$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: 73esJVtdKIbBzeqw3azHL4Hu2RVZvvSHwKhOzIDSsVA= Subject key identifier: F3:78:AA:7D:F7:4F:02:27:DF:66:B5:87:A5:F9:B8:50:6A:D6:FA:06 Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0AA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0A87 Signing time: Fri 22 Nov 2024 19:23:37 +0000 Manifest this update: Fri 22 Nov 2024 19:23:37 +0000 Manifest next update: Fri 29 Nov 2024 19:23:37 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: kcpJfjAQzw0xQU4FKg9zZulG9fbCGtZxlt7UbrVsTDM=) 2: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: mllrLJI4sD60gVAc3BzUHHr/oywpfwJcK/DoJPXA7Oo=) 3: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: 52xPyx/0Y8642OSdtJeTlJtFNdpL5bLP/xTXki/fgmA=) 4: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: Z7JDkrblDij0tRdpHFc+vT28x0wdm8Xo3AJexdSDKt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2723 (0xaa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Nov 22 19:23:37 2024 GMT Not After : Nov 29 19:23:37 2024 GMT Subject: CN=6740da39-194f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:37:26:af:21:10:6b:68:c4:d9:9f:1a:52: 45:f9:35:34:a0:3c:75:99:97:74:ce:d3:48:e9:3d: c9:20:8d:65:b4:1c:41:8e:03:64:66:3a:2d:ac:6e: 91:cf:4a:86:f2:ab:af:67:e6:26:61:c4:12:63:8b: 77:73:8c:5b:3b:8c:07:52:23:4f:95:31:61:9b:10: 48:f3:17:df:ec:ab:5d:f6:69:8b:eb:7b:88:1e:27: 58:0c:ad:f4:25:f6:20:4d:23:3b:24:83:cb:2f:fa: 36:cc:be:23:c2:2c:84:d6:57:e7:5b:bb:3f:26:9c: ba:b2:47:07:26:8c:63:83:ee:00:1b:34:da:86:6f: dd:65:02:0c:42:9c:90:48:20:3e:8e:35:45:a1:49: bc:18:ed:a8:06:cf:ce:db:fb:b6:43:21:56:b5:50: 05:a7:e3:3d:25:95:75:55:f3:3e:aa:4c:8a:b6:9c: 72:40:ee:ee:f8:9b:d2:b5:cb:bd:a5:cc:ff:af:1b: 20:1a:e8:be:a2:5e:66:78:45:ef:97:65:09:7a:e3: 6f:7d:86:cf:fc:db:15:3d:91:74:87:38:d7:1f:c4: ce:0c:54:86:d7:c4:60:d1:63:73:4e:e9:32:7f:f6: 95:40:62:8a:80:38:c3:33:01:5f:ed:92:ef:dc:9f: ff:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:78:AA:7D:F7:4F:02:27:DF:66:B5:87:A5:F9:B8:50:6A:D6:FA:06 X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:cb:98:a1:e1:32:b0:fa:07:c5:ad:07:6a:70:ad:06:dc:37: 8b:95:23:66:4c:b5:cb:83:07:12:ab:f2:1e:03:67:ad:6d:f9: a2:d8:f6:24:a3:a9:7f:de:5a:36:7f:03:87:e9:b1:72:91:d4: f4:b6:79:2b:e5:ab:94:7d:7c:05:f9:01:dd:7d:f2:0b:77:f3: 1d:63:38:d1:bc:76:f3:e2:35:9c:f1:db:1d:da:be:96:db:90: d1:0f:87:19:78:2b:bb:32:46:3a:4e:e1:40:52:6b:15:29:32: ce:d5:88:f2:5a:08:1d:ee:3e:12:44:e2:b7:94:a1:81:1d:fb: 18:82:6c:8a:a4:0a:f8:51:3c:2d:f5:62:bf:d0:1d:9d:c5:6f: a0:bc:6e:69:95:e4:6c:1a:7d:04:ef:3e:27:61:b5:52:46:c7: bc:55:af:85:69:7b:84:1a:e5:ad:1e:02:84:e7:a0:22:fd:7b: 2c:f6:aa:10:89:93:c7:34:d0:2c:d2:fe:15:71:b2:25:58:b1: e6:58:0d:ca:f7:f2:21:2b:8c:63:b0:4f:b9:bc:a6:c9:7b:df: 4e:d1:af:99:c4:e2:fe:ff:95:f7:39:ca:9f:37:ff:43:0e:de: 43:55:ff:ef:10:7f:b0:b1:04:2b:3c:86:1e:a9:46:fd:20:cf: cd:01:46:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjQxMTIyMTkyMzM3WhcNMjQxMTI5MTkyMzM3WjAYMRYwFAYD VQQDEw02NzQwZGEzOS0xOTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAA3Jq8hEGtoxNmfGlJF+TU0oDx1mZd0ztNI6T3JII1ltBxBjgNkZjotrG6R z0qG8quvZ+YmYcQSY4t3c4xbO4wHUiNPlTFhmxBI8xff7Ktd9mmL63uIHidYDK30 JfYgTSM7JIPLL/o2zL4jwiyE1lfnW7s/Jpy6skcHJoxjg+4AGzTahm/dZQIMQpyQ SCA+jjVFoUm8GO2oBs/O2/u2QyFWtVAFp+M9JZV1VfM+qkyKtpxyQO7u+JvStcu9 pcz/rxsgGui+ol5meEXvl2UJeuNvfYbP/NsVPZF0hzjXH8TODFSG18Rg0WNzTuky f/aVQGKKgDjDMwFf7ZLv3J//NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPN4qn33 TwIn32a1h6X5uFBq1voGMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWy5ih4TKw+gfFrQdqcK0G3DeLlSNmTLXLgwcSq/IeA2etbfmi2PYk o6l/3lo2fwOH6bFykdT0tnkr5auUfXwF+QHdffILd/MdYzjRvHbz4jWc8dsd2r6W 25DRD4cZeCu7MkY6TuFAUmsVKTLO1YjyWggd7j4SROK3lKGBHfsYgmyKpAr4UTwt 9WK/0B2dxW+gvG5pleRsGn0E7z4nYbVSRse8Va+FaXuEGuWtHgKE56Ai/Xss9qoQ iZPHNNAs0v4VcbIlWLHmWA3K9/IhK4xjsE+5vKbJe99O0a+ZxOL+/5X3OcqfN/9D Dt5DVf/vEH+wsQQrPIYeqUb9IM/NAUZL -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org