$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft File: k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft (raw, json) Hash identifier: LoFX1FOgQbHbyNNClx/IQ9gwTaolLeyJ9ASNsbP1bz8= Subject key identifier: DE:57:1D:D8:72:E0:BB:C7:98:B1:21:76:C3:67:28:51:0E:DA:FA:E9 Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft Manifest number: EF Signing time: Thu 21 Nov 2024 03:38:06 +0000 Manifest this update: Thu 21 Nov 2024 03:38:05 +0000 Manifest next update: Thu 28 Nov 2024 03:38:05 +0000 Files and hashes: 1: k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl (hash: wKFyQ99AN8lrQ3dg7buAD9RR7Lht+3KQ6cH5E5Reuzg=) 2: E0FF171A440411EF85685B0DC4F9AE02.roa (hash: KnSSA1Qq59sJxgKVj3jP8KkbnpUbCwhj2IXQBg8sTYM=) 3: 9AE3D69A31ED11EFA537871BC4F9AE02.roa (hash: NLAG2+hX7/iP2bhjkSZBj6P2IECcGb9YySRKnQ4sPC0=) 4: 9442231871C311EEB4110C83C4F9AE02.roa (hash: cPScC0gg9JYSO4uN11odfRIjDwaRFAK9tItwdJFOomM=) 5: 1E121F0E4E3111EFB88CF076C4F9AE02.roa (hash: wQut+szNL5vwSeq5waVGRK6ZNGbvz3meY2xD3T/hUuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B Validity Not Before: Nov 21 03:38:05 2024 GMT Not After : Nov 28 03:38:05 2024 GMT Subject: CN=673eab1d-152e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2a:b1:a8:4f:37:64:44:65:5e:2b:26:e1:56: a9:a1:1e:c0:99:b6:4f:07:7f:67:11:a8:f5:8c:42: cf:5c:72:21:37:21:11:4c:b2:76:8c:28:75:c0:37: 04:95:bb:70:cd:7b:f6:00:93:ee:17:08:21:42:03: f3:a4:65:2a:86:37:b1:94:fc:e8:bf:40:88:04:16: a7:aa:c3:c3:6b:d4:0f:c4:74:a9:04:a2:9b:78:1f: 34:33:00:6a:02:37:ae:13:29:4b:ec:18:c8:55:df: 53:a6:ce:c9:4e:bf:cc:92:f7:e2:86:20:79:d7:cb: 61:98:6d:90:a3:03:63:af:59:7d:69:9d:c0:19:a1: d8:ee:d3:b1:35:f3:d5:bc:4d:94:47:46:87:69:6e: 02:0e:d2:b8:1a:86:c0:54:ad:46:94:c8:f1:57:a4: 9a:a4:e2:33:32:e4:7b:09:61:4e:d8:ee:62:00:d7: 54:2f:49:8b:c3:4e:b2:66:92:c4:ed:4b:d2:d0:3f: 38:d6:c8:de:bc:f2:e3:ea:e9:16:95:49:dc:de:45: 1c:7c:df:e6:9b:81:06:e7:d8:0a:3e:0a:82:3f:d8: 5b:8e:4d:02:6a:70:ec:24:74:cf:0e:9d:17:f0:ae: f9:3c:ed:39:41:58:4a:65:bc:d9:bc:18:1c:72:1b: 3c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:57:1D:D8:72:E0:BB:C7:98:B1:21:76:C3:67:28:51:0E:DA:FA:E9 X509v3 Authority Key Identifier: keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:47:9f:13:79:2d:1e:b3:cb:e2:4e:d6:6b:9b:6a:ba:93:43: ea:75:1f:87:c7:8c:9e:e4:cd:04:8d:8c:ff:c1:74:b0:1b:dc: 