$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft File: JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft (raw, json) Hash identifier: ltDDG9m5Ex4FeOdGdJXq8M/yFuNEGCCbFE62gh7FT50= Subject key identifier: 89:7C:AD:06:7F:DC:83:EC:F2:A1:14:7A:FC:9E:D4:E2:13:B7:1B:E6 Authority key identifier: 24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA Certificate issuer: /CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft Manifest number: 0459 Signing time: Fri 22 Nov 2024 23:43:58 +0000 Manifest this update: Fri 22 Nov 2024 23:43:57 +0000 Manifest next update: Fri 29 Nov 2024 23:43:57 +0000 Files and hashes: 1: JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl (hash: AW1jNyIEATh16wUbRjw9WFlYRm+WzBM9G8RH3hRylGE=) 2: 020CA7B24E4C11EC8045E71EC4F9AE02.roa (hash: tyZWDAn9bcgruEQUmKMpj2KMCjpkdyP72IeeYTIEOW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC73E/serialNumber=243F2D44727F1D1B8079F4014F69F4A074D1F1EA Validity Not Before: Nov 22 23:43:57 2024 GMT Not After : Nov 29 23:43:57 2024 GMT Subject: CN=6741173d-a153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:5b:85:e5:b9:4a:02:75:dc:ba:de:17:77: 62:6b:df:3b:49:c1:44:ae:6d:f7:93:cf:ac:d0:93: 33:f2:aa:74:13:a8:fe:d8:14:8d:b8:4d:da:e3:63: 37:db:d2:61:56:2b:3d:67:2d:4d:29:ce:2d:f5:b6: 31:9b:f0:09:a9:6a:bf:b0:18:f7:fc:f3:62:c1:36: f9:e2:4e:60:2d:a4:8f:42:16:58:c0:03:90:26:0a: 90:a3:cc:cc:07:86:a6:72:6b:c2:62:d6:b6:d4:27: 56:f6:70:c8:a9:6f:ed:48:ff:28:d6:6e:ca:39:37: 7e:b1:a1:82:49:ff:87:fc:af:40:00:40:2e:93:e6: cd:13:c9:52:39:52:f7:49:0c:ca:21:e8:80:a1:87: 85:99:cc:46:7f:66:1f:a2:94:d7:d3:07:78:23:82: 50:7f:e8:a3:08:8a:a0:04:71:cf:36:7a:b8:f8:d6: 02:37:aa:04:bb:14:3d:ee:49:97:7e:ac:e9:43:9b: c7:fe:44:7a:52:f2:2c:10:c2:fa:74:48:91:52:62: ca:f2:68:48:42:ee:39:f4:1e:59:f1:9a:8a:1c:4b: 4f:7c:98:71:fc:de:b7:cb:85:37:68:ad:85:d6:0e: b9:6c:7a:36:ac:e8:a0:11:e5:9d:cd:45:9e:68:de: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7C:AD:06:7F:DC:83:EC:F2:A1:14:7A:FC:9E:D4:E2:13:B7:1B:E6 X509v3 Authority Key Identifier: keyid:24:3F:2D:44:72:7F:1D:1B:80:79:F4:01:4F:69:F4:A0:74:D1:F1:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD8tRHJ_HRuAefQBT2n0oHTR8eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC73E/445545622C9511ECBEBC4248C4F9AE02/JD8tRHJ_HRuAefQBT2n0oHTR8eo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:7a:28:76:d5:87:fa:3f:ea:4a:2c:dd:0e:ca:d5:a2:c2:d5: 0f:fd:5c:03:6d:79:8d:2d:79:08:50:73:32:48:6f:bd:ae:d5: ab:1d:0a:ed:6b:53:83:70:e6:a7:1c:a8:f3:86:83:4a:9f:38: 14:18:63:01:e4:b3:83:f7:9b:84:c7:e5:ef:9e:f8:29:fb:12: 80:56:37:82:3f:15:e8:9b:46:91:a5:60:1e:dc:15:15:fd:3f: a4:2e:a1:87:bd:49:07:1c:d6:17:a1:68:b9:19:1f:a8:96:54: 3c:37:d2:0d:90:eb:63:6f:b7:b0:c9:8b:85:d6:5f:d2:25:51: ed:de:99:fa:b7:70:59:49:8a:e0:82:e5:71:ca:a4:4d:a3:64: bf:ee:76:fb:7f:a6:82:a3:c3:cf:ab:a5:af:5d:aa:1a:05:1b: 52:75:c4:0e:fe:0e:e2:9a:1b:03:72:b0:37:4d:3f:a3:df:73: 7d:46:85:c7:38:23:ca:1d:25:a0:fb:4f:49:f6:2b:7f:53:0e: b6:8e:5a:fc:b9:83:15:4a:8e:dc:a8:42:30:44:83:dc:19:46: 5e:4b:99:68:d4:27:13:72:16:28:22:73:de:88:df:54:c1:90: c2:fb:fb:3b:55:aa:dc:91:78:e0:8b:00:dd:53:5f:6f:84:14: 71:d9:22:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM3M0UxMTAvBgNVBAUTKDI0M0YyRDQ0NzI3RjFEMUI4MDc5RjQwMTRGNjlGNEEw NzREMUYxRUEwHhcNMjQxMTIyMjM0MzU3WhcNMjQxMTI5MjM0MzU3WjAYMRYwFAYD VQQDEw02NzQxMTczZC1hMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5JbheW5SgJ13LreF3dia987ScFErm33k8+s0JMz8qp0E6j+2BSNuE3a42M3 29JhVis9Zy1NKc4t9bYxm/AJqWq/sBj3/PNiwTb54k5gLaSPQhZYwAOQJgqQo8zM B4amcmvCYta21CdW9nDIqW/tSP8o1m7KOTd+saGCSf+H/K9AAEAuk+bNE8lSOVL3 SQzKIeiAoYeFmcxGf2YfopTX0wd4I4JQf+ijCIqgBHHPNnq4+NYCN6oEuxQ97kmX fqzpQ5vH/kR6UvIsEML6dEiRUmLK8mhIQu459B5Z8ZqKHEtPfJhx/N63y4U3aK2F 1g65bHo2rOigEeWdzUWeaN7IPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIl8rQZ/ 3IPs8qEUevye1OITtxvmMB8GA1UdIwQYMBaAFCQ/LURyfx0bgHn0AU9p9KB00fHq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzczRS80NDU1NDU2MjJD OTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hSdUFlZlFCVDJuMG9IVFI4 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEOHRSSEpfSFJ1QWVmUUJUMm4wb0hUUjhlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzczRS80NDU1NDU2MjJDOTUxMUVDQkVCQzQyNDhDNEY5QUUwMi9KRDh0UkhKX0hS dUFlZlFCVDJuMG9IVFI4ZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBReih21Yf6P+pKLN0OytWiwtUP/VwDbXmNLXkIUHMySG+9rtWrHQrt a1ODcOanHKjzhoNKnzgUGGMB5LOD95uEx+Xvnvgp+xKAVjeCPxXom0aRpWAe3BUV /T+kLqGHvUkHHNYXoWi5GR+ollQ8N9INkOtjb7ewyYuF1l/SJVHt3pn6t3BZSYrg guVxyqRNo2S/7nb7f6aCo8PPq6WvXaoaBRtSdcQO/g7imhsDcrA3TT+j33N9RoXH OCPKHSWg+09J9it/Uw62jlr8uYMVSo7cqEIwRIPcGUZeS5lo1CcTchYoInPeiN9U wZDC+/s7VarckXjgiwDdU19vhBRx2SLM -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org