$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json) Hash identifier: NO+RwZT6tEkYXqDNsdWSI+2uJCF2nZ5Orfdq85mwBSQ= Subject key identifier: FF:80:B1:94:E7:73:BE:71:A5:59:85:01:B9:54:E3:9C:B4:EB:B4:7E Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 3471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft Manifest number: 3449 Signing time: Fri 22 Nov 2024 14:38:34 +0000 Manifest this update: Fri 22 Nov 2024 14:38:34 +0000 Manifest next update: Fri 29 Nov 2024 14:38:34 +0000 Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: EdWHw0J308tdZllgvWF8zT3PNMDzy9z5I9BEPAS9dSM=) 2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: wvEIUxvlUFTH2qcHsopuAxq+KjN4ylNQUioBhK93yXg=) 3: 4A08F422F43211EBA188C86AC4F9AE02.roa (hash: 3Y7LHhfPoBb0WxabpgiKDHOJivLh/nfOe4OHRiwg/0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13425 (0x3471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: Nov 22 14:38:34 2024 GMT Not After : Nov 29 14:38:34 2024 GMT Subject: CN=6740976a-a115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:0d:60:f5:75:3a:1d:cd:1f:e0:33:5c:ec: c7:56:9f:7c:b6:02:cc:cd:7d:6b:6f:1e:e7:18:46: b8:c0:b9:73:e9:1d:35:fa:23:db:d1:1d:09:97:26: 34:b6:22:38:ba:cb:2a:52:5b:1e:42:5f:a8:bc:e8: fb:14:0e:ab:54:f3:73:70:87:04:6e:62:54:f7:49: 9b:1a:cd:7f:23:55:3a:a5:f5:a0:71:05:8e:ae:e3: c8:e1:57:df:fb:8f:a0:b0:4f:69:ff:ce:57:c3:85: 88:54:2b:2a:d2:32:f9:45:92:c7:40:35:64:b2:26: 6c:2c:54:29:28:6d:8f:d6:ba:75:e1:d4:01:04:c3: 3c:dd:bb:0a:a6:6e:b4:3d:f4:93:b5:f6:07:48:09: b2:4f:85:37:76:6c:cb:a6:e4:62:ac:e5:93:f5:8a: 67:c8:8d:b8:66:47:57:3b:08:c3:90:27:52:34:b1: b8:01:9f:1c:08:76:89:12:2f:75:76:36:60:37:e4: 66:56:57:a8:e5:13:61:c7:bf:12:63:c5:c5:a2:24: cc:14:48:ce:0f:5e:33:c7:bf:85:ae:41:80:ac:86: 78:2d:a7:6b:5b:d9:24:27:50:15:c8:4a:80:4e:1b: 3e:e5:f3:80:df:05:1f:9f:be:65:db:78:ee:11:86: e7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:80:B1:94:E7:73:BE:71:A5:59:85:01:B9:54:E3:9C:B4:EB:B4:7E X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6b:a2:35:c8:a0:20:0d:bf:fe:27:11:a6:67:51:cd:78:67: b7:01:9d:16:3a:61:b6:33:15:ac:ef:7e:a7:1e:d0:cc:0e:46: 4d:f1:cb:df:d3:db:ad:2d:66:74:f5:9f:09:a5:ff:17:89:e3: 85:80:94:fc:0c:ec:b7:57:0d:c8:94:17:80:78:ff:72:b6:ba: c3:2b:33:8a:e6:7a:c6:ef:f2:56:e1:aa:1e:9c:df:97:44:99: c2:d6:0b:71:a3:53:1e:fb:c6:23:47:a1:7c:7d:ca:41:f2:dc: c6:3a:d3:87:65:d4:aa:3c:ac:e2:0d:3a:26:6d:af:c9:a1:0c: f3:c0:94:9c:f5:52:65:ca:18:b2:07:ef:9b:b9:fe:ec:7d:25: 2f:d9:0d:88:68:19:f2:e3:46:06:46:ef:f5:ae:64:d7:28:29: 8a:11:98:2b:1e:9a:c4:b4:2b:b3:0f:ac:b9:a7:d1:9e:45:73: d3:c3:ed:9a:41:55:5e:4f:6f:d2:72:26:cb:64:3f:13:84:46: 13:07:c9:fe:cb:b6:14:27:16:96:0c:dc:d0:d0:2f:b0:c5:9c: d2:5b:18:fb:4d:f2:a4:d2:3f:48:cb:89:05:13:90:50:f1:b7: c3:b6:82:20:c9:75:28:bd:6f:12:7f:71:22:a2:34:5f:b6:1f: 27:91:59:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjQxMTIyMTQzODM0WhcNMjQxMTI5MTQzODM0WjAYMRYwFAYD VQQDEw02NzQwOTc2YS1hMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfQNYPV1Oh3NH+AzXOzHVp98tgLMzX1rbx7nGEa4wLlz6R01+iPb0R0JlyY0 tiI4ussqUlseQl+ovOj7FA6rVPNzcIcEbmJU90mbGs1/I1U6pfWgcQWOruPI4Vff +4+gsE9p/85Xw4WIVCsq0jL5RZLHQDVksiZsLFQpKG2P1rp14dQBBMM83bsKpm60 PfSTtfYHSAmyT4U3dmzLpuRirOWT9YpnyI24ZkdXOwjDkCdSNLG4AZ8cCHaJEi91 djZgN+RmVleo5RNhx78SY8XFoiTMFEjOD14zx7+FrkGArIZ4LadrW9kkJ1AVyEqA Ths+5fOA3wUfn75l23juEYbnKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+AsZTn c75xpVmFAblU45y067R+MB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDgzNC9ERkJBNTBCODFEOEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01P c1IzNFRpaFZ5cXQ5RmliNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNa6I1yKAgDb/+JxGmZ1HNeGe3AZ0WOmG2MxWs736nHtDMDkZN8cvf 09utLWZ09Z8Jpf8XieOFgJT8DOy3Vw3IlBeAeP9ytrrDKzOK5nrG7/JW4aoenN+X RJnC1gtxo1Me+8YjR6F8fcpB8tzGOtOHZdSqPKziDTomba/JoQzzwJSc9VJlyhiy B++buf7sfSUv2Q2IaBny40YGRu/1rmTXKCmKEZgrHprEtCuzD6y5p9GeRXPTw+2a QVVeT2/ScibLZD8ThEYTB8n+y7YUJxaWDNzQ0C+wxZzSWxj7TfKk0j9Iy4kFE5BQ 8bfDtoIgyXUovW8Sf3EiojRfth8nkVmu -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:34 2024 by rpki-client on console-fra.rpki-client.org