$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft File: MOfescUi55FZhZK2RTCIY8oADhg.mft (raw, json) Hash identifier: CLKn3G1e3TkrywB/9nPKbLkOwGW/BFyov9Fq+0spuAU= Subject key identifier: 87:7F:12:A6:D5:A0:AD:CD:8A:12:69:8B:EC:9C:2F:75:1E:C1:F2:8E Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18 Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18 Certificate serial: 13E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft Manifest number: 13C6 Signing time: Sun 24 Nov 2024 16:50:00 +0000 Manifest this update: Sun 24 Nov 2024 16:50:00 +0000 Manifest next update: Sun 01 Dec 2024 16:50:00 +0000 Files and hashes: 1: MOfescUi55FZhZK2RTCIY8oADhg.crl (hash: EereorSYmaRuXMcOEG5T7huvY2HrGV9LUQxV1Rod1zU=) 2: ECBAA694826F11ED963DD626C4F9AE02.roa (hash: Dto1jB5YR86lQF2PFHNg6nGS5wr4AM+RlGK1CM59Zg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 16:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5088 (0x13e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18 Validity Not Before: Nov 24 16:50:00 2024 GMT Not After : Dec 1 16:50:00 2024 GMT Subject: CN=67435938-e1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:68:84:5f:f1:4a:d3:27:ad:44:2f:e0:96:db: 76:a4:c9:b3:04:32:ef:a7:68:d4:29:b2:d5:57:c6: ca:b2:b8:31:27:97:e9:25:2e:f9:af:c0:63:05:52: ab:b3:6f:aa:d5:98:77:e3:bc:2e:b9:42:6b:bd:4a: a4:7b:ef:06:ff:9d:4e:14:5e:35:4b:ef:61:49:6a: 5a:42:82:a4:9b:fc:f9:04:73:55:52:af:71:51:e5: 9a:3f:db:1c:5e:8f:68:16:54:ee:ec:b9:74:63:31: 29:17:78:e4:24:62:df:54:c5:d3:53:60:f2:da:05: 03:58:d7:d6:fa:c8:3c:09:9d:d2:9f:0d:d9:4b:e9: 4a:63:53:f4:fe:34:91:55:e4:cc:75:3e:24:e8:2d: 44:89:1e:6d:dd:4b:c8:ee:76:a3:6e:54:3d:1f:b9: fe:ba:73:c1:61:97:65:8d:47:17:03:d7:bf:cc:15: e4:a4:bd:d5:a8:68:80:c1:5c:b3:15:f5:bf:9c:67: 18:2e:89:61:7a:4f:40:7c:14:5d:9c:c0:13:a9:f7: 66:26:37:6b:1c:27:b0:2d:54:1a:ce:ba:fd:de:e4: 24:2a:a1:f5:70:ba:aa:5a:ad:02:5f:2c:f1:08:4e: c5:87:9f:77:9e:40:11:b9:4c:e4:5a:99:3d:df:1a: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7F:12:A6:D5:A0:AD:CD:8A:12:69:8B:EC:9C:2F:75:1E:C1:F2:8E X509v3 Authority Key Identifier: keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:7d:2e:bf:ea:e2:7a:66:f7:ea:aa:48:9b:97:ac:4e:92:d1: c5:b5:00:9e:0b:f5:c7:99:fd:2c:79:dc:b1:28:0c:69:95:21: c6:0e:f2:20:14:04:dc:ee:72:72:f9:d1:a7:3e:46:12:56:4c: 3c:39:24:b3:f6:2c:19:d5:e2:dd:e0:13:1b:ba:fe:1c:34:fe: 4e:4b:a6:3a:38:59:d7:3b:c3:6e:84:0f:25:da:ba:07:57:a6: 31:fa:4d:1a:d3:dc:85:04:5c:88:3d:18:3a:a4:94:bf:4f:e7: 8d:bb:c2:d4:fb:80:d4:c4:dd:62:6b:68:76:4d:7b:59:42:85: c3:67:45:f8:67:f5:7d:65:c7:90:25:20:e4:0e:f0:23:93:c7: f9:52:0b:44:d9:b4:2d:a9:91:b7:b2:60:7f:4d:58:be:46:26: cb:f7:52:89:7d:77:2d:61:4e:3f:d1:de:4d:6b:63:ca:a1:3a: 72:89:ad:2c:b4:05:8b:03:74:8e:40:47:18:54:53:4d:03:50: bf:0a:87:08:9a:1d:1f:ee:24:3e:d4:94:3d:b6:96:e6:55:15: 77:ee:c7:70:d1:9c:5e:bc:e4:1a:b8:b8:55:d3:09:56:17:14: d9:e6:02:83:b1:03:2a:59:df:c1:4a:70:41:36:23:98:11:ad: 59:7a:66:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc2QjgxMTAvBgNVBAUTKDMwRTdERUIxQzUyMkU3OTE1OTg1OTJCNjQ1MzA4ODYz Q0EwMDBFMTgwHhcNMjQxMTI0MTY1MDAwWhcNMjQxMjAxMTY1MDAwWjAYMRYwFAYD VQQDEw02NzQzNTkzOC1lMWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WiEX/FK0yetRC/gltt2pMmzBDLvp2jUKbLVV8bKsrgxJ5fpJS75r8BjBVKr s2+q1Zh347wuuUJrvUqke+8G/51OFF41S+9hSWpaQoKkm/z5BHNVUq9xUeWaP9sc Xo9oFlTu7Ll0YzEpF3jkJGLfVMXTU2Dy2gUDWNfW+sg8CZ3Snw3ZS+lKY1P0/jSR VeTMdT4k6C1EiR5t3UvI7najblQ9H7n+unPBYZdljUcXA9e/zBXkpL3VqGiAwVyz FfW/nGcYLolhek9AfBRdnMATqfdmJjdrHCewLVQazrr93uQkKqH1cLqqWq0CXyzx CE7Fh593nkARuUzkWpk93xqemQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId/EqbV oK3NihJpi+ycL3UewfKOMB8GA1UdIwQYMBaAFDDn3rHFIueRWYWStkUwiGPKAA4Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzZCOC9GRjE1MDhFRTdF OUExMUU4QjY5RkMwMkRDNEY5QUUwMi9NT2Zlc2NVaTU1RlpoWksyUlRDSVk4b0FE aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PZmVzY1VpNTVGWmhaSzJSVENJWThvQURoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzZCOC9GRjE1MDhFRTdFOUExMUU4QjY5RkMwMkRDNEY5QUUwMi9NT2Zlc2NVaTU1 RlpoWksyUlRDSVk4b0FEaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgfS6/6uJ6Zvfqqkibl6xOktHFtQCeC/XHmf0sedyxKAxplSHGDvIg FATc7nJy+dGnPkYSVkw8OSSz9iwZ1eLd4BMbuv4cNP5OS6Y6OFnXO8NuhA8l2roH V6Yx+k0a09yFBFyIPRg6pJS/T+eNu8LU+4DUxN1ia2h2TXtZQoXDZ0X4Z/V9ZceQ JSDkDvAjk8f5UgtE2bQtqZG3smB/TVi+RibL91KJfXctYU4/0d5Na2PKoTpyia0s tAWLA3SOQEcYVFNNA1C/CocImh0f7iQ+1JQ9tpbmVRV37sdw0ZxevOQauLhV0wlW FxTZ5gKDsQMqWd/BSnBBNiOYEa1ZemaV -----END CERTIFICATE-----Generated at Sun Nov 24 18:24:58 2024 by rpki-client on console-ams.rpki-client.org