$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: gmzzVjOeh/fEZ7Yq315Wg4Wz4Y378T+Vqq3w2KizXdw= Subject key identifier: 01:E9:97:79:8F:83:36:85:38:EF:D9:D8:C4:50:0C:3F:5C:A4:D6:65 Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: 2E Signing time: Thu 21 Nov 2024 05:45:24 +0000 Manifest this update: Thu 21 Nov 2024 05:45:23 +0000 Manifest next update: Thu 28 Nov 2024 05:45:23 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: nQgmeK4sfP+UUukqLZdxTkeMmJNF8h9L8sNxKtBbcCs=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: gk01C0+X6T4lb9RqY5UBxRDdRkuHIyyy3hGVV+zbyW0=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: 7++r6OOyALDEbZ8NuTRttHGB0NJutWXA3LepiATGOv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Nov 21 05:45:23 2024 GMT Not After : Nov 28 05:45:23 2024 GMT Subject: CN=673ec8f4-8a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:81:26:1c:17:8c:96:ce:95:e7:fc:8f:58:c0: bc:06:4e:23:ef:6c:31:f8:00:bf:1b:29:b0:fb:38: 20:46:7b:d8:a0:65:61:05:4b:e7:c1:7e:0c:5f:4a: cf:83:67:5f:e8:3f:f7:f3:9a:e3:2c:a3:c9:b9:29: c3:5f:50:da:6f:86:13:57:dc:26:18:f4:68:6c:4b: a1:66:8d:cb:0a:2c:34:3c:25:a2:08:b5:60:cd:80: fd:8c:f0:d3:0d:85:1e:67:e7:6b:67:29:64:2a:2c: 99:da:e8:63:5f:52:c1:0a:d7:2f:9d:60:62:2d:39: 56:ea:55:38:eb:5c:2b:dd:45:c6:c1:b0:80:78:8a: d6:5d:b0:2c:63:50:e1:39:d1:2a:ca:ae:e8:f4:ba: 84:c7:80:d6:01:98:27:bd:88:f1:a5:e0:be:ae:f3: b2:a9:41:08:01:1f:c5:1c:ec:a4:14:1e:63:6a:7e: b2:56:bc:8f:79:99:cf:d7:bf:52:a8:82:b3:54:8a: 91:64:32:08:9e:c2:e9:fc:50:3f:fc:46:9b:59:5f: 92:d9:7d:05:8b:0c:78:01:e0:68:7e:b5:c5:57:21: 94:16:56:32:08:c4:c9:e1:03:be:a5:6d:31:05:2f: 9e:88:31:93:f8:b7:98:d1:7a:97:c7:b0:1f:34:19: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E9:97:79:8F:83:36:85:38:EF:D9:D8:C4:50:0C:3F:5C:A4:D6:65 X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:73:4e:99:7c:e0:15:96:76:0f:b3:ca:ab:d6:9b:15:b6:de: 9a:1e:43:87:84:5e:b0:6e:0b:d4:83:2a:be:74:ed:ff:97:e1: 86:b7:e9:96:5c:d8:e8:ec:9c:e4:e1:4b:48:3b:1d:8b:b7:96: d7:e3:ba:37:45:31:9d:b4:23:12:dd:61:9b:a8:01:78:51:f3: 0e:13:80:bd:a4:ce:ef:02:2f:12:d3:47:05:99:7e:e5:7c:09: 2b:b6:26:5b:ff:9f:ac:37:1d:25:82:ff:a6:6b:17:fc:d3:7f: ae:d5:4c:22:1c:c2:f2:8d:09:f5:42:34:a6:5d:9d:9d:a2:36: 6e:51:1f:5c:5f:83:60:db:16:0c:40:65:e3:4e:df:7d:13:61: d8:eb:62:34:2d:82:28:d9:c6:f8:9b:0c:bb:cc:9b:46:68:03: 30:1d:6b:08:b2:76:86:b3:28:58:8e:2c:12:6d:b0:39:70:fd: 22:df:1d:cc:80:be:03:a2:ef:24:64:cc:9b:5c:7c:27:8c:7b: a5:35:38:5b:ab:45:4b:91:71:43:47:33:be:0e:c3:2d:8d:9d: 9a:db:08:f3:4c:da:ad:7b:99:da:24:43:5e:f4:c5:7e:85:b8: 27:f8:eb:61:db:9f:01:68:53:b1:b7:94:3c:31:f2:cc:c5:7c: d4:28:fe:65 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEREODExMC8GA1UEBRMoRTZCNTREMDI3Q0UzNDk4QkYzNUU0RDA2NUJDNDc4QTkz NkMxNjE2OTAeFw0yNDExMjEwNTQ1MjNaFw0yNDExMjgwNTQ1MjNaMBgxFjAUBgNV BAMTDTY3M2VjOGY0LThhMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvgSYcF4yWzpXn/I9YwLwGTiPvbDH4AL8bKbD7OCBGe9igZWEFS+fBfgxfSs+D Z1/oP/fzmuMso8m5KcNfUNpvhhNX3CYY9GhsS6FmjcsKLDQ8JaIItWDNgP2M8NMN hR5n52tnKWQqLJna6GNfUsEK1y+dYGItOVbqVTjrXCvdRcbBsIB4itZdsCxjUOE5 0SrKruj0uoTHgNYBmCe9iPGl4L6u87KpQQgBH8Uc7KQUHmNqfrJWvI95mc/Xv1Ko grNUipFkMgiewun8UD/8RptZX5LZfQWLDHgB4Gh+tcVXIZQWVjIIxMnhA76lbTEF L56IMZP4t5jRepfHsB80GTwVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAemXeY+D NoU479nYxFAMP1yk1mUwHwYDVR0jBBgwFoAU5rVNAnzjSYvzXk0GW8R4qTbBYWkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwREQ4L0E2NkE3NUVFNjVC QjExRUZBRkEzMkY4MkM0RjlBRTAyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllX ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNXJWTkFuempTWXZ6WGswR1c4UjRxVGJCWVdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw REQ4L0E2NkE3NUVFNjVCQjExRUZBRkEzMkY4MkM0RjlBRTAyLzVyVk5BbnpqU1l2 elhrMEdXOFI0cVRiQllXay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFBzTpl84BWWdg+zyqvWmxW23poeQ4eEXrBuC9SDKr507f+X4Ya36ZZc 2OjsnOThS0g7HYu3ltfjujdFMZ20IxLdYZuoAXhR8w4TgL2kzu8CLxLTRwWZfuV8 CSu2Jlv/n6w3HSWC/6ZrF/zTf67VTCIcwvKNCfVCNKZdnZ2iNm5RH1xfg2DbFgxA ZeNO330TYdjrYjQtgijZxvibDLvMm0ZoAzAdawiydoazKFiOLBJtsDlw/SLfHcyA vgOi7yRkzJtcfCeMe6U1OFurRUuRcUNHM74Owy2NnZrbCPNM2q17mdokQ170xX6F uCf462HbnwFoU7G3lDwx8szFfNQo/mU= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:17 2024 by rpki-client on console-fra.rpki-client.org