$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json) Hash identifier: dVGZf8JL6wCWcyJrawT3R5+JU5kg1Y2J1+zRTTSrnKU= Subject key identifier: 56:C4:AF:F0:E1:4C:90:21:E4:CE:6E:1B:E0:FC:51:84:8E:BA:4A:F7 Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Certificate serial: 0E1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft Manifest number: 0E03 Signing time: Sun 24 Nov 2024 17:36:14 +0000 Manifest this update: Sun 24 Nov 2024 17:36:14 +0000 Manifest next update: Sun 01 Dec 2024 17:36:14 +0000 Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: 2v6tizWI5rtu9PjrPVvs1apdWOyX0mwv7I07sQbbOv4=) 2: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: bwOilKkFH3gA2ITdGBNjHTtXXoE0VHn2T54WZ0kqiDg=) 3: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: YesHwJZCWFPfBbdSFgp9ld0nujs2PN6NAZJ4zB0nTXA=) 4: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: vNgqnIHOyFrG+kBff2/fqp9MtS/6uUeV76Dqat02ibo=) 5: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: uTNV8vfPbOqOvQgw4kqLGgweQoS/h+YACeR/Qh/rfj8=) 6: 141F86F437EA11ECA7D1B309C4F9AE02.roa (hash: sqwRRmaJwuQFiN3xLvOQrdUvxWPfQqgc0sMkOZ08KEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3611 (0xe1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Validity Not Before: Nov 24 17:36:14 2024 GMT Not After : Dec 1 17:36:14 2024 GMT Subject: CN=6743640e-a5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:5f:dd:fe:96:49:e1:d7:28:ee:ac:58:4a: 80:7c:08:fa:40:74:70:83:e6:4f:af:43:89:dc:cd: ff:26:31:43:d1:36:58:ce:26:77:f4:9a:ef:65:d3: a4:8f:99:a3:57:db:fb:a1:b9:43:47:27:d9:02:1e: 08:00:a6:03:25:c0:33:94:64:8f:32:10:2d:14:8f: 18:3b:1f:da:0c:20:06:cb:66:6c:3c:23:3d:c6:a3: 11:21:5d:fe:d1:a9:8b:6f:43:75:2a:d6:95:ae:71: 3c:ea:fd:fd:cc:31:55:3d:18:10:5e:29:88:76:75: 8a:51:52:2a:cb:e1:b3:52:f5:be:b2:c3:0b:a9:7d: 8c:35:d9:56:57:b7:31:db:09:15:70:a9:5b:18:2d: fd:70:ec:08:72:45:12:a2:0f:f1:41:e6:64:00:1c: 57:37:71:88:d1:0c:9d:80:1f:bb:21:ac:61:6e:6f: 46:b9:90:eb:a8:2b:db:14:80:21:3d:c8:38:ef:72: a3:c8:cc:48:d7:f0:d2:a1:d4:e5:2d:2f:ca:6c:77: e7:77:ee:f9:c1:ed:c0:e0:ea:8f:18:86:cc:db:4d: ad:28:a5:e2:e9:e2:74:45:71:65:29:1a:c5:4d:6d: a0:11:0d:02:18:91:1c:8e:b3:03:67:c7:5d:b9:51: cc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C4:AF:F0:E1:4C:90:21:E4:CE:6E:1B:E0:FC:51:84:8E:BA:4A:F7 X509v3 Authority Key Identifier: keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:14:44:a5:b2:ca:d0:ec:c5:08:8a:d3:72:af:47:ad:51:cf: 87:8d:cb:b9:2d:84:4b:5f:ae:1a:a5:9d:45:9a:94:86:c9:7b: 10:fa:9f:dc:d9:04:10:b2:53:11:c6:1f:0e:76:96:da:eb:dd: 1a:3a:b6:44:58:0f:77:78:9a:e6:26:22:2e:5d:e7:3b:12:ae: fa:bc:ab:f5:75:5d:b1:3b:1d:c4:d5:7e:46:2c:f3:07:b4:e6: 7f:f8:ad:e3:55:c1:60:20:d3:c1:05:70:9e:75:97:bc:0e:f7: c5:a0:0f:7b:2a:6a:7a:80:bf:01:4f:da:6f:07:cf:b1:ce:fd: 0e:b6:28:e3:82:e3:c9:69:1c:fe:5b:ba:aa:3a:50:7b:3b:8b: ba:4f:4e:47:e7:2f:a4:04:5d:e9:cf:b4:3d:1b:5e:f4:5b:ab: 30:2b:4b:3e:8c:1e:05:d6:a6:ed:a6:de:e7:e9:e0:4c:35:b8: 7b:b7:d3:a0:92:18:99:98:8a:bf:37:a5:47:f8:75:60:93:ac: b2:f9:0e:ae:95:76:d7:08:bb:e2:e7:56:1e:9b:8c:f7:cb:98: 8c:71:74:d4:7b:9d:95:8d:7a:1a:31:22:44:9d:1f:37:67:f6: a0:ad:ee:09:e6:6c:61:ac:4a:3c:83:ac:75:b0:a3:df:1d:4c: 7c:21:50:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4 OTVGQzQ3REUwHhcNMjQxMTI0MTczNjE0WhcNMjQxMjAxMTczNjE0WjAYMRYwFAYD VQQDEw02NzQzNjQwZS1hNWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTBf3f6WSeHXKO6sWEqAfAj6QHRwg+ZPr0OJ3M3/JjFD0TZYziZ39JrvZdOk j5mjV9v7oblDRyfZAh4IAKYDJcAzlGSPMhAtFI8YOx/aDCAGy2ZsPCM9xqMRIV3+ 0amLb0N1KtaVrnE86v39zDFVPRgQXimIdnWKUVIqy+GzUvW+ssMLqX2MNdlWV7cx 2wkVcKlbGC39cOwIckUSog/xQeZkABxXN3GI0QydgB+7Iaxhbm9GuZDrqCvbFIAh Pcg473KjyMxI1/DSodTlLS/KbHfnd+75we3A4OqPGIbM202tKKXi6eJ0RXFlKRrF TW2gEQ0CGJEcjrMDZ8dduVHM5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbEr/Dh TJAh5M5uG+D8UYSOukr3MB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njk4RS9GMTlBN0M5NDlDMUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6 SWJpdXhNX04zYTJKWDhSOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMFESlssrQ7MUIitNyr0etUc+Hjcu5LYRLX64apZ1FmpSGyXsQ+p/c 2QQQslMRxh8Odpba690aOrZEWA93eJrmJiIuXec7Eq76vKv1dV2xOx3E1X5GLPMH tOZ/+K3jVcFgINPBBXCedZe8DvfFoA97Kmp6gL8BT9pvB8+xzv0OtijjguPJaRz+ W7qqOlB7O4u6T05H5y+kBF3pz7Q9G170W6swK0s+jB4F1qbtpt7n6eBMNbh7t9Og khiZmIq/N6VH+HVgk6yy+Q6ulXbXCLvi51Yem4z3y5iMcXTUe52VjXoaMSJEnR83 Z/agre4J5mxhrEo8g6x1sKPfHUx8IVBg -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:17 2024 by rpki-client on console-fra.rpki-client.org