$ rpki-client -vvf rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft File: V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft (raw, json) Hash identifier: b4FEtNRYNHbzbxVpF1sjg6q4bxZvReLO8HvfKdHCO7w= Subject key identifier: A6:A3:A8:1A:C9:0B:F0:D0:44:F3:B5:C3:71:D1:12:03:3C:02:91:F5 Authority key identifier: 57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D Certificate issuer: /CN=A918036A/serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D Certificate serial: 0FDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft Manifest number: 0FC1 Signing time: Tue 26 Nov 2024 17:28:18 +0000 Manifest this update: Tue 26 Nov 2024 17:28:17 +0000 Manifest next update: Tue 03 Dec 2024 17:28:17 +0000 Files and hashes: 1: V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl (hash: XhZkZAhih+Sb5BH3vUFs11TK9mEkyEQ4JoxFGRZA9qQ=) 2: E2846570135E11EB9D58482CC4F9AE02.roa (hash: bXgEyT98R8thRPsYUWy4Fp7WrzYnlZBS5iobweOZ0lw=) 3: BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa (hash: C95dcxmbgG9m0J5QHw9VXXRl9oV1Z68MXGZ2KXxsrFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 17:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4061 (0xfdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918036A/serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D Validity Not Before: Nov 26 17:28:17 2024 GMT Not After : Dec 3 17:28:17 2024 GMT Subject: CN=67460532-6e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:82:79:03:d5:11:65:4e:49:9d:ff:00:4d: 26:59:31:48:79:cc:28:8f:3d:a3:3b:9d:ad:dc:7d: b8:fb:94:71:d0:ae:58:cd:7b:68:08:c1:62:fd:01: 20:e2:d8:bb:ab:be:b7:3d:d7:e5:0e:81:10:9c:27: 0d:d7:10:6e:09:ed:6b:a9:df:06:60:2e:be:7c:48: be:5d:c3:ef:2b:2f:1b:6f:ef:eb:bb:94:19:8e:e5: d1:3a:04:92:76:90:55:7c:02:56:2c:f6:96:28:41: 6f:28:fb:cb:98:5d:76:36:ee:23:00:44:b0:cd:b7: 73:b0:03:5b:af:36:69:30:d9:06:92:4d:fc:9a:08: e8:c8:17:d9:d4:92:d1:5e:96:94:13:25:89:8d:c7: 5a:9e:de:02:1b:75:f5:e5:a2:73:34:e1:34:4e:a8: 73:5d:f3:97:95:c8:8a:f9:79:94:db:66:26:fc:68: 27:ef:df:ea:ef:78:90:51:a6:d7:2c:1f:5c:bc:d2: 2b:69:4b:b3:7a:c1:3e:37:f0:66:b0:90:75:61:c1: 91:28:ea:9c:a2:32:82:5a:b1:47:49:f8:df:7a:bd: 2a:90:e9:eb:b7:bc:57:84:15:f2:2c:1e:68:99:4f: 0d:dd:3f:90:b9:09:0f:b1:ef:ad:b7:ab:27:93:f6: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A3:A8:1A:C9:0B:F0:D0:44:F3:B5:C3:71:D1:12:03:3C:02:91:F5 X509v3 Authority Key Identifier: keyid:57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:d0:25:9a:4b:59:8e:c9:ab:73:7b:ff:ca:4e:44:67:dc:e2: bb:0d:9a:44:9d:3c:42:f6:f4:32:a8:28:bf:a9:35:16:18:c5: 36:7d:f9:fd:f6:8f:63:bc:0c:8e:43:ce:e7:2c:55:fe:87:67: 77:7f:c0:83:2d:f5:0a:65:65:60:43:15:0b:61:34:4b:2a:af: 4c:96:b1:9f:6e:c0:60:29:c5:64:34:e7:ee:3c:f9:5a:e3:77: 05:61:b1:d5:f8:4b:3f:35:2c:0d:0d:fc:25:6b:4c:95:a3:d9: 39:9a:73:5c:38:ab:a0:5e:a1:19:ac:d9:07:25:dd:bd:7b:92: b7:e4:24:9a:d6:8e:c2:51:28:8d:7d:00:97:24:4a:29:66:e2: 9e:97:3d:0e:c9:5f:6b:77:1f:a0:d3:0d:96:82:d3:f1:3e:c3: 92:96:7b:36:5a:e5:cf:19:f4:fb:f4:3b:88:08:18:a0:08:b7: a4:bb:9f:88:fb:35:90:45:cf:af:d1:1b:24:0d:1e:5f:69:3c: 71:a1:92:8b:ec:b1:70:50:cf:3c:6e:11:ee:83:e6:3a:d2:7f: c3:fa:ff:08:62:26:31:8c:ed:fe:24:e3:7b:80:34:99:4c:27: db:4b:c1:9b:d9:eb:f7:d6:f9:e0:18:ae:87:8a:06:d0:61:e7: d1:91:53:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzNkExMTAvBgNVBAUTKDU3ODQwRkI0NDFEMkIzNEM4RUU2OTlEMjY0NzEyQjRB NUUwRkVEOEQwHhcNMjQxMTI2MTcyODE3WhcNMjQxMjAzMTcyODE3WjAYMRYwFAYD VQQDEw02NzQ2MDUzMi02ZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkyCeQPVEWVOSZ3/AE0mWTFIecwojz2jO52t3H24+5Rx0K5YzXtoCMFi/QEg 4ti7q763PdflDoEQnCcN1xBuCe1rqd8GYC6+fEi+XcPvKy8bb+/ru5QZjuXROgSS dpBVfAJWLPaWKEFvKPvLmF12Nu4jAESwzbdzsANbrzZpMNkGkk38mgjoyBfZ1JLR XpaUEyWJjcdant4CG3X15aJzNOE0TqhzXfOXlciK+XmU22Ym/Ggn79/q73iQUabX LB9cvNIraUuzesE+N/BmsJB1YcGRKOqcojKCWrFHSfjfer0qkOnrt7xXhBXyLB5o mU8N3T+QuQkPse+tt6snk/YyWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKajqBrJ C/DQRPO1w3HREgM8ApH1MB8GA1UdIwQYMBaAFFeED7RB0rNMjuaZ0mRxK0peD+2N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDM2QS80MzNBRjc4QzQ2 QzcxMUU5QURFOUQ0MjRDNEY5QUUwMi9WNFFQdEVIU3MweU81cG5TWkhFclNsNFA3 WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y0UVB0RUhTczB5TzVwblNaSEVyU2w0UDdZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDM2QS80MzNBRjc4QzQ2QzcxMUU5QURFOUQ0MjRDNEY5QUUwMi9WNFFQdEVIU3Mw eU81cG5TWkhFclNsNFA3WTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg0CWaS1mOyatze//KTkRn3OK7DZpEnTxC9vQyqCi/qTUWGMU2ffn9 9o9jvAyOQ87nLFX+h2d3f8CDLfUKZWVgQxULYTRLKq9MlrGfbsBgKcVkNOfuPPla 43cFYbHV+Es/NSwNDfwla0yVo9k5mnNcOKugXqEZrNkHJd29e5K35CSa1o7CUSiN fQCXJEopZuKelz0OyV9rdx+g0w2WgtPxPsOSlns2WuXPGfT79DuICBigCLeku5+I +zWQRc+v0RskDR5faTxxoZKL7LFwUM88bhHug+Y60n/D+v8IYiYxjO3+JON7gDSZ TCfbS8Gb2ev31vngGK6HigbQYefRkVON -----END CERTIFICATE-----Generated at Tue Nov 26 19:07:11 2024 by rpki-client on console-fra.rpki-client.org