$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft File: 4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json) Hash identifier: 8z/o6a72U53nIXDWsjc3uskkd3zJBM1tn0U+y9TlzOA= Subject key identifier: B2:B9:12:45:D0:B7:7E:BF:E8:AF:5A:65:E1:ED:21:15:42:38:69:23 Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Certificate serial: 350E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft Manifest number: 34A7 Signing time: Fri 22 Nov 2024 14:29:56 +0000 Manifest this update: Fri 22 Nov 2024 14:29:55 +0000 Manifest next update: Fri 29 Nov 2024 14:29:55 +0000 Files and hashes: 1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: kohU1mJjVUmL8/BVIdcpHcbR4H8mZ+7s7tTHfwgIrbw=) 2: 3DECBA4A593611EF9E5DB227C4F9AE02.roa (hash: kumvTiV1tBUlGOEV1QJFcgtqRbe/Z2pP/eWfiFoJ1Bo=) 3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: uP3i0qS5LluMvfR2PfesmPxlO4qRQ5bVxk7dZvX0wPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13582 (0x350e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223 Validity Not Before: Nov 22 14:29:55 2024 GMT Not After : Nov 29 14:29:55 2024 GMT Subject: CN=67409564-193c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8a:e6:8d:4c:39:05:0f:47:ef:a7:aa:db:8a: a2:8a:89:82:31:7f:2f:18:b7:bf:c9:43:f8:36:3c: 8e:4a:48:24:a5:2d:cf:2b:85:bc:81:3c:da:77:d5: 46:3f:87:0c:9f:4f:94:e6:80:61:06:d2:6f:9c:d4: a7:74:71:0c:5c:5b:ed:37:7c:6f:74:db:2e:fa:c4: 92:f9:96:5e:3c:e0:0d:0c:71:1d:30:37:83:78:d0: af:c0:39:ae:50:9f:f9:18:22:7c:6b:6f:94:f9:d9: 47:15:12:71:9e:58:30:e5:d1:0f:5c:c0:2f:94:e1: e9:57:ce:ed:7a:e6:1d:72:51:f7:44:de:8d:1c:16: e1:4d:be:01:f1:9e:16:79:5b:f6:16:85:d8:74:1e: c0:81:81:21:1a:76:a2:f5:32:d2:ee:f3:aa:10:82: 1b:ad:24:5c:d5:b7:7d:51:5d:aa:fa:e1:e7:90:27: 43:d8:94:ef:15:b8:81:a9:cb:59:fa:40:f1:d1:f5: 48:68:07:af:cb:8c:51:15:00:8d:51:ed:0a:a0:ba: b4:d0:12:2d:8a:fe:df:42:99:79:c3:bc:d7:26:b0: c0:a3:69:2d:b6:76:19:f0:6b:e4:84:d7:f8:6d:bd: 29:7c:4c:cc:aa:77:17:98:5b:66:1b:dd:8d:72:b5: 4a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B9:12:45:D0:B7:7E:BF:E8:AF:5A:65:E1:ED:21:15:42:38:69:23 X509v3 Authority Key Identifier: keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:21:09:1e:4b:30:66:29:8a:3a:28:fb:10:ad:35:96:38:75: 06:97:a3:84:16:40:da:17:b0:8f:8c:f6:49:49:f2:c5:ab:9b: f5:fd:bf:05:8c:62:6d:9b:b4:57:1d:48:19:97:ae:da:89:e6: c8:03:ac:bd:6b:ba:23:a5:6a:6d:56:fb:b8:ee:39:3c:dd:0d: 0e:68:76:30:64:36:51:94:42:c9:5b:0f:fe:bd:07:35:23:5a: e5:c2:e0:48:29:10:b9:5e:38:d0:6a:32:63:70:75:7e:a1:77: 35:12:d7:65:6d:54:e7:ad:55:e2:76:0f:5b:94:a1:25:67:97: ba:7c:e4:9b:5c:01:54:6e:37:8f:7f:a1:77:31:f9:43:a6:ef: fa:1d:f3:08:8b:5c:bb:dd:8e:78:14:28:59:a8:06:20:e6:0a: fb:6c:58:c5:22:69:34:25:ff:1d:d0:5f:9f:5d:19:6e:95:c7: 50:72:0a:69:f5:10:95:6b:bc:23:ec:a0:d1:5f:ce:7a:5b:1f: e9:f3:57:80:a2:5e:da:fc:f4:74:66:07:37:05:3c:86:2f:c5: 94:53:ac:fd:bb:78:c8:04:cc:02:8f:6e:40:62:cc:bc:89:e8: 2d:a8:d6:e6:77:13:aa:c8:e5:dc:57:e0:c5:bc:c3:50:71:f3: 4f:e0:50:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzMDAxMTAvBgNVBAUTKEUxNTY0RkRBNUNFRDVDQUU2OTQxNTMwOTdFRDE5NDI1 NTEyMDkyMjMwHhcNMjQxMTIyMTQyOTU1WhcNMjQxMTI5MTQyOTU1WjAYMRYwFAYD VQQDEw02NzQwOTU2NC0xOTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIrmjUw5BQ9H76eq24qiiomCMX8vGLe/yUP4NjyOSkgkpS3PK4W8gTzad9VG P4cMn0+U5oBhBtJvnNSndHEMXFvtN3xvdNsu+sSS+ZZePOANDHEdMDeDeNCvwDmu UJ/5GCJ8a2+U+dlHFRJxnlgw5dEPXMAvlOHpV87teuYdclH3RN6NHBbhTb4B8Z4W eVv2FoXYdB7AgYEhGnai9TLS7vOqEIIbrSRc1bd9UV2q+uHnkCdD2JTvFbiBqctZ +kDx0fVIaAevy4xRFQCNUe0KoLq00BItiv7fQpl5w7zXJrDAo2kttnYZ8GvkhNf4 bb0pfEzMqncXmFtmG92NcrVKbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLK5EkXQ t36/6K9aZeHtIRVCOGkjMB8GA1UdIwQYMBaAFOFWT9pc7VyuaUFTCX7RlCVRIJIj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTMwMC9DRDIwMzdFMjFE ODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhLNXBRVk1KZnRHVUpWRWdr aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWWlAybHp0WEs1cFFWTUpmdEdVSlZFZ2tpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTMwMC9DRDIwMzdFMjFEODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhL NXBRVk1KZnRHVUpWRWdraU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBIQkeSzBmKYo6KPsQrTWWOHUGl6OEFkDaF7CPjPZJSfLFq5v1/b8F jGJtm7RXHUgZl67aiebIA6y9a7ojpWptVvu47jk83Q0OaHYwZDZRlELJWw/+vQc1 I1rlwuBIKRC5XjjQajJjcHV+oXc1EtdlbVTnrVXidg9blKElZ5e6fOSbXAFUbjeP f6F3MflDpu/6HfMIi1y73Y54FChZqAYg5gr7bFjFImk0Jf8d0F+fXRlulcdQcgpp 9RCVa7wj7KDRX856Wx/p81eAol7a/PR0Zgc3BTyGL8WUU6z9u3jIBMwCj25AYsy8 iegtqNbmdxOqyOXcV+DFvMNQcfNP4FBU -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:36 2024 by rpki-client on console-fra.rpki-client.org