$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft File: pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json) Hash identifier: +vHvEUlQsA19RHfEnunvCtvd1TGxBJ3GHvFYMfzumao= Subject key identifier: 3A:01:63:A2:6A:5B:EE:AD:89:D8:A1:F4:CF:60:98:BA:78:37:C3:F2 Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13 Certificate issuer: /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft Manifest number: 14 Signing time: Sat 23 Nov 2024 05:57:50 +0000 Manifest this update: Sat 23 Nov 2024 05:57:50 +0000 Manifest next update: Sat 30 Nov 2024 05:57:50 +0000 Files and hashes: 1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: MGncKpEiRPVR0SKentK/A4u5Owo4PLatE/PmmWSDS+g=) 2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: bRFbzj6pr/OF3ESUy9ky5waEguFBGACn3nS0+utKTXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113 Validity Not Before: Nov 23 05:57:50 2024 GMT Not After : Nov 30 05:57:50 2024 GMT Subject: CN=67416ede-5fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0b:97:72:b5:20:75:07:78:d0:9d:60:f0:a1: 3e:ca:4c:ed:59:32:d2:65:76:f7:79:3c:17:24:6b: 83:3a:2f:ec:5c:9e:30:e9:d0:dd:56:b2:86:ca:9b: b6:5e:36:5f:e3:4a:ed:40:39:c3:75:1b:30:a6:ee: 20:7d:cb:1c:6a:f7:cb:ea:9b:4a:e7:8d:83:3f:67: b0:86:51:b9:db:83:87:ed:75:df:1d:09:03:4d:d8: 62:31:db:3a:96:8a:4a:93:e4:a9:20:cd:b4:53:45: 3a:3f:50:a9:6e:0c:00:db:29:7e:17:d7:e2:41:36: 2f:c8:e7:48:fd:f9:b1:1e:8f:e0:32:ed:57:39:4c: ea:91:aa:62:0d:37:02:54:ef:7c:fb:df:88:62:1b: c8:88:68:c8:11:2f:ed:ac:b4:e6:3a:12:ec:3a:77: e0:ee:e9:7e:56:57:49:22:51:45:af:fa:07:40:32: 50:4f:6d:1f:d9:21:96:b1:57:6e:f6:69:a8:83:cd: 38:32:22:2a:ab:dd:6a:21:83:b4:a1:f7:c2:9c:4c: 43:d4:08:8e:14:de:cf:97:93:0c:3e:f1:79:a4:a6: b1:73:9a:93:f0:81:38:13:48:01:29:ec:d7:3f:9b: 3a:bb:34:6c:f8:f0:9e:82:a1:98:c8:5b:40:b4:90: 31:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:01:63:A2:6A:5B:EE:AD:89:D8:A1:F4:CF:60:98:BA:78:37:C3:F2 X509v3 Authority Key Identifier: keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:1d:67:12:f9:c2:1b:c4:e2:1a:92:57:86:db:39:9b:eb:14: 2e:d1:a2:d2:8d:e9:a7:8b:8d:98:09:68:b6:a2:37:b9:41:8c: f3:96:86:a4:c6:3b:f2:18:d6:12:f7:91:32:e7:c9:04:68:54: b7:75:cf:42:9b:4d:2b:ea:34:25:93:64:7e:af:6a:ec:3b:e3: 7c:57:3c:28:1c:c2:1f:2a:51:46:10:a6:8b:ec:ef:38:1f:8e: c2:85:8c:5c:9d:4e:78:20:54:52:7b:20:05:80:83:ef:48:50: 44:c0:22:ab:60:05:f4:42:f7:cf:fc:06:0f:52:c0:31:d6:73: 4d:5c:68:6f:c6:82:5d:ea:85:37:61:64:5e:4b:08:6d:21:4a: 48:9f:e6:40:d7:c2:c7:21:95:35:1d:48:e7:ba:1e:95:3f:06: 49:5f:fc:70:f3:a0:6f:e7:39:49:88:19:01:ff:0b:99:4e:a4: 86:0e:ce:14:e3:19:b9:74:cb:97:b5:48:59:a1:58:62:bb:ce: 57:41:15:60:7f:44:11:df:e0:5d:b4:51:e4:bc:f0:10:fa:7e: a9:d1:56:c8:a2:8d:40:fe:40:fa:9d:08:f9:b5:26:15:c1:4b: 86:67:15:2d:90:f3:7f:41:fb:ae:0a:78:a7:78:45:1d:4f:3a: 58:5b:aa:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzcyNDExMC8GA1UEBRMoQTUxQ0ZCOEEyODM4REMyM0YyODc2NDRBNDczNUVGQzEz RDhDMzExMzAeFw0yNDExMjMwNTU3NTBaFw0yNDExMzAwNTU3NTBaMBgxFjAUBgNV BAMTDTY3NDE2ZWRlLTVmYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWC5dytSB1B3jQnWDwoT7KTO1ZMtJldvd5PBcka4M6L+xcnjDp0N1WsobKm7Ze Nl/jSu1AOcN1GzCm7iB9yxxq98vqm0rnjYM/Z7CGUbnbg4ftdd8dCQNN2GIx2zqW ikqT5KkgzbRTRTo/UKluDADbKX4X1+JBNi/I50j9+bEej+Ay7Vc5TOqRqmINNwJU 73z734hiG8iIaMgRL+2stOY6Euw6d+Du6X5WV0kiUUWv+gdAMlBPbR/ZIZaxV272 aaiDzTgyIiqr3Wohg7Sh98KcTEPUCI4U3s+Xkww+8XmkprFzmpPwgTgTSAEp7Nc/ mzq7NGz48J6CoZjIW0C0kDF1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOgFjompb 7q2J2KH0z2CYung3w/IwHwYDVR0jBBgwFoAUpRz7iig43CPyh2RKRzXvwT2MMRMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NzI0LzU2QzY3MDc2OTA0 RDExRUZBMTEwMzg2NEM0RjlBRTAyL3BSejdpaWc0M0NQeWgyUktSelh2d1QyTU1S TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcFJ6N2lpZzQzQ1B5aDJSS1J6WHZ3VDJNTVJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NzI0LzU2QzY3MDc2OTA0RDExRUZBMTEwMzg2NEM0RjlBRTAyL3BSejdpaWc0M0NQ eWgyUktSelh2d1QyTU1STS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFkdZxL5whvE4hqSV4bbOZvrFC7RotKN6aeLjZgJaLaiN7lBjPOWhqTG O/IY1hL3kTLnyQRoVLd1z0KbTSvqNCWTZH6vauw743xXPCgcwh8qUUYQpovs7zgf jsKFjFydTnggVFJ7IAWAg+9IUETAIqtgBfRC98/8Bg9SwDHWc01caG/Ggl3qhTdh ZF5LCG0hSkif5kDXwschlTUdSOe6HpU/Bklf/HDzoG/nOUmIGQH/C5lOpIYOzhTj Gbl0y5e1SFmhWGK7zldBFWB/RBHf4F20UeS88BD6fqnRVsiijUD+QPqdCPm1JhXB S4ZnFS2Q839B+64KeKd4RR1POlhbqsc= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org