$ rpki-client -vvf rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft File: nL4Q18HdRLflkLUHi_xPhs-Nslo.mft (raw, json) Hash identifier: FBEzVR+9MuimNRI3jzU4IS+UhdOER/MC45CGeNV0gpo= Subject key identifier: 78:A1:23:B1:2A:0B:96:E9:9E:0B:B2:02:2F:91:FB:45:F3:9B:F4:56 Authority key identifier: 9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A Certificate issuer: /CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft Manifest number: C1 Signing time: Sat 23 Nov 2024 03:56:39 +0000 Manifest this update: Sat 23 Nov 2024 03:56:38 +0000 Manifest next update: Sat 30 Nov 2024 03:56:38 +0000 Files and hashes: 1: nL4Q18HdRLflkLUHi_xPhs-Nslo.crl (hash: 4jLmDFP8B6qzygULHzgZYVZR0vt8l7PaGEEZO3h92e4=) 2: 43C5BAA282F411EE99AAAB12C4F9AE02.roa (hash: N3pngW2F3xkXcHjMPhnn8/90mI3hL53wBBuSYsPJujA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BCAC/serialNumber=9CBE10D7C1DD44B7E590B5078BFC4F86CF8DB25A Validity Not Before: Nov 23 03:56:38 2024 GMT Not After : Nov 30 03:56:38 2024 GMT Subject: CN=67415276-5f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:01:70:92:d7:cd:3f:e7:6d:d1:2e:02:7a:70: d7:11:b9:1e:53:c5:56:79:04:e6:52:88:1c:6d:95: d2:52:95:de:e1:1e:3b:6d:e6:4b:98:06:74:a4:9e: ca:c1:c3:a5:a2:b1:c8:32:b7:17:f5:4b:af:90:03: 43:18:a5:49:18:a1:f6:59:20:d7:40:7e:f1:6b:4c: c7:9c:cd:71:99:af:7f:a6:d6:06:64:77:8d:e5:96: 06:a4:48:2f:51:8e:5f:ef:c5:f5:c8:da:2a:61:d3: dd:d6:4a:2f:f5:5a:96:05:16:07:91:cb:bd:6a:24: a6:39:7b:91:13:37:a0:d1:15:da:fb:a5:af:33:29: e4:90:5a:3b:e8:1a:ac:d4:c4:9c:8c:ad:fa:40:cb: af:b1:ae:6e:85:b6:06:fa:51:f7:c1:74:e9:9c:c4: f2:1c:c6:3d:92:f5:d7:98:cb:77:af:28:05:d9:a9: 55:cf:eb:e8:2f:aa:c5:14:03:30:03:e5:c2:ee:65: bd:9c:27:07:a0:15:99:f7:04:6a:ab:e4:e2:a7:5b: f6:0a:41:7e:1a:85:37:9b:4c:e4:82:c3:45:a0:50: 3d:6b:94:aa:9b:e2:53:58:cd:fa:fb:83:af:7e:3f: 4f:8a:d1:da:cd:7b:05:a7:13:e0:ad:d8:5b:28:03: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A1:23:B1:2A:0B:96:E9:9E:0B:B2:02:2F:91:FB:45:F3:9B:F4:56 X509v3 Authority Key Identifier: keyid:9C:BE:10:D7:C1:DD:44:B7:E5:90:B5:07:8B:FC:4F:86:CF:8D:B2:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nL4Q18HdRLflkLUHi_xPhs-Nslo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BCAC/0152258E82F411EE9ED1F611C4F9AE02/nL4Q18HdRLflkLUHi_xPhs-Nslo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:92:3e:ae:5f:0d:df:ab:00:b8:74:cc:24:3d:d8:80:33:51: 