$ rpki-client -vvf rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft File: F4L8LE0koOJkDRWzGQ3umPNrjzw.mft (raw, json) Hash identifier: kuPCA5tp7v5tSwXKV9KG1K5K4WfQDyv2eUI3rTnAipE= Subject key identifier: 13:57:C3:77:31:4C:7D:EC:21:35:1A:E4:B7:F0:FC:9E:AF:21:69:90 Authority key identifier: 17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C Certificate issuer: /CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft Manifest number: 34EF Signing time: Fri 22 Nov 2024 16:00:10 +0000 Manifest this update: Fri 22 Nov 2024 16:00:10 +0000 Manifest next update: Fri 29 Nov 2024 16:00:10 +0000 Files and hashes: 1: F4L8LE0koOJkDRWzGQ3umPNrjzw.crl (hash: c4QE/Bvq5vS0OJkuiih23nLM4jK1OpG9gFBMcDm8Y94=) 2: 8595A74A373C11ECA3E8C51BC4F9AE02.roa (hash: +veyd8W47YCvCuitg3o8ThOGXu4XRgXC3k1LgL4ZMH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E92E/serialNumber=1782FC2C4D24A0E2640D15B3190DEE98F36B8F3C Validity Not Before: Nov 22 16:00:10 2024 GMT Not After : Nov 29 16:00:10 2024 GMT Subject: CN=6740aa8a-6429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1e:7b:a3:b7:51:74:ad:16:c0:5b:6a:95:27: f7:41:5b:67:60:eb:c2:72:87:e3:72:75:cd:ad:3e: c5:1b:41:6f:3a:22:97:47:d4:8c:94:29:83:60:34: 7e:82:d9:db:40:88:24:24:ff:45:89:e5:be:fb:cb: 26:b3:9a:2e:fa:37:bd:b9:20:36:74:d4:29:f3:40: c9:3f:a9:4d:02:6b:07:3f:12:1f:83:81:dd:66:e3: d7:b1:7a:00:ba:13:29:6c:00:7d:ae:79:a3:2c:23: 47:a8:9c:2d:7e:39:c4:a9:db:41:b2:76:2f:79:46: ad:17:06:8d:27:d8:74:d4:36:65:4a:cc:d9:f9:95: 38:a0:9f:93:38:35:cb:11:4b:e7:85:90:19:a2:71: 6b:77:fb:b9:62:bb:24:6e:22:44:81:51:be:fa:2a: 5c:a3:0f:98:1d:c1:6c:dc:40:49:19:cf:c6:ea:8d: ab:e6:61:54:8a:bd:f1:13:97:6f:67:fe:c2:45:2f: 89:87:6c:fc:a6:21:82:fe:4c:a8:3e:24:d5:ea:a8: 67:33:71:e1:22:c4:29:6a:31:71:66:0b:de:3d:80: d4:5d:c7:3b:f2:bb:a5:47:07:7d:3f:b3:aa:35:7d: 75:84:e7:20:37:7c:6f:7c:25:55:14:05:20:8a:f2: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:57:C3:77:31:4C:7D:EC:21:35:1A:E4:B7:F0:FC:9E:AF:21:69:90 X509v3 Authority Key Identifier: keyid:17:82:FC:2C:4D:24:A0:E2:64:0D:15:B3:19:0D:EE:98:F3:6B:8F:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4L8LE0koOJkDRWzGQ3umPNrjzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E92E/A0099A8027D111E6AE7BF27CC4F9AE02/F4L8LE0koOJkDRWzGQ3umPNrjzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:89:7d:02:c9:8f:cc:24:73:b8:e4:eb:5f:ad:55:2a:7e:e7: 