$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft File: sBO5crQspa2fahYr87XHT5M8HgU.mft (raw, json) Hash identifier: YcXtMHLF+1MoeZSBi+jJ+rzGYysdGTMp1HHAbbKsMg8= Subject key identifier: D8:F8:56:50:97:8F:CE:6A:69:58:55:D8:14:D0:3F:77:76:F3:2B:B5 Authority key identifier: B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05 Certificate issuer: /CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05 Certificate serial: 0528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft Manifest number: 0520 Signing time: Fri 22 Nov 2024 23:08:16 +0000 Manifest this update: Fri 22 Nov 2024 23:08:16 +0000 Manifest next update: Fri 29 Nov 2024 23:08:16 +0000 Files and hashes: 1: sBO5crQspa2fahYr87XHT5M8HgU.crl (hash: Wc4kb+uuBU3J84VMu/l1puCvZ8SuF9wWSzTOV3Vz21o=) 2: 5334D20CDA5E11EBA323F462C4F9AE02.roa (hash: tBjtbPJkQLSdN5Mupxr4RXelnuicO0p7Kp/u349fbi0=) 3: 53AD6F32DA5E11EBA323F462C4F9AE02.roa (hash: 5yL82AjNiBtE4vdmcnCW/8glBDbdrO2x3U6tcVWP0Uk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2B66/serialNumber=B013B972B42CA5AD9F6A162BF3B5C74F933C1E05 Validity Not Before: Nov 22 23:08:16 2024 GMT Not After : Nov 29 23:08:16 2024 GMT Subject: CN=67410ee0-851a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ae:b5:6b:2a:0d:98:31:db:72:c6:ca:65:5f: 25:cb:93:3f:41:7e:8e:b1:8e:de:9e:6e:10:3d:1b: d0:c4:ca:94:ca:38:0f:72:e2:6b:0e:bb:96:85:2f: 2b:01:12:5f:24:c5:9e:b5:82:df:e1:25:e1:c8:cc: 41:79:6b:eb:02:56:a6:32:e2:2b:ef:38:8c:81:3d: 44:fd:61:7c:00:fa:28:47:34:3b:5a:ef:49:73:43: 20:07:82:ee:64:58:a5:e9:6b:3e:c6:54:7a:f5:23: 48:f1:bd:71:a8:5b:f0:6d:25:1b:bd:cd:81:42:20: bc:6f:ab:93:1c:f6:9f:4f:f0:98:5c:95:b8:1f:c0: c0:14:e5:92:05:e0:c7:8a:45:67:be:29:66:3d:a1: 3d:79:97:50:4f:5b:a3:61:51:e3:70:b8:98:c5:5f: d2:53:e6:71:d6:7d:ad:94:0e:34:b3:7e:ee:51:f8: 0b:98:1a:b7:28:b5:66:db:98:a2:a2:17:82:99:db: cf:e4:1f:94:50:bb:1f:99:2f:fb:27:ba:fe:82:bd: 81:36:0b:cf:c7:f9:fd:66:9a:94:1b:a5:82:30:37: fe:99:62:77:aa:59:27:8a:69:50:9a:84:27:81:d3: f0:b6:d4:20:76:e0:11:e5:0f:f9:0e:3d:49:05:fd: 4f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F8:56:50:97:8F:CE:6A:69:58:55:D8:14:D0:3F:77:76:F3:2B:B5 X509v3 Authority Key Identifier: keyid:B0:13:B9:72:B4:2C:A5:AD:9F:6A:16:2B:F3:B5:C7:4F:93:3C:1E:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sBO5crQspa2fahYr87XHT5M8HgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2B66/53E8FBEADA5B11EB83BE371AC4F9AE02/sBO5crQspa2fahYr87XHT5M8HgU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d4:7c:2f:e2:52:b3:96:8e:e3:6d:3d:54:98:fd:ad:e3:65: 