$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft File: cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json) Hash identifier: o9ebI9MYx5UQfA1cfflETyB178CxRzO4+3y3WoFtBiQ= Subject key identifier: A7:94:4F:DA:14:6C:E4:0B:C6:BE:4D:23:BC:34:4B:A5:89:DF:B7:7F Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A Certificate issuer: /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Certificate serial: 0725 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft Manifest number: 0718 Signing time: Fri 22 Nov 2024 21:23:01 +0000 Manifest this update: Fri 22 Nov 2024 21:23:01 +0000 Manifest next update: Fri 29 Nov 2024 21:23:01 +0000 Files and hashes: 1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: qyOJG4YRL7/vxx3ec6Ha5yUofrX5jIi+GKjgQe4AiqA=) 2: B5CD0B4A7E9911EFA0499366C4F9AE02.roa (hash: dzAWqS5FHtSk5eDbDuQo4aVeSsWyWIGYay4I6jWkHNI=) 3: 5C1E69E043E011ED96455A4BC4F9AE02.roa (hash: sbleGqo/DdYIp5Ax7ayTihZizo/GfHslCHOhMT0l4Ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1829 (0x725) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A Validity Not Before: Nov 22 21:23:01 2024 GMT Not After : Nov 29 21:23:01 2024 GMT Subject: CN=6740f635-47c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:bc:13:6a:c1:62:7c:b1:4c:7a:aa:02:ea: 08:2c:f4:43:3f:12:4f:6a:d0:36:d6:54:48:9e:6c: d1:23:c6:b4:12:79:1a:0f:f7:b9:b4:b0:6a:25:b0: 54:29:f3:0e:4a:8e:b2:26:d5:62:8b:cd:0a:7d:4e: f5:71:7d:f4:20:37:5d:c0:b8:db:ab:f2:4e:90:1a: 2c:5a:54:9b:ad:15:0b:e9:05:fb:64:9d:08:17:25: 78:4c:36:23:22:d2:f5:19:08:d9:21:79:44:26:b5: 04:6a:6a:f8:74:fb:e3:1e:24:dd:e8:51:3d:fc:63: 95:d3:03:ec:af:7d:b8:ec:56:0a:c4:5b:13:27:64: 30:6c:71:78:e1:88:d4:1f:f9:df:b3:4b:99:b6:33: cf:6a:0a:58:5a:0c:5c:c3:f0:cc:3e:dc:3a:63:51: 69:cb:e1:6a:e1:4e:48:20:6a:b0:a0:8b:2a:73:ec: 2e:11:32:d9:e6:c8:28:15:78:a1:6a:00:77:f3:29: 23:8a:3f:4e:e4:6b:9a:52:36:2e:0d:bb:fb:93:fb: a2:8c:f3:20:7e:75:8a:90:99:f2:99:0e:ef:4a:56: 1c:fe:8f:44:52:9f:1e:c4:f2:f4:a9:1c:18:0c:07: 79:5e:17:70:e9:c6:2b:e1:d1:6c:af:fb:ee:54:c6: 8a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:94:4F:DA:14:6C:E4:0B:C6:BE:4D:23:BC:34:4B:A5:89:DF:B7:7F X509v3 Authority Key Identifier: keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:33:b3:de:85:ec:1d:d4:42:37:6e:9e:9c:a3:50:f8:2d:ea: 24:5e:80:8d:fa:2c:51:e6:22:29:d5:ef:1d:69:e2:1c:68:d1: d3:4a:4f:87:a1:ba:98:36:57:39:98:f3:f9:27:92:32:15:b6: 99:2f:e9:10:ed:8d:27:1f:7c:de:a4:77:04:85:9c:1a:60:fa: c0:db:11:95:6d:df:7e:92:52:bb:72:38:dc:98:4f:34:45:d2: 06:77:d2:f0:e9:6c:10:bd:83:30:32:a4:b4:9f:cd:a3:28:09: 42:e0:47:f3:ed:a9:9b:3a:1c:e3:fb:b3:6e:b7:1a:df:db:b5: c8:36:2d:a7:e3:b1:44:2a:0a:65:b0:67:28:33:a2:bf:95:a5: d7:26:b3:fc:d8:51:df:3b:46:b9:c3:08:92:92:11:49:4c:35: 53:c3:ae:e7:3e:6a:e8:d6:da:4b:e4:63:0f:de:e1:5f:e7:c1: 28:93:39:e2:2e:e2:53:7f:22:0f:fe:e9:3d:21:5e:d4:c8:30: ee:32:8e:c2:1c:4a:06:35:eb:3a:4a:2a:17:8c:4d:02:83:73: 03:58:53:c5:54:a9:94:73:01:84:3d:c3:e6:84:e0:f7:6b:4e: 7e:e1:16:97:6d:dc:5b:79:7f:02:80:1d:15:26:3a:f5:fb:98: 48:ee:73:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC NzM1NzZFOEEwHhcNMjQxMTIyMjEyMzAxWhcNMjQxMTI5MjEyMzAxWjAYMRYwFAYD VQQDEw02NzQwZjYzNS00N2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyW8E2rBYnyxTHqqAuoILPRDPxJPatA21lRInmzRI8a0EnkaD/e5tLBqJbBU KfMOSo6yJtVii80KfU71cX30IDddwLjbq/JOkBosWlSbrRUL6QX7ZJ0IFyV4TDYj ItL1GQjZIXlEJrUEamr4dPvjHiTd6FE9/GOV0wPsr3247FYKxFsTJ2QwbHF44YjU H/nfs0uZtjPPagpYWgxcw/DMPtw6Y1Fpy+Fq4U5IIGqwoIsqc+wuETLZ5sgoFXih agB38ykjij9O5GuaUjYuDbv7k/uijPMgfnWKkJnymQ7vSlYc/o9EUp8exPL0qRwY DAd5Xhdw6cYr4dFsr/vuVMaKFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeUT9oU bOQLxr5NI7w0S6WJ37d/MB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3 OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODA3RS9DNEI0RTJDNjE3OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhI RWpZMUJhQ21UZE8zTlhib28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrM7Pehewd1EI3bp6co1D4LeokXoCN+ixR5iIp1e8daeIcaNHTSk+H obqYNlc5mPP5J5IyFbaZL+kQ7Y0nH3zepHcEhZwaYPrA2xGVbd9+klK7cjjcmE80 RdIGd9Lw6WwQvYMwMqS0n82jKAlC4Efz7ambOhzj+7Nutxrf27XINi2n47FEKgpl sGcoM6K/laXXJrP82FHfO0a5wwiSkhFJTDVTw67nPmro1tpL5GMP3uFf58Eokzni LuJTfyIP/uk9IV7UyDDuMo7CHEoGNes6SioXjE0Cg3MDWFPFVKmUcwGEPcPmhOD3 a05+4RaXbdxbeX8CgB0VJjr1+5hI7nPJ -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:05 2024 by rpki-client on console-fra.rpki-client.org