$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: hi7ItRVT7d0VSGlQSulTbqUUg+vSk3zfT3mnV8s1HlE= Subject key identifier: 4E:36:8D:1D:9E:B1:D3:A8:24:24:B5:6C:07:45:9C:04:0A:15:B6:F9 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 0842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 0836 Signing time: Fri 22 Nov 2024 20:29:27 +0000 Manifest this update: Fri 22 Nov 2024 20:29:27 +0000 Manifest next update: Fri 29 Nov 2024 20:29:26 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: S0+H8/Hmhh6+BSi/os6AXkMrZIWpFZuI0F8dO7U8SHE=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: DlgGGdYqrKN5h9MW9q70lTsP/SY3jDF+HYoYux1PP0A=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: NzvTs3zIe73PasojqMTCLNGA0IFkzqeVPfgkS5AtV4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:29:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2114 (0x842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Nov 22 20:29:27 2024 GMT Not After : Nov 29 20:29:26 2024 GMT Subject: CN=6740e9a7-d3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:22:1b:f9:31:47:b8:12:92:4e:32:ff:f7: 74:a6:82:d8:64:f5:67:1c:99:0d:13:57:73:89:b7: 77:7b:48:f4:97:cf:9e:04:2e:04:fd:d6:6a:f3:45: 6c:f8:2f:f8:9b:9f:aa:4b:98:21:93:7c:66:5d:90: fa:aa:57:79:02:7e:ed:d6:10:df:a5:4c:47:73:40: 7e:d4:3c:7a:17:73:1f:89:e6:f7:b1:18:c3:ed:41: 76:b7:77:f3:b0:b0:a6:09:15:51:d8:0f:4f:af:3f: e7:07:2c:94:65:96:fe:a3:1c:0a:30:c3:b9:17:04: 1d:21:70:5b:ec:b3:95:b7:5f:a9:64:9e:f1:c7:48: b1:b2:ac:df:28:ea:5f:08:56:5b:e3:0b:81:6f:da: ca:d0:79:62:51:8f:8b:6f:1f:fc:1d:cd:63:a2:91: c7:ad:2a:15:49:ea:48:72:ba:b5:ab:b9:2b:c0:20: 43:67:0f:81:49:3d:8e:cf:6f:da:5a:ae:50:d4:fe: 70:b3:10:4e:02:17:ce:56:1d:ec:4b:72:ed:d0:b8: 84:79:2d:90:b8:55:48:6c:f6:42:24:c0:37:91:96: a1:c4:cd:99:02:2c:ac:e9:4a:38:9f:9c:4d:ce:da: 7a:be:94:fb:d9:65:35:23:d5:82:66:50:2a:20:1a: 01:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:36:8D:1D:9E:B1:D3:A8:24:24:B5:6C:07:45:9C:04:0A:15:B6:F9 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:dc:4d:88:41:86:b0:1d:15:10:24:12:e0:4d:d6:bf:a7:8b: 77:a8:ae:5b:1b:7d:44:9a:b6:1e:70:b8:0a:73:54:42:1e:39: 50:01:01:e0:2e:b3:07:f7:5e:39:5d:88:98:94:7d:73:27:b6: 47:59:73:bf:4b:46:6e:d6:5c:a8:4b:63:45:5b:c3:54:da:46: 22:1d:2e:91:53:cb:4f:1c:fd:37:6b:36:31:9f:f7:24:78:90: 94:50:a2:98:1a:d7:b0:1c:95:f7:e6:dc:25:bc:df:e8:7d:80: 09:15:4a:08:c9:ba:3f:32:a7:c8:82:eb:50:a6:5f:c4:c4:a2: ee:ac:bf:87:7f:ba:3a:3d:25:bc:ed:f5:91:46:a8:2c:39:fa: c0:85:9d:f4:81:ed:76:cc:22:50:a5:31:b6:ba:31:c0:77:e5: 73:d2:5f:27:a3:71:50:13:a2:70:e3:e1:01:d9:7d:18:3f:d1: 92:33:27:76:ce:37:9c:f6:65:d7:bf:c8:6f:95:06:59:6b:02: 17:b4:74:8c:d4:29:f3:c3:76:fa:3c:59:fa:31:5f:3c:bb:fe: 5b:6d:0c:fb:ce:2a:87:40:dd:de:99:61:c0:36:ef:c5:da:87: 5f:7d:91:72:30:f5:c4:89:23:06:86:50:8e:5c:f4:bb:e8:4c: 9c:3a:69:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjQxMTIyMjAyOTI3WhcNMjQxMTI5MjAyOTI2WjAYMRYwFAYD VQQDEw02NzQwZTlhNy1kM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/IiG/kxR7gSkk4y//d0poLYZPVnHJkNE1dzibd3e0j0l8+eBC4E/dZq80Vs +C/4m5+qS5ghk3xmXZD6qld5An7t1hDfpUxHc0B+1Dx6F3Mfieb3sRjD7UF2t3fz sLCmCRVR2A9Prz/nByyUZZb+oxwKMMO5FwQdIXBb7LOVt1+pZJ7xx0ixsqzfKOpf CFZb4wuBb9rK0HliUY+Lbx/8Hc1jopHHrSoVSepIcrq1q7krwCBDZw+BST2Oz2/a Wq5Q1P5wsxBOAhfOVh3sS3Lt0LiEeS2QuFVIbPZCJMA3kZahxM2ZAiys6Uo4n5xN ztp6vpT72WU1I9WCZlAqIBoBhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE42jR2e sdOoJCS1bAdFnAQKFbb5MB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm3E2IQYawHRUQJBLgTda/p4t3qK5bG31EmrYecLgKc1RCHjlQAQHg LrMH9145XYiYlH1zJ7ZHWXO/S0Zu1lyoS2NFW8NU2kYiHS6RU8tPHP03azYxn/ck eJCUUKKYGtewHJX35twlvN/ofYAJFUoIybo/MqfIgutQpl/ExKLurL+Hf7o6PSW8 7fWRRqgsOfrAhZ30ge12zCJQpTG2ujHAd+Vz0l8no3FQE6Jw4+EB2X0YP9GSMyd2 zjec9mXXv8hvlQZZawIXtHSM1Cnzw3b6PFn6MV88u/5bbQz7ziqHQN3emWHANu/F 2odffZFyMPXEiSMGhlCOXPS76EycOmnV -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org