$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft File: EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json) Hash identifier: rvoo+EdX/UOpFbRGhHnDXpCpSIa1+IyseUZvXVnLePg= Subject key identifier: EA:A2:B3:06:9E:EE:4A:B0:2D:15:54:13:1F:BD:30:00:E4:26:59:6F Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Certificate serial: 03EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft Manifest number: 03E8 Signing time: Sat 23 Nov 2024 00:06:59 +0000 Manifest this update: Sat 23 Nov 2024 00:06:58 +0000 Manifest next update: Sat 30 Nov 2024 00:06:58 +0000 Files and hashes: 1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: K03PW7cMdhjf3is1KfPAFSh8VHSirM5dnrdoEgNJHTE=) 2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: XjunMNzYncJwuOqeAscMtpgQiJ/lvJGQsFB1GF7BxVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1004 (0x3ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Validity Not Before: Nov 23 00:06:58 2024 GMT Not After : Nov 30 00:06:58 2024 GMT Subject: CN=67411ca2-457d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:02:46:3c:36:bf:39:81:42:4f:de:eb:be: 86:b8:93:73:17:9b:68:1a:fa:53:1a:89:22:b7:dd: 47:9d:67:87:52:1c:ed:bc:21:dc:32:23:b8:39:97: fa:da:68:1a:38:0a:8a:b0:75:fd:c9:82:89:77:4a: 57:07:39:fc:48:b6:a9:c6:80:42:29:eb:3f:28:97: 01:68:b7:15:c8:20:a4:44:4f:e6:29:84:00:36:33: 1c:30:dc:39:d4:2f:40:5e:4d:5a:ff:02:85:d8:cf: 44:62:03:69:3f:33:e6:59:d6:1d:d0:aa:d3:82:2a: 15:b7:3c:08:d1:ad:6e:08:86:77:42:15:c0:5c:1c: ee:2d:f6:07:a5:24:54:93:a4:00:7d:03:1e:33:c7: 92:1a:d8:d8:58:f0:56:70:e9:71:4d:cf:6f:17:23: 31:a6:77:ba:e1:82:77:d2:a8:85:4c:29:02:ca:0b: 06:b0:a5:e6:a1:fb:7f:02:81:57:4d:66:62:5e:f3: 40:07:f6:87:3f:74:40:0e:c2:1a:74:c2:d9:dd:07: b2:3e:c4:19:6b:74:aa:fc:10:79:dd:af:50:d6:bf: 9b:84:7e:36:62:40:24:59:14:ad:08:89:91:d5:07: 7e:e8:25:fd:a4:90:c0:1b:ff:db:b5:17:db:7f:4b: 4b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A2:B3:06:9E:EE:4A:B0:2D:15:54:13:1F:BD:30:00:E4:26:59:6F X509v3 Authority Key Identifier: keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:d8:a2:92:fe:21:53:9a:7e:18:d1:3d:82:53:5c:e5:dc:03: 01:12:1a:9c:55:ea:58:8d:7c:ee:ed:e0:5f:67:6b:6d:a1:3d: 4e:28:7e:81:12:ef:bb:df:30:e7:ad:27:69:87:14:fd:5f:83: b7:8b:74:f1:95:86:57:00:a6:fd:39:af:25:93:21:7c:e6:d1: c5:ed:de:47:40:a5:39:f9:ab:89:ee:e2:63:93:fc:73:60:dc: 8a:bb:09:c5:ad:3a:17:32:a5:61:5f:c9:7f:5f:29:bd:60:bc: cf:11:33:f8:50:60:41:fa:0c:cd:f7:ae:dd:63:2b:0c:46:64: c1:1c:0e:3d:e0:2b:4a:09:56:98:58:4a:f3:be:fa:ed:74:17: 3a:4e:f6:dd:90:6f:0f:99:45:f9:c5:55:a2:5e:53:9d:05:82: 93:fb:b3:16:90:af:aa:98:ff:33:2c:b1:e9:58:5e:22:fe:ee: 8f:86:5e:15:be:14:ca:f8:21:10:dd:d7:82:b0:a3:fa:12:3e: e7:3a:cd:fc:5d:ca:1d:ce:b4:9c:46:3b:9d:e7:6b:7c:03:e3: 30:9c:d4:ab:84:6e:64:c7:87:c0:b0:7d:3a:cc:e1:f8:8f:84: ac:43:93:b5:a1:49:10:89:31:6d:be:69:eb:4a:02:02:1f:07: 52:d2:63:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx QzUzMDMxQTcwHhcNMjQxMTIzMDAwNjU4WhcNMjQxMTMwMDAwNjU4WjAYMRYwFAYD VQQDEw02NzQxMWNhMi00NTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFkCRjw2vzmBQk/e676GuJNzF5toGvpTGokit91HnWeHUhztvCHcMiO4OZf6 2mgaOAqKsHX9yYKJd0pXBzn8SLapxoBCKes/KJcBaLcVyCCkRE/mKYQANjMcMNw5 1C9AXk1a/wKF2M9EYgNpPzPmWdYd0KrTgioVtzwI0a1uCIZ3QhXAXBzuLfYHpSRU k6QAfQMeM8eSGtjYWPBWcOlxTc9vFyMxpne64YJ30qiFTCkCygsGsKXmoft/AoFX TWZiXvNAB/aHP3RADsIadMLZ3QeyPsQZa3Sq/BB53a9Q1r+bhH42YkAkWRStCImR 1Qd+6CX9pJDAG//btRfbf0tL3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqiswae 7kqwLRVUEx+9MADkJllvMB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3 NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAyNy8wNDIwN0RGODU3NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0 QlJkTHo0TU1QckljVXdNYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz2KKS/iFTmn4Y0T2CU1zl3AMBEhqcVepYjXzu7eBfZ2ttoT1OKH6B Eu+73zDnrSdphxT9X4O3i3TxlYZXAKb9Oa8lkyF85tHF7d5HQKU5+auJ7uJjk/xz YNyKuwnFrToXMqVhX8l/Xym9YLzPETP4UGBB+gzN967dYysMRmTBHA494CtKCVaY WErzvvrtdBc6TvbdkG8PmUX5xVWiXlOdBYKT+7MWkK+qmP8zLLHpWF4i/u6Phl4V vhTK+CEQ3deCsKP6Ej7nOs38XcodzrScRjud52t8A+MwnNSrhG5kx4fAsH06zOH4 j4SsQ5O1oUkQiTFtvmnrSgICHwdS0mMu -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:34 2024 by rpki-client on console-fra.rpki-client.org