$ rpki-client -vvf rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft File: b-8AlyoeLPhUsuqBXRBOPG72o6g.mft (raw, json) Hash identifier: kGVMCHKNNA6xT1nuM/ZHTiZ4rlEnwrnuuoFiP/po1K4= Subject key identifier: 64:3F:29:5E:47:86:D6:07:7D:E4:D7:DF:5C:46:4B:AD:B9:0D:DE:E1 Authority key identifier: 6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 Certificate issuer: /CN=A91A836A/serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Certificate serial: 045E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft Manifest number: 0455 Signing time: Fri 22 Nov 2024 23:45:20 +0000 Manifest this update: Fri 22 Nov 2024 23:45:20 +0000 Manifest next update: Fri 29 Nov 2024 23:45:20 +0000 Files and hashes: 1: b-8AlyoeLPhUsuqBXRBOPG72o6g.crl (hash: xtm/AMqmG2kRsx7l7IQ22cp4ZVTXFzhHtYFoJhfbL88=) 2: 8E80453E23EF11EF8A1CE76FC4F9AE02.roa (hash: FfWhc8CE7AXjM2zJsOdKxO4u+IWsNBnU54fEgTxpN1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1118 (0x45e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A836A/serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Validity Not Before: Nov 22 23:45:20 2024 GMT Not After : Nov 29 23:45:20 2024 GMT Subject: CN=67411790-481f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:21:c8:20:61:e1:9d:80:a2:e3:dc:09:b0:3c: 9c:3a:32:74:8a:a6:a2:99:cc:b8:59:f8:06:a1:4f: 55:64:84:5b:5f:fc:c6:d1:cd:66:30:e1:aa:28:9e: 8e:02:61:6b:a1:15:98:89:ff:8f:23:57:96:eb:db: d9:61:aa:bd:36:9e:1e:17:62:a8:c8:a0:a6:d1:f7: 0e:18:68:8c:05:52:c5:da:b9:ad:8e:cb:d3:1d:eb: 61:67:a6:40:41:78:70:ea:37:7f:22:46:25:1c:fe: 4c:36:6c:21:b8:64:9f:7e:c3:00:1f:df:cd:b1:e9: 1a:d0:cf:1b:fb:8a:05:9b:7e:11:d8:fb:1a:97:94: 69:36:ec:4e:da:0d:92:17:7b:b9:50:86:5b:7d:c1: a1:6a:33:9c:ee:a1:95:d5:2a:bd:9d:f0:3a:2a:22: 1e:49:e9:ce:57:bb:e9:7b:76:7a:62:1a:6c:c5:7e: 62:61:39:79:9d:50:93:24:31:5e:63:b5:fc:ad:78: a2:a3:ef:d0:88:32:55:48:cf:e6:cc:b4:19:0b:01: 16:d2:e6:72:4b:62:55:cd:6b:a5:2c:7c:49:be:ae: 40:b4:fd:30:29:f1:d6:58:16:b1:54:fc:03:ee:0b: 25:43:6c:b3:b0:8c:fa:6c:8e:46:cf:03:ed:60:d8: 47:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3F:29:5E:47:86:D6:07:7D:E4:D7:DF:5C:46:4B:AD:B9:0D:DE:E1 X509v3 Authority Key Identifier: keyid:6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cf:51:27:b4:db:f9:6c:ad:f5:40:01:92:f5:00:de:d8:40: 73:3d:45:45:54:fb:ae:8b:6b:04:77:d7:f5:6d:55:15:bd:a9: f9:d8:43:b0:c8:7f:9c:6a:9d:6e:4d:2a:33:0e:a9:6b:1f:62: 43:70:eb:61:09:c3:64:d1:c6:fb:06:5d:ca:d2:74:f7:be:d4: dd:6b:2f:d4:33:dc:e9:53:18:9a:51:8a:7a:55:5a:3c:e4:e5: 51:fc:27:f1:a3:a0:93:b9:f7:68:99:9e:bc:94:c1:3b:00:34: c2:4e:fc:e4:62:41:82:fe:a1:6c:ee:00:e7:b3:85:7a:9d:38: a5:cc:a8:ae:70:f7:4c:f8:c2:37:b6:ce:9f:ef:54:5c:c8:d2: 7e:01:f9:7e:89:70:25:87:ad:bd:ab:1e:b7:56:32:c7:35:46: 33:4d:34:4e:45:5d:5b:a7:49:82:cc:ab:50:be:2e:5d:49:c4: 37:42:e0:aa:f2:d0:2a:d9:ad:ad:02:4a:bd:28:95:b7:af:ca: a8:72:fa:85:7d:c4:bf:b3:da:47:bc:d7:0f:ef:c5:62:8c:ee: 8b:e0:0f:02:3e:85:d4:b0:48:a7:3a:a0:a0:b1:12:2d:0f:a1: 48:8b:fe:cf:06:2e:df:f4:c5:ce:00:88:f4:6e:25:ea:9c:83: 30:bc:7d:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzNkExMTAvBgNVBAUTKDZGRUYwMDk3MkExRTJDRjg1NEIyRUE4MTVEMTA0RTND NkVGNkEzQTgwHhcNMjQxMTIyMjM0NTIwWhcNMjQxMTI5MjM0NTIwWjAYMRYwFAYD VQQDEw02NzQxMTc5MC00ODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CHIIGHhnYCi49wJsDycOjJ0iqaimcy4WfgGoU9VZIRbX/zG0c1mMOGqKJ6O AmFroRWYif+PI1eW69vZYaq9Np4eF2KoyKCm0fcOGGiMBVLF2rmtjsvTHethZ6ZA QXhw6jd/IkYlHP5MNmwhuGSffsMAH9/Nseka0M8b+4oFm34R2Psal5RpNuxO2g2S F3u5UIZbfcGhajOc7qGV1Sq9nfA6KiIeSenOV7vpe3Z6YhpsxX5iYTl5nVCTJDFe Y7X8rXiio+/QiDJVSM/mzLQZCwEW0uZyS2JVzWulLHxJvq5AtP0wKfHWWBaxVPwD 7gslQ2yzsIz6bI5GzwPtYNhHmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQ/KV5H htYHfeTX31xGS625Dd7hMB8GA1UdIwQYMBaAFG/vAJcqHiz4VLLqgV0QTjxu9qOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODM2QS9DMUY0QUI3QzJG MzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQaFVzdXFCWFJCT1BHNzJv NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ItOEFseW9lTFBoVXN1cUJYUkJPUEc3Mm82Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODM2QS9DMUY0QUI3QzJGMzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQ aFVzdXFCWFJCT1BHNzJvNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdz1EntNv5bK31QAGS9QDe2EBzPUVFVPuui2sEd9f1bVUVvan52EOw yH+cap1uTSozDqlrH2JDcOthCcNk0cb7Bl3K0nT3vtTday/UM9zpUxiaUYp6VVo8 5OVR/Cfxo6CTufdomZ68lME7ADTCTvzkYkGC/qFs7gDns4V6nTilzKiucPdM+MI3 ts6f71RcyNJ+Afl+iXAlh629qx63VjLHNUYzTTRORV1bp0mCzKtQvi5dScQ3QuCq 8tAq2a2tAkq9KJW3r8qocvqFfcS/s9pHvNcP78VijO6L4A8CPoXUsEinOqCgsRIt D6FIi/7PBi7f9MXOAIj0biXqnIMwvH1q -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org