$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json) Hash identifier: AiBs6sxfoJrI4+pUp/HzRRhrx1GqWZWEGo9+ABhWjB0= Subject key identifier: E8:88:DB:1F:50:4A:90:BE:A2:4B:BE:A9:5A:D1:5E:ED:BE:9D:2A:F2 Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Certificate serial: 10C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft Manifest number: 10B3 Signing time: Fri 22 Nov 2024 17:20:24 +0000 Manifest this update: Fri 22 Nov 2024 17:20:23 +0000 Manifest next update: Fri 29 Nov 2024 17:20:23 +0000 Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: iUk0o9s+dcCHv34Clgn3NiUaEIBxlUG1SLy0W7jYpkQ=) 2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: h4w3R++k5N2fKCBL4XYVOAI91zAPSdTO27DUBoN7QB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4297 (0x10c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Validity Not Before: Nov 22 17:20:23 2024 GMT Not After : Nov 29 17:20:23 2024 GMT Subject: CN=6740bd58-ca12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:91:d0:81:5a:8d:90:42:50:1e:f9:b0:03: da:9f:d2:9e:35:91:6f:2e:f6:d3:ea:60:e0:73:17: 66:38:66:55:ac:3f:25:d6:57:b6:74:dc:a5:0e:62: 6a:43:0b:81:ed:9b:53:97:01:a5:86:1a:65:62:d6: fc:87:63:e0:33:7a:93:d1:93:07:23:a4:89:fa:30: 16:14:3d:42:ef:e4:ed:60:c7:33:8b:03:7f:44:e9: 16:3e:9b:be:d6:0e:b5:04:ef:b3:da:1f:89:64:a0: 87:5b:f1:a4:32:ca:93:30:31:0d:23:c6:d8:4d:ad: 2f:26:4e:43:5f:07:ad:de:0f:27:f0:e8:0a:82:34: ee:44:3f:3f:93:fc:9a:23:a5:6e:3e:9b:7d:83:44: 1a:44:b9:b0:c6:17:df:38:43:65:f1:17:f5:ed:31: 0a:52:6a:fc:04:46:87:cb:c1:4f:50:63:d2:12:10: df:e7:e3:87:5f:6a:1b:fa:ba:98:b9:73:fb:23:31: ea:9d:39:1a:5f:54:cf:6c:db:b3:48:bf:38:f5:51: 69:de:ff:bb:22:a2:0c:da:08:b2:ed:02:9d:fa:4e: ab:4f:31:ce:3b:b1:15:8c:69:4e:54:6d:35:61:38: 3d:50:25:17:50:ae:42:05:6c:c4:0f:00:e8:79:e5: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:88:DB:1F:50:4A:90:BE:A2:4B:BE:A9:5A:D1:5E:ED:BE:9D:2A:F2 X509v3 Authority Key Identifier: keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0f:c0:99:5c:64:8f:6a:73:b0:7a:fe:88:ea:57:b6:83:af: 21:ae:c7:39:08:46:3a:d8:b9:6a:e0:43:b8:4e:81:3c:50:2e: c2:23:2a:61:76:00:c8:1a:2a:b1:f4:dc:77:cc:77:5d:aa:41: 4d:a3:a4:bd:cd:ee:46:ff:47:1b:5d:56:f5:03:a0:77:be:80: 65:ea:a6:8d:8b:cc:6d:06:d3:d2:42:ce:1b:4c:5b:8b:15:4e: ad:f6:d6:8c:28:fd:02:48:b1:01:d6:f0:10:e2:82:63:be:8a: 91:78:40:d3:0b:a9:28:15:d5:42:36:16:55:ae:13:a9:75:a2: 7d:85:cd:24:b3:54:65:63:99:9d:ba:d6:39:82:9f:58:83:da: 89:8b:b9:67:ca:86:a3:27:38:4c:59:83:5e:4d:6b:49:6b:df: f2:69:ae:c1:41:06:57:6b:45:58:16:b2:13:34:92:93:41:ce: 22:e4:a0:96:c8:ba:f2:ab:83:8f:d2:46:84:48:ec:37:b0:80: 65:33:a6:18:77:16:d3:46:f1:c9:89:b0:87:c5:15:e8:cf:8c: 2e:3f:16:63:1e:2b:a9:8c:dd:e1:37:10:e3:be:19:f6:55:57: d3:6f:7c:96:78:42:bf:02:bb:38:25:10:52:3d:c7:f5:b1:23: 7a:9c:9f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzQxMTAvBgNVBAUTKEUzRDNCNDc4ODI3M0NFNDU5MjlCMDk5ODNBQkY2NEI1 RDQ0RDFGMDgwHhcNMjQxMTIyMTcyMDIzWhcNMjQxMTI5MTcyMDIzWjAYMRYwFAYD VQQDEw02NzQwYmQ1OC1jYTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+yR0IFajZBCUB75sAPan9KeNZFvLvbT6mDgcxdmOGZVrD8l1le2dNylDmJq QwuB7ZtTlwGlhhplYtb8h2PgM3qT0ZMHI6SJ+jAWFD1C7+TtYMcziwN/ROkWPpu+ 1g61BO+z2h+JZKCHW/GkMsqTMDENI8bYTa0vJk5DXwet3g8n8OgKgjTuRD8/k/ya I6VuPpt9g0QaRLmwxhffOENl8Rf17TEKUmr8BEaHy8FPUGPSEhDf5+OHX2ob+rqY uXP7IzHqnTkaX1TPbNuzSL849VFp3v+7IqIM2giy7QKd+k6rTzHOO7EVjGlOVG01 YTg9UCUXUK5CBWzEDwDoeeXBrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiI2x9Q SpC+oku+qVrRXu2+nSryMB8GA1UdIwQYMBaAFOPTtHiCc85FkpsJmDq/ZLXUTR8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzNC8xMzI3QTczRTE3 MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenprV1Ntd21ZT3I5a3RkUk5I d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ5TzBlSUp6emtXU213bVlPcjlrdGRSTkh3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjYzNC8xMzI3QTczRTE3MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenpr V1Ntd21ZT3I5a3RkUk5Id2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuD8CZXGSPanOwev6I6le2g68hrsc5CEY62Llq4EO4ToE8UC7CIyph dgDIGiqx9Nx3zHddqkFNo6S9ze5G/0cbXVb1A6B3voBl6qaNi8xtBtPSQs4bTFuL FU6t9taMKP0CSLEB1vAQ4oJjvoqReEDTC6koFdVCNhZVrhOpdaJ9hc0ks1RlY5md utY5gp9Yg9qJi7lnyoajJzhMWYNeTWtJa9/yaa7BQQZXa0VYFrITNJKTQc4i5KCW yLryq4OP0kaESOw3sIBlM6YYdxbTRvHJibCHxRXoz4wuPxZjHiupjN3hNxDjvhn2 VVfTb3yWeEK/Ars4JRBSPcf1sSN6nJ/w -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org