$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft File: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json) Hash identifier: l7VBLqspWngf2lITmAvTgGvYRp3Z4rLy4OBizNVf0+4= Subject key identifier: EA:8A:B3:81:3D:50:7C:22:35:03:0F:FF:D3:22:56:9B:8B:99:FA:65 Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 Certificate issuer: /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Certificate serial: 0FF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft Manifest number: 0FF2 Signing time: Fri 22 Nov 2024 17:25:39 +0000 Manifest this update: Fri 22 Nov 2024 17:25:38 +0000 Manifest next update: Fri 29 Nov 2024 17:25:38 +0000 Files and hashes: 1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: sOwsJwPIo/yevEahk7WWub6ZTzz8Fg49e4zoK3idALU=) 2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: Zx1NZFaobsMkPgZlMNZ8S9A1zmjC7C3D22JCgStrQxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4089 (0xff9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057 Validity Not Before: Nov 22 17:25:38 2024 GMT Not After : Nov 29 17:25:38 2024 GMT Subject: CN=6740be93-bbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:40:8c:1a:e6:ac:2a:5c:14:0b:b1:07:8f: 5e:e6:bb:0b:b4:0e:d4:d2:97:b0:e3:fb:ef:96:1d: bc:0d:fd:47:e9:23:3f:0c:b0:1d:44:37:42:d9:36: 3f:1d:5b:2a:13:1e:fd:3a:be:c6:50:a1:10:65:8e: 52:18:4e:d2:3f:0d:67:fe:93:3a:0e:b6:6c:32:2f: 28:e1:ae:10:ec:f1:a1:7a:4e:fa:94:ef:f5:f2:67: 03:38:f6:8d:e2:31:9f:c8:cd:c0:34:15:2e:d9:88: 5e:23:08:7c:98:cf:16:25:a1:fb:c5:9d:fa:c5:5f: 74:f1:56:d8:06:5c:6b:c4:ba:51:c6:1b:bf:74:67: d6:6d:e9:d2:cc:f7:27:c2:e8:45:6e:20:67:cb:c3: 4f:0b:27:25:33:ce:eb:af:b5:77:71:94:fd:eb:11: fd:98:63:d9:5b:78:d2:61:0d:8e:23:e3:5c:9e:b9: 75:21:05:fe:7f:73:74:40:9c:9d:6d:2c:c6:89:02: c9:42:b3:5e:7d:b8:60:5e:6c:ef:ee:03:a3:fc:2d: b9:69:86:77:29:d7:14:87:d9:72:a7:11:6d:c2:21: df:d4:92:47:dc:15:6f:53:ab:a7:36:a1:f5:1f:c1: 7d:29:64:e2:cc:ed:9a:64:82:fd:5e:1b:a5:49:28: 50:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8A:B3:81:3D:50:7C:22:35:03:0F:FF:D3:22:56:9B:8B:99:FA:65 X509v3 Authority Key Identifier: keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:18:27:b9:94:b4:6e:7b:22:3a:81:b9:ee:37:da:fb:33:b5: 5c:97:29:ba:53:fd:76:ad:bd:89:6e:94:9b:07:2d:38:bd:95: 6a:ec:e2:08:40:53:fb:ba:bc:f9:3f:1d:06:b9:73:10:07:d7: 71:0d:57:de:7e:a0:e8:51:93:83:a7:15:19:47:39:d3:e8:a3: 9d:51:38:43:ac:c8:62:51:3c:2d:aa:d6:0d:be:33:4a:14:19: 74:7f:0a:54:7a:c3:f2:7f:f5:72:81:31:f2:f5:da:6c:3e:59: e4:5e:d5:78:ed:35:83:02:0b:49:ee:66:74:d6:3e:2d:34:97: fb:e8:55:5c:02:fa:33:9c:9f:29:2a:c7:a7:d9:97:fb:35:44: 14:5f:8c:58:ec:0d:c4:11:bb:86:9a:45:af:f2:6a:fd:e4:7d: 85:8e:87:34:ce:84:5d:2e:a9:89:2c:0f:3e:4d:f0:c3:00:92: 25:f6:a5:33:b4:a8:8a:fd:c8:10:ee:04:bb:10:cf:82:dd:0c: 9c:90:1b:25:c7:70:51:f4:76:1d:8e:29:7f:cf:9d:3b:0b:eb: 0b:e2:ba:f7:4e:9e:0e:48:d1:16:71:52:7b:a9:5c:1a:4b:4d: 95:c2:d5:b0:4a:3e:1b:b0:83:e7:1c:34:fa:52:f2:6f:02:80: 24:1c:39:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMxQ0UxMTAvBgNVBAUTKDkxRjJERTY3QzhFNjVCQjUzM0VEOEYzQzY0RjMyREY5 QzY5NUMwNTcwHhcNMjQxMTIyMTcyNTM4WhcNMjQxMTI5MTcyNTM4WjAYMRYwFAYD VQQDEw02NzQwYmU5My1iYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwm5AjBrmrCpcFAuxB49e5rsLtA7U0pew4/vvlh28Df1H6SM/DLAdRDdC2TY/ HVsqEx79Or7GUKEQZY5SGE7SPw1n/pM6DrZsMi8o4a4Q7PGhek76lO/18mcDOPaN 4jGfyM3ANBUu2YheIwh8mM8WJaH7xZ36xV908VbYBlxrxLpRxhu/dGfWbenSzPcn wuhFbiBny8NPCyclM87rr7V3cZT96xH9mGPZW3jSYQ2OI+Ncnrl1IQX+f3N0QJyd bSzGiQLJQrNefbhgXmzv7gOj/C25aYZ3KdcUh9lypxFtwiHf1JJH3BVvU6unNqH1 H8F9KWTizO2aZIL9XhulSShQTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqKs4E9 UHwiNQMP/9MiVpuLmfplMB8GA1UdIwQYMBaAFJHy3mfI5lu1M+2PPGTzLfnGlcBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzFDRS8yNEZBNjBFNDM3 RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3VXo3WTg4WlBNdC1jYVZ3 RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tmTGVaOGptVzdVejdZODhaUE10LWNhVndGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzFDRS8yNEZBNjBFNDM3RUMxMUU5QTg3NUU4NDhDNEY5QUUwMi9rZkxlWjhqbVc3 VXo3WTg4WlBNdC1jYVZ3RmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJGCe5lLRueyI6gbnuN9r7M7Vclym6U/12rb2JbpSbBy04vZVq7OII QFP7urz5Px0GuXMQB9dxDVfefqDoUZODpxUZRznT6KOdUThDrMhiUTwtqtYNvjNK FBl0fwpUesPyf/VygTHy9dpsPlnkXtV47TWDAgtJ7mZ01j4tNJf76FVcAvoznJ8p Ksen2Zf7NUQUX4xY7A3EEbuGmkWv8mr95H2Fjoc0zoRdLqmJLA8+TfDDAJIl9qUz tKiK/cgQ7gS7EM+C3QyckBslx3BR9HYdjil/z507C+sL4rr3Tp4OSNEWcVJ7qVwa S02VwtWwSj4bsIPnHDT6UvJvAoAkHDmZ -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org