$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft File: Zctcy-UxzE70Kh0wffe0XLDpdNk.mft (raw, json) Hash identifier: Md04V12yxAYv5Lc0muLiy2gMoqkFiScfeVRzV6tHo9o= Subject key identifier: F7:8E:A0:A6:AE:EC:C9:27:54:1B:57:A8:33:74:23:A9:25:3F:AD:87 Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Certificate serial: 084E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft Manifest number: 0848 Signing time: Fri 22 Nov 2024 20:26:43 +0000 Manifest this update: Fri 22 Nov 2024 20:26:42 +0000 Manifest next update: Fri 29 Nov 2024 20:26:42 +0000 Files and hashes: 1: Zctcy-UxzE70Kh0wffe0XLDpdNk.crl (hash: G5WeH/2kB39QW7YiAS3CBeBhtcc3yyMu6nU3huxAlN0=) 2: 593FC45EB89011EA8C060064C4F9AE02.roa (hash: GNTtQ5EmAt4jwHyNzDkJrVxnNcCezotTwTzcnNPHMDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2126 (0x84e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9 Validity Not Before: Nov 22 20:26:42 2024 GMT Not After : Nov 29 20:26:42 2024 GMT Subject: CN=6740e902-ccb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:aa:d2:7b:9a:a5:a7:cf:24:61:f0:5b:c3: a8:30:44:df:af:6f:98:16:f9:d0:97:95:2c:23:bd: ed:b7:f6:b1:96:e5:d0:0d:59:4d:f3:29:62:25:87: 86:9f:1c:b7:f7:ae:81:62:00:7b:81:e2:5b:bb:78: a8:e7:15:9c:69:28:76:07:f0:c5:3f:41:2d:e1:28: fd:ac:f3:05:dd:52:1d:18:a8:18:54:14:6d:40:af: 39:67:c1:83:12:6f:96:fd:f6:6c:a8:cd:ae:04:1a: 9e:86:18:89:91:23:5b:f7:f2:5d:36:7b:24:d1:7f: e0:1f:9b:e1:0f:8a:bf:ec:b9:bb:e8:5e:95:23:87: be:4e:00:00:e1:5e:65:c4:d3:cd:2f:fc:d4:1c:4b: 0a:35:a5:6b:c7:71:cb:99:ce:7c:f9:71:17:b9:c2: 03:97:0f:79:4e:cc:50:40:84:28:05:55:a6:1d:06: b8:2f:55:88:1c:62:3c:ed:07:5e:18:1c:72:49:53: 73:8e:6b:5b:e7:aa:ac:a4:74:98:b3:0c:a5:d2:eb: 45:5a:1a:3f:1f:28:26:c1:d6:df:ca:1d:f0:66:8c: 7d:88:1b:33:fb:c6:66:4e:44:17:d7:fb:85:8e:f2: fe:96:a6:5a:6e:62:25:31:20:69:8c:1f:c5:03:52: 36:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8E:A0:A6:AE:EC:C9:27:54:1B:57:A8:33:74:23:A9:25:3F:AD:87 X509v3 Authority Key Identifier: keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:f0:b4:6c:a8:bb:01:af:5a:f1:28:9c:5f:9e:12:76:f3:1c: 35:99:d9:34:da:17:2c:c2:b7:37:ff:95:40:9a:32:2d:8d:17: e6:aa:f6:b3:a3:3a:e2:81:c1:9a:79:a1:31:a7:1e:68:d5:52: b1:a0:50:5e:bb:26:d5:fb:8f:b1:ff:15:9f:1f:95:45:e8:41: 1d:d2:95:51:69:29:98:25:c2:90:76:b8:18:08:9b:9c:6c:0b: 96:5b:47:79:7e:48:bc:18:7c:a7:4e:7f:19:34:1d:41:8d:3e: 37:d2:17:87:c5:5f:f5:65:6c:46:55:29:1b:0d:ef:a4:3a:82: b9:7c:fb:e2:15:3e:49:a8:7d:ab:04:b5:24:7b:c5:b2:ba:7c: b5:5f:13:41:9e:e3:99:6e:ab:83:b9:fd:f4:56:64:43:ad:c1: e1:19:57:ee:7a:e3:7d:1c:94:40:82:30:2b:76:f3:a3:a9:c2: 4d:c8:28:be:f1:15:2c:af:fc:47:80:c2:61:7c:4f:bf:ba:66: 1c:1e:81:2e:62:9a:56:1a:8f:a7:44:71:89:cc:9b:ee:70:be: 3b:80:8b:4e:f5:9f:2d:f2:b1:b2:7b:5e:0d:04:73:a7:f5:da: 38:f7:2d:d7:7f:e8:5d:86:11:ec:d6:48:8d:ca:b6:f4:e5:66: c7:99:fd:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ1MUQxMTAvBgNVBAUTKDY1Q0I1Q0NCRTUzMUNDNEVGNDJBMUQzMDdERjdCNDVD QjBFOTc0RDkwHhcNMjQxMTIyMjAyNjQyWhcNMjQxMTI5MjAyNjQyWjAYMRYwFAYD VQQDEw02NzQwZTkwMi1jY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8yq0nuapafPJGHwW8OoMETfr2+YFvnQl5UsI73tt/axluXQDVlN8yliJYeG nxy3966BYgB7geJbu3io5xWcaSh2B/DFP0Et4Sj9rPMF3VIdGKgYVBRtQK85Z8GD Em+W/fZsqM2uBBqehhiJkSNb9/JdNnsk0X/gH5vhD4q/7Lm76F6VI4e+TgAA4V5l xNPNL/zUHEsKNaVrx3HLmc58+XEXucIDlw95TsxQQIQoBVWmHQa4L1WIHGI87Qde GBxySVNzjmtb56qspHSYswyl0utFWho/Hygmwdbfyh3wZox9iBsz+8ZmTkQX1/uF jvL+lqZabmIlMSBpjB/FA1I2uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeOoKau 7MknVBtXqDN0I6klP62HMB8GA1UdIwQYMBaAFGXLXMvlMcxO9CodMH33tFyw6XTZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDUxRC81Q0IxRUEwNkI4 OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpFNzBLaDB3ZmZlMFhMRHBk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pjdGN5LVV4ekU3MEtoMHdmZmUwWExEcGROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDUxRC81Q0IxRUEwNkI4OEUxMUVBQkEzM0FDNjFDNEY5QUUwMi9aY3RjeS1VeHpF NzBLaDB3ZmZlMFhMRHBkTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK8LRsqLsBr1rxKJxfnhJ28xw1mdk02hcswrc3/5VAmjItjRfmqvaz ozrigcGaeaExpx5o1VKxoFBeuybV+4+x/xWfH5VF6EEd0pVRaSmYJcKQdrgYCJuc bAuWW0d5fki8GHynTn8ZNB1BjT430heHxV/1ZWxGVSkbDe+kOoK5fPviFT5JqH2r BLUke8Wyuny1XxNBnuOZbquDuf30VmRDrcHhGVfueuN9HJRAgjArdvOjqcJNyCi+ 8RUsr/xHgMJhfE+/umYcHoEuYppWGo+nRHGJzJvucL47gItO9Z8t8rGye14NBHOn 9do49y3Xf+hdhhHs1kiNyrb05WbHmf1q -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org