$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft File: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft (raw, json) Hash identifier: tW78uLf4THMp3jiwyXOX/byQ8TSSBbsaBXEXE+6q8CI= Subject key identifier: 35:EA:3F:CA:43:56:AD:B0:00:C9:3B:63:7C:2F:BD:FA:4A:C5:34:E7 Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF Certificate issuer: /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft Manifest number: 011C Signing time: Sat 23 Nov 2024 03:10:32 +0000 Manifest this update: Sat 23 Nov 2024 03:10:31 +0000 Manifest next update: Sat 30 Nov 2024 03:10:31 +0000 Files and hashes: 1: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl (hash: IOQtVtcet4OEqNBCASt0dEgTwIC2luezucHZc767VDE=) 2: ACFD7470161F11EE9C6E4529C4F9AE02.roa (hash: +4E/SIZ/oGvD7umJ9MRN1Bu4uin+VyJe+FnG5rmuxi8=) 3: ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (hash: Auk3JhYTPhfXlXMY7Oza0eimJuedYSRpu3bIh1T61Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF Validity Not Before: Nov 23 03:10:31 2024 GMT Not After : Nov 30 03:10:31 2024 GMT Subject: CN=674147a7-1b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:f3:f0:17:e8:67:76:b1:dc:c1:54:3f:d0: 3e:52:19:16:97:15:78:2a:3f:65:3e:22:48:5b:36: 64:01:4d:4e:6e:09:22:b5:c9:9d:79:15:88:a5:0d: f7:d2:b7:79:2a:ab:d3:6e:d2:5d:e7:3b:68:8c:35: 14:27:5a:fc:cf:b0:48:cc:30:db:1f:cc:c6:b7:43: bc:6f:b6:10:23:94:02:51:33:12:de:89:80:42:82: b6:37:07:43:44:81:fd:74:ab:ab:27:db:1f:a1:34: e8:24:2a:fa:39:7f:93:12:a0:65:64:2c:4e:37:dd: 43:25:4d:a5:bc:05:77:44:dc:62:71:22:6a:22:45: 68:77:4c:bb:28:58:4b:37:a3:a8:9c:98:43:ef:b7: 4f:bf:3d:18:19:8b:72:b3:ea:d7:2a:74:77:25:a2: f3:75:86:3c:f5:e4:f0:3d:24:0a:18:87:17:3d:17: 6e:92:0b:ad:5e:e1:2c:fa:44:af:63:cd:c9:e0:a8: 64:48:4f:ad:9b:4d:9b:56:a1:f6:fc:7f:4b:3b:20: fa:4a:a9:44:fa:1c:b3:86:11:64:58:e2:f8:01:b2: 3a:72:d2:d3:ea:e8:31:c4:d3:25:a4:b9:5c:e2:d1: 11:9c:51:f0:45:b6:9c:20:1f:c1:88:d4:ac:8a:c7: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EA:3F:CA:43:56:AD:B0:00:C9:3B:63:7C:2F:BD:FA:4A:C5:34:E7 X509v3 Authority Key Identifier: keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:70:c0:ce:d1:f4:2c:75:41:a8:c8:86:f9:d5:83:51:32:82: 56:c8:05:f6:9b:0c:c5:7c:79:8c:75:af:f2:d2:11:c3:b5:a1: 10:1b:6b:2d:a8:dd:ff:bc:2c:e0:0f:dd:e0:1a:67:d2:f4:72: 23:95:0f:58:d3:a7:25:8b:4d:e7:f2:16:4e:48:1e:51:2c:d5: 38:30:4e:29:16:08:e2:d8:ba:98:29:1f:87:ae:ca:8a:d9:36: 81:b8:f7:c4:fb:de:cf:6c:53:25:ef:3d:44:f1:9c:ac:86:34: 62:bd:6b:02:84:0d:12:34:19:9c:7a:80:fb:38:b2:ee:76:35: 67:69:85:db:11:29:10:5d:ef:6f:d5:8e:f1:24:37:bd:4b:59: b7:e9:f9:48:93:6a:0b:42:3e:d4:cc:05:41:51:e5:17:15:3d: 8e:65:a3:c6:9c:2d:ee:a0:5c:83:b9:5b:e5:1c:84:8c:4d:37: b1:de:71:d5:c1:05:53:e6:4c:42:c2:0f:6d:3d:8e:d3:ac:fa: 8e:2a:5c:14:16:1a:8b:3a:29:0a:6b:78:71:e8:9d:8b:4f:9a: f3:0f:34:88:7a:bb:28:d9:33:e4:c4:03:93:5c:cf:72:5e:17: ab:79:6d:f5:1f:44:05:02:34:55:a2:89:83:fe:54:01:c0:f8: e6:7f:69:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M5MUExMTAvBgNVBAUTKEFCODc4OUM3MEM3NDJFQUY5NTlGNDZBMUI5NzRFNTQ1 NEMwQUZGQUYwHhcNMjQxMTIzMDMxMDMxWhcNMjQxMTMwMDMxMDMxWjAYMRYwFAYD VQQDEw02NzQxNDdhNy0xYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmTz8BfoZ3ax3MFUP9A+UhkWlxV4Kj9lPiJIWzZkAU1ObgkitcmdeRWIpQ33 0rd5KqvTbtJd5ztojDUUJ1r8z7BIzDDbH8zGt0O8b7YQI5QCUTMS3omAQoK2NwdD RIH9dKurJ9sfoTToJCr6OX+TEqBlZCxON91DJU2lvAV3RNxicSJqIkVod0y7KFhL N6OonJhD77dPvz0YGYtys+rXKnR3JaLzdYY89eTwPSQKGIcXPRdukgutXuEs+kSv Y83J4KhkSE+tm02bVqH2/H9LOyD6SqlE+hyzhhFkWOL4AbI6ctLT6ugxxNMlpLlc 4tERnFHwRbacIB/BiNSsisc01QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXqP8pD Vq2wAMk7Y3wvvfpKxTTnMB8GA1UdIwQYMBaAFKuHiccMdC6vlZ9Gobl05UVMCv+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzkxQS82MUU3MEQ4NjE2 MTgxMUVFODBCOTQxNEVDNEY5QUUwMi9xNGVKeHd4MExxLVZuMGFodVhUbFJVd0tf NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E0ZUp4d3gwTHEtVm4wYWh1WFRsUlV3S182OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzkxQS82MUU3MEQ4NjE2MTgxMUVFODBCOTQxNEVDNEY5QUUwMi9xNGVKeHd4MExx LVZuMGFodVhUbFJVd0tfNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdcMDO0fQsdUGoyIb51YNRMoJWyAX2mwzFfHmMda/y0hHDtaEQG2st qN3/vCzgD93gGmfS9HIjlQ9Y06cli03n8hZOSB5RLNU4ME4pFgji2LqYKR+HrsqK 2TaBuPfE+97PbFMl7z1E8ZyshjRivWsChA0SNBmceoD7OLLudjVnaYXbESkQXe9v 1Y7xJDe9S1m36flIk2oLQj7UzAVBUeUXFT2OZaPGnC3uoFyDuVvlHISMTTex3nHV wQVT5kxCwg9tPY7TrPqOKlwUFhqLOikKa3hx6J2LT5rzDzSIerso2TPkxAOTXM9y XhereW31H0QFAjRVoomD/lQBwPjmf2k7 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org