$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft File: 8u2bFw-uMIgyQDmZULa8lTgOdBw.mft (raw, json) Hash identifier: +w5b3GdBWvqZDtf1p3KLQ/iHGy8B+W8xjSvVjEx2850= Subject key identifier: 4D:F7:5A:67:4E:D8:B3:B8:3C:A0:98:41:27:9B:5C:2A:8A:8C:74:F4 Authority key identifier: F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C Certificate issuer: /CN=A91A4749/serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Certificate serial: 0994 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft Manifest number: 098E Signing time: Fri 22 Nov 2024 19:50:00 +0000 Manifest this update: Fri 22 Nov 2024 19:49:59 +0000 Manifest next update: Fri 29 Nov 2024 19:49:59 +0000 Files and hashes: 1: 8u2bFw-uMIgyQDmZULa8lTgOdBw.crl (hash: 0CrEds3EvDeX8VkhfKJCpJTkcJ3/4irYhvvHVXNmBzo=) 2: B42EBFF6796511EAB0595B6EC4F9AE02.roa (hash: lcdT2WKJng7KJMylMuLFFejoBYxRVE9D70A9AQhOkoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2452 (0x994) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4749/serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Validity Not Before: Nov 22 19:49:59 2024 GMT Not After : Nov 29 19:49:59 2024 GMT Subject: CN=6740e067-be5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:67:3d:37:62:e4:d6:7a:7f:eb:62:6c:1d: f4:f6:aa:1a:68:2b:d5:dd:dd:bf:a5:9e:0c:34:5b: c0:0c:09:b6:c5:d3:75:5b:25:04:4e:b7:87:1b:dd: 6e:59:26:61:45:06:18:64:00:11:30:a1:38:61:42: d0:a9:92:c7:07:3f:ae:e8:b3:e9:a4:f6:7f:2c:99: 38:30:98:67:d8:9e:1d:4a:a4:f2:c2:91:ad:ee:32: a2:49:cc:f2:4f:7a:4e:8f:b7:fa:6f:44:75:d9:1b: a0:58:b7:6c:b2:20:86:0e:0e:2c:cc:4b:b7:a0:13: f5:51:50:23:db:3d:b0:40:f0:f0:63:67:fd:c6:82: a5:91:28:d3:3b:00:74:17:e9:10:d2:11:65:92:ed: 1a:53:7c:8c:76:e4:3b:f5:22:6e:d9:d8:25:0e:bf: 4b:95:57:85:e3:ca:9d:2a:61:e6:2a:93:73:fb:e3: 4e:28:28:4e:53:1e:15:b7:8d:79:b2:b3:6a:0d:9f: e3:e9:86:9b:2f:81:9f:9f:06:37:d5:4d:8a:15:02: 24:4a:9b:2b:21:c5:67:cb:49:e7:8a:4b:ce:48:30: 9b:19:29:a2:d8:ef:0a:9e:5b:7c:b9:b2:c2:9a:38: 18:46:42:d7:73:9d:27:44:c3:22:0f:38:08:4e:a0: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F7:5A:67:4E:D8:B3:B8:3C:A0:98:41:27:9B:5C:2A:8A:8C:74:F4 X509v3 Authority Key Identifier: keyid:F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:e9:52:96:e7:7f:ee:3e:2a:27:b4:ff:63:a0:3d:c3:91:e1: ad:fa:2f:fc:35:72:ab:97:3b:d3:e9:8f:36:d2:b1:8e:17:16: 67:9f:4b:eb:5e:d0:a8:b6:dc:3d:fb:8d:ae:c8:5b:32:29:e3: 78:0a:97:66:b1:b9:6b:11:e5:fa:09:d9:c1:68:77:7d:5b:1e: ca:50:27:98:f7:dc:f3:f6:a7:c9:f7:4d:60:19:62:94:ca:c8: 43:fa:f7:51:91:06:28:61:a3:73:ce:55:bc:da:f7:26:1e:4e: c0:41:73:e5:dc:c8:ea:d4:a7:d4:b1:9d:40:db:7e:77:04:47: 91:46:23:87:68:e9:59:bd:ac:75:2b:89:56:ce:18:f6:15:cb: a2:ac:f6:e0:8a:11:6b:78:22:21:0a:da:92:2e:4c:e5:16:87: cc:64:a7:d9:f1:d4:42:fe:5b:3f:98:25:49:67:98:bd:fc:b3: 39:37:d0:60:e8:33:4e:21:9e:ce:15:2e:d7:0f:49:7b:ed:68: 77:15:6a:8b:20:9c:27:73:28:7d:c8:cd:ce:d9:22:32:74:ca: 86:68:15:20:47:be:23:9f:54:75:27:06:6f:62:9e:7a:ee:e8: cf:2b:33:d5:03:f7:cd:be:88:02:7b:db:2c:c6:96:c2:ca:bb: 29:75:f6:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3NDkxMTAvBgNVBAUTKEYyRUQ5QjE3MEZBRTMwODgzMjQwMzk5OTUwQjZCQzk1 MzgwRTc0MUMwHhcNMjQxMTIyMTk0OTU5WhcNMjQxMTI5MTk0OTU5WjAYMRYwFAYD VQQDEw02NzQwZTA2Ny1iZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1ZnPTdi5NZ6f+tibB309qoaaCvV3d2/pZ4MNFvADAm2xdN1WyUETreHG91u WSZhRQYYZAARMKE4YULQqZLHBz+u6LPppPZ/LJk4MJhn2J4dSqTywpGt7jKiSczy T3pOj7f6b0R12RugWLdssiCGDg4szEu3oBP1UVAj2z2wQPDwY2f9xoKlkSjTOwB0 F+kQ0hFlku0aU3yMduQ79SJu2dglDr9LlVeF48qdKmHmKpNz++NOKChOUx4Vt415 srNqDZ/j6YabL4GfnwY31U2KFQIkSpsrIcVny0nnikvOSDCbGSmi2O8Knlt8ubLC mjgYRkLXc50nRMMiDzgITqDTOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE33WmdO 2LO4PKCYQSebXCqKjHT0MB8GA1UdIwQYMBaAFPLtmxcPrjCIMkA5mVC2vJU4DnQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDc0OS9BNjUyNjUwQTc5 NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1JZ3lRRG1aVUxhOGxUZ09k QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1MmJGdy11TUlneVFEbVpVTGE4bFRnT2RCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDc0OS9BNjUyNjUwQTc5NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1J Z3lRRG1aVUxhOGxUZ09kQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA6VKW53/uPiontP9joD3DkeGt+i/8NXKrlzvT6Y820rGOFxZnn0vr XtCottw9+42uyFsyKeN4CpdmsblrEeX6CdnBaHd9Wx7KUCeY99zz9qfJ901gGWKU yshD+vdRkQYoYaNzzlW82vcmHk7AQXPl3Mjq1KfUsZ1A2353BEeRRiOHaOlZvax1 K4lWzhj2FcuirPbgihFreCIhCtqSLkzlFofMZKfZ8dRC/ls/mCVJZ5i9/LM5N9Bg 6DNOIZ7OFS7XD0l77Wh3FWqLIJwncyh9yM3O2SIydMqGaBUgR74jn1R1JwZvYp56 7ujPKzPVA/fNvogCe9ssxpbCyrspdfaY -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org