$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft File: y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json) Hash identifier: EZusApEK0IJn9E/UcV+cKR+EzlPX5z90QogmnZYmaFA= Subject key identifier: 27:9E:B6:95:95:A5:62:74:D3:FE:87:64:66:45:0E:AD:BA:9F:5D:DE Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 Certificate issuer: /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Certificate serial: 030F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft Manifest number: 030B Signing time: Sat 23 Nov 2024 00:46:33 +0000 Manifest this update: Sat 23 Nov 2024 00:46:32 +0000 Manifest next update: Sat 30 Nov 2024 00:46:32 +0000 Files and hashes: 1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: ZmVzScJx7uqZFQ0j3aWwLIbmU0YVeznUVRhLXZX1Pp8=) 2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: mfWKFm3R9Zz1cfvfe7gZWjinbVCRooVyIR4rmFi/Bec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2 Validity Not Before: Nov 23 00:46:32 2024 GMT Not After : Nov 30 00:46:32 2024 GMT Subject: CN=674125e8-b94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:f1:07:68:67:2f:11:fa:50:cc:19:9d:0f: 80:d0:ed:4a:ac:cc:ee:9b:96:98:06:31:6c:41:ec: fc:62:be:95:50:7e:3e:8e:fc:9c:f2:99:e9:fb:d6: 05:de:e3:57:48:c9:a1:58:2c:3b:90:2d:f5:f6:f0: 13:cf:54:a3:55:da:54:1b:51:7a:e6:c9:1b:fa:d1: 2a:56:68:30:cc:e1:e0:f0:7a:91:47:89:d4:53:77: 9c:28:67:cd:cf:c9:7b:6b:b6:03:f7:17:95:78:75: bf:e6:f6:1b:8c:1b:90:d0:8a:60:f1:27:ad:34:16: 95:66:c9:9a:53:ec:6a:bd:14:68:13:db:a6:aa:09: bd:7d:3e:c8:04:50:15:53:42:98:10:27:01:87:ea: 4c:48:b3:db:be:bc:d5:2a:59:9f:43:26:1c:cd:79: 63:46:9c:ba:07:a3:86:30:9f:cf:b7:17:18:64:ba: 72:75:93:b6:7b:34:e0:83:9b:3c:2b:8a:fb:e1:86: 0f:9c:60:81:47:a6:37:4f:2a:5f:e7:ea:e1:34:7d: de:ac:52:1a:3b:b9:c6:ac:7c:bb:e3:c6:f3:d8:2f: b7:44:42:3b:e6:98:5a:e1:c4:bb:07:d3:7d:d4:6c: 9a:28:7b:94:bb:b9:ac:f3:a6:f5:ca:59:d0:75:d1: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9E:B6:95:95:A5:62:74:D3:FE:87:64:66:45:0E:AD:BA:9F:5D:DE X509v3 Authority Key Identifier: keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:97:d3:b5:f4:ad:d5:76:0a:02:f6:f6:61:47:7d:22:7b:cd: 9b:13:d3:85:cf:fd:00:2b:c7:f8:5b:03:d4:ad:71:bd:01:21: 7d:be:ae:b9:78:57:d1:0f:bf:35:e5:4e:9a:80:01:40:a4:cb: f1:6c:28:f2:61:0d:26:35:30:95:d0:be:56:c6:0f:0c:3e:59: 84:68:e6:8e:0f:dd:57:5b:90:a3:20:48:6d:76:ff:c1:f2:a2: 60:a5:76:cd:78:35:9c:c5:c5:96:50:a9:6b:35:08:4b:ea:f3: c9:2a:28:ee:d2:7b:9f:3c:a3:32:dc:a9:06:a2:08:22:c2:56: 48:52:9e:c5:16:99:82:bd:7a:51:35:df:3c:a3:c0:c2:29:18: 70:db:b4:66:0e:fa:01:43:e9:40:e2:03:4c:3e:f3:25:46:41: 00:4b:13:9d:7b:ea:f9:f5:08:f0:78:58:5d:97:2a:d0:64:44: 2a:13:d9:31:89:d6:51:5a:e0:40:43:db:55:99:b8:21:43:53: 7e:a9:a1:be:0d:bb:51:47:58:e9:b4:f4:71:a7:62:5a:d3:cc: 48:ef:32:fb:10:c2:d4:34:5b:b9:e9:d8:29:04:0f:04:96:01: 90:8c:c4:7c:b8:ff:b3:65:50:bd:0a:ac:8b:b8:e2:eb:e0:1d: d7:a8:f4:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3MDAxMTAvBgNVBAUTKENCQkYyNjAzNzI0RDc4NTY2QjFDMTJDMzJENUM0ODFG NUQzMEYxRjIwHhcNMjQxMTIzMDA0NjMyWhcNMjQxMTMwMDA0NjMyWjAYMRYwFAYD VQQDEw02NzQxMjVlOC1iOTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2XxB2hnLxH6UMwZnQ+A0O1KrMzum5aYBjFsQez8Yr6VUH4+jvyc8pnp+9YF 3uNXSMmhWCw7kC319vATz1SjVdpUG1F65skb+tEqVmgwzOHg8HqRR4nUU3ecKGfN z8l7a7YD9xeVeHW/5vYbjBuQ0Ipg8SetNBaVZsmaU+xqvRRoE9umqgm9fT7IBFAV U0KYECcBh+pMSLPbvrzVKlmfQyYczXljRpy6B6OGMJ/PtxcYZLpydZO2ezTgg5s8 K4r74YYPnGCBR6Y3Typf5+rhNH3erFIaO7nGrHy748bz2C+3REI75pha4cS7B9N9 1GyaKHuUu7ms86b1ylnQddHzNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeetpWV pWJ00/6HZGZFDq26n13eMB8GA1UdIwQYMBaAFMu/JgNyTXhWaxwSwy1cSB9dMPHy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwMC9DQ0RCRjRGMEFF NTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVGWnJIQkxETFZ4SUgxMHc4 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3OG1BM0pOZUZackhCTERMVnhJSDEwdzhmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzcwMC9DQ0RCRjRGMEFFNTcxMUVDQjRBMURBNjRDNEY5QUUwMi95NzhtQTNKTmVG WnJIQkxETFZ4SUgxMHc4ZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJl9O19K3VdgoC9vZhR30ie82bE9OFz/0AK8f4WwPUrXG9ASF9vq65 eFfRD7815U6agAFApMvxbCjyYQ0mNTCV0L5Wxg8MPlmEaOaOD91XW5CjIEhtdv/B 8qJgpXbNeDWcxcWWUKlrNQhL6vPJKiju0nufPKMy3KkGoggiwlZIUp7FFpmCvXpR Nd88o8DCKRhw27RmDvoBQ+lA4gNMPvMlRkEASxOde+r59QjweFhdlyrQZEQqE9kx idZRWuBAQ9tVmbghQ1N+qaG+DbtRR1jptPRxp2Ja08xI7zL7EMLUNFu56dgpBA8E lgGQjMR8uP+zZVC9CqyLuOLr4B3XqPSA -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:44 2024 by rpki-client on console-fra.rpki-client.org