$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft File: RS-rvfCd335V_Q-dvd1CePRPuIE.mft (raw, json) Hash identifier: FlC1DOPnB/2onCc/MYbVweDwACMQVPAOBJK5K6wy6sw= Subject key identifier: 8C:EA:EF:48:7F:9D:80:8D:AE:12:78:57:15:10:BD:B4:55:F0:97:31 Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Certificate serial: 0508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft Manifest number: 04EC Signing time: Fri 22 Nov 2024 23:19:56 +0000 Manifest this update: Fri 22 Nov 2024 23:19:56 +0000 Manifest next update: Fri 29 Nov 2024 23:19:56 +0000 Files and hashes: 1: RS-rvfCd335V_Q-dvd1CePRPuIE.crl (hash: ijvGzFm4h/pwdQf83HRMKvbprOUVlGHXdFnBOOIX7ts=) 2: C54C42C04D7611EEA69CE262C4F9AE02.roa (hash: 3vGbgZeBX2ux3qD/sA/eOOnJkTBw50rlrCAjdQKlgEE=) 3: 243C54088DAC11EEBFC67C56C4F9AE02.roa (hash: d+RqpuraWUD40ELZhs21dvZM9ou6Dv/SvxQ0Bu6TyaQ=) 4: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (hash: i9dMAMF25KUvras5KvDG1QM1xBWeYt+C+ALZFoy+wTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881 Validity Not Before: Nov 22 23:19:56 2024 GMT Not After : Nov 29 23:19:56 2024 GMT Subject: CN=6741119c-cdfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c3:22:f2:3c:6c:9c:7c:5b:ba:15:65:fc:c6: 10:93:eb:cf:ac:4c:17:3a:87:01:c9:be:a7:b9:f6: 26:c3:80:5f:7b:d5:f7:d2:52:3d:d5:e2:c1:1d:83: bc:04:89:73:18:39:8b:7f:9a:a9:89:ca:5f:54:22: 7e:ec:83:0b:b0:42:a3:0a:a5:02:94:d4:c4:bf:0a: f5:30:39:e0:39:4d:a0:77:d6:2d:35:c5:5b:10:20: 8d:4a:41:ac:21:fb:10:1c:29:c2:67:23:61:41:46: 58:50:e6:8d:ee:8a:ae:5f:65:70:d2:30:40:95:3d: 05:b1:a8:09:9e:72:c8:84:f6:74:74:64:15:61:1a: 15:13:5f:79:e8:de:97:f0:0c:f4:94:41:6f:45:34: 43:77:1b:05:17:f0:10:81:0d:33:3e:c6:e5:14:4a: 91:84:0e:1d:b2:44:ad:b4:6d:5f:bc:60:5e:6a:ae: 9d:b3:72:2e:92:c4:88:a5:4a:e1:1a:d4:f4:12:b4: df:8a:31:c0:ac:e3:5d:f0:47:49:a2:d8:bb:c9:b7: 9d:48:50:6b:e2:61:e5:5a:db:02:07:f0:95:09:03: 7b:0f:8b:ed:b0:4e:f1:49:6b:23:a9:30:a1:25:53: d2:a4:70:40:e9:fc:4f:08:49:4b:b5:13:e0:98:92: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EA:EF:48:7F:9D:80:8D:AE:12:78:57:15:10:BD:B4:55:F0:97:31 X509v3 Authority Key Identifier: keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d0:5d:c1:41:30:ca:fa:c9:03:d5:cf:b0:9f:b4:a2:c3:f0: f9:06:79:fb:42:78:97:cd:13:73:34:a4:6e:84:40:b9:1f:eb: 7f:04:75:5e:13:0d:9e:24:81:41:c0:b7:d8:e1:e8:a5:55:41: 51:81:eb:6b:20:21:bb:ff:eb:98:83:5d:84:8c:59:99:56:04: 47:04:94:f8:25:e3:a2:54:71:21:79:c3:49:0c:f2:02:5d:d5: ba:e1:d7:ad:90:18:6b:76:3a:bd:49:72:ce:ae:66:7e:49:7c: 19:31:dd:85:0f:91:8a:b1:e9:db:d8:79:81:de:e7:a4:72:e4: 05:00:a8:e5:e7:9a:22:74:81:07:6a:49:88:0f:d3:bb:f7:55: 97:43:a9:ad:67:d6:5e:d7:62:c2:cb:bb:61:13:3f:0d:da:da: c3:db:f2:ca:fb:4c:71:04:b4:a3:7a:d1:c3:77:8b:f6:78:99: 29:ac:f9:0c:fd:2c:f8:14:72:3d:69:dc:41:65:99:ef:7e:ef: 1a:98:4e:48:f2:89:f0:d0:10:c3:4f:02:2d:c9:fd:55:b8:bf: 88:e8:55:51:ce:b4:de:af:c2:65:f8:00:3b:61:b5:b1:7e:71: a8:06:40:3b:f7:5c:70:e7:42:5c:55:8c:92:9a:b0:ba:38:2c: 55:2e:ec:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U1REMxMTAvBgNVBAUTKDQ1MkZBQkJERjA5RERGN0U1NUZEMEY5REJEREQ0Mjc4 RjQ0RkI4ODEwHhcNMjQxMTIyMjMxOTU2WhcNMjQxMTI5MjMxOTU2WjAYMRYwFAYD VQQDEw02NzQxMTE5Yy1jZGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4sMi8jxsnHxbuhVl/MYQk+vPrEwXOocByb6nufYmw4Bfe9X30lI91eLBHYO8 BIlzGDmLf5qpicpfVCJ+7IMLsEKjCqUClNTEvwr1MDngOU2gd9YtNcVbECCNSkGs IfsQHCnCZyNhQUZYUOaN7oquX2Vw0jBAlT0FsagJnnLIhPZ0dGQVYRoVE1956N6X 8Az0lEFvRTRDdxsFF/AQgQ0zPsblFEqRhA4dskSttG1fvGBeaq6ds3IuksSIpUrh GtT0ErTfijHArONd8EdJoti7ybedSFBr4mHlWtsCB/CVCQN7D4vtsE7xSWsjqTCh JVPSpHBA6fxPCElLtRPgmJKVUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzq70h/ nYCNrhJ4VxUQvbRV8JcxMB8GA1UdIwQYMBaAFEUvq73wnd9+Vf0Pnb3dQnj0T7iB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTVEQy9CQkUyQjUwMkY4 RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMzNVZfUS1kdmQxQ2VQUlB1 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTLXJ2ZkNkMzM1Vl9RLWR2ZDFDZVBSUHVJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTVEQy9CQkUyQjUwMkY4RUIxMUVCQkVGNUFBMzdDNEY5QUUwMi9SUy1ydmZDZDMz NVZfUS1kdmQxQ2VQUlB1SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH0F3BQTDK+skD1c+wn7Siw/D5Bnn7QniXzRNzNKRuhEC5H+t/BHVe Ew2eJIFBwLfY4eilVUFRgetrICG7/+uYg12EjFmZVgRHBJT4JeOiVHEhecNJDPIC XdW64detkBhrdjq9SXLOrmZ+SXwZMd2FD5GKsenb2HmB3uekcuQFAKjl55oidIEH akmID9O791WXQ6mtZ9Ze12LCy7thEz8N2trD2/LK+0xxBLSjetHDd4v2eJkprPkM /Sz4FHI9adxBZZnvfu8amE5I8onw0BDDTwItyf1VuL+I6FVRzrTer8Jl+AA7YbWx fnGoBkA791xw50JcVYySmrC6OCxVLuxY -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org