5c:28:e5:1f:c9:6f:a6:fe:7c:0f:d6:14:05:96:a2:d2:d8:2e: 03:1b:4e:da:e4:f1:f4:8d:af:68:b3:5c:06:e4:8f:63:4a:c7: 18:8f:9b:62:90:21:2b:d2:ae:41:c1:aa:c5:fa:e6:e2:9b:d5: 19:cb:db:a9:d9:d2:7b:e5:21:42:23:0d:79:38:e9:c1:32:bd: b7:a2:24:4d:b4:b7:a3:07:7e:61:ad:f0:2e:93:e6:06:51:9f: 75:2f:42:f3:fe:b4:39:2b:81:a9:35:b2:59:22:74:4c:01:ff: a5:ad:ad:dc:62:da:c4:fb:07:65:fa:50:d0:7c:9d:41:8b:31: f0:80:c0:3a:02:06:c7:70:97:ee:a7:6c:10:84:30:5b:11:9a: 32:17:37:d6:ec:a4:3b:de:43:44:80:57:f6:68:37:56:31:7c: e8:7a:f3:4e:dc:df:bb:85:cf:73:b1:9d:f9:54:c2:34:43:34: d9:ba:60:d6:43:63:19:0b:7c:ba:02:97:77:9c:81:fe:a9:a7: 88:9f:f8:a9:57:ad:c3:0f:c7:b5:2d:59:c7:49:37:8a:a1:93: 42:be:73:9e:36:d3:03:d9:34:85:35:4e:41:30:1d:60:e5:38: 14:e2:6c:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDQUMxMTAvBgNVBAUTKDlDQkUxMEQ3QzFERDQ0QjdFNTkwQjUwNzhCRkM0Rjg2 Q0Y4REIyNUEwHhcNMjQxMTIzMDM1NjM4WhcNMjQxMTMwMDM1NjM4WjAYMRYwFAYD VQQDEw02NzQxNTI3Ni01ZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wFwktfNP+dt0S4CenDXEbkeU8VWeQTmUogcbZXSUpXe4R47beZLmAZ0pJ7K wcOlorHIMrcX9UuvkANDGKVJGKH2WSDXQH7xa0zHnM1xma9/ptYGZHeN5ZYGpEgv UY5f78X1yNoqYdPd1kov9VqWBRYHkcu9aiSmOXuREzeg0RXa+6WvMynkkFo76Bqs 1MScjK36QMuvsa5uhbYG+lH3wXTpnMTyHMY9kvXXmMt3rygF2alVz+voL6rFFAMw A+XC7mW9nCcHoBWZ9wRqq+Tip1v2CkF+GoU3m0zkgsNFoFA9a5Sqm+JTWM36+4Ov fj9PitHazXsFpxPgrdhbKANdXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHihI7Eq C5bpnguyAi+R+0Xzm/RWMB8GA1UdIwQYMBaAFJy+ENfB3US35ZC1B4v8T4bPjbJa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkNBQy8wMTUyMjU4RTgy RjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJMZmxrTFVIaV94UGhzLU5z bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MNFExOEhkUkxmbGtMVUhpX3hQaHMtTnNsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkNBQy8wMTUyMjU4RTgyRjQxMUVFOUVEMUY2MTFDNEY5QUUwMi9uTDRRMThIZFJM ZmxrTFVIaV94UGhzLU5zbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8kj6uXw3fqwC4dMwkPdiAM1FcKOUfyW+m/nwP1hQFlqLS2C4DG07a 5PH0ja9os1wG5I9jSscYj5tikCEr0q5BwarF+ubim9UZy9up2dJ75SFCIw15OOnB Mr23oiRNtLejB35hrfAuk+YGUZ91L0Lz/rQ5K4GpNbJZInRMAf+lra3cYtrE+wdl +lDQfJ1BizHwgMA6AgbHcJfup2wQhDBbEZoyFzfW7KQ73kNEgFf2aDdWMXzoevNO 3N+7hc9zsZ35VMI0QzTZumDWQ2MZC3y6Apd3nIH+qaeIn/ipV63DD8e1LVnHSTeK oZNCvnOeNtMD2TSFNU5BMB1g5TgU4mwy -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org