$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft File: L927RfNPJhkzrCt9Z6xz05Op0WQ.mft (raw, json) Hash identifier: p/zA9TgkLZg15rAsy41mH6ESyOWTtBNzx/EEnODpeew= Subject key identifier: DD:AF:9E:3B:7B:82:09:69:D0:71:32:26:6C:7C:32:02:D9:86:FD:E1 Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64 Certificate issuer: /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164 Certificate serial: 02F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft Manifest number: 02EF Signing time: Sat 23 Nov 2024 00:50:50 +0000 Manifest this update: Sat 23 Nov 2024 00:50:50 +0000 Manifest next update: Sat 30 Nov 2024 00:50:50 +0000 Files and hashes: 1: L927RfNPJhkzrCt9Z6xz05Op0WQ.crl (hash: w0SWR3pazc+QOVfR7haG+TbOb1+kMYxk6JLlyy1xako=) 2: 2C7BB8BAB92411EC8E787A55C4F9AE02.roa (hash: +dFNC6bX5H+V6njzLbV2Ca6KkTrT3TtAm0EkKfPs5f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164 Validity Not Before: Nov 23 00:50:50 2024 GMT Not After : Nov 30 00:50:50 2024 GMT Subject: CN=674126ea-98bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a5:d3:09:e2:fe:01:9e:a0:eb:c6:67:4b:ad: 58:a2:50:8d:a4:ab:55:2f:e8:dc:13:b5:36:08:38: 34:cb:23:12:7f:f1:3d:3c:36:c0:c0:bb:e4:22:20: 87:69:50:f2:77:50:da:52:4d:c8:c4:34:96:25:1a: 18:19:0e:6e:a4:7b:30:d4:a4:6d:46:f7:f6:d9:ad: 80:46:91:f0:ef:a0:bf:54:02:5b:82:ff:36:f8:01: 14:e1:85:6d:a6:3f:0b:fa:e2:9b:01:0d:7e:02:60: d1:63:0e:73:45:df:f3:09:b1:81:19:d7:db:97:1d: af:ce:1e:9b:c8:86:98:7f:d9:f1:16:73:fa:10:e8: 5f:10:26:01:80:b2:6c:cb:e3:e9:70:02:c3:3c:7f: 68:80:90:96:00:22:d8:6a:78:f1:4f:e8:46:04:96: 9f:6a:d9:95:97:63:a8:19:28:f4:82:c0:af:24:f4: 40:7b:ea:cd:d7:f0:8c:35:06:b7:78:b6:81:73:6f: 7d:ed:b8:54:7e:62:52:f9:ab:6b:14:84:1d:45:05: 5f:1c:4f:d3:b6:06:8d:43:79:da:9b:da:54:24:b0: 8b:93:72:84:dd:ef:c6:2f:b3:50:cc:2b:95:56:d0: d7:82:d7:5e:52:ca:94:a9:68:da:43:5d:77:56:c9: ce:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AF:9E:3B:7B:82:09:69:D0:71:32:26:6C:7C:32:02:D9:86:FD:E1 X509v3 Authority Key Identifier: keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:09:fb:1a:8b:95:08:70:ff:79:4b:4e:b4:9e:80:6c:72:9f: 03:cc:32:59:bc:d4:e3:85:56:c7:bf:3c:04:f6:11:d6:ef:d9: 57:b4:c4:9e:14:a5:27:ca:16:70:c7:88:dd:f7:bb:e8:1f:7a: 33:7e:66:7e:45:fe:c9:6c:d0:8b:12:5a:80:07:f3:a5:85:5a: ac:9b:34:42:1d:a7:aa:c6:74:10:66:75:16:69:81:d0:8c:fa: 2d:64:84:cc:f2:15:4c:44:2e:eb:41:2c:37:2a:5f:6b:c1:7c: 4c:0d:e2:3e:62:94:8c:82:3b:f5:0f:32:20:94:b1:e0:3b:80: 55:7c:4e:76:12:86:38:0c:df:93:b2:e7:d7:cc:69:54:23:e6: d5:b6:0b:ef:7b:0f:bb:9c:1c:5b:ad:e0:bb:6d:2d:33:e1:b1: db:49:8b:dd:1c:24:8b:ae:35:24:4d:af:43:b9:f3:a7:3d:9a: 4b:1c:de:d9:7d:b8:af:00:04:9b:7d:71:bb:13:dd:ed:95:a6: 71:75:80:0b:18:93:6b:97:92:f9:0a:76:13:32:c0:e3:b8:2f: 75:82:53:43:b4:87:3e:cd:4b:27:3f:dc:ba:b9:eb:85:8d:6b: 8a:cd:aa:43:f1:18:98:7a:05:a9:be:89:8a:ad:14:fc:38:f6: 8f:72:59:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQjAxMTAvBgNVBAUTKDJGRERCQjQ1RjM0RjI2MTkzM0FDMkI3RDY3QUM3M0Qz OTNBOUQxNjQwHhcNMjQxMTIzMDA1MDUwWhcNMjQxMTMwMDA1MDUwWjAYMRYwFAYD VQQDEw02NzQxMjZlYS05OGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaXTCeL+AZ6g68ZnS61YolCNpKtVL+jcE7U2CDg0yyMSf/E9PDbAwLvkIiCH aVDyd1DaUk3IxDSWJRoYGQ5upHsw1KRtRvf22a2ARpHw76C/VAJbgv82+AEU4YVt pj8L+uKbAQ1+AmDRYw5zRd/zCbGBGdfblx2vzh6byIaYf9nxFnP6EOhfECYBgLJs y+PpcALDPH9ogJCWACLYanjxT+hGBJafatmVl2OoGSj0gsCvJPRAe+rN1/CMNQa3 eLaBc2997bhUfmJS+atrFIQdRQVfHE/TtgaNQ3nam9pUJLCLk3KE3e/GL7NQzCuV VtDXgtdeUsqUqWjaQ113VsnOnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2vnjt7 gglp0HEyJmx8MgLZhv3hMB8GA1UdIwQYMBaAFC/du0XzTyYZM6wrfWesc9OTqdFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNCMC82MTg2NzMyQ0I5 MjExMUVDQkRGRkY2NTNDNEY5QUUwMi9MOTI3UmZOUEpoa3pyQ3Q5WjZ4ejA1T3Aw V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5MjdSZk5QSmhrenJDdDlaNnh6MDVPcDBXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUNCMC82MTg2NzMyQ0I5MjExMUVDQkRGRkY2NTNDNEY5QUUwMi9MOTI3UmZOUEpo a3pyQ3Q5WjZ4ejA1T3AwV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/Cfsai5UIcP95S060noBscp8DzDJZvNTjhVbHvzwE9hHW79lXtMSe FKUnyhZwx4jd97voH3ozfmZ+Rf7JbNCLElqAB/OlhVqsmzRCHaeqxnQQZnUWaYHQ jPotZITM8hVMRC7rQSw3Kl9rwXxMDeI+YpSMgjv1DzIglLHgO4BVfE52EoY4DN+T sufXzGlUI+bVtgvvew+7nBxbreC7bS0z4bHbSYvdHCSLrjUkTa9DufOnPZpLHN7Z fbivAASbfXG7E93tlaZxdYALGJNrl5L5CnYTMsDjuC91glNDtIc+zUsnP9y6ueuF jWuKzapD8RiYegWpvomKrRT8OPaPcln9 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:40 2024 by rpki-client on console-fra.rpki-client.org