$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json) Hash identifier: WpayhAIutN3da/4NMZNtj0MPuNJ8es9h9qHNVVrk730= Subject key identifier: DB:0D:13:C1:D0:0C:C7:29:5B:F5:A0:CF:3A:E7:E8:24:45:A1:AE:13 Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft Manifest number: 07A7 Signing time: Fri 22 Nov 2024 20:47:15 +0000 Manifest this update: Fri 22 Nov 2024 20:47:14 +0000 Manifest next update: Fri 29 Nov 2024 20:47:14 +0000 Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: 7BQKtAfdxoDkQLkLM7xUBbU6pZ0dL4rTkza1sNsnr/4=) 2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: BSpXz+Luvr8+353VTfwHRvV86BxwUFFmKEnBxGibaBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Validity Not Before: Nov 22 20:47:14 2024 GMT Not After : Nov 29 20:47:14 2024 GMT Subject: CN=6740edd2-85c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:1c:86:1e:05:ab:76:3b:97:32:a0:9c:4a: c8:fd:82:88:97:08:c7:4c:38:9a:60:1c:cb:24:79: 60:39:7e:33:6e:43:24:21:c2:9e:d6:45:4d:08:19: b2:03:3b:b9:66:69:ec:d2:1a:25:a3:0e:19:41:9f: 30:ed:b1:5e:4d:96:54:40:fb:da:85:95:77:9f:1d: 6f:2d:91:4e:15:4a:52:00:4d:5b:96:1d:4c:44:ac: 41:ef:81:d9:64:a8:85:9d:3f:93:a4:f7:ff:2f:ec: 80:8d:b1:73:23:ba:ba:a6:33:2f:81:15:0a:51:2f: 4c:d9:c1:36:ce:c4:0d:db:5c:1c:19:46:af:56:52: 35:e1:6b:85:c0:51:74:3e:99:66:64:83:c9:f9:92: 83:d3:2c:ea:93:d3:e8:49:3a:25:54:11:11:e5:50: 92:0b:8b:d3:28:f4:da:4c:ca:11:9f:0e:90:d2:0e: 93:63:21:3c:e8:1d:74:b4:14:d8:3e:b2:b1:47:4f: cd:67:56:35:20:1f:4a:b9:69:b0:d0:39:1d:d5:c5: fa:ca:c2:d4:f3:4d:f4:2a:b0:cb:48:d8:9e:d6:10: ac:c7:67:2b:de:40:24:23:0a:6e:e9:89:31:12:ba: 5f:b3:62:c3:52:c6:a3:9a:1a:b7:16:3b:3b:29:7d: f0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0D:13:C1:D0:0C:C7:29:5B:F5:A0:CF:3A:E7:E8:24:45:A1:AE:13 X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:20:28:c4:29:b4:71:e6:ae:aa:98:e9:4c:46:97:6a:89:15: 1d:13:cf:af:49:f3:0b:f0:94:55:18:d2:3e:5e:a7:cc:29:98: 07:e0:83:cd:d6:d3:91:8d:cb:94:4f:c9:8b:f2:73:08:2a:86: c5:63:0d:b9:59:64:79:2f:d5:6e:0a:23:8e:a2:a1:ab:92:ec: 84:ec:51:18:dc:f6:e8:e0:f2:b2:2c:f0:c1:62:ff:1f:2e:88: e3:5f:7d:6b:0e:d8:0b:d4:71:6e:72:48:b0:5b:15:50:93:25: 4d:08:83:be:a1:70:4e:66:c4:14:52:c0:41:76:30:83:c7:23: 21:fb:98:cc:56:4c:d6:7d:32:10:01:7c:c7:31:c5:26:05:d7: 65:e6:6b:9f:e7:f2:09:81:23:ba:79:9e:2f:9c:87:76:4d:79: 7f:ca:5d:46:a3:86:3c:0e:99:0a:00:4b:c0:6e:dc:f4:a3:8e: 63:dd:14:a3:7c:da:28:26:eb:30:49:69:fd:0d:b5:84:4b:7d: 5e:ff:5a:64:c7:df:72:3c:4d:d5:1d:83:e5:4c:e5:49:f4:f1: fd:61:b4:3c:37:af:c5:7d:3c:e0:ae:2c:d4:82:7d:ae:76:d4: 50:86:b1:17:bf:59:d0:c3:ab:e5:3d:9b:df:ca:22:e5:5e:6e: 14:e6:d7:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjQxMTIyMjA0NzE0WhcNMjQxMTI5MjA0NzE0WjAYMRYwFAYD VQQDEw02NzQwZWRkMi04NWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArI8chh4Fq3Y7lzKgnErI/YKIlwjHTDiaYBzLJHlgOX4zbkMkIcKe1kVNCBmy Azu5Zmns0holow4ZQZ8w7bFeTZZUQPvahZV3nx1vLZFOFUpSAE1blh1MRKxB74HZ ZKiFnT+TpPf/L+yAjbFzI7q6pjMvgRUKUS9M2cE2zsQN21wcGUavVlI14WuFwFF0 PplmZIPJ+ZKD0yzqk9PoSTolVBER5VCSC4vTKPTaTMoRnw6Q0g6TYyE86B10tBTY PrKxR0/NZ1Y1IB9KuWmw0Dkd1cX6ysLU8030KrDLSNie1hCsx2cr3kAkIwpu6Ykx Erpfs2LDUsajmhq3Fjs7KX3wtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsNE8HQ DMcpW/Wgzzrn6CRFoa4TMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My81N0VGOUY2Q0REMUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFK MTJEVjFlTGUyTU9QTWVXZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdICjEKbRx5q6qmOlMRpdqiRUdE8+vSfML8JRVGNI+XqfMKZgH4IPN 1tORjcuUT8mL8nMIKobFYw25WWR5L9VuCiOOoqGrkuyE7FEY3Pbo4PKyLPDBYv8f LojjX31rDtgL1HFuckiwWxVQkyVNCIO+oXBOZsQUUsBBdjCDxyMh+5jMVkzWfTIQ AXzHMcUmBddl5muf5/IJgSO6eZ4vnId2TXl/yl1Go4Y8DpkKAEvAbtz0o45j3RSj fNooJuswSWn9DbWES31e/1pkx99yPE3VHYPlTOVJ9PH9YbQ8N6/FfTzgrizUgn2u dtRQhrEXv1nQw6vlPZvfyiLlXm4U5teo -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org