$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft File: M1KIaoOU86z15jXjxHVvTQpuRek.mft (raw, json) Hash identifier: P2/zoSMYH8PWi7ybc98YKC7a+4YySQupz0MPmmgNYMg= Subject key identifier: A2:62:FA:E3:DB:02:00:17:1B:F6:29:75:B2:1E:5A:6E:54:4C:77:09 Authority key identifier: 33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 Certificate issuer: /CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Certificate serial: 092B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft Manifest number: 0923 Signing time: Fri 22 Nov 2024 19:33:13 +0000 Manifest this update: Fri 22 Nov 2024 19:33:13 +0000 Manifest next update: Fri 29 Nov 2024 19:33:13 +0000 Files and hashes: 1: M1KIaoOU86z15jXjxHVvTQpuRek.crl (hash: OFF5VVDJvplHJMIubanPhVrbP5k0rq5dK4mYrDiaoto=) 2: 67A60C64441E11EB861F005AC4F9AE02.roa (hash: 64lTU6HFby5BegD1+Uu1tjRR9NUUxrJlKQqqFASdN5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2347 (0x92b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5AD4/serialNumber=3352886A8394F3ACF5E635E3C4756F4D0A6E45E9 Validity Not Before: Nov 22 19:33:13 2024 GMT Not After : Nov 29 19:33:13 2024 GMT Subject: CN=6740dc79-51c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ba:a0:43:2c:c4:e8:67:10:8d:7c:0a:4c:ca: ff:0b:f8:94:6a:1b:f7:2a:1c:ab:00:c5:4c:36:26: d4:4f:91:25:07:33:38:d4:9b:39:bc:58:e2:b2:4c: 2f:02:eb:4e:9d:14:70:a0:22:f5:23:3b:e2:10:d7: dc:25:41:b2:e2:9b:64:73:85:35:87:16:31:f5:2a: 92:dd:64:ef:eb:bb:f6:b2:27:cd:61:8e:00:9e:79: b8:07:e9:e8:b8:2f:f8:65:c6:84:5c:67:4d:53:32: ea:9c:08:50:8f:a5:04:6d:2d:f5:cc:b7:67:b8:41: 28:8b:b0:b4:94:58:f9:e2:cb:9f:71:b6:c5:67:53: 42:ae:7c:4a:c7:3d:f0:d2:06:86:6b:c3:e8:ef:ff: 38:4d:45:9a:7e:c6:a1:13:01:8e:37:e0:1d:99:c3: 1c:2f:f0:42:a8:00:4e:c3:8a:d2:65:30:50:19:30: 06:66:da:73:1f:7d:f9:c0:7a:4a:12:57:26:98:fe: 7c:0f:60:1c:5d:9f:6d:ba:fd:67:1e:c0:cc:a4:69: 82:14:7b:0c:1f:eb:bb:eb:67:04:42:57:37:29:f7: 84:ba:1c:3a:27:41:ab:32:71:87:e9:32:6e:e5:ba: fc:5c:86:9e:2e:2e:36:3a:a7:c7:27:bb:4f:f3:7e: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:62:FA:E3:DB:02:00:17:1B:F6:29:75:B2:1E:5A:6E:54:4C:77:09 X509v3 Authority Key Identifier: keyid:33:52:88:6A:83:94:F3:AC:F5:E6:35:E3:C4:75:6F:4D:0A:6E:45:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1KIaoOU86z15jXjxHVvTQpuRek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AD4/11226B7E8F8A11EA9828C65DC4F9AE02/M1KIaoOU86z15jXjxHVvTQpuRek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:42:8c:cd:81:88:22:71:13:d6:c9:79:c1:d5:57:3a:30:a2: 