$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft File: Od1jNTmfErgZIRzpGqfc9i9tgbw.mft (raw, json) Hash identifier: ibPkra+uRSAsPWdr4MWmiYG7kRwF4rZa8ZNuJdj0KAQ= Subject key identifier: 63:55:DA:39:E2:90:8F:19:E3:16:90:38:69:C8:A0:B1:D1:F2:A7:A0 Authority key identifier: 39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC Certificate issuer: /CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC Certificate serial: 02FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft Manifest number: 02F5 Signing time: Sat 23 Nov 2024 00:50:36 +0000 Manifest this update: Sat 23 Nov 2024 00:50:36 +0000 Manifest next update: Sat 30 Nov 2024 00:50:36 +0000 Files and hashes: 1: Od1jNTmfErgZIRzpGqfc9i9tgbw.crl (hash: ChCdqz/CFuJ7oI4qQf/nbceaM+DiR+eyXG9fnIp/29Y=) 2: 8FA9D71068D611EEAD2D927FC4F9AE02.roa (hash: KckJvrN2O9+k1z94FA9x81wNFJzF7Y7yD41j1qhB6N4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 765 (0x2fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB2D/serialNumber=39DD6335399F12B819211CE91AA7DCF62F6D81BC Validity Not Before: Nov 23 00:50:36 2024 GMT Not After : Nov 30 00:50:36 2024 GMT Subject: CN=674126dc-437a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e5:f5:72:3d:15:c3:37:1f:2a:0e:28:eb:ba: ea:9c:2d:4a:61:fe:e5:e9:4f:74:a6:9a:8d:ae:b3: 2c:d5:8b:43:f8:56:c9:e4:94:b3:87:13:cd:53:9d: ff:ba:ea:b3:13:5a:94:12:2f:21:c5:91:98:3f:04: 54:35:d7:a4:67:f0:e9:a0:3b:e6:b2:a2:e4:40:84: 23:26:26:0a:81:c0:1c:13:49:bc:8b:ae:a4:f2:50: 42:02:bc:0e:dd:76:b8:ca:d9:4c:b5:51:a5:89:b0: 9f:0d:5b:32:7f:ff:8b:63:ad:1f:32:7a:6c:27:ef: 5d:f8:83:4a:6b:07:16:07:de:a0:d4:ec:28:a1:3c: 4c:f1:87:28:3c:d6:3c:e1:10:a2:f1:36:69:b3:c7: 20:b5:fc:92:a3:48:59:8e:c6:25:9e:26:1b:18:da: 6b:a6:aa:9f:68:49:bf:0f:45:d8:c6:c6:ac:e4:33: e1:93:69:a3:ac:0c:6f:d7:7f:f6:3f:4a:c2:60:73: 0f:b0:a0:ea:59:27:f6:3e:5a:1b:7b:d9:79:72:8c: 49:85:78:7b:dc:08:63:b8:4a:a0:7e:38:b1:a7:fd: 6d:39:93:62:d0:74:3c:d2:df:58:3a:c7:a4:a3:e2: 67:65:4c:d7:15:7a:8b:15:27:fa:35:36:07:c0:91: 20:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:55:DA:39:E2:90:8F:19:E3:16:90:38:69:C8:A0:B1:D1:F2:A7:A0 X509v3 Authority Key Identifier: keyid:39:DD:63:35:39:9F:12:B8:19:21:1C:E9:1A:A7:DC:F6:2F:6D:81:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Od1jNTmfErgZIRzpGqfc9i9tgbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB2D/965BD57EB89511EC8242D27EC4F9AE02/Od1jNTmfErgZIRzpGqfc9i9tgbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:61:a9:91:81:05:4e:a5:06:96:a2:92:fb:3b:57:e6:47:33: ef:44:41:c0:79:e1:67:eb:be:c3:21:46:96:8e:1f:51:cd:88: cd:c5:d1:71:31:c8:90:7a:be:5b:2a:96:a4:e2:44:96:a1:14: c0:a0:e8:71:47:6e:b4:60:7b:e2:a5:68:44:8b:dd:95:3f:df: d5:ff:c8:fc:f8:ad:dd:06:b0:67:c6:98:eb:0d:e1:a7:90:8d: 39:30:b9:6b:47:4d:56:78:68:ea:a9:fb:9e:e9:ec:1f:19:d2: 14:67:9d:3a:78:d7:61:eb:fa:da:b8:46:fe:4d:5c:a9:f2:74: 11:ea:65:40:67:96:32:29:d8:99:8c:12:b9:d5:5a:ae:7d:c6: b5:10:08:65:13:0c:4f:7e:91:57:98:c0:da:80:dc:cd:62:3a: 63:7a:3a:6e:95:b3:06:19:bc:74:a9:11:10:bc:de:d8:77:69: 1a:01:e2:92:c1:ef:ee:37:61:84:e4:bf:03:3c:5a:50:aa:f7: ef:ff:81:33:c8:42:39:62:bf:ab:64:46:22:01:30:94:55:81: 4a:e2:6b:9b:90:e2:6e:72:01:61:56:41:99:59:07:0e:dc:0f: 95:58:96:b4:a3:7c:ea:8e:85:0d:c5:61:b9:57:61:8f:fa:9b: 37:71:5f:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCMkQxMTAvBgNVBAUTKDM5REQ2MzM1Mzk5RjEyQjgxOTIxMUNFOTFBQTdEQ0Y2 MkY2RDgxQkMwHhcNMjQxMTIzMDA1MDM2WhcNMjQxMTMwMDA1MDM2WjAYMRYwFAYD VQQDEw02NzQxMjZkYy00MzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6eX1cj0VwzcfKg4o67rqnC1KYf7l6U90ppqNrrMs1YtD+FbJ5JSzhxPNU53/ uuqzE1qUEi8hxZGYPwRUNdekZ/DpoDvmsqLkQIQjJiYKgcAcE0m8i66k8lBCArwO 3Xa4ytlMtVGlibCfDVsyf/+LY60fMnpsJ+9d+INKawcWB96g1OwooTxM8YcoPNY8 4RCi8TZps8cgtfySo0hZjsYlniYbGNprpqqfaEm/D0XYxsas5DPhk2mjrAxv13/2 P0rCYHMPsKDqWSf2Plobe9l5coxJhXh73AhjuEqgfjixp/1tOZNi0HQ80t9YOsek o+JnZUzXFXqLFSf6NTYHwJEg2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNV2jni kI8Z4xaQOGnIoLHR8qegMB8GA1UdIwQYMBaAFDndYzU5nxK4GSEc6Rqn3PYvbYG8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkIyRC85NjVCRDU3RUI4 OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVyZ1pJUnpwR3FmYzlpOXRn YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kMWpOVG1mRXJnWklSenBHcWZjOWk5dGdidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkIyRC85NjVCRDU3RUI4OTUxMUVDODI0MkQyN0VDNEY5QUUwMi9PZDFqTlRtZkVy Z1pJUnpwR3FmYzlpOXRnYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeYamRgQVOpQaWopL7O1fmRzPvREHAeeFn677DIUaWjh9RzYjNxdFx MciQer5bKpak4kSWoRTAoOhxR260YHvipWhEi92VP9/V/8j8+K3dBrBnxpjrDeGn kI05MLlrR01WeGjqqfue6ewfGdIUZ506eNdh6/rauEb+TVyp8nQR6mVAZ5YyKdiZ jBK51Vqufca1EAhlEwxPfpFXmMDagNzNYjpjejpulbMGGbx0qREQvN7Yd2kaAeKS we/uN2GE5L8DPFpQqvfv/4EzyEI5Yr+rZEYiATCUVYFK4mubkOJucgFhVkGZWQcO 3A+VWJa0o3zqjoUNxWG5V2GP+ps3cV/k -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:50 2024 by rpki-client on console-fra.rpki-client.org