$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft File: hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json) Hash identifier: qwIzFWfNy76HyGqm8CFph3vx0LCffOPh6NYnjCwlTeU= Subject key identifier: A5:FC:02:9F:B8:AC:1F:D8:52:D4:47:03:F5:8B:52:22:2F:94:62:99 Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E Certificate issuer: /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft Manifest number: 57 Signing time: Sat 23 Nov 2024 05:26:22 +0000 Manifest this update: Sat 23 Nov 2024 05:26:21 +0000 Manifest next update: Sat 30 Nov 2024 05:26:21 +0000 Files and hashes: 1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: cexRzLrFEiv4CYdcpsAm8aS4ONHHTaccLe6C0XBUYlU=) 2: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: jlXohEw0btRgU9kVspXT8+fcohZF13SEjwBaXsRZEVQ=) 3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: XyZFxo5dk/YKYCu8Vu1hnlg71wL2V/Va24kQXoHz5hE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E Validity Not Before: Nov 23 05:26:21 2024 GMT Not After : Nov 30 05:26:21 2024 GMT Subject: CN=6741677d-dc1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8f:ce:3d:7f:0a:f6:29:2e:43:16:89:15:ba: 8e:b6:56:8b:17:87:73:49:b0:35:16:55:47:1a:04: 91:7c:40:21:69:6c:0a:fd:a2:42:3b:90:dd:11:fe: 18:9b:21:b9:d3:58:a6:f2:43:01:fc:c8:b9:fd:b4: 49:69:ac:7d:e6:31:81:c5:00:c5:03:35:47:a4:3a: e8:b8:0b:0e:3d:8a:62:14:2c:bd:b4:02:cc:2c:88: c7:bf:a2:57:9a:b3:19:7e:fd:58:25:c3:3a:85:5f: 7b:e8:98:75:df:76:88:36:de:6f:f5:ef:bb:b5:f4: fb:72:b4:8d:9b:d6:57:0b:08:e7:d8:3d:f5:78:d7: e8:f4:1b:61:07:63:d9:66:6c:3a:8e:bd:26:21:2a: f4:39:cc:bf:14:5f:3a:eb:e1:27:95:39:0c:e7:0a: 94:4c:c9:b8:33:71:aa:4c:d4:48:03:1a:9c:71:7d: ce:54:fb:54:4c:36:d1:68:da:80:ba:4d:32:4a:cf: 7f:53:2e:01:27:e6:04:f2:b6:57:89:cc:ae:cb:9c: 3c:9e:55:87:88:e8:27:2d:98:1a:d6:85:bf:87:7f: 1f:3d:97:62:96:e3:6a:48:34:46:b0:54:1e:9a:ef: 04:d6:7a:9e:98:ff:6f:54:0a:69:1b:78:f0:c3:42: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FC:02:9F:B8:AC:1F:D8:52:D4:47:03:F5:8B:52:22:2F:94:62:99 X509v3 Authority Key Identifier: keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:0d:aa:91:35:27:e2:20:93:82:7c:4c:b0:da:b2:be:8a:2d: 2a:0f:eb:c2:d9:40:fc:d2:f4:60:3e:93:6b:54:b6:9b:1c:7e: 1b:04:22:0a:55:28:dc:00:4c:dc:1f:f5:6d:6d:14:df:d9:4c: d9:a1:85:55:74:e7:db:57:50:5e:d4:e3:18:00:29:16:c8:40: 92:a4:ea:4f:56:1c:8b:bd:fa:8f:a3:7e:3f:6f:64:68:17:55: d3:62:61:44:1c:6d:25:f5:2b:21:71:ae:9a:8e:24:78:5c:88: 24:2d:bc:35:2d:4e:09:07:df:a7:11:7c:49:e8:6b:ab:c1:9f: 07:5a:9c:00:5d:ec:ac:6a:0d:9a:df:d6:75:13:c5:e1:6e:87: 4a:be:46:b4:f8:2b:03:3b:1e:d2:54:79:c2:29:c3:b4:ca:a4: ae:9a:c5:0e:d3:56:f6:de:48:ed:f5:fa:24:03:6f:fb:a3:98: c8:48:a1:72:f9:21:89:61:1f:62:45:cf:85:ca:61:e9:12:c5: d5:b7:ff:55:2e:8e:99:84:38:c0:29:3e:b8:69:6a:1a:1b:f3: f6:45:1a:ef:27:35:1c:22:41:11:8f:d6:95:e9:a0:80:77:a8: 13:25:55:9a:06:e4:65:15:63:bc:03:55:77:cb:e5:dc:27:05: 63:ff:f4:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzEzNDExMC8GA1UEBRMoODQ0MkRDNDYwMjQwMDYwMTFBRDVDRjQ4Q0Q3RTRDNDhC Qjk3QTExRTAeFw0yNDExMjMwNTI2MjFaFw0yNDExMzAwNTI2MjFaMBgxFjAUBgNV BAMTDTY3NDE2NzdkLWRjMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSj849fwr2KS5DFokVuo62VosXh3NJsDUWVUcaBJF8QCFpbAr9okI7kN0R/hib IbnTWKbyQwH8yLn9tElprH3mMYHFAMUDNUekOui4Cw49imIULL20AswsiMe/olea sxl+/VglwzqFX3vomHXfdog23m/177u19PtytI2b1lcLCOfYPfV41+j0G2EHY9lm bDqOvSYhKvQ5zL8UXzrr4SeVOQznCpRMybgzcapM1EgDGpxxfc5U+1RMNtFo2oC6 TTJKz39TLgEn5gTytleJzK7LnDyeVYeI6CctmBrWhb+Hfx89l2KW42pINEawVB6a 7wTWep6Y/29UCmkbePDDQoojAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpfwCn7is H9hS1EcD9YtSIi+UYpkwHwYDVR0jBBgwFoAUhELcRgJABgEa1c9IzX5MSLuXoR4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzMTM0L0U2NUZBOEEwNTQ1 MzExRUY4QUQ3NzQwOUM0RjlBRTAyL2hFTGNSZ0pBQmdFYTFjOUl6WDVNU0x1WG9S NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEVMY1JnSkFCZ0VhMWM5SXpYNU1TTHVYb1I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz MTM0L0U2NUZBOEEwNTQ1MzExRUY4QUQ3NzQwOUM0RjlBRTAyL2hFTGNSZ0pBQmdF YTFjOUl6WDVNU0x1WG9SNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAANqpE1J+Igk4J8TLDasr6KLSoP68LZQPzS9GA+k2tUtpscfhsEIgpV KNwATNwf9W1tFN/ZTNmhhVV059tXUF7U4xgAKRbIQJKk6k9WHIu9+o+jfj9vZGgX VdNiYUQcbSX1KyFxrpqOJHhciCQtvDUtTgkH36cRfEnoa6vBnwdanABd7KxqDZrf 1nUTxeFuh0q+RrT4KwM7HtJUecIpw7TKpK6axQ7TVvbeSO31+iQDb/ujmMhIoXL5 IYlhH2JFz4XKYekSxdW3/1UujpmEOMApPrhpahob8/ZFGu8nNRwiQRGP1pXpoIB3 qBMlVZoG5GUVY7wDVXfL5dwnBWP/9PQ= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:24 2024 by rpki-client on console-fra.rpki-client.org