$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft File: J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json) Hash identifier: GaVye7HsQg67p3yNFvR4u+IQ2JYMriOij63aUgDNfmI= Subject key identifier: 06:8E:48:A6:08:0B:FA:48:4A:5B:99:D4:04:B6:65:AD:F6:DF:B6:C4 Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Certificate serial: 0B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft Manifest number: 0B01 Signing time: Wed 20 Nov 2024 19:00:18 +0000 Manifest this update: Wed 20 Nov 2024 19:00:18 +0000 Manifest next update: Wed 27 Nov 2024 19:00:18 +0000 Files and hashes: 1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: wxx+zgFZbN4AGJ0KMjGMgKf4qO0t6/RaNLhgj94fmhU=) 2: E1647F18303311EA8796D584C4F9AE02.roa (hash: KqE4NP0GXCegWdaKQdxPH3myxDzGSDNL2S8PtjJy2Ls=) 3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: W550Vt7cxRSJxbOZsCIkWRdZVJbHyD8sS0xpTJCdOUg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2827 (0xb0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD Validity Not Before: Nov 20 19:00:18 2024 GMT Not After : Nov 27 19:00:18 2024 GMT Subject: CN=673e31c2-9340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c6:0a:0a:0c:87:7f:3c:32:d7:35:b1:ed:ab: d1:5b:a7:b7:72:ab:d0:7c:d5:66:20:e7:6b:33:5c: 53:4e:f1:ae:8d:d2:17:f1:0f:62:64:32:30:c6:bf: 11:22:cc:e6:c9:b5:31:35:6e:ae:e8:70:98:5c:84: 54:58:e2:2a:5d:af:51:c7:94:4a:9b:e5:c3:48:c6: b3:77:cb:02:d2:fb:24:8f:9b:ca:55:22:93:c0:0f: 30:70:39:f6:85:ee:f3:a6:4d:91:d1:f1:6d:b6:9a: ce:98:63:28:1d:55:08:87:e7:21:64:4b:d7:ca:22: 68:57:cf:d9:fd:e0:26:46:04:3e:1e:b2:98:8d:bb: 32:18:31:59:04:88:c4:61:c1:ee:13:04:3c:77:b8: 88:00:0d:67:d8:5f:de:41:79:56:23:75:ea:dd:b9: 1c:a6:c6:96:07:b6:2f:45:65:e9:b1:96:db:88:81: 4a:f2:3e:8e:60:76:f2:4d:fb:85:52:48:5a:37:89: 52:2f:d4:b0:e9:1d:b0:e9:3d:36:24:e6:4f:6f:28: ce:7b:3d:94:78:bc:e0:d6:bc:63:34:46:2f:ed:fe: 5e:38:73:d2:2c:c6:41:93:30:27:5d:bb:79:18:88: 26:c1:d7:57:28:67:a4:51:dd:40:8d:27:ed:42:4a: 32:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8E:48:A6:08:0B:FA:48:4A:5B:99:D4:04:B6:65:AD:F6:DF:B6:C4 X509v3 Authority Key Identifier: keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f6:1b:9e:17:7e:c9:bc:44:ab:79:18:67:ba:cb:07:a3:9a: d8:75:71:e8:5a:61:ed:71:64:59:b8:cf:65:1f:43:ec:bb:e2: 42:7d:9d:38:43:5e:b5:71:1d:65:c0:62:bb:6e:b2:60:d5:a2: b7:61:6a:02:1e:fc:4c:96:55:33:5c:7d:ed:e1:05:0b:2d:27: 2b:7f:47:83:1c:e6:8e:52:d1:30:95:95:9a:31:d3:f2:38:32: 6a:98:0e:23:99:aa:6e:47:28:7e:9b:ac:de:bd:38:41:ab:80: 31:b2:d3:95:6d:33:bf:c2:7b:ea:8a:d8:cb:f9:7a:cf:f3:a7: 5f:95:0a:4c:3a:a3:41:43:75:39:03:bd:69:50:cb:75:c4:e3: 8e:b5:09:46:c3:c4:6d:c5:4b:40:0a:af:a5:7a:44:d8:a2:ef: 0b:41:56:99:cd:9c:e0:8d:eb:4a:d8:cf:93:c9:f2:35:51:f1: 5e:24:be:b7:f1:62:03:f3:85:d5:32:77:38:52:21:fd:29:c4: 6b:63:22:16:16:01:c0:27:2e:2d:c7:3b:ba:77:75:01:b0:ad: 15:85:29:d1:cf:f6:19:eb:3a:e3:eb:11:ea:ec:e0:2d:00:01: f4:40:9b:7a:3e:68:e2:7f:5d:0c:a2:1c:89:6f:79:80:2c:e0: 6e:e7:c3:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0RkIxMTAvBgNVBAUTKDI3NEUwM0I2N0IzMTEzM0RFN0MwQUFFOTlFMjlDMTk5 NTk1MkI1QUQwHhcNMjQxMTIwMTkwMDE4WhcNMjQxMTI3MTkwMDE4WjAYMRYwFAYD VQQDEw02NzNlMzFjMi05MzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcYKCgyHfzwy1zWx7avRW6e3cqvQfNVmIOdrM1xTTvGujdIX8Q9iZDIwxr8R IszmybUxNW6u6HCYXIRUWOIqXa9Rx5RKm+XDSMazd8sC0vskj5vKVSKTwA8wcDn2 he7zpk2R0fFttprOmGMoHVUIh+chZEvXyiJoV8/Z/eAmRgQ+HrKYjbsyGDFZBIjE YcHuEwQ8d7iIAA1n2F/eQXlWI3Xq3bkcpsaWB7YvRWXpsZbbiIFK8j6OYHbyTfuF UkhaN4lSL9Sw6R2w6T02JOZPbyjOez2UeLzg1rxjNEYv7f5eOHPSLMZBkzAnXbt5 GIgmwddXKGekUd1AjSftQkoy/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaOSKYI C/pISluZ1AS2Za3237bEMB8GA1UdIwQYMBaAFCdOA7Z7MRM958Cq6Z4pwZlZUrWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGQi8yREQ5MEYyQzMw MzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6M253S3JwbmluQm1WbFN0 YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0owNER0bnN4RXozbndLcnBuaW5CbVZsU3RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODRGQi8yREQ5MEYyQzMwMzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6 M253S3JwbmluQm1WbFN0YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg9hueF37JvESreRhnussHo5rYdXHoWmHtcWRZuM9lH0Psu+JCfZ04 Q161cR1lwGK7brJg1aK3YWoCHvxMllUzXH3t4QULLScrf0eDHOaOUtEwlZWaMdPy ODJqmA4jmapuRyh+m6zevThBq4AxstOVbTO/wnvqitjL+XrP86dflQpMOqNBQ3U5 A71pUMt1xOOOtQlGw8RtxUtACq+lekTYou8LQVaZzZzgjetK2M+TyfI1UfFeJL63 8WID84XVMnc4UiH9KcRrYyIWFgHAJy4txzu6d3UBsK0VhSnRz/YZ6zrj6xHq7OAt AAH0QJt6Pmjif10MohyJb3mALOBu58Ov -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:21 2024 by rpki-client on console-fra.rpki-client.org