8d:44:2c:48:d4:3e:bd:34:99:ee:53:ec:12:4f:fc:b5:51:cf: 3b:04:2e:ea:ca:c5:68:32:5e:ec:90:2b:2d:2e:90:7e:25:93: 7b:5f:de:ec:73:8d:ba:f5:c0:07:64:07:9b:c4:62:af:1d:a1: 49:ad:53:de:42:e3:0f:bc:c2:c5:4c:35:c9:fd:05:d6:96:20: 6d:c6:54:3e:3e:10:ea:b6:cc:57:d4:a8:fb:a3:1a:56:2b:7d: 86:09:c4:3d:ce:86:d7:c2:6d:8c:96:3b:32:e0:60:55:f3:36: 67:e8:dd:ef:43:ee:6a:f4:a6:70:e9:5c:4b:1c:30:00:e6:32: 5d:ad:6f:cc:fd:69:b4:3c:9a:fa:27:ef:45:a9:59:55:44:7d: 52:5b:95:ea:41:a4:b1:9e:6d:8c:19:20:05:eb:59:cc:3d:1f: 95:b0:d6:e4:91:64:f5:94:49:20:e2:9e:47:c5:e5:ff:fc:e1: 26:fc:37:a5:ef:6b:d0:18:f7:5a:0d:66:4e:db:d7:ee:97:c0: cc:6a:a2:36:68:e6:a7:91:2b:48:01:11:94:55:0c:9b:0c:f2: f5:dd:4b:10:ae:d9:9f:4a:4a:65:f1:9e:fc:3e:43:25:75:2c: 71:8b:d0:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5MkUxMTAvBgNVBAUTKDE3ODJGQzJDNEQyNEEwRTI2NDBEMTVCMzE5MERFRTk4 RjM2QjhGM0MwHhcNMjQxMTIyMTYwMDEwWhcNMjQxMTI5MTYwMDEwWjAYMRYwFAYD VQQDEw02NzQwYWE4YS02NDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0x57o7dRdK0WwFtqlSf3QVtnYOvCcofjcnXNrT7FG0FvOiKXR9SMlCmDYDR+ gtnbQIgkJP9FieW++8sms5ou+je9uSA2dNQp80DJP6lNAmsHPxIfg4HdZuPXsXoA uhMpbAB9rnmjLCNHqJwtfjnEqdtBsnYveUatFwaNJ9h01DZlSszZ+ZU4oJ+TODXL EUvnhZAZonFrd/u5YrskbiJEgVG++ipcow+YHcFs3EBJGc/G6o2r5mFUir3xE5dv Z/7CRS+Jh2z8piGC/kyoPiTV6qhnM3HhIsQpajFxZgvePYDUXcc78rulRwd9P7Oq NX11hOcgN3xvfCVVFAUgivIKtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNXw3cx TH3sITUa5Lfw/J6vIWmQMB8GA1UdIwQYMBaAFBeC/CxNJKDiZA0VsxkN7pjza488 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTkyRS9BMDA5OUE4MDI3 RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29PSmtEUld6R1EzdW1QTnJq encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y0TDhMRTBrb09Ka0RSV3pHUTN1bVBOcmp6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTkyRS9BMDA5OUE4MDI3RDExMUU2QUU3QkYyN0NDNEY5QUUwMi9GNEw4TEUwa29P SmtEUld6R1EzdW1QTnJqencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaiX0CyY/MJHO45OtfrVUqfueNRCxI1D69NJnuU+wST/y1Uc87BC7q ysVoMl7skCstLpB+JZN7X97sc4269cAHZAebxGKvHaFJrVPeQuMPvMLFTDXJ/QXW liBtxlQ+PhDqtsxX1Kj7oxpWK32GCcQ9zobXwm2Mljsy4GBV8zZn6N3vQ+5q9KZw 6VxLHDAA5jJdrW/M/Wm0PJr6J+9FqVlVRH1SW5XqQaSxnm2MGSAF61nMPR+VsNbk kWT1lEkg4p5HxeX//OEm/Del72vQGPdaDWZO29ful8DMaqI2aOankStIARGUVQyb DPL13UsQrtmfSkpl8Z78PkMldSxxi9DO -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:40 2024 by rpki-client on console-fra.rpki-client.org