$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft File: R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json) Hash identifier: Cuwb+XqmfI8kH3NJzalBBiY+I0qHpP2tHIUZAQRAofo= Subject key identifier: 7F:EE:A0:9E:96:BC:53:F2:CB:03:0C:64:4B:BF:F1:5C:9E:6B:A6:09 Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft Manifest number: 0140 Signing time: Thu 21 Nov 2024 02:43:40 +0000 Manifest this update: Thu 21 Nov 2024 02:43:39 +0000 Manifest next update: Thu 28 Nov 2024 02:43:39 +0000 Files and hashes: 1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: hYD/YZbKzzG0vUJ6EywXwOwTYPfwL9HJBFg7aAQkJQk=) 2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: YSCK3SyvL0QhIHXS6YXGQBk1/DrCgOSt2WKrCd8HBC8=) 3: 4156CE4E8B8811EF99CAC23CC4F9AE02.roa (hash: aC5CXVsf3TUJUqObfYO8YqGBcyfi/oOuuM/n6aK5tiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Validity Not Before: Nov 21 02:43:39 2024 GMT Not After : Nov 28 02:43:39 2024 GMT Subject: CN=673e9e5b-6eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:6e:7b:a7:97:95:46:8d:d2:dd:fc:1f:fc: 3c:74:d0:c3:97:97:4b:41:2c:b4:10:82:ab:15:65: 0f:ed:1d:35:c3:a4:a4:ea:cc:b7:e1:bc:50:04:86: 3b:de:e4:e2:38:6c:98:21:33:fa:9e:37:23:cf:3a: ca:c6:84:be:52:c9:79:a5:26:ef:9f:59:40:7d:9f: 8a:a3:43:83:14:2b:2b:d1:66:b1:70:ba:2e:73:8e: ce:78:16:ad:9b:05:62:ef:b1:12:60:cf:57:86:54: c7:bb:7d:be:87:6f:b4:35:4c:46:0b:91:c6:53:f6: 42:40:81:7c:27:21:be:b9:d9:cd:9e:01:95:86:2d: 30:d5:da:ec:33:a9:4f:96:10:d0:56:6b:4a:0b:cf: 3b:48:ec:2e:34:cf:eb:d3:d8:e1:62:c6:d0:2e:f8: 79:d1:3b:59:9a:3f:47:21:9a:e0:4b:72:2e:a7:27: d8:ee:b5:5e:8c:d1:a0:8e:7b:2d:96:48:f3:d3:67: ec:5d:d3:7c:6c:9b:1d:dc:cb:7c:31:bd:34:91:04: 88:d2:7a:f5:4f:42:cb:a8:b1:01:35:37:0d:f5:95: c1:80:e4:40:f3:11:2e:b9:7c:ad:59:43:ea:f0:c5: c5:b9:b5:38:e3:1f:b7:93:df:a4:d3:aa:a0:ca:b5: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EE:A0:9E:96:BC:53:F2:CB:03:0C:64:4B:BF:F1:5C:9E:6B:A6:09 X509v3 Authority Key Identifier: keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:91:99:f9:af:1d:42:51:0a:56:1d:0e:55:21:f0:5d:86:f2: 37:4a:3e:ea:5e:7e:87:24:d7:9c:c5:08:01:1e:ff:9a:ee:54: 66:74:32:c2:cf:e3:23:59:c7:88:53:d4:80:e8:15:68:a1:59: 17:42:03:0c:93:3b:05:9d:1b:f9:51:fa:6c:c2:81:fb:95:b4: be:2e:f9:6c:13:c0:1c:15:c7:48:5b:c4:29:4d:28:ba:fe:56: 67:40:01:3f:56:f4:02:13:d4:57:6f:82:2a:68:5d:db:05:05: 19:4f:fc:79:fa:df:b6:87:01:72:ee:bc:0a:47:92:66:e8:6d: 58:b1:2f:65:9f:10:a1:48:55:50:eb:01:c0:f4:cf:82:84:87: 81:98:18:98:41:8a:fb:f5:34:19:5b:7e:ab:11:7c:eb:ff:f9: 0c:75:78:d1:90:42:44:3b:ee:bb:15:89:0c:5d:c5:95:7d:e1: 48:4a:b3:15:d5:62:5c:25:af:cb:86:38:47:48:bb:40:b5:69: a1:91:72:a1:db:80:57:8b:7a:f2:fb:44:92:fe:8c:8d:cc:1c: 92:e6:0b:c6:85:1f:45:5e:cb:b7:67:92:13:dc:4b:59:66:70: 04:fd:33:a9:98:09:98:f0:1e:0d:2b:7d:b1:8d:95:7c:0c:4b: b2:57:ba:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNkExMTAvBgNVBAUTKDQ3NTMwMEM5NkVCOUEyNEUzMzFEMEIzOTAwNzBDNDVB MjlDOTVFNjkwHhcNMjQxMTIxMDI0MzM5WhcNMjQxMTI4MDI0MzM5WjAYMRYwFAYD VQQDEw02NzNlOWU1Yi02ZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtRue6eXlUaN0t38H/w8dNDDl5dLQSy0EIKrFWUP7R01w6Sk6sy34bxQBIY7 3uTiOGyYITP6njcjzzrKxoS+Usl5pSbvn1lAfZ+Ko0ODFCsr0WaxcLouc47OeBat mwVi77ESYM9XhlTHu32+h2+0NUxGC5HGU/ZCQIF8JyG+udnNngGVhi0w1drsM6lP lhDQVmtKC887SOwuNM/r09jhYsbQLvh50TtZmj9HIZrgS3IupyfY7rVejNGgjnst lkjz02fsXdN8bJsd3Mt8Mb00kQSI0nr1T0LLqLEBNTcN9ZXBgORA8xEuuXytWUPq 8MXFubU44x+3k9+k06qgyrUb/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/uoJ6W vFPyywMMZEu/8Vyea6YJMB8GA1UdIwQYMBaAFEdTAMluuaJOMx0LOQBwxFopyV5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM2QS80MDkzNDI4MEM3 QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9rNHpIUXM1QUhERVdpbkpY bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxTUF5VzY1b2s0ekhRczVBSERFV2luSlhtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM2QS80MDkzNDI4MEM3QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9r NHpIUXM1QUhERVdpbkpYbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALkZn5rx1CUQpWHQ5VIfBdhvI3Sj7qXn6HJNecxQgBHv+a7lRmdDLC z+MjWceIU9SA6BVooVkXQgMMkzsFnRv5UfpswoH7lbS+LvlsE8AcFcdIW8QpTSi6 /lZnQAE/VvQCE9RXb4IqaF3bBQUZT/x5+t+2hwFy7rwKR5Jm6G1YsS9lnxChSFVQ 6wHA9M+ChIeBmBiYQYr79TQZW36rEXzr//kMdXjRkEJEO+67FYkMXcWVfeFISrMV 1WJcJa/LhjhHSLtAtWmhkXKh24BXi3ry+0SS/oyNzByS5gvGhR9FXsu3Z5IT3EtZ ZnAE/TOpmAmY8B4NK32xjZV8DEuyV7oD -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:59 2024 by rpki-client on console-fra.rpki-client.org