$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: 2MEwtQKXv0iuuI19YWG/5Je+Pnamgs0xeqHdYKFPOsI= Subject key identifier: 2F:66:49:E1:08:DD:FE:96:F0:F5:62:35:46:FE:4A:EA:FE:4B:4F:F2 Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0BFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0BF0 Signing time: Fri 22 Nov 2024 18:22:22 +0000 Manifest this update: Fri 22 Nov 2024 18:22:21 +0000 Manifest next update: Fri 29 Nov 2024 18:22:21 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: GkxL8dCJfDi5uuNxqmuwbYRC9vb9ueEVUheLTCoVR7Y=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: G3Qc6m6Md1/HMosoucJ9nNLXdAyquVgUZsxf+L03AvI=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: HJ8Z2bhTYV+Kfn18R3ptoMoDD462QKeVcqv3I9e4DJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Nov 22 18:22:21 2024 GMT Not After : Nov 29 18:22:21 2024 GMT Subject: CN=6740cbde-bdf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:9d:be:f9:04:85:29:07:de:64:0a:58:78:e9: 3e:92:b0:39:63:8a:65:4c:92:31:f2:43:fa:5f:8d: 70:b7:c0:f5:c7:01:6a:5b:f0:f6:75:ad:92:6e:35: f1:48:87:1b:3f:a5:8f:11:82:ce:82:07:cb:3b:27: c6:a3:17:ee:16:1b:7a:a2:2b:a9:6b:e6:65:6b:c5: 92:32:79:86:6a:00:6a:e1:22:12:f2:65:3b:15:8b: b5:d5:ff:03:11:f1:3b:b1:34:e2:5a:96:22:58:86: 9f:48:41:d5:9a:6c:f1:f0:4d:96:68:c8:78:fd:5c: 66:0b:15:20:ba:c7:3b:33:ed:42:dc:2a:e9:f6:66: 48:37:fc:f2:ef:91:02:73:32:9b:da:3f:60:09:7b: 99:14:58:b6:8b:67:fd:49:30:5f:ee:c2:61:fe:d7: 76:88:6f:46:0e:2c:ae:0c:72:8d:bb:2b:e9:a6:1a: 38:bb:92:10:ec:26:27:63:75:4d:3e:dc:69:76:aa: 20:83:6e:a8:a6:71:be:64:cd:f8:cc:64:ed:7a:a8: 0d:a2:d9:15:d7:71:e7:b7:16:41:26:d9:8e:93:8a: e9:f6:7e:41:71:6f:d1:ef:23:bb:76:e1:9a:cc:15: 78:ca:6c:25:12:7b:5f:5c:05:f4:35:72:34:6c:a8: 8d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:66:49:E1:08:DD:FE:96:F0:F5:62:35:46:FE:4A:EA:FE:4B:4F:F2 X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e4:fc:02:14:fd:a7:f7:d3:f2:a1:13:2c:01:2a:cb:99:46: 7b:95:c0:38:a6:3b:28:26:7c:07:33:1c:54:29:db:d9:8b:b7: 60:20:fb:88:f4:55:d1:a0:81:b8:8a:c5:2c:e2:a9:bf:c3:1d: d3:7d:48:21:3d:77:a9:c2:10:51:3b:59:da:93:b9:3c:f9:c4: 3e:a0:93:11:99:86:b7:c5:5d:01:e7:d9:9c:03:44:00:3a:12: b6:bb:6e:19:ed:76:db:c2:76:ac:1c:0a:ef:c7:aa:38:84:a3: 2c:3a:65:ec:c5:53:b1:4a:b2:bc:b3:ab:78:58:88:d8:fa:9b: 3c:1c:60:ff:43:5f:c9:81:92:b4:84:54:9e:58:79:38:53:36: 5a:f0:e6:96:18:9d:f9:bf:ef:4c:9b:11:e4:e7:6e:b3:c4:b0: b9:5e:32:48:22:4d:8e:5d:90:fc:b9:5f:7c:a0:90:b6:56:38: d3:f8:8f:5c:36:fb:09:52:70:f5:73:42:6b:3b:ed:23:99:f6: 0b:68:69:7a:f8:13:97:ba:f2:e0:ae:9f:d6:22:ff:23:62:2a: 50:be:6b:55:8e:ee:a6:85:59:06:c3:c3:f5:df:f4:70:d5:d9: 94:b8:0c:fc:90:7e:ab:a5:7f:36:a6:ae:de:31:c2:c4:2c:cd: 76:17:e6:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjQxMTIyMTgyMjIxWhcNMjQxMTI5MTgyMjIxWjAYMRYwFAYD VQQDEw02NzQwY2JkZS1iZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/52++QSFKQfeZApYeOk+krA5Y4plTJIx8kP6X41wt8D1xwFqW/D2da2SbjXx SIcbP6WPEYLOggfLOyfGoxfuFht6oiupa+Zla8WSMnmGagBq4SIS8mU7FYu11f8D EfE7sTTiWpYiWIafSEHVmmzx8E2WaMh4/VxmCxUgusc7M+1C3Crp9mZIN/zy75EC czKb2j9gCXuZFFi2i2f9STBf7sJh/td2iG9GDiyuDHKNuyvppho4u5IQ7CYnY3VN Ptxpdqogg26opnG+ZM34zGTteqgNotkV13HntxZBJtmOk4rp9n5BcW/R7yO7duGa zBV4ymwlEntfXAX0NXI0bKiNmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9mSeEI 3f6W8PViNUb+Sur+S0/yMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB15PwCFP2n99PyoRMsASrLmUZ7lcA4pjsoJnwHMxxUKdvZi7dgIPuI 9FXRoIG4isUs4qm/wx3TfUghPXepwhBRO1nak7k8+cQ+oJMRmYa3xV0B59mcA0QA OhK2u24Z7XbbwnasHArvx6o4hKMsOmXsxVOxSrK8s6t4WIjY+ps8HGD/Q1/JgZK0 hFSeWHk4UzZa8OaWGJ35v+9MmxHk526zxLC5XjJIIk2OXZD8uV98oJC2VjjT+I9c NvsJUnD1c0JrO+0jmfYLaGl6+BOXuvLgrp/WIv8jYipQvmtVju6mhVkGw8P13/Rw 1dmUuAz8kH6rpX82pq7eMcLELM12F+aY -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org