$ rpki-client -vvf rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft File: k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft (raw, json) Hash identifier: Mu52IWc4z85MXDg3IhazgoyYVFXNHkslEoQtv2fw67k= Subject key identifier: 38:60:69:EC:51:DB:E0:C9:A5:AE:2E:D2:88:02:DE:23:C6:24:19:FE Authority key identifier: 93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7 Certificate issuer: /CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7 Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft Manifest number: 04D1 Signing time: Fri 22 Nov 2024 23:20:46 +0000 Manifest this update: Fri 22 Nov 2024 23:20:45 +0000 Manifest next update: Fri 29 Nov 2024 23:20:45 +0000 Files and hashes: 1: k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl (hash: zbR7NnMPxy9jHpBmdshthZymEmFecHwm/mpLulZ0Ik0=) 2: CE00DA34FF4411EBAD3A632AC4F9AE02.roa (hash: W2CC03Iszn8+ulcJ3T40dvVEepYKJ/v5C7sNO7bHna0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917584F/serialNumber=934ADFB94A39A0C37B77F97903706B61F0BEFEE7 Validity Not Before: Nov 22 23:20:45 2024 GMT Not After : Nov 29 23:20:45 2024 GMT Subject: CN=674111cd-8bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:8a:cb:e5:aa:d5:dc:77:a5:03:05:54:8f: 65:0a:62:2d:b6:55:74:a1:a3:93:69:c3:90:22:7c: c6:28:31:d9:62:85:53:84:ac:97:4a:e4:bb:e1:d5: 5f:97:1d:8f:82:c6:68:68:02:b9:e7:4e:c8:3e:78: 25:ab:c1:ea:36:10:f3:c4:ee:0d:d6:1b:08:e0:e8: ff:50:9b:40:a0:9a:fb:b1:9e:a5:f3:10:d7:32:1f: 58:f7:85:67:a1:f4:e7:c7:cd:d9:8b:9c:04:23:61: 83:ad:7a:b4:f1:6b:73:38:73:fd:72:4c:fe:22:76: ae:75:4c:dd:da:d5:23:28:ad:03:e5:8c:86:a9:ac: 68:a5:9b:83:4f:da:da:8c:51:51:79:ee:df:07:52: 92:7a:a8:f2:c2:2e:4f:5e:a3:78:25:a7:8d:fe:e5: 39:5e:32:aa:57:bc:43:57:67:b0:97:1a:b4:38:9c: 07:c5:92:52:55:3f:0c:2b:0a:02:94:c1:99:47:69: e1:ea:51:b7:60:89:1d:ca:96:c5:81:a2:60:f7:59: 32:cb:e7:ca:11:10:33:fe:2c:7d:54:fd:7f:bc:dd: 94:d5:0b:bf:b4:ec:25:68:28:7d:83:00:80:9a:2d: 1f:18:f7:64:49:b2:05:85:19:77:ca:91:63:66:37: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:60:69:EC:51:DB:E0:C9:A5:AE:2E:D2:88:02:DE:23:C6:24:19:FE X509v3 Authority Key Identifier: keyid:93:4A:DF:B9:4A:39:A0:C3:7B:77:F9:79:03:70:6B:61:F0:BE:FE:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0rfuUo5oMN7d_l5A3BrYfC-_uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917584F/DD72CE58F9C911EB9555B36AC4F9AE02/k0rfuUo5oMN7d_l5A3BrYfC-_uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:6a:5d:f9:82:fd:6e:06:96:5b:af:fe:c5:78:e1:75:e0:90: 