$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: P7zWtMkV0XeE28PnmBxl2TXZB0no4QNV1ZTcniDYoHA= Subject key identifier: E2:74:4F:A0:65:85:18:98:40:03:A1:B6:90:E2:E0:CA:19:2B:74:1D Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: 1B Signing time: Thu 21 Nov 2024 06:01:34 +0000 Manifest this update: Thu 21 Nov 2024 06:01:34 +0000 Manifest next update: Thu 28 Nov 2024 06:01:34 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: EA91qE43DkdHIlSOn/sz+G37P6mam46jGkOVyLpjDkM=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: 8wQaCvv1woKjsPYKk6t73PO7JjxXLb0AQ69vXhKv7NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: Nov 21 06:01:34 2024 GMT Not After : Nov 28 06:01:34 2024 GMT Subject: CN=673eccbe-4af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:42:3f:4f:6c:b6:89:f0:32:09:c9:91:c4: 1d:be:8e:d4:24:3f:12:58:ff:23:a2:6b:22:4e:df: 9d:3b:ba:b9:2d:78:b3:7c:1a:e3:73:4f:97:e0:c7: 4c:1e:e1:9c:fa:09:d4:41:2c:3c:80:1c:c2:5a:53: f5:ac:a6:3d:29:eb:03:83:c6:64:e4:11:b8:bf:5d: 4a:aa:0f:8e:02:c6:1e:01:cc:40:e9:06:4b:d6:a3: c7:14:53:cf:86:21:d3:06:b9:24:a5:dc:fd:af:3c: b3:cb:5e:da:1b:20:c9:49:53:3c:07:a0:30:ab:e2: 9f:9b:a3:64:de:82:f9:94:0a:4d:ac:3e:ee:e2:42: 57:eb:a5:61:53:1d:24:e2:52:fb:0c:d7:c6:5d:20: a6:37:57:46:ad:ac:6e:84:e6:1e:09:3c:55:82:90: 92:71:a9:ed:90:d0:49:10:64:9d:8a:78:4c:2f:0c: 42:24:90:b5:42:12:b2:2b:c9:84:6b:7a:40:3d:3e: df:10:6e:e8:04:6a:48:1f:77:49:6b:e8:68:55:22: 6f:c0:b1:56:8a:f1:ca:9e:c9:ab:e2:f0:25:ab:9f: d6:76:cd:09:25:59:eb:3b:42:17:2a:6c:13:ae:1a: 90:05:77:1e:c1:d4:bb:2a:e0:c1:c0:04:45:e2:39: df:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:74:4F:A0:65:85:18:98:40:03:A1:B6:90:E2:E0:CA:19:2B:74:1D X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a1:33:14:82:d6:53:d6:47:1f:ac:9f:b4:23:b8:86:b7:43: 96:17:0c:9d:55:99:6b:c1:c1:65:b8:25:ea:9b:cd:55:31:60: 6b:74:82:50:ac:72:73:d5:d4:fa:57:8a:05:70:a0:c7:00:13: 36:81:35:3e:44:d4:64:9d:1a:99:6d:1b:47:21:f9:0b:41:3d: ad:f2:61:38:2a:e7:8a:4f:c1:d0:b9:cd:85:86:bd:4c:6a:75: 99:2a:c3:53:97:ce:e7:99:03:ed:9c:7c:55:f2:ff:26:7d:06: 87:84:42:ba:28:86:86:86:1a:0d:b1:b5:a2:4f:2a:e7:f2:bb: 6a:1e:de:2d:ba:9b:77:95:05:e8:07:65:72:d5:b0:49:eb:44: 49:0e:0f:6f:56:04:80:39:d5:7b:aa:83:42:83:df:8d:d9:42: 6e:cc:36:2f:4c:a5:56:11:44:86:76:1d:da:52:11:35:cf:e4: ef:81:d3:9c:43:52:8c:1b:b7:7e:fc:6c:88:43:b2:e4:c9:5c: 21:34:0f:6f:83:28:36:18:44:55:ab:01:20:62:c6:cb:a7:f8: 12:39:1b:64:7a:4e:68:4c:db:d1:55:56:79:fb:6c:a2:61:19: 6f:70:e8:a4:69:a5:43:76:a9:08:3b:5b:70:be:fe:bb:21:55: d2:7c:af:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTIwQTExMC8GA1UEBRMoODlENzc5QzUwRjE0RUQxMUZDNUFEQjg0MDM3ODkyQjI2 MEI5OTVFNjAeFw0yNDExMjEwNjAxMzRaFw0yNDExMjgwNjAxMzRaMBgxFjAUBgNV BAMTDTY3M2VjY2JlLTRhZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6K0I/T2y2ifAyCcmRxB2+jtQkPxJY/yOiayJO3507urkteLN8GuNzT5fgx0we 4Zz6CdRBLDyAHMJaU/Wspj0p6wODxmTkEbi/XUqqD44Cxh4BzEDpBkvWo8cUU8+G IdMGuSSl3P2vPLPLXtobIMlJUzwHoDCr4p+bo2TegvmUCk2sPu7iQlfrpWFTHSTi UvsM18ZdIKY3V0atrG6E5h4JPFWCkJJxqe2Q0EkQZJ2KeEwvDEIkkLVCErIryYRr ekA9Pt8QbugEakgfd0lr6GhVIm/AsVaK8cqeyavi8CWrn9Z2zQklWes7QhcqbBOu GpAFdx7B1Lsq4MHABEXiOd+1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4nRPoGWF GJhAA6G2kOLgyhkrdB0wHwYDVR0jBBgwFoAUidd5xQ8U7RH8WtuEA3iSsmC5leYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMjBBLzgyOUE3NEE4ODZG MzExRUZCRTAyNTM2QkM0RjlBRTAyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxl WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWRkNXhROFU3Ukg4V3R1RUEzaVNzbUM1bGVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MjBBLzgyOUE3NEE4ODZGMzExRUZCRTAyNTM2QkM0RjlBRTAyL2lkZDV4UThVN1JI OFd0dUVBM2lTc21DNWxlWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHShMxSC1lPWRx+sn7QjuIa3Q5YXDJ1VmWvBwWW4JeqbzVUxYGt0glCs cnPV1PpXigVwoMcAEzaBNT5E1GSdGpltG0ch+QtBPa3yYTgq54pPwdC5zYWGvUxq dZkqw1OXzueZA+2cfFXy/yZ9BoeEQroohoaGGg2xtaJPKufyu2oe3i26m3eVBegH ZXLVsEnrREkOD29WBIA51Xuqg0KD343ZQm7MNi9MpVYRRIZ2HdpSETXP5O+B05xD Uowbt378bIhDsuTJXCE0D2+DKDYYRFWrASBixsun+BI5G2R6TmhM29FVVnn7bKJh GW9w6KRppUN2qQg7W3C+/rshVdJ8r98= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:13 2024 by rpki-client on console-fra.rpki-client.org