$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json) Hash identifier: 1lvPvhiEpBY+7zm+D32gKJlrKqS7rMF+4MpUZof20Ko= Subject key identifier: EC:C1:C5:B3:8B:B2:5E:A6:32:F5:9D:B4:E8:41:FD:F1:BF:88:85:14 Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Certificate serial: 0416 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft Manifest number: 03FD Signing time: Sat 23 Nov 2024 00:05:08 +0000 Manifest this update: Sat 23 Nov 2024 00:05:08 +0000 Manifest next update: Sat 30 Nov 2024 00:05:08 +0000 Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: mllCGCWVXT9euZbbfMVooe/IHdxZDTOsIRbjaPMxODY=) 2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: ZCpdqccvGNQRvKgyIaRry+OF/s1VpSriPxxNhei30Yk=) 3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: JbuO9QygXZWdecTCM5Sf89ukRTRQrSasLXKuG+IV9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160 Validity Not Before: Nov 23 00:05:08 2024 GMT Not After : Nov 30 00:05:08 2024 GMT Subject: CN=67411c34-253b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:e4:de:00:65:8c:9a:39:16:c5:d8:84:b2: be:8a:e2:a3:77:d6:11:05:2e:37:2a:7f:79:b6:7b: 53:25:fe:53:3e:15:85:c9:7d:4f:55:13:2d:48:b1: 57:d4:46:14:c6:e5:68:7f:c5:2e:a5:d4:d0:e5:f1: d7:ef:2b:80:04:41:45:90:a0:47:bc:07:f0:d5:96: 20:7d:a6:40:ab:99:06:cf:aa:bd:76:de:61:87:23: 22:e2:87:f2:e8:d6:f9:a2:dc:eb:f3:d0:13:f4:dd: ee:60:53:e3:8c:a3:73:65:90:e3:dd:3a:43:3c:89: 5d:46:70:68:9d:3c:95:21:5a:fe:26:61:bf:b0:32: 6c:1e:8a:b3:4c:20:60:dc:45:9d:66:b3:87:1c:20: 66:0c:66:b4:69:38:0c:6a:c5:5f:31:3f:22:c4:5d: 4c:2c:51:31:a8:81:f5:ba:1a:4c:3a:74:72:65:ab: 7a:b9:f9:85:d8:70:e7:a6:7d:cf:86:59:02:c2:f2: 33:c5:c3:f9:7f:39:aa:a4:2b:4e:a2:d0:4b:b2:b1: 9c:ef:c7:bf:3b:99:7c:3d:c0:d5:72:f3:17:f1:5d: b5:5d:eb:91:f9:70:c9:31:e8:82:59:5e:b2:f9:09: b8:43:92:22:9a:e3:7c:7b:f9:18:37:10:dc:27:b3: 4a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C1:C5:B3:8B:B2:5E:A6:32:F5:9D:B4:E8:41:FD:F1:BF:88:85:14 X509v3 Authority Key Identifier: keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:65:4b:76:2d:21:fe:2e:27:49:a5:f3:14:38:1d:1b:e1:d3: 2b:e0:94:c4:ad:0b:b0:a2:58:b3:6f:7f:6a:13:f6:c8:6f:bd: 50:20:e7:12:a9:c4:15:4c:8f:07:5c:09:7b:53:26:6e:36:5c: 94:4d:bc:4a:94:04:fd:28:54:3a:e9:0c:9e:d5:fd:a1:8b:4b: f7:c3:29:f8:74:12:8d:3f:1e:46:b1:de:95:f9:61:18:e5:4b: 5a:52:75:89:55:c5:d0:f7:7b:0f:66:14:a0:cf:1f:c3:5f:fa: de:a0:3e:38:86:0d:f3:a3:4b:d3:9e:dc:89:55:a2:fc:82:d6: 9d:1e:32:99:6e:c9:5f:b4:b9:fa:f8:bf:4f:5f:c6:02:41:b4: a0:7b:e2:e1:fe:ec:be:37:6e:6d:32:b2:23:07:62:a0:6d:8f: a4:5c:29:5b:c7:87:ae:7e:6e:4a:da:09:b8:55:fb:4d:fe:30: d5:e3:b4:e9:3c:a4:b3:03:79:d5:46:de:bd:8f:72:3d:b9:71: 0c:2f:86:8a:09:b5:c3:54:08:31:1b:93:53:fa:69:15:f6:dc: 7c:1a:de:47:cd:f5:8e:f7:6d:5a:b0:d3:65:98:36:9a:8a:91: 1e:40:cf:2e:55:4f:5e:6e:25:81:c4:b2:c9:78:f9:6a:4a:93: 4e:34:e0:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy RTBGMzUxNjAwHhcNMjQxMTIzMDAwNTA4WhcNMjQxMTMwMDAwNTA4WjAYMRYwFAYD VQQDEw02NzQxMWMzNC0yNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9zk3gBljJo5FsXYhLK+iuKjd9YRBS43Kn95tntTJf5TPhWFyX1PVRMtSLFX 1EYUxuVof8UupdTQ5fHX7yuABEFFkKBHvAfw1ZYgfaZAq5kGz6q9dt5hhyMi4ofy 6Nb5otzr89AT9N3uYFPjjKNzZZDj3TpDPIldRnBonTyVIVr+JmG/sDJsHoqzTCBg 3EWdZrOHHCBmDGa0aTgMasVfMT8ixF1MLFExqIH1uhpMOnRyZat6ufmF2HDnpn3P hlkCwvIzxcP5fzmqpCtOotBLsrGc78e/O5l8PcDVcvMX8V21XeuR+XDJMeiCWV6y +Qm4Q5IimuN8e/kYNxDcJ7NKZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzBxbOL sl6mMvWdtOhB/fG/iIUUMB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2 NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5 VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuZUt2LSH+LidJpfMUOB0b4dMr4JTErQuwolizb39qE/bIb71QIOcS qcQVTI8HXAl7UyZuNlyUTbxKlAT9KFQ66Qye1f2hi0v3wyn4dBKNPx5Gsd6V+WEY 5UtaUnWJVcXQ93sPZhSgzx/DX/reoD44hg3zo0vTntyJVaL8gtadHjKZbslftLn6 +L9PX8YCQbSge+Lh/uy+N25tMrIjB2KgbY+kXClbx4eufm5K2gm4VftN/jDV47Tp PKSzA3nVRt69j3I9uXEML4aKCbXDVAgxG5NT+mkV9tx8Gt5HzfWO921asNNlmDaa ipEeQM8uVU9ebiWBxLLJePlqSpNONOAi -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org