$ rpki-client -vvf rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft File: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft (raw, json) Hash identifier: 13K5NSkwIu0KPV8dfGkfVXQzm+2OOQJMhgM0uPmfSrM= Subject key identifier: D1:74:0D:A8:20:36:5F:16:36:A9:D7:D8:C0:D6:89:B8:E9:85:38:B1 Authority key identifier: E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 Certificate issuer: /CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Certificate serial: 0D5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft Manifest number: 0D4A Signing time: Wed 20 Nov 2024 17:53:53 +0000 Manifest this update: Wed 20 Nov 2024 17:53:52 +0000 Manifest next update: Wed 27 Nov 2024 17:53:52 +0000 Files and hashes: 1: 5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl (hash: e1yelHLQ59OefSfzdKF3YrWJo2BCxEQ6lN6nWDfc69E=) 2: 26F281DEDDF811EAA553705EC4F9AE02.roa (hash: yfx8lsCL6G/ov0fWwE1WTE6uXL656onMX4rdjMifJrY=) 3: 279B0372DDF811EAA553705EC4F9AE02.roa (hash: TXNMP48c0k6G4JxEf3t+PnW7SOJPV7z8Od5Inbeh5Gs=) 4: 923C51A8BE8811E998F37222C4F9AE02.roa (hash: aRzYWRPVSTTgYa3Czpj2Qj/z5H39rDEjDg/TNXrra84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3420 (0xd5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131612/serialNumber=E4E101EEF443150C62110ACAFA881554C089FC53 Validity Not Before: Nov 20 17:53:52 2024 GMT Not After : Nov 27 17:53:52 2024 GMT Subject: CN=673e2231-021f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:51:d1:db:5d:ab:3a:b5:56:f4:21:45:af: 56:62:d0:e9:b3:ca:27:ab:33:05:3c:f8:0c:e4:16: 84:bd:3b:49:0a:4a:7b:bb:23:d4:e8:99:cd:4e:5b: 48:ea:4d:f3:8a:38:cb:a2:e2:2c:31:5c:d7:b7:8b: 5d:1b:c9:d6:f4:f4:b0:85:fa:aa:07:bc:8e:86:e0: d9:11:6f:4d:04:fc:a8:e0:74:51:52:60:4d:21:45: ae:af:24:96:ef:d7:e2:07:46:47:17:85:67:ef:db: 17:0e:6f:20:68:21:b3:31:e7:02:db:55:c7:dd:c7: b4:63:c8:42:d1:73:bb:9f:9e:86:57:30:5c:74:3b: 5b:68:2d:1e:c2:c9:f2:fd:75:28:eb:6e:e1:63:35: 94:5b:fe:ee:71:b5:82:ca:fb:91:8b:3f:6a:f7:26: 49:2d:75:b8:52:0d:4e:2e:34:2e:99:b5:24:fe:2e: c5:75:61:87:ca:d8:5e:a2:22:7d:d9:f2:2b:98:b4: a8:70:ff:c3:5c:82:9e:a3:e4:35:b7:f8:e1:37:e5: 10:27:95:ca:e1:34:56:97:15:d6:fd:41:99:52:a6: 5e:f2:58:01:fe:ad:5d:f3:dd:89:25:fc:5f:fd:8c: 13:1f:09:37:1c:6f:d1:40:a1:6d:95:97:0c:66:0b: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:74:0D:A8:20:36:5F:16:36:A9:D7:D8:C0:D6:89:B8:E9:85:38:B1 X509v3 Authority Key Identifier: keyid:E4:E1:01:EE:F4:43:15:0C:62:11:0A:CA:FA:88:15:54:C0:89:FC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131612/E3B84C8CBE8611E99A6C011FC4F9AE02/5OEB7vRDFQxiEQrK-ogVVMCJ_FM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:76:07:6f:56:fd:d5:60:47:45:83:22:d7:8b:8f:70:df:66: d2:c6:10:8c:2c:52:85:bb:be:66:b8:76:79:5e:00:c0:13:0f: 80:30:c9:8f:db:6d:82:bd:35:74:95:a9:80:7c:61:67:37:9f: 25:b4:fc:95:53:b3:81:66:ae:4e:fe:7a:9a:55:c4:50:4a:87: 04:1c:71:df:e7:8a:db:ea:d6:53:fb:0a:3c:28:ff:5f:2a:39: 14:4c:88:cb:a3:2d:76:73:86:a1:76:f9:03:6d:5d:44:b9:fa: 43:62:68:55:3c:fe:b1:35:cf:ce:10:39:c6:8e:bc:aa:b0:03: ae:bb:b7:9c:d2:33:6c:f6:12:02:5b:d8:88:33:1d:28:bd:38: 14:b4:3c:96:6d:cd:be:09:03:65:ad:be:6e:7a:6c:d3:29:76: 96:cc:4c:e0:6c:07:1d:8f:35:2a:34:41:45:cd:7b:2f:0a:b9: 30:23:76:9e:06:ca:64:bf:a8:de:09:1b:8c:89:44:6d:8b:cf: 6e:5d:13:26:84:e4:16:73:2f:7b:72:a0:1f:27:37:01:2b:46: 75:61:ec:ab:74:f5:36:37:17:5a:1b:68:b6:58:4a:1c:dc:ce: d0:d8:18:15:73:b5:ff:12:9b:aa:1f:aa:01:e8:49:7e:7e:53: 98:76:2f:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2MTIxMTAvBgNVBAUTKEU0RTEwMUVFRjQ0MzE1MEM2MjExMEFDQUZBODgxNTU0 QzA4OUZDNTMwHhcNMjQxMTIwMTc1MzUyWhcNMjQxMTI3MTc1MzUyWjAYMRYwFAYD VQQDEw02NzNlMjIzMS0wMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLZR0dtdqzq1VvQhRa9WYtDps8onqzMFPPgM5BaEvTtJCkp7uyPU6JnNTltI 6k3zijjLouIsMVzXt4tdG8nW9PSwhfqqB7yOhuDZEW9NBPyo4HRRUmBNIUWurySW 79fiB0ZHF4Vn79sXDm8gaCGzMecC21XH3ce0Y8hC0XO7n56GVzBcdDtbaC0ewsny /XUo627hYzWUW/7ucbWCyvuRiz9q9yZJLXW4Ug1OLjQumbUk/i7FdWGHytheoiJ9 2fIrmLSocP/DXIKeo+Q1t/jhN+UQJ5XK4TRWlxXW/UGZUqZe8lgB/q1d892JJfxf /YwTHwk3HG/RQKFtlZcMZgu89wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNF0Dagg Nl8WNqnX2MDWibjphTixMB8GA1UdIwQYMBaAFOThAe70QxUMYhEKyvqIFVTAifxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTYxMi9FM0I4NEM4Q0JF ODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZReGlFUXJLLW9nVlZNQ0pf Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPRUI3dlJERlF4aUVRckstb2dWVk1DSl9GTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTYxMi9FM0I4NEM4Q0JFODYxMUU5OUE2QzAxMUZDNEY5QUUwMi81T0VCN3ZSREZR eGlFUXJLLW9nVlZNQ0pfRk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcdgdvVv3VYEdFgyLXi49w32bSxhCMLFKFu75muHZ5XgDAEw+AMMmP 222CvTV0lamAfGFnN58ltPyVU7OBZq5O/nqaVcRQSocEHHHf54rb6tZT+wo8KP9f KjkUTIjLoy12c4ahdvkDbV1EufpDYmhVPP6xNc/OEDnGjryqsAOuu7ec0jNs9hIC W9iIMx0ovTgUtDyWbc2+CQNlrb5uemzTKXaWzEzgbAcdjzUqNEFFzXsvCrkwI3ae Bspkv6jeCRuMiURti89uXRMmhOQWcy97cqAfJzcBK0Z1YeyrdPU2NxdaG2i2WEoc 3M7Q2BgVc7X/EpuqH6oB6El+flOYdi+Q -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:49 2024 by rpki-client on console-fra.rpki-client.org