$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: VZospClytWaSPgdzD8eKNx/wyfvVEoAGzTj3VrWsaxA= Subject key identifier: B2:6E:41:03:1C:77:99:28:AF:5E:9C:80:49:9E:DC:55:38:87:A5:43 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 02EB Signing time: Sat 23 Nov 2024 00:52:51 +0000 Manifest this update: Sat 23 Nov 2024 00:52:51 +0000 Manifest next update: Sat 30 Nov 2024 00:52:51 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: 8X0vY/+2Cl8l2aqZ9fG6XbxVDlW3So/dB2Z1F+ZcpKc=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: cZx0qXYBX+AYL013+FqThkX1+Tb5yDxAcWdH8ZbjfkA=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: byHK1k9Kptni3DE/dYb+CIJQHhmNjQCYM2tQRu5DpPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Nov 23 00:52:51 2024 GMT Not After : Nov 30 00:52:51 2024 GMT Subject: CN=67412763-185d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:73:0e:78:68:79:3d:4d:40:e5:e9:b6:d7: 73:21:86:9d:be:0f:7c:a6:5f:c4:01:c5:31:9a:7d: 15:c1:f4:b3:02:55:22:87:45:28:2c:0a:8d:ac:17: e2:26:32:07:77:1b:42:ab:a0:00:ca:29:44:d8:c8: fb:38:7c:bc:6a:ef:60:b5:8b:d1:d4:08:8c:a2:f5: ab:f7:12:cd:76:db:51:d5:3c:08:82:38:8b:7b:f6: 65:d8:93:bb:35:1d:22:14:53:be:5e:4d:bf:33:88: 0c:17:f2:5d:20:69:1e:6e:96:76:42:42:2d:e5:ba: 1c:01:92:94:ce:8c:f0:70:68:bf:0c:1c:42:ec:31: dc:b3:d6:f1:ca:d5:f8:5a:2c:bc:df:1d:c2:98:0d: ae:6e:14:05:72:d3:e0:b7:2c:a9:9d:28:f5:15:a1: 28:61:62:19:17:ee:76:b6:a2:02:53:cb:7c:81:62: ed:63:b5:cb:bb:bb:df:48:d6:23:08:9f:c7:72:13: 24:e1:a8:88:32:20:a4:69:cd:b1:0a:8f:5c:0e:9b: 7c:fd:e3:73:0d:6b:b5:7f:22:ed:44:4a:f7:30:0e: 77:df:2a:f6:4f:51:65:82:c2:cc:16:c4:84:6b:45: 7f:35:11:08:91:b2:69:04:64:d4:49:17:e6:89:09: cc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6E:41:03:1C:77:99:28:AF:5E:9C:80:49:9E:DC:55:38:87:A5:43 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e9:fc:9c:7d:33:fe:ea:65:9c:02:d5:2c:fb:ca:ba:74:d3: 60:3d:88:14:2b:82:85:15:3c:0f:32:7a:0c:b5:37:47:84:f7: 7e:43:57:07:29:d1:70:96:86:48:89:f5:95:4a:cf:d2:d3:4a: 31:3a:7e:90:47:db:3b:e3:78:87:40:7b:74:69:a8:46:3f:cb: ed:de:06:76:bb:47:aa:a3:27:97:7a:d5:6e:a6:f0:f7:46:9e: 7e:c5:b6:01:90:93:44:5f:bb:c0:8e:b5:53:4f:c9:ed:ee:b1: c9:81:05:b8:2a:29:88:c9:a3:8c:c7:04:27:20:6e:99:b6:e9: f4:65:62:d7:8d:f3:b2:23:3e:5e:e3:a8:ea:a1:60:b2:0b:80: 6b:c9:08:ac:e9:98:e7:ab:68:51:42:ae:d1:36:62:68:19:4a: 46:d5:91:62:90:c9:04:ca:9b:a7:ce:7b:98:29:83:81:c8:bf: 41:38:20:07:6a:65:f6:8e:1c:60:a8:d9:a8:f2:7f:bf:40:e4: a8:db:e0:fc:4d:2f:09:e9:b2:db:d5:69:92:ec:55:bd:bd:e5: be:2a:c6:72:be:c8:08:ca:27:92:43:e2:e7:d4:7c:fb:d8:d1: a9:c1:48:26:d9:a0:dd:29:25:3c:5f:8d:e6:5a:77:33:f6:30: 25:0e:71:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjQxMTIzMDA1MjUxWhcNMjQxMTMwMDA1MjUxWjAYMRYwFAYD VQQDEw02NzQxMjc2My0xODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysxzDnhoeT1NQOXpttdzIYadvg98pl/EAcUxmn0VwfSzAlUih0UoLAqNrBfi JjIHdxtCq6AAyilE2Mj7OHy8au9gtYvR1AiMovWr9xLNdttR1TwIgjiLe/Zl2JO7 NR0iFFO+Xk2/M4gMF/JdIGkebpZ2QkIt5bocAZKUzozwcGi/DBxC7DHcs9bxytX4 Wiy83x3CmA2ubhQFctPgtyypnSj1FaEoYWIZF+52tqICU8t8gWLtY7XLu7vfSNYj CJ/HchMk4aiIMiCkac2xCo9cDpt8/eNzDWu1fyLtREr3MA533yr2T1FlgsLMFsSE a0V/NREIkbJpBGTUSRfmiQnM8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJuQQMc d5kor16cgEme3FU4h6VDMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc6fycfTP+6mWcAtUs+8q6dNNgPYgUK4KFFTwPMnoMtTdHhPd+Q1cH KdFwloZIifWVSs/S00oxOn6QR9s743iHQHt0aahGP8vt3gZ2u0eqoyeXetVupvD3 Rp5+xbYBkJNEX7vAjrVTT8nt7rHJgQW4KimIyaOMxwQnIG6Ztun0ZWLXjfOyIz5e 46jqoWCyC4BryQis6Zjnq2hRQq7RNmJoGUpG1ZFikMkEypunznuYKYOByL9BOCAH amX2jhxgqNmo8n+/QOSo2+D8TS8J6bLb1WmS7FW9veW+KsZyvsgIyieSQ+Ln1Hz7 2NGpwUgm2aDdKSU8X43mWncz9jAlDnFw -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:37 2024 by rpki-client on console-fra.rpki-client.org