bc:cf:de:09:cb:80:9d:33:82: 9b:3f:44:ad:89:e8:da:b7:25:20:ae:f0:c7:68:d7: 0f:c3:35:c0:c5:ce:11:76:21:c8:69:46:f4:78:a4: e2:24:b1:c3:83:e3:3b:db:fd:1a:a0:52:84:3c:2c: 87:c2:05:ef:73:c9:78:5e:fe:0e:bb:f5:fa:68:c0: 82:65:7c:c7:bb:83:04:aa:ab:32:86:4d:74:67:a6: 93:42:40:4b:61:68:2f:37:66:6e:e9:39:00:ea:1f: e4:0f:dc:37:29:2e:e9:46:14:94:5d:58:cf:5b:ed: 56:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:10:5E:12:18:E3:E3:82:51:99:32:0D:60:5A:07:00:75:39:78:58 X509v3 Authority Key Identifier: keyid:57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f6:48:b9:98:f2:be:8f:49:f2:94:96:30:e1:df:83:eb:e2: dd:7b:95:6d:7c:89:b3:6e:df:fb:77:a1:5d:6d:5b:5e:1d:32: ed:d3:b0:d5:84:17:04:61:34:25:22:cf:34:70:a5:78:9d:35: e7:c9:b9:c6:d1:e7:a1:ad:c5:13:91:38:81:12:c8:dd:e7:52: f4:a3:2a:ee:b8:34:1d:02:cb:25:72:0e:2f:c2:1b:18:73:ee: ee:51:6c:c8:c3:2b:2b:3b:ba:a1:4e:c1:d4:ae:c3:85:eb:46: d5:a4:e1:1c:2c:79:25:ca:37:89:ab:6f:be:d8:9c:1b:bc:b5: ae:3a:da:2b:58:a8:08:60:3c:3a:87:e0:7a:be:0e:b0:c6:7a: c4:5e:d0:e5:33:4b:2a:18:44:03:c8:9c:d3:b3:c6:3f:0e:3e: 45:af:03:5b:e7:40:bd:c1:2d:c7:1d:83:b5:7f:c9:4f:0f:31: 70:8c:5d:41:8e:a4:6c:81:11:27:0c:b2:97:b0:07:e7:9a:c9: c0:03:3a:95:a7:91:e8:9c:72:d5:cd:ff:55:39:3b:9a:48:72: 3f:0c:9a:13:ab:e5:f6:ad:11:d3:95:ce:d7:b8:a5:e6:bd:bf: a8:d2:19:1b:e3:c4:8f:de:78:5a:9b:ca:75:d5:78:c8:6e:a9: f3:15:e4:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UwNUIxMTAvBgNVBAUTKDU3NThBNDEzNTU2NTgyRjg1OThFMUY0NUZDNjMzNzk5 QTdCMUQxMDcwHhcNMjQxMTIyMTcyMjU5WhcNMjQxMTI5MTcyMjU5WjAYMRYwFAYD VQQDEw02NzQwYmRmMy1lYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArP7NfD0AQXbAsjHtC2gXUMr9tHW5gor4bcRMsDXAbQBW4p016vaeS1Iao8+v UVWPQP7ky/BXYNl0OfxF83JM0MlPYg5D5K0r4cLbM2sO8GbaXne55ya+p/pvxnQ9 LRfA6AiaEZL11JuLOuTkxibu4kjW+5vN/FXtt7PeuUCvPP7ilDj6QOoRaO+hjWW8 z94Jy4CdM4KbP0StiejatyUgrvDHaNcPwzXAxc4RdiHIaUb0eKTiJLHDg+M72/0a oFKEPCyHwgXvc8l4Xv4Ou/X6aMCCZXzHu4MEqqsyhk10Z6aTQkBLYWgvN2Zu6TkA 6h/kD9w3KS7pRhSUXVjPW+1WywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0QXhIY 4+OCUZkyDWBaBwB1OXhYMB8GA1UdIwQYMBaAFFdYpBNVZYL4WY4fRfxjN5mnsdEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA1Qi9CMzE5NjZDNDJD NUExMUU5OTQzRTlENENDNEY5QUUwMi9WMWlrRTFWbGd2aFpqaDlGX0dNM21hZXgw UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YxaWtFMVZsZ3ZoWmpoOUZfR00zbWFleDBRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTA1Qi9CMzE5NjZDNDJDNUExMUU5OTQzRTlENENDNEY5QUUwMi9WMWlrRTFWbGd2 aFpqaDlGX0dNM21hZXgwUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg9ki5mPK+j0nylJYw4d+D6+Lde5VtfImzbt/7d6FdbVteHTLt07DV hBcEYTQlIs80cKV4nTXnybnG0eehrcUTkTiBEsjd51L0oyruuDQdAsslcg4vwhsY c+7uUWzIwysrO7qhTsHUrsOF60bVpOEcLHklyjeJq2++2JwbvLWuOtorWKgIYDw6 h+B6vg6wxnrEXtDlM0sqGEQDyJzTs8Y/Dj5FrwNb50C9wS3HHYO1f8lPDzFwjF1B jqRsgREnDLKXsAfnmsnAAzqVp5HonHLVzf9VOTuaSHI/DJoTq+X2rRHTlc7XuKXm vb+o0hkb48SP3nham8p11XjIbqnzFeRG -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org