7c:e2:28:de:00:e5:59:9b:91:55:23:d6:c6:ae:d7:05:12:74: d7:ab:fe:3b:52:f8:46:e6:9d:11:85:78:64:85:a4:8a:18:da: b6:fd:34:3c:f2:19:44:cc:ab:91:3e:0c:f8:c8:ab:96:a9:3c: 2a:a2:18:4e:b2:5e:02:b4:d3:ff:9b:8e:97:8b:94:78:f3:a6: 55:4e:2f:b7:08:89:a8:30:2f:b0:8a:93:a4:5b:8c:ed:d7:0c: 37:cf:f4:1c:fb:1c:27:cf:43:6c:1c:a6:60:90:f0:1e:f6:ba: 35:b9:cf:6e:19:8e:96:fb:24:99:33:6e:ef:68:3f:9f:26:26: 64:45:19:b7:21:e4:ac:b6:bc:23:6c:5a:50:c3:ef:8c:0b:5c: a8:83:c0:fc:da:f3:63:fc:0d:bf:97:6f:56:90:b8:9b:95:a1: b8:be:10:66:39:7c:48:76:2a:fe:2b:ba:9c:de:d0:4b:b1:ae: 1f:d0:8f:67:de:bf:65:a3:2f:69:4a:9f:da:7d:6e:43:c5:80: d8:dd:44:2c:e1:aa:f9:c9:46:37:49:2c:38:60:64:c9:d8:5b: f6:d9:5f:b1:1a:7e:1b:60:04:fd:39:16:bf:88:10:11:d4:69: 94:27:c9:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4NEYxMTAvBgNVBAUTKDkzNEFERkI5NEEzOUEwQzM3Qjc3Rjk3OTAzNzA2QjYx RjBCRUZFRTcwHhcNMjQxMTIyMjMyMDQ1WhcNMjQxMTI5MjMyMDQ1WjAYMRYwFAYD VQQDEw02NzQxMTFjZC04YmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQOKy+Wq1dx3pQMFVI9lCmIttlV0oaOTacOQInzGKDHZYoVThKyXSuS74dVf lx2PgsZoaAK5507IPnglq8HqNhDzxO4N1hsI4Oj/UJtAoJr7sZ6l8xDXMh9Y94Vn ofTnx83Zi5wEI2GDrXq08WtzOHP9ckz+InaudUzd2tUjKK0D5YyGqaxopZuDT9ra jFFRee7fB1KSeqjywi5PXqN4JaeN/uU5XjKqV7xDV2ewlxq0OJwHxZJSVT8MKwoC lMGZR2nh6lG3YIkdypbFgaJg91kyy+fKERAz/ix9VP1/vN2U1Qu/tOwlaCh9gwCA mi0fGPdkSbIFhRl3ypFjZjf4CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhgaexR 2+DJpa4u0ogC3iPGJBn+MB8GA1UdIwQYMBaAFJNK37lKOaDDe3f5eQNwa2Hwvv7n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTg0Ri9ERDcyQ0U1OEY5 QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9NTjdkX2w1QTNCcllmQy1f dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swcmZ1VW81b01ON2RfbDVBM0JyWWZDLV91Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTg0Ri9ERDcyQ0U1OEY5QzkxMUVCOTU1NUIzNkFDNEY5QUUwMi9rMHJmdVVvNW9N TjdkX2w1QTNCcllmQy1fdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFal35gv1uBpZbr/7FeOF14JB84ijeAOVZm5FVI9bGrtcFEnTXq/47 UvhG5p0RhXhkhaSKGNq2/TQ88hlEzKuRPgz4yKuWqTwqohhOsl4CtNP/m46Xi5R4 86ZVTi+3CImoMC+wipOkW4zt1ww3z/Qc+xwnz0NsHKZgkPAe9ro1uc9uGY6W+ySZ M27vaD+fJiZkRRm3IeSstrwjbFpQw++MC1yog8D82vNj/A2/l29WkLiblaG4vhBm OXxIdir+K7qc3tBLsa4f0I9n3r9loy9pSp/afW5DxYDY3UQs4ar5yUY3SSw4YGTJ 2Fv22V+xGn4bYAT9ORa/iBAR1GmUJ8lc -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org