$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft File: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json) Hash identifier: 9/LqZE5+hXtIX1juol1ovuY0P9bhmPX76m4HgCJe+R4= Subject key identifier: 9A:1C:F7:85:9E:73:98:C2:23:DD:B4:C5:0A:0C:36:05:67:53:7E:83 Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA Certificate issuer: /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Certificate serial: 0A65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft Manifest number: 0A5B Signing time: Fri 22 Nov 2024 19:26:49 +0000 Manifest this update: Fri 22 Nov 2024 19:26:49 +0000 Manifest next update: Fri 29 Nov 2024 19:26:49 +0000 Files and hashes: 1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: g23c14CJt1HjOroJ42K0CEkjPFxBBg9garshw7PhDSg=) 2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: 0pOyw8LF7RGBw1qxoeNfF21Qn2Gqg0oqE4beQcmEP58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2661 (0xa65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Validity Not Before: Nov 22 19:26:49 2024 GMT Not After : Nov 29 19:26:49 2024 GMT Subject: CN=6740daf9-e4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:df:c8:bf:d1:0e:05:55:b0:44:31:62:c3: 29:d1:e5:eb:4f:f5:d7:c3:bf:69:c7:4f:2f:d9:3c: 65:35:77:b4:f7:8b:85:13:34:20:6e:b5:da:03:c2: ac:a0:ad:bb:90:d7:d7:cb:ee:3e:a9:f0:f4:7f:6a: f6:98:d8:94:3d:4a:af:19:77:a8:16:a3:6e:c9:d4: 6f:98:10:6d:e7:1a:4c:ac:f1:02:e1:21:e2:d3:b1: b7:4f:ac:dd:56:45:95:88:3a:c6:54:24:90:51:4b: 88:58:0c:f2:ac:49:ec:a4:63:59:ea:21:8e:bc:71: a1:3e:2d:b4:5d:9f:df:68:01:ac:9f:af:09:c2:a7: ac:09:fb:f2:32:5d:41:09:0d:91:9f:ca:a8:cb:96: a4:0f:fe:22:b0:02:db:69:2f:9c:35:d0:e2:7a:37: 99:53:ae:99:0b:a1:94:3a:8c:8d:13:35:fc:23:62: 01:58:fb:51:d6:8f:c0:2c:7a:66:7d:9e:2e:c4:cb: 62:2d:7e:6f:50:6f:24:73:3a:64:eb:4f:c4:a5:75: 0e:42:65:84:9a:cb:93:03:94:c9:4d:54:74:a3:f0: 06:63:11:a5:28:39:3a:4a:4d:29:6c:96:ce:db:be: 82:05:fd:3f:8d:f2:db:e2:59:5b:4c:c0:73:81:d8: bb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1C:F7:85:9E:73:98:C2:23:DD:B4:C5:0A:0C:36:05:67:53:7E:83 X509v3 Authority Key Identifier: keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:7d:70:97:61:d8:33:e2:60:bd:3f:04:be:bf:b9:8b:0c:0d: ea:72:e5:a0:ce:64:1d:3c:28:6f:8a:eb:ce:91:a1:31:59:d1: 34:b1:e8:f0:cb:5b:a2:c4:1e:44:b5:30:84:68:0c:69:ac:c9: 00:4f:a0:12:0f:01:e0:c4:96:31:99:09:7d:6b:70:17:d1:d8: 57:88:82:3c:7b:38:2e:49:06:af:a8:1f:af:b1:3f:b7:83:76: 61:1c:75:6f:51:e3:0b:f2:3d:45:6d:b1:47:94:47:12:d5:2b: 34:12:80:5d:38:74:3e:69:d2:00:3d:02:76:da:ee:bb:2e:7f: 4e:70:90:a3:fb:ba:ec:79:f5:91:e7:24:50:aa:62:d7:65:04: af:c9:19:5e:86:c4:c1:f1:88:08:d1:ed:3f:59:ce:e5:af:96: 7a:d0:92:28:68:ee:b0:46:d3:a3:de:f8:29:a9:31:56:60:59: f6:90:71:a9:ed:7a:a3:60:5d:4d:37:f4:e3:cb:7f:d8:23:88: 45:04:04:50:65:17:94:37:a6:bd:a9:6f:ca:8e:c7:c2:d6:1a: 84:ee:63:c7:e8:c5:dc:43:99:80:b2:eb:7e:21:b0:c3:ce:00: 0f:d6:95:62:66:9e:4e:40:9b:64:9b:ab:76:15:d1:8b:bb:a7: 95:b0:f1:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzNzgxMTAvBgNVBAUTKDk5QkUwODVEMUM2OTZDQkMyMUI2NzhGOTE4OEVDQ0U1 REJDREQ0Q0EwHhcNMjQxMTIyMTkyNjQ5WhcNMjQxMTI5MTkyNjQ5WjAYMRYwFAYD VQQDEw02NzQwZGFmOS1lNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSjfyL/RDgVVsEQxYsMp0eXrT/XXw79px08v2TxlNXe094uFEzQgbrXaA8Ks oK27kNfXy+4+qfD0f2r2mNiUPUqvGXeoFqNuydRvmBBt5xpMrPEC4SHi07G3T6zd VkWViDrGVCSQUUuIWAzyrEnspGNZ6iGOvHGhPi20XZ/faAGsn68JwqesCfvyMl1B CQ2Rn8qoy5akD/4isALbaS+cNdDiejeZU66ZC6GUOoyNEzX8I2IBWPtR1o/ALHpm fZ4uxMtiLX5vUG8kczpk60/EpXUOQmWEmsuTA5TJTVR0o/AGYxGlKDk6Sk0pbJbO 276CBf0/jfLb4llbTMBzgdi7zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoc94We c5jCI920xQoMNgVnU36DMB8GA1UdIwQYMBaAFJm+CF0caWy8IbZ4+RiOzOXbzdTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM3OC82MzJGQThDRTUx RUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJMd2h0bmo1R0k3TTVkdk4x TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iNElYUnhwYkx3aHRuajVHSTdNNWR2TjFNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM3OC82MzJGQThDRTUxRUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJM d2h0bmo1R0k3TTVkdk4xTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxfXCXYdgz4mC9PwS+v7mLDA3qcuWgzmQdPChviuvOkaExWdE0sejw y1uixB5EtTCEaAxprMkAT6ASDwHgxJYxmQl9a3AX0dhXiII8ezguSQavqB+vsT+3 g3ZhHHVvUeML8j1FbbFHlEcS1Ss0EoBdOHQ+adIAPQJ22u67Ln9OcJCj+7rsefWR 5yRQqmLXZQSvyRlehsTB8YgI0e0/Wc7lr5Z60JIoaO6wRtOj3vgpqTFWYFn2kHGp 7XqjYF1NN/Tjy3/YI4hFBARQZReUN6a9qW/KjsfC1hqE7mPH6MXcQ5mAsut+IbDD zgAP1pViZp5OQJtkm6t2FdGLu6eVsPFG -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:35 2024 by rpki-client on console-fra.rpki-client.org