$ rpki-client -vvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json) Hash identifier: O8OT0VZIvu+l64TWmti/zhh4R7WPJ0iNSA9V13hWCaI= Subject key identifier: 77:71:8E:F3:D8:33:CA:30:8E:68:24:DD:89:0D:6D:68:D6:1E:6D:C5 Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Certificate serial: 1D4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft Manifest number: 1D37 Signing time: Sun 24 Nov 2024 16:02:30 +0000 Manifest this update: Sun 24 Nov 2024 16:02:29 +0000 Manifest next update: Sun 01 Dec 2024 16:02:29 +0000 Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: 3yPmX83els1ViGgrGeDojPk0w8GTGh/bBtfZMnnF7Dg=) 2: 4865DD00A13B11E687921078C4F9AE02.roa (hash: l4TIlLgUtanRqCnFA7wAF3Zw9sbQUKuQo+OfishIyNI=) 3: 1D57FF40A01311E684546521C4F9AE02.roa (hash: PuGABu2c1P/wehIlvOPuKzUknEfhWkuOZcdE34NreFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7498 (0x1d4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Validity Not Before: Nov 24 16:02:29 2024 GMT Not After : Dec 1 16:02:29 2024 GMT Subject: CN=67434e15-2583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d4:4e:38:73:29:3a:75:cc:78:a9:36:23:76: 4a:da:c9:f9:c1:04:eb:1e:e2:42:ba:95:4f:36:52: 4b:26:0c:71:f7:75:b9:31:aa:66:f1:55:78:7c:27: a2:35:f8:4f:61:69:c2:7e:8b:8d:15:11:3b:da:75: 94:89:a5:ae:0d:28:3b:88:9b:2c:4f:52:a8:00:25: 1a:16:98:cd:2f:04:9e:d6:33:78:ee:25:7a:0c:6c: 32:ab:9f:84:77:93:28:64:9f:b5:55:81:20:6b:82: 6a:df:a4:66:56:2a:48:80:cf:dd:08:d6:3a:23:86: 1b:b2:35:f4:42:9e:f1:83:0f:b4:96:fe:92:c4:bc: 39:65:b1:ab:32:83:f3:9b:77:26:03:05:82:22:7d: 63:8f:39:bf:5e:c0:99:8b:0c:61:3d:d1:5f:31:2e: e9:8f:87:f4:df:a6:6e:b2:53:da:24:1b:15:84:bc: a1:da:ec:6c:26:db:96:3e:aa:a7:f5:b7:4f:ba:ab: 2c:a7:dc:6a:f1:01:8d:7c:05:69:19:c2:2c:64:48: 5b:d1:72:99:7f:25:58:6d:06:d5:f9:73:7a:21:f2: 7c:6e:0c:95:3a:f5:00:75:ab:19:72:52:04:1f:6b: e4:94:8d:86:f2:68:0f:4d:4f:d4:e5:44:8b:37:9a: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:71:8E:F3:D8:33:CA:30:8E:68:24:DD:89:0D:6D:68:D6:1E:6D:C5 X509v3 Authority Key Identifier: keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:23:64:99:c4:eb:e9:f2:ce:e7:1f:a4:bd:5c:f4:5a:ad:fd: 43:c5:85:8a:0c:52:47:f8:31:18:7b:34:ad:f2:cf:f4:de:8b: f4:2f:73:8e:83:84:29:d2:be:4f:01:17:dc:d0:d3:a0:5f:9e: d7:6f:ac:da:54:b9:d2:d4:36:89:5d:22:13:57:d3:97:e2:8a: e3:59:88:dc:52:78:00:0a:35:91:4b:27:7d:d8:34:e9:d7:a9: 6e:5c:77:f7:0d:27:92:f2:e9:32:44:d4:aa:2a:b6:19:95:76: b1:ab:db:76:bc:45:b5:d2:06:9e:6e:24:2b:ba:c2:98:a1:41: 4b:d9:f7:dd:89:95:55:7b:30:b4:c3:06:d4:54:15:7f:25:f3: af:13:56:d0:6b:39:9e:c6:82:af:05:09:4e:fd:d3:a8:5d:09: 5f:cd:3c:6f:99:5d:76:3b:90:9b:8a:cc:fa:1c:a8:04:92:e7: 0a:27:46:cb:29:88:fb:ab:23:eb:dd:52:b5:bc:c1:0a:8e:5c: 69:31:81:d9:10:78:b9:14:58:2a:00:8f:68:57:f9:84:56:12: 3d:a8:d5:39:ff:34:08:04:37:cb:2e:6e:4a:d2:45:c5:1b:3d: 38:44:fd:30:0d:7c:44:53:5f:23:cd:88:d2:8b:d0:21:6f:c7: 9f:e7:85:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxQjcxMTAvBgNVBAUTKEU0NzEzQzFCOUQ3NTc1OTI5NUFGNjRDREZCQTYyQjcw REI5QTA1MzcwHhcNMjQxMTI0MTYwMjI5WhcNMjQxMjAxMTYwMjI5WjAYMRYwFAYD VQQDEw02NzQzNGUxNS0yNTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dROOHMpOnXMeKk2I3ZK2sn5wQTrHuJCupVPNlJLJgxx93W5Mapm8VV4fCei NfhPYWnCfouNFRE72nWUiaWuDSg7iJssT1KoACUaFpjNLwSe1jN47iV6DGwyq5+E d5MoZJ+1VYEga4Jq36RmVipIgM/dCNY6I4YbsjX0Qp7xgw+0lv6SxLw5ZbGrMoPz m3cmAwWCIn1jjzm/XsCZiwxhPdFfMS7pj4f036ZuslPaJBsVhLyh2uxsJtuWPqqn 9bdPuqssp9xq8QGNfAVpGcIsZEhb0XKZfyVYbQbV+XN6IfJ8bgyVOvUAdasZclIE H2vklI2G8mgPTU/U5USLN5oomQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdxjvPY M8owjmgk3YkNbWjWHm3FMB8GA1UdIwQYMBaAFORxPBuddXWSla9kzfumK3DbmgU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjFCNy81RkExRUQzMDlF RjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRaS1ZyMlROLTZZcmNOdWFC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIRThHNTExZFpLVnIyVE4tNllyY051YUJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjFCNy81RkExRUQzMDlFRjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRa S1ZyMlROLTZZcmNOdWFCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABI2SZxOvp8s7nH6S9XPRarf1DxYWKDFJH+DEYezSt8s/03ov0L3OO g4Qp0r5PARfc0NOgX57Xb6zaVLnS1DaJXSITV9OX4orjWYjcUngACjWRSyd92DTp 16luXHf3DSeS8ukyRNSqKrYZlXaxq9t2vEW10gaebiQrusKYoUFL2ffdiZVVezC0 wwbUVBV/JfOvE1bQazmexoKvBQlO/dOoXQlfzTxvmV12O5Cbisz6HKgEkucKJ0bL KYj7qyPr3VK1vMEKjlxpMYHZEHi5FFgqAI9oV/mEVhI9qNU5/zQIBDfLLm5K0kXF Gz04RP0wDXxEU18jzYjSi9Ahb8ef54Vl -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:04 2024 by rpki-client on console-fra.rpki-client.org