$ rpki-client -vvf rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft File: L4vvSDpBiuHAMSMIGG70zXskZuU.mft (raw, json) Hash identifier: Wx8ue34Kf47bwpaTTlixAWJgvqIfGWj2Owi2zt3ZUh4= Subject key identifier: 07:BA:10:6A:25:2B:F3:DD:6E:1D:62:A1:D6:DD:6C:14:0C:69:D6:2B Authority key identifier: 2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5 Certificate issuer: /CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft Manifest number: 01CA Signing time: Sat 23 Nov 2024 01:45:17 +0000 Manifest this update: Sat 23 Nov 2024 01:45:16 +0000 Manifest next update: Sat 30 Nov 2024 01:45:16 +0000 Files and hashes: 1: L4vvSDpBiuHAMSMIGG70zXskZuU.crl (hash: hiu3bmskKxnLkbFgcHlqBfkXuIYcLVlCjb50RD7d7A4=) 2: 117300B62CDB11EDB2E1DD0DC4F9AE02.roa (hash: SvlTkdhfP2Vy/Mu+17rsFwHULfYPp5POSAbZ7IEAOKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125758/serialNumber=2F8BEF483A418AE1C0312308186EF4CD7B2466E5 Validity Not Before: Nov 23 01:45:16 2024 GMT Not After : Nov 30 01:45:16 2024 GMT Subject: CN=674133ad-e2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:32:85:a4:9f:0c:43:17:cf:28:3b:c7:71: ce:2e:c6:17:ca:6b:c3:5e:8e:72:c3:ed:d2:18:7e: 0a:ef:21:10:8e:27:be:35:3f:34:ab:85:62:6a:bd: 8b:cc:52:95:bc:b3:97:8e:a6:c4:3f:b4:61:a2:5e: 61:c4:e8:f8:33:e7:07:6b:34:f7:bf:5e:a7:3e:c8: a9:2d:10:54:d9:dc:c3:5b:ab:9c:2f:d5:bd:41:18: 6f:48:15:09:fc:70:7a:3a:b9:06:b7:e5:29:af:97: b8:11:ce:d9:f8:48:87:f2:3f:1b:00:0f:ae:00:0e: a2:1e:c5:a7:b0:86:51:33:15:70:e6:6f:a2:d5:65: 4f:c0:3a:0b:ed:1b:2c:6d:08:7a:6b:56:e1:62:f8: 70:bd:85:80:e7:33:13:70:14:ba:2e:44:af:48:ce: 17:67:01:ec:be:86:0a:c6:3d:db:86:f1:d7:47:b8: d3:ed:5e:5a:64:07:a8:b9:31:b2:52:5b:db:39:91: 08:5f:38:86:c0:20:0a:4a:00:c2:26:e6:2c:56:d9: 11:a1:90:a5:1d:42:94:a1:97:31:b1:20:f4:97:d4: d9:c5:56:70:fb:41:c2:99:7a:23:27:13:10:5f:cf: 35:e4:b0:41:06:6b:c8:f4:c9:be:18:b7:24:ec:b5: 53:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BA:10:6A:25:2B:F3:DD:6E:1D:62:A1:D6:DD:6C:14:0C:69:D6:2B X509v3 Authority Key Identifier: keyid:2F:8B:EF:48:3A:41:8A:E1:C0:31:23:08:18:6E:F4:CD:7B:24:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4vvSDpBiuHAMSMIGG70zXskZuU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125758/71EBE7C22CD711EDB02B1D19C4F9AE02/L4vvSDpBiuHAMSMIGG70zXskZuU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e7:7d:a7:19:43:5c:85:8e:c1:f3:93:d1:7e:b8:91:a1:f4: