$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: FopNCZMnk+VIDiAWGjpE5VwrlOLkV5CPY+butgenUdc= Subject key identifier: 1A:70:44:F8:D5:B3:59:91:7D:FA:5D:0E:7E:5C:AC:5A:23:86:51:8A Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0C04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0BE4 Signing time: Fri 22 Nov 2024 18:33:18 +0000 Manifest this update: Fri 22 Nov 2024 18:33:17 +0000 Manifest next update: Fri 29 Nov 2024 18:33:17 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: 0BaWhh1hfOCc7RFM43rL7YmO+SCGgQ7GRni9xPkPkaU=) 2: 2C1A71D81A9B11EFA4886942C4F9AE02.roa (hash: VzT8WNwEWPiFxIQS9l/GW9AAHpB6UIAG/VXpaI8+LV8=) 3: 022432421A9B11EF8C724E37C4F9AE02.roa (hash: 9s7xFQLczJESCXB5sYwOCQlyFJ/24UGiqfH5xn9y6m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3076 (0xc04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Nov 22 18:33:17 2024 GMT Not After : Nov 29 18:33:17 2024 GMT Subject: CN=6740ce6d-6d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:09:6b:ac:8e:92:d7:43:cf:c9:68:d6:99:d8: 9b:ce:7b:23:bd:dd:5a:94:a2:bd:bf:5c:4b:02:02: 3f:d1:cf:e9:81:c9:fe:cf:3f:4c:8c:4f:06:57:00: 15:20:7c:bc:81:8f:92:2c:02:8f:6d:7a:71:38:b7: 88:5a:f1:56:54:13:aa:99:3e:75:2b:fe:0c:7f:22: 4f:c0:64:86:77:a1:61:10:53:b2:7a:8f:14:cf:36: c4:bd:6a:16:06:53:47:35:62:ee:0e:0f:99:ee:12: c0:e4:36:68:43:cf:b5:b5:a5:25:98:ef:9a:0a:79: 10:6b:58:a4:9d:cd:80:e0:5f:96:e6:0f:60:04:02: c8:e0:6b:ff:3f:44:87:d7:ed:6c:a5:61:b6:01:b0: db:30:ba:9e:6a:60:49:f4:94:60:c3:9e:af:56:3f: ef:cd:8a:58:ab:32:1c:17:16:d9:50:0a:74:30:5b: 12:4a:67:da:f9:a0:47:9e:b0:ba:a6:b7:ec:62:96: b0:fc:cf:49:8c:5e:17:5c:46:1d:70:f2:77:26:56: ad:6c:af:88:02:fc:13:d4:f2:93:58:41:7a:ea:c9: 52:8c:0f:cc:18:68:8a:2a:cc:4e:1f:a5:98:a5:ef: fa:86:f5:1f:6c:d0:e9:a0:9f:f9:9d:8f:20:62:5f: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:70:44:F8:D5:B3:59:91:7D:FA:5D:0E:7E:5C:AC:5A:23:86:51:8A X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:c7:b1:82:63:00:aa:d2:38:ea:67:21:74:87:10:c6:c4:34: dd:8b:1e:4d:a3:d2:43:0e:81:e1:43:92:62:08:70:52:39:66: a0:89:00:95:77:d2:44:e5:50:fb:37:d8:28:60:bb:67:f2:64: af:2a:8a:a4:01:11:e3:9b:fc:2a:4e:e6:ff:8f:7a:12:0f:b1: ab:d1:08:83:a3:30:52:fe:63:fe:ee:95:c3:1a:63:42:00:cb: d5:8c:42:c8:eb:9d:c3:41:6d:97:50:47:5c:5f:e1:4c:8f:52: e6:87:9c:d3:dc:2e:6e:77:d9:b7:41:50:88:aa:c7:e4:8f:d9: 3b:b4:68:94:09:ec:39:dd:d7:d4:63:73:d6:31:3c:0f:82:e8: 19:1f:61:72:f6:96:fc:d5:f2:ce:99:62:72:6e:b2:b2:69:f1: 3f:61:2c:7d:fa:c1:cb:d2:ac:8b:b3:07:80:83:c6:91:cd:56: 03:7a:4c:b8:b2:80:2b:5c:f1:54:35:13:33:4e:0b:7d:65:5c: a3:e5:5c:c1:a1:07:4f:fe:7d:e2:5a:99:23:10:c9:a0:5a:fa: 3f:19:52:83:f9:b0:43:d0:de:8b:31:5c:df:94:d7:6a:26:9f: fd:bb:43:98:d2:54:7a:55:74:a2:04:01:f0:7b:59:81:13:4d: b1:72:08:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjQxMTIyMTgzMzE3WhcNMjQxMTI5MTgzMzE3WjAYMRYwFAYD VQQDEw02NzQwY2U2ZC02ZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQlrrI6S10PPyWjWmdibznsjvd1alKK9v1xLAgI/0c/pgcn+zz9MjE8GVwAV IHy8gY+SLAKPbXpxOLeIWvFWVBOqmT51K/4MfyJPwGSGd6FhEFOyeo8UzzbEvWoW BlNHNWLuDg+Z7hLA5DZoQ8+1taUlmO+aCnkQa1iknc2A4F+W5g9gBALI4Gv/P0SH 1+1spWG2AbDbMLqeamBJ9JRgw56vVj/vzYpYqzIcFxbZUAp0MFsSSmfa+aBHnrC6 prfsYpaw/M9JjF4XXEYdcPJ3JlatbK+IAvwT1PKTWEF66slSjA/MGGiKKsxOH6WY pe/6hvUfbNDpoJ/5nY8gYl+jKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpwRPjV s1mRffpdDn5crFojhlGKMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAx7GCYwCq0jjqZyF0hxDGxDTdix5No9JDDoHhQ5JiCHBSOWagiQCV d9JE5VD7N9goYLtn8mSvKoqkARHjm/wqTub/j3oSD7Gr0QiDozBS/mP+7pXDGmNC AMvVjELI653DQW2XUEdcX+FMj1Lmh5zT3C5ud9m3QVCIqsfkj9k7tGiUCew53dfU Y3PWMTwPgugZH2Fy9pb81fLOmWJybrKyafE/YSx9+sHL0qyLsweAg8aRzVYDeky4 soArXPFUNRMzTgt9ZVyj5VzBoQdP/n3iWpkjEMmgWvo/GVKD+bBD0N6LMVzflNdq Jp/9u0OY0lR6VXSiBAHwe1mBE02xcgja -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org