$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft File: e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json) Hash identifier: D36Ejv4YvCX5JLJNES9MZ3Ph7w6OOyLJrd6df3lPCQ4= Subject key identifier: 45:42:52:15:80:60:FF:EC:C9:D4:75:FE:CA:79:17:EB:AD:09:96:27 Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 Certificate issuer: /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Certificate serial: 071F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft Manifest number: 070D Signing time: Fri 22 Nov 2024 21:31:54 +0000 Manifest this update: Fri 22 Nov 2024 21:31:53 +0000 Manifest next update: Fri 29 Nov 2024 21:31:53 +0000 Files and hashes: 1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: p7vK+4Uc2KSr2jhOA+aL+x3s9ESwAtQWNc8ljSiCP5I=) 2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: BxFPmfPTwgp2tJjAzM/9EFLesG9jRjNr4vYZabIjAUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897 Validity Not Before: Nov 22 21:31:53 2024 GMT Not After : Nov 29 21:31:53 2024 GMT Subject: CN=6740f84a-de37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:64:92:9d:5b:21:83:8e:cb:28:8a:da:b2: 5f:3e:c9:12:43:92:08:57:14:9f:af:60:69:d7:04: e3:92:ef:31:fa:bd:63:cb:d8:cf:cf:2c:ce:40:f7: 13:48:6a:4f:5c:7d:ed:5e:a5:6e:4f:2f:7e:14:2a: b8:f6:d3:f5:a9:ba:6e:37:93:2b:11:0e:9f:1a:cf: 2b:72:f5:c6:22:d8:aa:07:56:17:bc:9a:c8:84:ed: a9:e5:b8:d5:9b:9b:20:f3:55:bc:81:48:36:13:17: 5f:06:a1:7e:7f:9a:5f:c6:4b:44:f9:f0:e2:66:68: 77:00:55:a6:3c:78:ea:4a:cd:5d:c5:8f:a2:11:df: b1:af:d5:9e:22:a6:66:a7:7b:7f:41:39:4c:04:5e: 0c:df:d6:6a:ae:10:4d:90:88:3e:16:5d:67:d3:2d: 6b:bf:27:11:68:6f:8b:8a:1d:44:11:8c:ca:aa:16: 9c:67:f1:93:35:59:62:76:36:a2:17:9e:2f:64:a2: 87:cc:8f:dd:cb:a3:3a:a8:19:96:27:db:71:d0:b9: 92:2e:1a:92:5b:74:2a:70:ea:6c:4d:66:c0:ce:53: c0:3f:69:ed:9f:87:22:7f:3c:e8:b1:c8:3b:15:db: 37:44:dd:fb:2c:fa:34:9d:33:f5:b7:a7:d6:77:ec: 28:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:42:52:15:80:60:FF:EC:C9:D4:75:FE:CA:79:17:EB:AD:09:96:27 X509v3 Authority Key Identifier: keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8f:57:b5:33:93:7e:0d:4f:81:f3:9b:e0:65:e9:13:8c:0f: 79:2e:db:44:01:49:be:b7:ab:49:af:43:9f:9e:7a:53:59:88: 13:d2:d3:16:c4:e6:1d:0a:ab:2c:13:a2:db:b5:ed:4d:3c:55: b9:6e:4f:bf:94:15:4d:f2:be:b7:33:10:aa:cf:9d:af:64:b6: 18:d3:ac:84:42:49:72:ed:e3:94:63:0c:9a:b8:b1:82:38:8a: 39:c2:08:0b:b2:c3:0a:68:d5:e2:6a:94:4e:e8:00:4e:5c:a2: 79:7c:d8:1b:23:3e:51:fe:01:51:41:90:70:6e:6e:b1:c0:30: 02:a6:db:24:08:27:8c:4f:cc:c6:c6:6b:89:e5:5d:99:1c:ae: 91:8d:1d:43:e1:8d:58:1a:4a:c1:96:08:4f:cf:98:40:32:71: 0b:d9:87:46:73:51:49:11:8b:22:74:3f:40:d8:64:72:14:09: d4:a4:51:36:98:c0:55:e2:84:ce:c0:e3:70:76:dc:f3:61:9b: 9e:c0:43:d7:70:13:01:20:dc:d7:c4:44:26:bc:d6:d0:21:04: bd:ac:e0:32:b0:34:8c:86:9b:2b:5d:91:a8:a8:43:c5:d5:57: 93:f5:8e:e0:b6:f3:f7:02:41:df:fe:d1:48:d7:8c:0f:e0:03: 8e:04:72:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5NjQxMTAvBgNVBAUTKDdCNzIxMzg4RkQxM0U4QUU0M0M5N0YwMzAxOTgxRDIy OTJDODg4OTcwHhcNMjQxMTIyMjEzMTUzWhcNMjQxMTI5MjEzMTUzWjAYMRYwFAYD VQQDEw02NzQwZjg0YS1kZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPJkkp1bIYOOyyiK2rJfPskSQ5IIVxSfr2Bp1wTjku8x+r1jy9jPzyzOQPcT SGpPXH3tXqVuTy9+FCq49tP1qbpuN5MrEQ6fGs8rcvXGItiqB1YXvJrIhO2p5bjV m5sg81W8gUg2ExdfBqF+f5pfxktE+fDiZmh3AFWmPHjqSs1dxY+iEd+xr9WeIqZm p3t/QTlMBF4M39ZqrhBNkIg+Fl1n0y1rvycRaG+Lih1EEYzKqhacZ/GTNVlidjai F54vZKKHzI/dy6M6qBmWJ9tx0LmSLhqSW3QqcOpsTWbAzlPAP2ntn4cifzzoscg7 Fds3RN37LPo0nTP1t6fWd+woDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVCUhWA YP/sydR1/sp5F+utCZYnMB8GA1UdIwQYMBaAFHtyE4j9E+iuQ8l/AwGYHSKSyIiX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTk2NC9FRkMyQ0NCQzI3 MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZLNUR5WDhEQVpnZElwTElp SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UzSVRpUDBUNks1RHlYOERBWmdkSXBMSWlKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTk2NC9FRkMyQ0NCQzI3MEYxMUVCQURFNkMwMTlDNEY5QUUwMi9lM0lUaVAwVDZL NUR5WDhEQVpnZElwTElpSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNj1e1M5N+DU+B85vgZekTjA95LttEAUm+t6tJr0OfnnpTWYgT0tMW xOYdCqssE6Lbte1NPFW5bk+/lBVN8r63MxCqz52vZLYY06yEQkly7eOUYwyauLGC OIo5wggLssMKaNXiapRO6ABOXKJ5fNgbIz5R/gFRQZBwbm6xwDACptskCCeMT8zG xmuJ5V2ZHK6RjR1D4Y1YGkrBlghPz5hAMnEL2YdGc1FJEYsidD9A2GRyFAnUpFE2 mMBV4oTOwONwdtzzYZuewEPXcBMBINzXxEQmvNbQIQS9rOAysDSMhpsrXZGoqEPF 1VeT9Y7gtvP3AkHf/tFI14wP4AOOBHLj -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org