$ rpki-client -vvf rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft File: j3AW2iLylktW9Cz0bZ8SOvNoMas.mft (raw, json) Hash identifier: lNVjADYZ4AhDfCiZBVK2gUCuoL0GWGlXplJYjFu5eOs= Subject key identifier: E4:F8:3E:15:F4:8B:64:07:1A:EF:67:D9:9A:4F:C8:A8:BF:4A:75:EA Authority key identifier: 8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB Certificate issuer: /CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft Manifest number: 010F Signing time: Sat 23 Nov 2024 03:10:01 +0000 Manifest this update: Sat 23 Nov 2024 03:10:01 +0000 Manifest next update: Sat 30 Nov 2024 03:10:01 +0000 Files and hashes: 1: j3AW2iLylktW9Cz0bZ8SOvNoMas.crl (hash: vyL/ou6eO5b5rrYQcUuXL3obgOI1ldevuuNK9hgXV4s=) 2: 87695D32591811EE973B1058C4F9AE02.roa (hash: dzvekpBIKEZcV3J3iTc2a3q9pWoOoEEAik7qmwT7yrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91884A1/serialNumber=8F7016DA22F2964B56F42CF46D9F123AF36831AB Validity Not Before: Nov 23 03:10:01 2024 GMT Not After : Nov 30 03:10:01 2024 GMT Subject: CN=67414789-16b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:88:bd:be:3c:55:6f:7b:db:57:f0:1b:c3: 7b:12:41:f2:86:2a:20:9c:17:74:f5:63:bb:89:7e: 79:37:f5:6d:70:d1:e4:08:26:5a:56:79:55:84:ca: 09:7c:e9:83:ff:5e:21:59:c1:d6:6f:7c:e6:42:0d: a8:3c:51:96:56:c1:7f:ae:64:fa:b7:b5:5b:60:0b: 22:a5:95:7b:0d:2a:47:b8:12:ce:93:49:98:bd:a7: 33:33:f5:9b:6a:65:55:12:9f:7a:2a:8c:2b:2a:15: 0a:cc:d6:bc:e0:b7:bc:5e:06:37:ca:ac:2e:b2:12: 2f:ab:16:2e:89:1f:50:84:80:4d:aa:d6:a3:a9:64: 3c:f5:87:1c:ca:f5:1b:dc:c5:bc:fa:55:85:e6:94: ad:ca:c2:72:7a:25:71:4f:8f:19:a8:17:80:44:99: 5c:4d:82:8f:14:8c:10:3b:53:02:d1:09:ee:85:89: 05:9e:0b:40:a8:49:d0:28:56:29:7a:52:06:9a:9e: 3a:6a:b7:b5:d0:d4:e4:82:b7:7a:48:c9:72:c5:77: 4b:71:af:e4:77:9e:3b:15:db:b9:97:a8:a8:8d:e3: 97:2b:a4:2f:82:b1:7c:bd:7c:73:18:7f:48:ec:42: 7c:6d:98:5b:dd:b2:89:72:3d:d4:ad:f3:6b:60:0a: b4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F8:3E:15:F4:8B:64:07:1A:EF:67:D9:9A:4F:C8:A8:BF:4A:75:EA X509v3 Authority Key Identifier: keyid:8F:70:16:DA:22:F2:96:4B:56:F4:2C:F4:6D:9F:12:3A:F3:68:31:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j3AW2iLylktW9Cz0bZ8SOvNoMas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884A1/D7DB1C60149E11EEABDC7532C4F9AE02/j3AW2iLylktW9Cz0bZ8SOvNoMas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:47:f3:45:47:93:26:51:25:ea:1c:ac:70:95:66:d6:9c:ed: ca:ac:c9:a8:47:c6:4a:0a:7e:53:86:07:15:76:13:52:0a:9d: bd:8f:d1:bb:fb:b1:21:f6:aa:54:d3:80:1c:27:76:3a:d1:70: 88:53:f5:4c:1d:e9:db:9c:b0:71:27:16:8a:18:ab:e6:d9:cf: 30:8d:a8:73:29:d4:8c:93:b6:f4:e8:95:cf:6d:9e:e0:01:c1: 08:44:f1:1e:ad:ef:55:01:89:9a:d5:46:7f:d9:b2:f2:c0:52: 0d:71:64:8d:d3:bb:58:3e:f1:4d:f8:22:ee:52:bc:79:5f:20: ec:cc:49:87:6e:2f:1f:93:93:0a:dc:69:89:ac:87:23:92:52: f1:99:f9:a4:26:2d:74:71:72:79:9d:d1:f3:43:fe:c6:e5:7a: 47:86:1e:cd:79:e9:b3:31:a2:51:3e:2f:56:ec:cb:54:71:18: 64:8c:a1:80:a3:b8:cc:b4:6a:3b:4d:1b:d7:f1:ac:db:b0:b8: 9c:47:8d:cc:60:b7:77:a2:5f:9a:81:e1:38:86:ad:5e:2b:bb: e7:62:c6:b6:38:cc:5a:a7:27:f0:e8:4b:bd:a6:25:09:01:02: 91:f2:df:5c:4c:c5:5c:38:60:f3:4e:c8:29:d6:dc:c3:8c:0a: fd:d0:bd:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg0QTExMTAvBgNVBAUTKDhGNzAxNkRBMjJGMjk2NEI1NkY0MkNGNDZEOUYxMjNB RjM2ODMxQUIwHhcNMjQxMTIzMDMxMDAxWhcNMjQxMTMwMDMxMDAxWjAYMRYwFAYD VQQDEw02NzQxNDc4OS0xNmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLCIvb48VW9721fwG8N7EkHyhiognBd09WO7iX55N/VtcNHkCCZaVnlVhMoJ fOmD/14hWcHWb3zmQg2oPFGWVsF/rmT6t7VbYAsipZV7DSpHuBLOk0mYvaczM/Wb amVVEp96KowrKhUKzNa84Le8XgY3yqwushIvqxYuiR9QhIBNqtajqWQ89YccyvUb 3MW8+lWF5pStysJyeiVxT48ZqBeARJlcTYKPFIwQO1MC0QnuhYkFngtAqEnQKFYp elIGmp46are10NTkgrd6SMlyxXdLca/kd547Fdu5l6iojeOXK6QvgrF8vXxzGH9I 7EJ8bZhb3bKJcj3UrfNrYAq0DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT4PhX0 i2QHGu9n2ZpPyKi/SnXqMB8GA1UdIwQYMBaAFI9wFtoi8pZLVvQs9G2fEjrzaDGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODRBMS9EN0RCMUM2MDE0 OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxrdFc5Q3owYlo4U092Tm9N YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ozQVcyaUx5bGt0VzlDejBiWjhTT3ZOb01hcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODRBMS9EN0RCMUM2MDE0OUUxMUVFQUJEQzc1MzJDNEY5QUUwMi9qM0FXMmlMeWxr dFc5Q3owYlo4U092Tm9NYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDER/NFR5MmUSXqHKxwlWbWnO3KrMmoR8ZKCn5ThgcVdhNSCp29j9G7 +7Eh9qpU04AcJ3Y60XCIU/VMHenbnLBxJxaKGKvm2c8wjahzKdSMk7b06JXPbZ7g AcEIRPEere9VAYma1UZ/2bLywFINcWSN07tYPvFN+CLuUrx5XyDszEmHbi8fk5MK 3GmJrIcjklLxmfmkJi10cXJ5ndHzQ/7G5XpHhh7NeemzMaJRPi9W7MtUcRhkjKGA o7jMtGo7TRvX8azbsLicR43MYLd3ol+ageE4hq1eK7vnYsa2OMxapyfw6Eu9piUJ AQKR8t9cTMVcOGDzTsgp1tzDjAr90L0V -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org