$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft File: 5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json) Hash identifier: Pr3lH999MtwZNmiDrlgxlNBQNPXv2+nomZsvqxbza6M= Subject key identifier: D0:F2:08:92:B4:22:98:42:E4:FF:8E:78:B8:E3:93:77:EF:38:04:69 Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Certificate serial: 0345 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft Manifest number: 0329 Signing time: Sat 23 Nov 2024 00:45:44 +0000 Manifest this update: Sat 23 Nov 2024 00:45:43 +0000 Manifest next update: Sat 30 Nov 2024 00:45:43 +0000 Files and hashes: 1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: 8GxaRVJmpRdXGwpKKS997408Gt+Ypo1GlAZao0D7Ut8=) 2: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: SMBY1LukYFigMF8a28TCWL5pjJYfobly4CC1lr0o8t4=) 3: C8165660822F11EEABA7D533C4F9AE02.roa (hash: U8OEyZFjA9I1IQBUUkrhnUMwPDhM8kTGhjLTtv1sIUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 837 (0x345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Validity Not Before: Nov 23 00:45:43 2024 GMT Not After : Nov 30 00:45:43 2024 GMT Subject: CN=674125b7-82db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f6:6b:9e:cb:d4:49:a8:3d:8b:ed:e6:0f:bc: aa:86:5e:17:37:4d:36:c9:ad:85:bb:3f:cb:3f:3f: 41:5f:41:da:d0:76:76:4e:c1:4d:9e:88:15:df:1d: e9:cd:8c:6a:0b:ed:4e:cc:f9:d7:77:3f:ed:73:3a: 31:46:c0:6a:72:ab:ec:89:c8:48:3d:9d:be:3c:88: ac:9a:4f:5d:85:32:de:2a:a4:07:9a:c1:28:40:b4: e7:de:94:2a:70:42:51:ec:b5:18:86:47:b0:e9:ac: 48:d8:13:b7:a8:de:87:93:57:70:7c:de:48:c7:40: d6:e0:7a:d7:16:e8:43:62:e4:e8:72:5d:04:f6:6f: ec:da:0d:37:44:59:2d:10:2a:cc:44:05:46:68:98: d5:6a:d5:40:f3:4a:6a:7b:97:f6:f8:16:e0:73:ef: 91:11:c7:9e:54:1f:d1:81:69:6d:a0:c8:e6:26:61: 08:7d:28:99:a5:48:85:9c:d4:88:4e:8c:dd:77:09: e3:f3:8e:0a:f8:a0:84:9c:6b:84:7a:23:d9:9b:03: 11:37:4e:bf:e4:17:cd:7b:84:21:35:e1:b6:69:ac: 32:34:86:72:77:79:d7:bd:d7:45:f2:e0:46:af:0c: 89:68:94:2e:5d:9d:fb:6f:57:fc:95:a9:7b:1c:df: 07:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F2:08:92:B4:22:98:42:E4:FF:8E:78:B8:E3:93:77:EF:38:04:69 X509v3 Authority Key Identifier: keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:bb:2c:58:70:af:36:04:3f:56:7d:34:3a:9f:e1:56:15:74: 37:26:cc:85:20:04:28:c8:f6:a0:db:27:cb:d6:ec:30:fe:5f: f5:6f:9e:98:0b:8e:ce:44:4e:f6:00:f9:f0:a5:bd:01:b7:36: 93:0b:1a:2a:ef:3a:f6:0c:fc:f2:25:f4:c2:2d:38:9c:30:89: cf:b7:03:2a:a8:03:a9:73:77:41:a0:af:89:ba:f3:6b:e9:e5: cd:02:cf:a7:65:a7:80:24:f4:0b:bd:31:76:fc:cf:6b:9d:4d: 10:21:03:05:22:fc:b7:26:06:7b:25:95:79:65:5c:1b:f8:51: 9b:c9:4a:4a:f0:31:2d:e2:2c:8a:81:6d:99:68:29:0d:ae:d2: 00:f3:8a:78:63:5d:5d:4a:36:1d:0b:53:d8:19:ba:58:f2:75: 2c:05:94:98:d3:a6:ea:f5:f5:b2:22:86:6b:08:58:8f:07:79: e1:ac:ab:75:09:48:8c:0b:4f:6a:19:fa:b8:a6:51:b6:1e:d2: f9:7d:b6:3e:cc:7d:9a:77:ed:b9:63:ee:5e:d3:e9:2d:c0:ef: 32:87:bd:8b:2b:28:18:cc:c3:0a:16:66:0a:c7:f8:ad:30:5e: a1:62:7b:20:12:c9:4a:71:39:89:88:89:ec:3c:96:ae:7b:7f: 4e:59:8f:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKEU2MjE0NjlDRDVBNTc4Rjk0N0FCNDdFQjBFQ0U4ODkz OUI4N0VCRkIwHhcNMjQxMTIzMDA0NTQzWhcNMjQxMTMwMDA0NTQzWjAYMRYwFAYD VQQDEw02NzQxMjViNy04MmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPZrnsvUSag9i+3mD7yqhl4XN002ya2Fuz/LPz9BX0Ha0HZ2TsFNnogV3x3p zYxqC+1OzPnXdz/tczoxRsBqcqvsichIPZ2+PIismk9dhTLeKqQHmsEoQLTn3pQq cEJR7LUYhkew6axI2BO3qN6Hk1dwfN5Ix0DW4HrXFuhDYuTocl0E9m/s2g03RFkt ECrMRAVGaJjVatVA80pqe5f2+Bbgc++REceeVB/RgWltoMjmJmEIfSiZpUiFnNSI Tozddwnj844K+KCEnGuEeiPZmwMRN06/5BfNe4QhNeG2aawyNIZyd3nXvddF8uBG rwyJaJQuXZ37b1f8lal7HN8HXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDyCJK0 IphC5P+OeLjjk3fvOARpMB8GA1UdIwQYMBaAFOYhRpzVpXj5R6tH6w7OiJObh+v7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9EOEI2ODY5NkFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQbEhxMGZyRHM2SWs1dUg2 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpRkduTldsZVBsSHEwZnJEczZJazV1SDZfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9EOEI2ODY5NkFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQ bEhxMGZyRHM2SWs1dUg2X3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyuyxYcK82BD9WfTQ6n+FWFXQ3JsyFIAQoyPag2yfL1uww/l/1b56Y C47ORE72APnwpb0BtzaTCxoq7zr2DPzyJfTCLTicMInPtwMqqAOpc3dBoK+JuvNr 6eXNAs+nZaeAJPQLvTF2/M9rnU0QIQMFIvy3JgZ7JZV5ZVwb+FGbyUpK8DEt4iyK gW2ZaCkNrtIA84p4Y11dSjYdC1PYGbpY8nUsBZSY06bq9fWyIoZrCFiPB3nhrKt1 CUiMC09qGfq4plG2HtL5fbY+zH2ad+25Y+5e0+ktwO8yh72LKygYzMMKFmYKx/it MF6hYnsgEslKcTmJiInsPJaue39OWY99 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:38 2024 by rpki-client on console-fra.rpki-client.org