6b:b8:21:fa:96:a3:69:ec:4c:6e:36:7c:b4:8d:45:fe:cc:8a: cc:ba:a3:f2:e9:18:81:16:d7:3d:8a:b5:ca:74:03:09:27:d1: 3f:53:77:c0:33:70:95:70:46:c3:e2:7c:ae:14:36:b9:3d:a3: 9a:86:18:74:03:54:05:e3:4a:71:69:3a:f5:17:a8:1a:4e:20: 3d:ce:dc:5b:91:2d:97:a4:68:23:b8:8d:69:8c:ba:3a:4a:39: 41:d8:c6:ff:72:82:e7:87:30:75:c8:e5:d7:b4:35:2a:4d:22: 5c:f8:6f:0d:b1:f2:93:cc:f4:48:03:d0:fb:71:dd:81:14:65: 96:91:71:44:79:a5:f0:76:73:68:4e:62:2d:3d:db:1b:2a:c5: ba:d5:79:dc:dc:ec:1d:93:32:a3:0d:d3:53:42:51:66:1b:99: 81:19:1f:37:1d:59:7d:28:a3:b9:cd:e7:35:e9:ef:06:c9:af: cb:93:b4:88:95:a0:ee:e2:27:ac:32:70:e4:dd:0f:70:c8:fa: b2:96:2c:ad:1e:06:04:0a:c3:ac:4e:54:cf:07:35:21:cc:a2: 78:d2:58:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY3OEMxMTAvBgNVBAUTKDkzODc5QjAwRTRCN0ZCQzAxMjYwNzA3Qjc2RDVEMTIw RjQ1QjUzNUIwHhcNMjQxMTIxMDMzODA1WhcNMjQxMTI4MDMzODA1WjAYMRYwFAYD VQQDEw02NzNlYWIxZC0xNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSqxqE83ZERlXism4VapoR7AmbZPB39nEaj1jELPXHIhNyERTLJ2jCh1wDcE lbtwzXv2AJPuFwghQgPzpGUqhjexlPzov0CIBBanqsPDa9QPxHSpBKKbeB80MwBq AjeuEylL7BjIVd9Tps7JTr/MkvfihiB518thmG2QowNjr1l9aZ3AGaHY7tOxNfPV vE2UR0aHaW4CDtK4GobAVK1GlMjxV6SapOIzMuR7CWFO2O5iANdUL0mLw06yZpLE 7UvS0D841sjevPLj6ukWlUnc3kUcfN/mm4EG59gKPgqCP9hbjk0CanDsJHTPDp0X 8K75PO05QVhKZbzZvBgcchs8LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5XHdhy 4LvHmLEhdsNnKFEO2vrpMB8GA1UdIwQYMBaAFJOHmwDkt/vAEmBwe3bV0SD0W1Nb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjc4Qy8yODIzMTVEMDUy MDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04QVNZSEI3ZHRYUklQUmJV MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s0ZWJBT1MzLThBU1lIQjdkdFhSSVBSYlUxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Njc4Qy8yODIzMTVEMDUyMDAxMUVFQUE4NjZCNjlDNEY5QUUwMi9rNGViQU9TMy04 QVNZSEI3ZHRYUklQUmJVMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjR58TeS0es8viTtZrm2q6k0PqdR+Hx4ye5M0EjYz/wXSwG9xruCH6 lqNp7ExuNny0jUX+zIrMuqPy6RiBFtc9irXKdAMJJ9E/U3fAM3CVcEbD4nyuFDa5 PaOahhh0A1QF40pxaTr1F6gaTiA9ztxbkS2XpGgjuI1pjLo6SjlB2Mb/coLnhzB1 yOXXtDUqTSJc+G8NsfKTzPRIA9D7cd2BFGWWkXFEeaXwdnNoTmItPdsbKsW61Xnc 3OwdkzKjDdNTQlFmG5mBGR83HVl9KKO5zec16e8Gya/Lk7SIlaDu4iesMnDk3Q9w yPqyliytHgYECsOsTlTPBzUhzKJ40lg1 -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:53 2024 by rpki-client on console-fra.rpki-client.org