b9:9b:12:de:2f:9f:8f:85:13:10:0c:eb:53:87:c4:6a:b9:97: 1d:1f:6b:5a:89:79:dd:43:61:b4:5f:f3:34:c1:59:32:cc:a6: 9e:a1:51:71:48:21:22:91:1c:fd:e9:fd:f7:b4:ee:25:ad:ba: 94:35:65:31:50:db:c8:f8:cf:ba:3f:9e:fd:27:dd:d9:6e:44: 23:b1:95:56:b6:02:7e:10:27:c7:87:71:28:94:3b:a1:52:63: 93:4e:27:9e:a7:18:7e:16:a9:be:ab:d5:ef:39:f7:b4:e7:30: 14:6f:92:b8:00:30:a7:23:d0:06:5f:7b:19:26:4d:90:a3:5f: 88:2e:74:3f:de:da:96:6b:ad:23:0b:69:b1:2a:e5:12:ff:fa: 09:79:06:ad:b7:0e:c6:b0:be:bf:d5:b6:7d:aa:e2:cd:69:7e: ed:fe:f7:6e:ef:89:78:16:52:25:d7:67:b7:d1:60:28:dd:6e: a9:f7:f1:f4:7a:b1:c9:11:a4:80:43:f3:82:cd:fa:04:f4:88: 45:22:49:93:b3:66:63:10:4d:1b:0d:1a:87:36:c9:f6:50:eb: 68:07:80:16:45:14:01:9d:22:7e:ef:74:25:be:1a:62:b2:80: 0c:88:b9:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU3NTgxMTAvBgNVBAUTKDJGOEJFRjQ4M0E0MThBRTFDMDMxMjMwODE4NkVGNENE N0IyNDY2RTUwHhcNMjQxMTIzMDE0NTE2WhcNMjQxMTMwMDE0NTE2WjAYMRYwFAYD VQQDEw02NzQxMzNhZC1lMmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybUyhaSfDEMXzyg7x3HOLsYXymvDXo5yw+3SGH4K7yEQjie+NT80q4Viar2L zFKVvLOXjqbEP7Rhol5hxOj4M+cHazT3v16nPsipLRBU2dzDW6ucL9W9QRhvSBUJ /HB6OrkGt+Upr5e4Ec7Z+EiH8j8bAA+uAA6iHsWnsIZRMxVw5m+i1WVPwDoL7Rss bQh6a1bhYvhwvYWA5zMTcBS6LkSvSM4XZwHsvoYKxj3bhvHXR7jT7V5aZAeouTGy UlvbOZEIXziGwCAKSgDCJuYsVtkRoZClHUKUoZcxsSD0l9TZxVZw+0HCmXojJxMQ X8815LBBBmvI9Mm+GLck7LVT+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAe6EGol K/Pdbh1iodbdbBQMadYrMB8GA1UdIwQYMBaAFC+L70g6QYrhwDEjCBhu9M17JGbl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTc1OC83MUVCRTdDMjJD RDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1SEFNU01JR0c3MHpYc2ta dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0dnZTRHBCaXVIQU1TTUlHRzcwelhza1p1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTc1OC83MUVCRTdDMjJDRDcxMUVEQjAyQjFEMTlDNEY5QUUwMi9MNHZ2U0RwQml1 SEFNU01JR0c3MHpYc2tadVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj532nGUNchY7B85PRfriRofS5mxLeL5+PhRMQDOtTh8RquZcdH2ta iXndQ2G0X/M0wVkyzKaeoVFxSCEikRz96f33tO4lrbqUNWUxUNvI+M+6P579J93Z bkQjsZVWtgJ+ECfHh3EolDuhUmOTTieepxh+Fqm+q9XvOfe05zAUb5K4ADCnI9AG X3sZJk2Qo1+ILnQ/3tqWa60jC2mxKuUS//oJeQattw7GsL6/1bZ9quLNaX7t/vdu 74l4FlIl12e30WAo3W6p9/H0erHJEaSAQ/OCzfoE9IhFIkmTs2ZjEE0bDRqHNsn2 UOtoB4AWRRQBnSJ+73QlvhpisoAMiLmy -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:31 2024 by rpki-client on console-fra.rpki-client.org