01:89:a3:c4:93:88:22:9d:fe:34:8f:29:f7:08:d6:eb:1c:8d: 01:6b:75:7a:ce:70:3c:f4:df:aa:73:b9:21:03:6d:84:53:0d: d6:3e:d4:22:43:d4:73:00:11:11:73:71:36:fc:0d:4f:b5:15: a9:90:eb:f5:ae:f6:67:36:15:56:9d:cf:4e:91:36:eb:3b:8f: 51:7b:81:85:a2:e1:1f:5a:c8:3c:ab:e1:19:7b:ee:73:a6:d6: c5:d9:89:6f:85:6a:d3:b5:9d:47:75:fe:6f:38:04:cc:81:b6: 4b:f8:6f:f2:24:27:ad:a7:49:a3:10:80:08:b4:0f:e4:db:90: d1:dd:2d:b8:1c:11:98:2d:22:d0:24:6e:60:22:d9:65:a9:10: 3a:c6:3b:37:e1:12:87:a9:74:a9:5c:37:18:f8:d0:59:80:75: 1f:26:ac:88:a6:eb:4b:a8:1d:71:fe:7c:66:aa:b8:06:60:ec: df:9f:4d:f4:9c:2b:2f:1e:d7:09:88:31:4d:b8:91:e9:1f:48: d0:81:92:0d:f1:cf:e3:61:f6:b7:a7:a1:b3:f0:67:66:7f:0d: ea:bf:9f:ed:e1:c6:56:1c:4e:d9:3f:ac:b6:1c:c0:e9:65:28: 81:47:fe:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVBRDQxMTAvBgNVBAUTKDMzNTI4ODZBODM5NEYzQUNGNUU2MzVFM0M0NzU2RjRE MEE2RTQ1RTkwHhcNMjQxMTIyMTkzMzEzWhcNMjQxMTI5MTkzMzEzWjAYMRYwFAYD VQQDEw02NzQwZGM3OS01MWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7qgQyzE6GcQjXwKTMr/C/iUahv3KhyrAMVMNibUT5ElBzM41Js5vFjiskwv AutOnRRwoCL1IzviENfcJUGy4ptkc4U1hxYx9SqS3WTv67v2sifNYY4Annm4B+no uC/4ZcaEXGdNUzLqnAhQj6UEbS31zLdnuEEoi7C0lFj54sufcbbFZ1NCrnxKxz3w 0gaGa8Po7/84TUWafsahEwGON+AdmcMcL/BCqABOw4rSZTBQGTAGZtpzH335wHpK ElcmmP58D2AcXZ9tuv1nHsDMpGmCFHsMH+u762cEQlc3KfeEuhw6J0GrMnGH6TJu 5br8XIaeLi42OqfHJ7tP837v2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJi+uPb AgAXG/YpdbIeWm5UTHcJMB8GA1UdIwQYMBaAFDNSiGqDlPOs9eY148R1b00KbkXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUFENC8xMTIyNkI3RThG OEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2ejE1alhqeEhWdlRRcHVS ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xS0lhb09VODZ6MTVqWGp4SFZ2VFFwdVJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUFENC8xMTIyNkI3RThGOEExMUVBOTgyOEM2NURDNEY5QUUwMi9NMUtJYW9PVTg2 ejE1alhqeEhWdlRRcHVSZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcQozNgYgicRPWyXnB1Vc6MKIBiaPEk4ginf40jyn3CNbrHI0Ba3V6 znA89N+qc7khA22EUw3WPtQiQ9RzABERc3E2/A1PtRWpkOv1rvZnNhVWnc9OkTbr O49Re4GFouEfWsg8q+EZe+5zptbF2YlvhWrTtZ1Hdf5vOATMgbZL+G/yJCetp0mj EIAItA/k25DR3S24HBGYLSLQJG5gItllqRA6xjs34RKHqXSpXDcY+NBZgHUfJqyI putLqB1x/nxmqrgGYOzfn030nCsvHtcJiDFNuJHpH0jQgZIN8c/jYfa3p6Gz8Gdm fw3qv5/t4cZWHE7ZP6y2HMDpZSiBR/7p -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org