$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft File: i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft (raw, json) Hash identifier: i3xDvE4R4888PbMouado2z6WvF6AFyLZwWwFHnQeAUo= Subject key identifier: C8:E2:DC:89:52:CB:DB:47:B4:BF:32:B5:99:1B:70:DD:A0:59:9D:9F Authority key identifier: 8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29 Certificate issuer: /CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft Manifest number: 0149 Signing time: Sat 23 Nov 2024 02:32:31 +0000 Manifest this update: Sat 23 Nov 2024 02:32:30 +0000 Manifest next update: Sat 30 Nov 2024 02:32:30 +0000 Files and hashes: 1: i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl (hash: 4CBqUqkjCpJ+lisZdJn6GZtIL1XEmmLeirlR3vHdpnQ=) 2: 5D35DEC8B13411EDB6BEF584C4F9AE02.roa (hash: ZhZoS47eW55Sb0A3HFtpa7Yi+4nkSuzaZKzeUrzoAng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729 Validity Not Before: Nov 23 02:32:30 2024 GMT Not After : Nov 30 02:32:30 2024 GMT Subject: CN=67413ebe-a1f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:9b:c3:03:27:51:a8:e7:8c:db:08:cb:f4: 09:10:93:9b:3e:e1:92:74:b0:9e:13:ca:ea:0b:65: 00:95:6b:83:2b:9d:09:2e:99:33:74:ae:4a:72:63: c0:b5:a9:a6:1c:53:07:8b:57:16:19:b8:b9:bb:f5: cd:64:3c:d9:2a:00:c9:2a:a5:80:c4:4f:9a:73:b5: b7:c5:92:87:4d:48:c4:9b:ef:38:53:30:84:73:50: 1e:1c:9c:97:42:15:67:3a:3c:16:1d:d1:c4:b1:1f: bb:db:45:2b:f8:a3:35:fe:3b:a2:15:39:40:69:f4: 6b:01:44:0f:f8:51:e2:17:c0:20:93:a2:85:23:6a: f3:c1:14:4f:6d:4b:2b:26:1b:e1:e1:74:fe:b0:9a: 1a:fe:30:46:ee:d8:f3:ff:1b:d2:66:cc:a6:2f:39: 8b:92:a9:bd:b2:1f:c0:a6:2b:db:bb:a9:61:b5:fd: 5c:49:8a:9b:c0:94:8b:fb:e6:2f:fb:81:65:2b:8e: ba:d5:9a:91:c9:d0:c8:b6:c4:87:ed:54:45:0c:8a: 18:35:8f:7e:4f:cb:a0:92:3c:55:11:0d:1d:c3:2c: 35:ba:f2:09:43:c8:54:25:ac:df:12:8e:33:f3:90: b0:bc:cc:a6:4c:0a:a7:df:46:2a:33:be:81:38:e9: ad:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E2:DC:89:52:CB:DB:47:B4:BF:32:B5:99:1B:70:DD:A0:59:9D:9F X509v3 Authority Key Identifier: keyid:8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ca:42:bc:d0:9b:23:f0:37:f9:e5:9e:a1:c0:fb:18:e9:1b: b7:15:c7:71:cb:f6:75:19:7c:1a:b8:d3:b1:91:f2:0e:29:c3: 5b:f2:4d:c6:d4:07:ab:89:a8:32:60:32:cf:f1:a0:51:1a:80: 41:61:bc:d5:21:87:70:7a:0f:10:0b:b5:5f:7b:6e:16:04:80: 96:4b:52:c6:30:50:00:d0:de:16:59:9c:84:ef:63:fa:10:d2: c9:4c:49:5d:b9:48:1b:dd:2d:df:24:fe:88:77:69:df:e2:76: 43:8c:96:02:6d:66:36:99:33:1f:c8:59:ca:62:4a:13:2f:ff: 8f:83:e5:f0:ec:59:0a:55:b3:58:65:03:8d:68:63:5e:71:6d: dc:3f:1c:5f:77:12:bf:8c:92:01:33:bb:a0:8b:ac:e9:80:76: ee:dc:b5:05:7e:87:5d:be:86:3b:09:5a:9b:07:40:62:32:15: bf:12:00:c3:7d:37:ae:5a:5f:26:09:8d:79:8f:2f:9d:54:22: ad:b3:93:78:8e:d0:c1:8b:13:ee:6f:a2:2b:7b:77:3b:b5:4d: 45:d5:6f:52:ad:72:4d:53:ac:07:fc:e4:7c:55:b1:a3:14:7b: df:c9:59:a4:7e:e8:6c:e2:4c:2f:28:47:26:0c:66:c0:df:18: 69:03:51:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxQTgxMTAvBgNVBAUTKDhCRUNDMzYzODA3MEE2Qjc5RjZEQ0UyMkEwRTY1QkIy MUUwRDc3MjkwHhcNMjQxMTIzMDIzMjMwWhcNMjQxMTMwMDIzMjMwWjAYMRYwFAYD VQQDEw02NzQxM2ViZS1hMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskabwwMnUajnjNsIy/QJEJObPuGSdLCeE8rqC2UAlWuDK50JLpkzdK5KcmPA tammHFMHi1cWGbi5u/XNZDzZKgDJKqWAxE+ac7W3xZKHTUjEm+84UzCEc1AeHJyX QhVnOjwWHdHEsR+720Ur+KM1/juiFTlAafRrAUQP+FHiF8Agk6KFI2rzwRRPbUsr Jhvh4XT+sJoa/jBG7tjz/xvSZsymLzmLkqm9sh/Apivbu6lhtf1cSYqbwJSL++Yv +4FlK4661ZqRydDItsSH7VRFDIoYNY9+T8ugkjxVEQ0dwyw1uvIJQ8hUJazfEo4z 85CwvMymTAqn30YqM76BOOmtkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMji3IlS y9tHtL8ytZkbcN2gWZ2fMB8GA1UdIwQYMBaAFIvsw2OAcKa3n23OIqDmW7IeDXcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFBOC9BNDBBNzI0QUIx MzAxMUVEODQ3RDQ5ODFDNEY5QUUwMi9pLXpEWTRCd3ByZWZiYzRpb09aYnNoNE5k eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ktekRZNEJ3cHJlZmJjNGlvT1pic2g0TmR5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFBOC9BNDBBNzI0QUIxMzAxMUVEODQ3RDQ5ODFDNEY5QUUwMi9pLXpEWTRCd3By ZWZiYzRpb09aYnNoNE5keWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4ykK80Jsj8Df55Z6hwPsY6Ru3Fcdxy/Z1GXwauNOxkfIOKcNb8k3G 1AeriagyYDLP8aBRGoBBYbzVIYdweg8QC7Vfe24WBICWS1LGMFAA0N4WWZyE72P6 ENLJTElduUgb3S3fJP6Id2nf4nZDjJYCbWY2mTMfyFnKYkoTL/+Pg+Xw7FkKVbNY ZQONaGNecW3cPxxfdxK/jJIBM7ugi6zpgHbu3LUFfoddvoY7CVqbB0BiMhW/EgDD fTeuWl8mCY15jy+dVCKts5N4jtDBixPub6Ire3c7tU1F1W9SrXJNU6wH/OR8VbGj FHvfyVmkfuhs4kwvKEcmDGbA3xhpA1HV -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org