$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json) Hash identifier: iGGamKRuU7OH+HKfjpSieN7htQTzF9/4OE2PKhkISg4= Subject key identifier: 38:63:6D:3E:0E:2A:42:8A:74:B0:CF:61:5B:46:5C:42:5A:DB:C1:B3 Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Certificate serial: 075A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft Manifest number: 0750 Signing time: Fri 22 Nov 2024 21:04:57 +0000 Manifest this update: Fri 22 Nov 2024 21:04:56 +0000 Manifest next update: Fri 29 Nov 2024 21:04:56 +0000 Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: +TRVh6t/wdenFUWndwp9BqtsGq40xXKPICVTdxSb8FU=) 2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: cAsn+ZLvFSOZU0pEtCrrDWsBwNszEN0eL2057zAiYjQ=) 3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: d4YjT+wZz2FF52dbAjBXkm9vxrKKV8DOl0ST7TwKzd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1882 (0x75a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Validity Not Before: Nov 22 21:04:56 2024 GMT Not After : Nov 29 21:04:56 2024 GMT Subject: CN=6740f1f9-3cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:40:51:8a:ad:0c:1e:41:11:35:d8:0b:fa: fc:ef:37:4b:9c:bc:b5:19:23:5d:e8:53:28:f0:21: 6a:a5:aa:8a:57:48:19:b9:30:75:17:1a:7f:42:3c: cd:64:fd:73:15:0c:5b:e3:24:99:2a:d9:20:d4:23: 7e:48:93:80:8e:26:47:24:b7:84:78:62:d0:1e:28: 38:37:fa:9f:8c:c9:f6:86:b8:40:9d:73:7e:31:88: 54:20:98:b2:f4:fd:69:f6:8c:6b:15:a4:fc:0f:0c: ea:27:8e:3f:8f:9d:1b:ef:8e:9e:39:5e:3f:b0:fb: 71:86:a4:0b:09:7e:d0:f7:71:0a:09:dc:78:27:c2: 8c:99:5f:53:54:e0:b0:28:c3:1a:64:49:9c:55:b1: 63:dc:e8:35:d7:17:b7:dd:0a:d3:3b:93:b1:31:b9: a2:b2:27:ff:1a:95:1b:ff:14:6d:70:4b:93:32:f4: 28:59:6b:88:61:95:98:84:75:fa:2d:4e:ad:a3:17: 8e:5a:58:13:83:16:4c:43:0d:03:fc:c2:80:2c:c6: 94:8d:ee:60:b9:b0:11:94:37:87:28:cd:2a:9b:c1: 50:d8:2c:47:20:b9:96:fb:c8:aa:bb:a2:a6:fe:cb: b8:cd:8e:09:5b:94:1b:4b:17:58:7b:61:a9:ad:63: 4b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:63:6D:3E:0E:2A:42:8A:74:B0:CF:61:5B:46:5C:42:5A:DB:C1:B3 X509v3 Authority Key Identifier: keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:bd:d4:de:c2:eb:16:2e:bd:ae:d6:a2:92:10:05:c0:b9:ac: cd:25:ff:43:0d:c3:99:6b:7e:1b:6d:75:66:44:e6:71:1f:43: 1c:c1:f9:75:8a:b6:20:fe:4f:06:72:24:1c:03:2a:91:73:f4: 4f:ca:37:2a:7e:45:fe:9d:f1:b0:41:09:fe:08:c9:1b:ee:17: 82:e2:79:77:8a:cb:91:96:19:66:6e:f0:f7:a9:9d:73:83:3a: a9:64:f6:c0:a1:c4:98:61:c9:47:39:f9:14:5e:13:dd:fa:0e: cd:9e:0b:ad:0c:ae:b7:21:03:95:1c:c2:4d:ca:84:8a:55:9d: ad:77:7d:b7:c7:02:22:94:48:04:f5:98:6d:b0:ff:6a:ca:1f: b1:6f:72:f8:85:89:cf:7a:3a:14:3b:cc:5b:e5:03:14:5b:42: 7c:e5:2f:ed:dc:1f:1e:91:f7:f5:1f:aa:20:af:de:cb:c5:49: f2:fe:ca:ad:06:ea:29:e1:f9:88:ee:79:be:64:f1:11:06:a3: 3c:da:a2:bd:17:83:64:55:93:f1:0a:c4:71:b5:d0:de:15:d9: 30:a6:db:80:b7:6a:98:48:ca:10:86:60:8a:16:c2:cc:1b:ac: f2:da:2f:bf:26:b9:77:43:d1:a8:cc:2a:46:b0:b7:70:3a:6e: 43:e9:a8:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG MUIzOUJGRDgwHhcNMjQxMTIyMjEwNDU2WhcNMjQxMTI5MjEwNDU2WjAYMRYwFAYD VQQDEw02NzQwZjFmOS0zY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxVAUYqtDB5BETXYC/r87zdLnLy1GSNd6FMo8CFqpaqKV0gZuTB1Fxp/QjzN ZP1zFQxb4ySZKtkg1CN+SJOAjiZHJLeEeGLQHig4N/qfjMn2hrhAnXN+MYhUIJiy 9P1p9oxrFaT8DwzqJ44/j50b746eOV4/sPtxhqQLCX7Q93EKCdx4J8KMmV9TVOCw KMMaZEmcVbFj3Og11xe33QrTO5OxMbmisif/GpUb/xRtcEuTMvQoWWuIYZWYhHX6 LU6toxeOWlgTgxZMQw0D/MKALMaUje5gubARlDeHKM0qm8FQ2CxHILmW+8iqu6Km /su4zY4JW5QbSxdYe2GprWNLhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhjbT4O KkKKdLDPYVtGXEJa28GzMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu SGxVaFZYdXdPZ0R4czV2OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApvdTewusWLr2u1qKSEAXAuazNJf9DDcOZa34bbXVmROZxH0Mcwfl1 irYg/k8GciQcAyqRc/RPyjcqfkX+nfGwQQn+CMkb7heC4nl3isuRlhlmbvD3qZ1z gzqpZPbAocSYYclHOfkUXhPd+g7NngutDK63IQOVHMJNyoSKVZ2td323xwIilEgE 9ZhtsP9qyh+xb3L4hYnPejoUO8xb5QMUW0J85S/t3B8ekff1H6ogr97LxUny/sqt Buop4fmI7nm+ZPERBqM82qK9F4NkVZPxCsRxtdDeFdkwptuAt2qYSMoQhmCKFsLM G6zy2i+/Jrl3Q9GozCpGsLdwOm5D6ajo -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org