$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: YZtjQKXDIDeBCgynzF5eLIxjSXZIQoTar3B/Be1waPY= Subject key identifier: 5F:BA:FF:CA:90:DC:72:F2:40:F9:8F:9B:BF:1B:C5:E3:78:6A:76:43 Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 07BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 07B2 Signing time: Fri 22 Nov 2024 20:46:15 +0000 Manifest this update: Fri 22 Nov 2024 20:46:14 +0000 Manifest next update: Fri 29 Nov 2024 20:46:14 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: pLMoA+htfON2zsx/GxKJlt6hBQJwJtdY/ikkLkCgY7o=) 2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: pjchJ6cFRSOrYYA+BU/yT4PSr0ftFhi06QMViMdoOGo=) 3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: QHVhADIvelk+RcB2dDEApwkg1zDr9XWT50JUlNL3d6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1979 (0x7bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: Nov 22 20:46:14 2024 GMT Not After : Nov 29 20:46:14 2024 GMT Subject: CN=6740ed96-d8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:e4:33:a0:0e:5e:54:33:d3:43:74:da:79: 0f:40:2b:fb:fe:b3:e4:1d:d0:e8:9e:d0:d3:05:58: 92:41:ea:b7:48:49:da:79:d2:9e:94:41:01:74:d8: 31:99:2e:6b:53:93:79:34:9f:39:07:cd:a8:48:c0: 4a:c8:07:7e:59:4f:3d:67:73:d4:d5:db:44:da:c6: 73:82:23:53:23:1d:d8:a1:b9:7d:5e:34:1b:b0:02: 32:26:18:3d:58:14:d7:64:85:3e:cc:a4:1c:51:46: d8:82:76:47:29:62:2e:b2:c6:0b:5e:99:93:ff:81: fa:01:bc:60:eb:1e:7a:6c:d4:d8:0b:5c:56:bb:9f: 1a:5b:fd:12:60:6a:29:39:e6:53:38:1b:8b:ab:55: eb:06:98:5e:66:c0:45:95:3a:f6:8d:28:dd:2c:9b: 5f:ae:08:60:01:6d:ca:5c:d4:99:a7:e8:14:13:d6: cb:28:f6:bd:ca:1e:2a:b0:b6:75:bc:39:b6:97:a1: 37:51:45:e6:dd:a6:0a:d8:91:5f:86:1e:02:26:a7: 9e:e1:b3:a3:2e:2b:67:d5:8f:56:a2:47:25:ad:00: fd:40:f7:5f:4c:d0:43:dd:a3:9a:65:fd:da:53:48: ae:b7:62:3a:08:57:4a:30:ca:76:51:28:62:3e:0e: 2e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BA:FF:CA:90:DC:72:F2:40:F9:8F:9B:BF:1B:C5:E3:78:6A:76:43 X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c3:62:bd:9c:a9:d6:da:c5:52:99:cb:9f:df:09:26:fc:f3: cf:d1:d1:83:d5:3b:ec:53:58:e8:42:a1:f1:2c:05:15:43:bc: ed:05:fc:45:0f:a4:a1:2f:38:f7:72:f7:22:67:80:56:4a:c0: 95:52:d2:25:63:16:bc:69:62:69:bf:6d:07:d8:9d:9d:4c:cf: ac:07:04:1c:2d:dd:b1:80:73:69:a1:b3:8c:6e:d0:da:55:85: 66:d4:65:7a:4a:7e:c2:6e:c1:9f:ca:2f:7a:86:ca:d1:d9:51: 39:db:b3:5a:c8:e9:50:a1:c8:7b:e5:75:5a:f1:11:02:4c:23: c1:11:24:bc:a7:82:99:0a:37:48:9a:69:4f:aa:2c:b8:78:83: 63:6c:fc:25:66:21:61:2f:04:3f:b2:6b:ce:36:26:a5:62:53: 92:1b:31:36:32:2d:31:93:fa:8a:4b:4e:eb:dd:ea:55:6a:53: bf:13:c2:06:5a:19:2e:27:a4:5c:aa:1b:58:c7:23:4f:2b:0c: dd:37:19:9a:f7:d2:2d:03:b7:97:ae:92:ad:5c:f0:d0:03:1d: f3:e7:cf:0b:d6:7c:2b:57:8b:a4:5e:18:29:f0:82:40:31:12: e9:92:db:7a:9a:be:02:14:dc:25:2f:b5:87:e6:68:71:de:34: e8:3b:c4:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjQxMTIyMjA0NjE0WhcNMjQxMTI5MjA0NjE0WjAYMRYwFAYD VQQDEw02NzQwZWQ5Ni1kOGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ezkM6AOXlQz00N02nkPQCv7/rPkHdDontDTBViSQeq3SEnaedKelEEBdNgx mS5rU5N5NJ85B82oSMBKyAd+WU89Z3PU1dtE2sZzgiNTIx3Yobl9XjQbsAIyJhg9 WBTXZIU+zKQcUUbYgnZHKWIussYLXpmT/4H6Abxg6x56bNTYC1xWu58aW/0SYGop OeZTOBuLq1XrBpheZsBFlTr2jSjdLJtfrghgAW3KXNSZp+gUE9bLKPa9yh4qsLZ1 vDm2l6E3UUXm3aYK2JFfhh4CJqee4bOjLitn1Y9WokclrQD9QPdfTNBD3aOaZf3a U0iut2I6CFdKMMp2UShiPg4udQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+6/8qQ 3HLyQPmPm78bxeN4anZDMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVw2K9nKnW2sVSmcuf3wkm/PPP0dGD1TvsU1joQqHxLAUVQ7ztBfxF D6ShLzj3cvciZ4BWSsCVUtIlYxa8aWJpv20H2J2dTM+sBwQcLd2xgHNpobOMbtDa VYVm1GV6Sn7CbsGfyi96hsrR2VE527NayOlQoch75XVa8RECTCPBESS8p4KZCjdI mmlPqiy4eINjbPwlZiFhLwQ/smvONialYlOSGzE2Mi0xk/qKS07r3epValO/E8IG WhkuJ6RcqhtYxyNPKwzdNxma99ItA7eXrpKtXPDQAx3z588L1nwrV4ukXhgp8IJA MRLpktt6mr4CFNwlL7WH5mhx3jToO8RR -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org