95:ad:bb:ec:97:d4:8e:55:68:bf:db:aa:90:8d:48:79:84:ba: 8d:91:34:81:d9:4e:5b:c7:63:95:83:93:14:72:ee:07:ab:96: 1c:ef:16:8b:c2:a5:a9:a1:c5:0f:47:81:10:75:ca:ae:d7:d5: 2d:ea:99:35:d2:e5:d4:c6:eb:db:da:b1:a0:ac:e2:2e:68:16: fa:70:25:5b:17:56:f5:4d:95:3e:84:ac:df:8b:a0:8e:73:9d: 3d:32:bc:c0:c0:6c:26:41:61:57:58:e4:29:6e:84:7a:48:77: 2b:de:93:02:b5:f0:64:67:6f:5a:91:40:ab:db:d4:04:f2:b1: fe:f0:2a:e7:8e:e1:bf:fb:97:7e:65:bd:91:2d:20:a6:37:41: 45:17:51:a2:69:32:4a:eb:a1:7e:14:fc:c9:c5:f1:06:38:7e: 6c:42:8f:63:79:a6:3c:c6:3a:c8:3f:4f:1b:91:e8:2a:6b:d6: 6a:08:c9:46:25:f5:4f:c7:78:25:b4:0d:85:69:33:f6:d7:ed: 6a:66:8e:7e:52:51:f5:26:11:3f:01:16:d2:4a:37:1f:fd:83: d8:35:52:39:73:43:d5:72:ce:d3:7b:33:d5:00:77:06:6e:78: 5f:e7:8b:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJCNjYxMTAvBgNVBAUTKEIwMTNCOTcyQjQyQ0E1QUQ5RjZBMTYyQkYzQjVDNzRG OTMzQzFFMDUwHhcNMjQxMTIyMjMwODE2WhcNMjQxMTI5MjMwODE2WjAYMRYwFAYD VQQDEw02NzQxMGVlMC04NTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp661ayoNmDHbcsbKZV8ly5M/QX6OsY7enm4QPRvQxMqUyjgPcuJrDruWhS8r ARJfJMWetYLf4SXhyMxBeWvrAlamMuIr7ziMgT1E/WF8APooRzQ7Wu9Jc0MgB4Lu ZFil6Ws+xlR69SNI8b1xqFvwbSUbvc2BQiC8b6uTHPafT/CYXJW4H8DAFOWSBeDH ikVnvilmPaE9eZdQT1ujYVHjcLiYxV/SU+Zx1n2tlA40s37uUfgLmBq3KLVm25ii oheCmdvP5B+UULsfmS/7J7r+gr2BNgvPx/n9ZpqUG6WCMDf+mWJ3qlknimlQmoQn gdPwttQgduAR5Q/5Dj1JBf1PlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNj4VlCX j85qaVhV2BTQP3d28yu1MB8GA1UdIwQYMBaAFLATuXK0LKWtn2oWK/O1x0+TPB4F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkI2Ni81M0U4RkJFQURB NUIxMUVCODNCRTM3MUFDNEY5QUUwMi9zQk81Y3JRc3BhMmZhaFlyODdYSFQ1TThI Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NCTzVjclFzcGEyZmFoWXI4N1hIVDVNOEhnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkI2Ni81M0U4RkJFQURBNUIxMUVCODNCRTM3MUFDNEY5QUUwMi9zQk81Y3JRc3Bh MmZhaFlyODdYSFQ1TThIZ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK1Hwv4lKzlo7jbT1UmP2t42WVrbvsl9SOVWi/26qQjUh5hLqNkTSB 2U5bx2OVg5MUcu4Hq5Yc7xaLwqWpocUPR4EQdcqu19Ut6pk10uXUxuvb2rGgrOIu aBb6cCVbF1b1TZU+hKzfi6COc509MrzAwGwmQWFXWOQpboR6SHcr3pMCtfBkZ29a kUCr29QE8rH+8CrnjuG/+5d+Zb2RLSCmN0FFF1GiaTJK66F+FPzJxfEGOH5sQo9j eaY8xjrIP08bkegqa9ZqCMlGJfVPx3gltA2FaTP21+1qZo5+UlH1JhE/ARbSSjcf /YPYNVI5c0PVcs7TezPVAHcGbnhf54uY -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org