$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json) Hash identifier: +pRfnHDA/ltezqAiAaTb/m3enDS4ieft1YOAYNuPwho= Subject key identifier: 37:EA:97:F5:C8:E0:7E:C6:72:C9:A5:FF:16:42:1F:28:F0:1F:9D:39 Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Certificate serial: 057D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft Manifest number: 0579 Signing time: Fri 22 Nov 2024 22:49:40 +0000 Manifest this update: Fri 22 Nov 2024 22:49:39 +0000 Manifest next update: Fri 29 Nov 2024 22:49:39 +0000 Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: t9HGZi2DMObFst6xrQ0wllWVXjLoZ0pCuYJ5cHC7T7U=) 2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: zmi3D3ZPX2TqlG5JSej9XeFDCHoCKSFWiJUGsTwAEOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1405 (0x57d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Validity Not Before: Nov 22 22:49:39 2024 GMT Not After : Nov 29 22:49:39 2024 GMT Subject: CN=67410a84-6ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:4e:5a:6a:c0:80:60:e3:28:ce:8c:ed:c4: 9f:99:97:2c:9b:8b:6a:a0:a8:db:6a:f1:ff:0a:00: a5:f0:a6:1b:09:49:4b:d0:bd:16:79:86:45:1a:e6: 4d:ab:a4:6e:7b:6c:10:5d:23:6b:71:a0:1b:23:6c: 8d:b9:f7:98:b9:4d:70:93:14:3d:a0:a2:48:4c:77: c3:b4:45:e6:1c:1f:04:32:e5:20:6f:2b:40:ee:1c: cc:85:ca:f1:59:30:ca:df:6d:c7:fd:6b:27:ac:c7: ac:35:24:2b:f4:9a:ee:30:05:d4:ba:25:24:3c:fd: a7:43:dd:6b:aa:7b:84:5f:c4:07:22:39:0c:5c:07: 08:fe:1e:41:3c:3b:5c:22:75:41:1e:71:bb:05:ce: d3:2a:af:a0:56:a5:ff:6d:b8:59:58:58:f2:be:d0: 65:ed:1a:9e:7f:4d:16:84:48:a4:2c:0e:26:65:4c: 07:d7:68:fc:de:a8:35:48:88:bf:0b:72:61:9e:f7: 03:2e:b2:17:40:52:b5:77:9e:2e:45:19:68:de:78: 61:35:53:fd:d0:fc:68:c4:52:22:69:be:73:d2:eb: e3:ba:2f:c0:cd:5c:4f:7b:9c:6c:d6:a2:9d:33:11: 22:ba:c4:d4:f0:76:f6:3d:e3:52:c3:7e:5d:34:c1: b7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EA:97:F5:C8:E0:7E:C6:72:C9:A5:FF:16:42:1F:28:F0:1F:9D:39 X509v3 Authority Key Identifier: keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:bb:67:ac:94:6b:a7:75:8f:97:ae:35:57:98:29:4a:4d:d6: 25:cb:a1:61:10:7c:77:2a:da:ed:04:6e:02:dc:56:e9:93:2a: 58:b3:f2:0d:b0:1d:11:05:9c:4f:da:c7:2b:1e:b1:00:15:92: c7:3f:72:c6:39:90:1e:b4:29:6b:3f:dc:48:93:ac:75:e4:b6: a2:c8:a9:4d:b5:e7:ec:81:09:1f:73:b7:02:3b:74:70:7a:5f: db:8f:7e:55:03:4b:b1:c6:34:e4:a4:48:85:30:d6:65:b1:24: 38:5d:14:c4:81:0b:42:54:34:fe:8c:70:9f:89:1c:4b:32:37: 1b:17:52:60:9b:15:01:f3:59:d2:8c:05:2f:97:79:9b:ab:5a: fc:0e:8b:0e:66:24:55:29:61:ed:ff:6e:2c:f6:34:30:d8:a2: 45:f6:93:1e:b5:44:fe:10:87:fc:fb:7a:6c:a8:4e:c5:37:31: 9b:7d:18:04:20:23:0c:6b:37:19:f1:cf:6f:a8:3c:f4:9d:b2: 45:49:b5:06:9b:c4:9b:e7:a9:f2:8c:cc:23:96:85:e8:a8:72: cf:94:b5:93:57:f4:82:80:cd:93:c3:e3:03:ff:e1:4e:49:9a: 2b:7f:95:7b:d0:c2:86:cb:11:e8:bf:38:96:48:16:a3:e5:65: 0f:2e:ae:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5 MzM2QzgyQjgwHhcNMjQxMTIyMjI0OTM5WhcNMjQxMTI5MjI0OTM5WjAYMRYwFAYD VQQDEw02NzQxMGE4NC02ZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3BOWmrAgGDjKM6M7cSfmZcsm4tqoKjbavH/CgCl8KYbCUlL0L0WeYZFGuZN q6Rue2wQXSNrcaAbI2yNufeYuU1wkxQ9oKJITHfDtEXmHB8EMuUgbytA7hzMhcrx WTDK323H/WsnrMesNSQr9JruMAXUuiUkPP2nQ91rqnuEX8QHIjkMXAcI/h5BPDtc InVBHnG7Bc7TKq+gVqX/bbhZWFjyvtBl7Rqef00WhEikLA4mZUwH12j83qg1SIi/ C3JhnvcDLrIXQFK1d54uRRlo3nhhNVP90PxoxFIiab5z0uvjui/AzVxPe5xs1qKd MxEiusTU8Hb2PeNSw35dNMG3VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfql/XI 4H7Gcsml/xZCHyjwH505MB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3 QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu cWQwV0Q5WUppWmlUTnNncmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0u2eslGundY+XrjVXmClKTdYly6FhEHx3KtrtBG4C3FbpkypYs/IN sB0RBZxP2scrHrEAFZLHP3LGOZAetClrP9xIk6x15LaiyKlNtefsgQkfc7cCO3Rw el/bj35VA0uxxjTkpEiFMNZlsSQ4XRTEgQtCVDT+jHCfiRxLMjcbF1JgmxUB81nS jAUvl3mbq1r8DosOZiRVKWHt/24s9jQw2KJF9pMetUT+EIf8+3psqE7FNzGbfRgE ICMMazcZ8c9vqDz0nbJFSbUGm8Sb56nyjMwjloXoqHLPlLWTV/SCgM2Tw+MD/+FO SZorf5V70MKGyxHovziWSBaj5WUPLq5T -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:25 2024 by rpki-client on console-fra.rpki-client.org