$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft File: iEiqzfKVEwPnCY9BnYygBCKJDGk.mft (raw, json) Hash identifier: r1z8Sy51m2u4KQUDxJeozx/xNosu3ckiY2GRGswKuJE= Subject key identifier: 68:31:7A:84:0D:9F:DB:4B:39:31:37:AB:93:AA:3F:B6:3A:13:2A:71 Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft Manifest number: 14 Signing time: Sat 23 Nov 2024 06:02:52 +0000 Manifest this update: Sat 23 Nov 2024 06:02:51 +0000 Manifest next update: Sat 30 Nov 2024 06:02:51 +0000 Files and hashes: 1: iEiqzfKVEwPnCY9BnYygBCKJDGk.crl (hash: pm+Uj5HCsVdp0Zn64e95Kb8+W2xd9kwM2i8UL5BjgIE=) 2: 029310329B1911EFA0BD6470C4F9AE02.roa (hash: 4YkPQLkzJHjLhAS1xLyrGvD8ScRYsHoKof9XFhQiB/U=) 3: 07BAAB7C9B1611EFB5C28465C4F9AE02.roa (hash: rbz8foe2dtSyz0TizkW11a5dBxrihDXELagr4VmLtrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Validity Not Before: Nov 23 06:02:51 2024 GMT Not After : Nov 30 06:02:51 2024 GMT Subject: CN=6741700b-08bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cc:ab:18:72:36:1c:d5:70:51:25:94:ee:d8: 52:32:7a:83:cc:49:dd:51:89:b4:8c:97:a0:18:e8: 93:c8:6f:28:35:38:29:76:a5:ce:a1:b7:a0:a7:9f: f6:a0:19:60:f6:c4:c7:5b:5f:f6:e7:ee:8d:0f:b0: d7:fc:1d:df:ca:e1:fc:c4:f4:54:ae:26:91:1e:0c: 37:aa:83:0a:3a:50:d2:4b:fd:fb:72:ef:74:ab:b4: 26:42:00:d1:9a:22:75:13:79:b2:47:95:cb:c2:dc: a7:29:4c:a8:99:28:6a:03:71:f0:52:fa:b5:07:84: ad:9f:67:43:d0:e4:11:42:19:b7:5f:8e:5c:a1:d6: 18:0b:de:0d:cd:a7:b0:16:2e:c8:72:fb:c0:d9:84: c2:96:b5:5d:a4:e9:45:93:53:5d:76:6a:06:62:a6: fc:e1:9e:20:10:ca:17:69:77:36:aa:41:8f:84:04: 54:49:80:3b:b6:91:71:21:e3:a1:f9:d2:e1:e7:f8: d6:7f:b8:16:ea:20:f4:5e:db:21:54:3c:ca:8f:ff: c4:5c:a8:ab:6a:6b:5e:1c:96:f1:c0:3b:5e:87:9c: 91:fe:e0:61:58:74:19:b7:3d:7f:02:30:ea:da:b5: 0b:d8:8f:ca:c7:77:71:e1:4a:5a:7f:63:d4:c9:cb: a8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:31:7A:84:0D:9F:DB:4B:39:31:37:AB:93:AA:3F:B6:3A:13:2A:71 X509v3 Authority Key Identifier: keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:35:d7:00:da:ae:f3:37:8d:41:03:02:7a:19:56:44:88:45: c1:2b:67:7f:29:1a:37:53:90:e6:83:4d:d1:ce:00:f3:65:c7: af:9f:75:88:b4:ab:09:3a:82:90:3d:79:a6:ed:d7:64:b2:8f: 0b:34:e4:74:f9:18:f6:fb:5e:76:45:69:11:52:40:32:fd:60: e0:78:75:ae:46:fe:57:2e:da:04:e3:02:d7:9b:02:12:42:85: 75:de:cd:73:9e:13:a9:3f:4d:4f:d1:5a:1f:b4:a6:56:88:55: 63:0b:9d:18:a0:cf:4c:c4:d8:c3:40:4c:e6:c0:2f:df:c5:0e: d6:82:68:58:eb:77:08:83:00:27:b8:b9:e9:d4:65:97:a3:74: 0e:3a:e2:8f:20:94:50:de:23:5c:dd:24:cf:fa:49:f5:b2:f8: 5e:58:70:6f:e8:83:42:f8:2c:7e:90:00:d4:2f:06:d6:69:3b: aa:04:c0:e7:4c:40:63:a4:c4:a6:84:cd:18:ee:c9:58:06:da: e8:a0:48:d9:90:fa:db:9f:c8:9a:4a:63:1c:21:d7:2c:04:d3: 60:6e:4d:5d:17:59:df:62:91:ae:75:63:5f:16:52:a6:8b:99: 1b:c7:77:d2:a2:2e:e3:34:6c:81:79:9f:ea:82:02:8b:3e:f8: f0:06:53:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODA0NzExMC8GA1UEBRMoODg0OEFBQ0RGMjk1MTMwM0U3MDk4RjQxOUQ4Q0EwMDQy Mjg5MEM2OTAeFw0yNDExMjMwNjAyNTFaFw0yNDExMzAwNjAyNTFaMBgxFjAUBgNV BAMTDTY3NDE3MDBiLTA4YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZzKsYcjYc1XBRJZTu2FIyeoPMSd1RibSMl6AY6JPIbyg1OCl2pc6ht6Cnn/ag GWD2xMdbX/bn7o0PsNf8Hd/K4fzE9FSuJpEeDDeqgwo6UNJL/fty73SrtCZCANGa InUTebJHlcvC3KcpTKiZKGoDcfBS+rUHhK2fZ0PQ5BFCGbdfjlyh1hgL3g3Np7AW Lshy+8DZhMKWtV2k6UWTU112agZipvzhniAQyhdpdzaqQY+EBFRJgDu2kXEh46H5 0uHn+NZ/uBbqIPRe2yFUPMqP/8RcqKtqa14clvHAO16HnJH+4GFYdBm3PX8CMOra tQvYj8rHd3HhSlp/Y9TJy6ivAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaDF6hA2f 20s5MTerk6o/tjoTKnEwHwYDVR0jBBgwFoAUiEiqzfKVEwPnCY9BnYygBCKJDGkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MDQ3LzM0NEEwMUEyOUIx NTExRUY4NkVCMzc0NkM0RjlBRTAyL2lFaXF6ZktWRXdQbkNZOUJuWXlnQkNLSkRH ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUVpcXpmS1ZFd1BuQ1k5Qm5ZeWdCQ0tKREdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 MDQ3LzM0NEEwMUEyOUIxNTExRUY4NkVCMzc0NkM0RjlBRTAyL2lFaXF6ZktWRXdQ bkNZOUJuWXlnQkNLSkRHay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIc11wDarvM3jUEDAnoZVkSIRcErZ38pGjdTkOaDTdHOAPNlx6+fdYi0 qwk6gpA9eabt12Syjws05HT5GPb7XnZFaRFSQDL9YOB4da5G/lcu2gTjAtebAhJC hXXezXOeE6k/TU/RWh+0plaIVWMLnRigz0zE2MNATObAL9/FDtaCaFjrdwiDACe4 uenUZZejdA464o8glFDeI1zdJM/6SfWy+F5YcG/og0L4LH6QANQvBtZpO6oEwOdM QGOkxKaEzRjuyVgG2uigSNmQ+tufyJpKYxwh1ywE02BuTV0XWd9ika51Y18WUqaL mRvHd9KiLuM0bIF5n+qCAos++PAGU5w= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org