$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json) Hash identifier: Fel325VfgfMe33slGT5fYzTEdFGcvL2zlfwXBeJUz+w= Subject key identifier: 81:E7:D9:89:F5:B1:4D:68:17:7A:4F:4D:64:F5:8E:C0:8E:CA:4C:A6 Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Certificate serial: 0CA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft Manifest number: 0C9A Signing time: Fri 22 Nov 2024 18:06:26 +0000 Manifest this update: Fri 22 Nov 2024 18:06:26 +0000 Manifest next update: Fri 29 Nov 2024 18:06:26 +0000 Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: ka6vZj84kMlKqwwCWHuxKzMHpaJeOhOIZZHnDBoegB0=) 2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: JfyJc8hrLZucoRHk+LPv3mbsPGDOx4vwQyrUYoddmy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3238 (0xca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Validity Not Before: Nov 22 18:06:26 2024 GMT Not After : Nov 29 18:06:26 2024 GMT Subject: CN=6740c822-f17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:23:9a:b9:76:cd:81:93:bc:60:90:a6:6a: a9:3d:5b:7a:09:ee:d0:03:fe:0f:68:7a:fd:96:7c: 34:ed:30:9f:34:65:05:4f:b2:0b:1c:16:64:bf:27: 27:c2:2a:3f:a6:a3:d2:46:5a:8e:f8:31:53:4d:58: 65:22:58:cc:f5:6a:d3:70:26:c7:e9:1e:01:c9:80: 11:5e:a0:19:1f:26:24:be:f1:16:be:2c:16:f8:c5: b4:f0:ce:c3:f1:50:8f:86:64:2b:f8:53:bc:74:c8: a6:c9:d9:3d:32:d7:45:9a:40:95:16:8b:44:a4:a1: 92:18:bf:1e:8e:31:ff:72:a8:67:11:a6:8a:6e:1c: 6f:f4:9f:e9:e7:8b:d9:b4:6a:82:e3:8a:a4:1a:e0: 6b:00:f9:15:2f:ff:21:eb:f2:d8:c6:36:35:a9:2c: 63:2c:38:66:a8:26:ab:80:57:98:53:be:4a:7e:c1: a3:51:c0:e8:ce:9b:87:6f:e2:a4:73:f8:93:b0:ac: 79:e9:ab:79:3d:40:89:a2:e5:ac:ae:4c:97:c9:67: e8:a0:43:99:9d:6b:60:b2:b6:7f:64:8f:04:3d:f3: 49:d6:59:2e:36:4c:1e:c2:9d:b2:b0:13:0c:2f:ed: 32:73:46:62:0e:f8:f0:81:be:bc:3c:c9:c8:f2:c0: 1f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E7:D9:89:F5:B1:4D:68:17:7A:4F:4D:64:F5:8E:C0:8E:CA:4C:A6 X509v3 Authority Key Identifier: keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:c8:ca:3b:5f:74:1f:01:ca:93:69:24:87:ba:03:91:18:94: 0a:84:d5:4e:e8:05:a5:0e:c2:ac:c8:cd:d9:19:e1:d6:f8:9c: ba:ac:68:10:f0:59:db:49:fa:8f:fa:7e:27:a7:9f:57:54:d7: af:75:5a:58:44:78:b7:74:d5:e5:cd:3e:a2:b7:f1:f9:f3:e3: 06:74:9f:95:0f:9c:a7:5a:13:25:27:0e:b2:1b:ea:ea:d6:2c: e2:1d:b7:fa:14:50:22:80:42:aa:cb:4a:70:1f:e7:05:77:f8: 37:5f:a6:e3:6f:a9:75:3f:11:87:7f:1e:cc:6a:8e:b2:b9:c3: d0:a5:94:55:1e:be:12:45:33:42:bc:d9:02:a5:61:f7:d7:d3: 00:21:e9:04:4d:3e:c0:81:25:c9:da:02:be:56:ed:a1:fe:ff: 98:18:50:24:8b:0c:c1:68:f7:6e:0e:60:98:26:0b:05:b4:ff: 52:b9:1e:4b:9f:b4:14:ae:e5:bc:c3:c4:e1:08:3c:ec:5b:de: ca:7c:52:90:db:25:51:43:8e:db:58:16:fb:d0:fc:91:28:7c: c1:87:79:f1:a7:ae:e3:12:0f:b3:ba:5c:60:16:74:06:04:6a: e4:57:fb:d4:fe:c5:49:1e:3f:4b:27:be:8e:c2:86:20:9b:09: 6f:f3:47:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF OTM1Nzc2QTYwHhcNMjQxMTIyMTgwNjI2WhcNMjQxMTI5MTgwNjI2WjAYMRYwFAYD VQQDEw02NzQwYzgyMi1mMTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1wjmrl2zYGTvGCQpmqpPVt6Ce7QA/4PaHr9lnw07TCfNGUFT7ILHBZkvycn wio/pqPSRlqO+DFTTVhlIljM9WrTcCbH6R4ByYARXqAZHyYkvvEWviwW+MW08M7D 8VCPhmQr+FO8dMimydk9MtdFmkCVFotEpKGSGL8ejjH/cqhnEaaKbhxv9J/p54vZ tGqC44qkGuBrAPkVL/8h6/LYxjY1qSxjLDhmqCargFeYU75KfsGjUcDozpuHb+Kk c/iTsKx56at5PUCJouWsrkyXyWfooEOZnWtgsrZ/ZI8EPfNJ1lkuNkwewp2ysBMM L+0yc0ZiDvjwgb68PMnI8sAfJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHn2Yn1 sU1oF3pPTWT1jsCOykymMB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTlCNy9BNEVDNTNGNkUyQjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNm aGpoSnEyUXlNOFBwTlhkcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkyMo7X3QfAcqTaSSHugORGJQKhNVO6AWlDsKsyM3ZGeHW+Jy6rGgQ 8FnbSfqP+n4np59XVNevdVpYRHi3dNXlzT6it/H58+MGdJ+VD5ynWhMlJw6yG+rq 1iziHbf6FFAigEKqy0pwH+cFd/g3X6bjb6l1PxGHfx7Mao6yucPQpZRVHr4SRTNC vNkCpWH319MAIekETT7AgSXJ2gK+Vu2h/v+YGFAkiwzBaPduDmCYJgsFtP9SuR5L n7QUruW8w8ThCDzsW97KfFKQ2yVRQ47bWBb70PyRKHzBh3nxp67jEg+zulxgFnQG BGrkV/vU/sVJHj9LJ76OwoYgmwlv80dO -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:55 2024 by rpki-client on console-fra.rpki-client.org