$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft File: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft (raw, json) Hash identifier: 5pHS0O+H4h9h0jQgGFBj8SWv0k8kKQUTlU7aQ79cZwY= Subject key identifier: AF:23:C0:A8:3A:90:9D:F6:E9:7E:46:B2:B9:BD:A7:66:90:FE:62:60 Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Certificate serial: 0F4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft Manifest number: 0F43 Signing time: Wed 20 Nov 2024 17:31:08 +0000 Manifest this update: Wed 20 Nov 2024 17:31:08 +0000 Manifest next update: Wed 27 Nov 2024 17:31:08 +0000 Files and hashes: 1: 1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl (hash: Fvwi/li5i/eU1zTY1ll/pIbSaomMDjW1xEKTUgrE2hQ=) 2: 682B76C05BB211E9BF474F16C4F9AE02.roa (hash: 4lBnHy42IrC+CuFwqVAzKyt4CMy0vA1UroTjFuzkrh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3915 (0xf4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Validity Not Before: Nov 20 17:31:08 2024 GMT Not After : Nov 27 17:31:08 2024 GMT Subject: CN=673e1cdc-8501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:8b:6d:3f:a3:9a:56:b7:8f:38:4c:53:a7: 6d:8a:08:b6:a6:39:74:4a:6a:c9:a2:27:13:02:8d: cc:06:90:ef:58:13:cc:cb:82:f8:90:33:ad:c0:15: dc:7a:c8:ff:b4:5b:d4:83:ac:58:4e:5e:04:b8:8c: d6:6e:43:d9:b9:a9:7e:28:83:c5:65:33:c4:69:b9: 70:74:5e:b8:a0:74:a0:8b:e0:e2:f5:fb:73:73:e6: 18:37:55:98:ae:fd:c5:42:56:5f:7f:f1:5b:b0:37: e1:d1:70:59:c1:df:b6:c7:c0:95:a1:62:ea:76:bd: 03:48:b1:12:d3:6b:f4:4e:e7:02:69:81:14:9c:22: 8c:ff:01:78:50:c9:3f:4e:42:2d:38:18:91:23:fa: 51:02:32:e6:11:79:ca:33:38:9d:c7:27:5b:d9:05: 76:d3:42:ac:b8:98:9b:c9:1d:e6:d6:b5:5a:66:c4: 6e:e8:8d:21:9e:8b:f8:9e:3f:20:78:31:1d:40:6d: 67:93:36:57:cd:03:39:85:2e:e3:c1:ea:3b:bc:15: 39:13:fe:e8:8b:6e:f3:c0:e9:09:4e:a5:93:98:52: 19:b0:79:b9:8e:07:3a:3f:91:c3:de:db:3c:ba:fd: 1a:31:d5:a0:b0:f4:6d:ad:5f:bb:e7:24:83:bd:2b: 0d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:23:C0:A8:3A:90:9D:F6:E9:7E:46:B2:B9:BD:A7:66:90:FE:62:60 X509v3 Authority Key Identifier: keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:f9:2a:9e:e3:7f:05:8d:3f:fd:da:08:f2:48:16:64:83:5f: d9:94:89:53:06:18:67:f6:c1:fd:a2:5b:5a:aa:93:74:92:64: 1e:9f:62:12:57:3e:74:b1:7b:34:64:78:a8:7c:48:fc:3b:e9: aa:5d:1e:5c:43:9d:02:4a:65:b7:82:12:44:1b:04:88:54:d1: 5c:96:f5:bd:5d:b0:12:39:f1:d9:76:53:f8:c2:91:7c:27:02: ac:53:b1:70:03:f9:b2:3a:f2:b2:79:00:db:11:4f:c4:72:dd: 00:1f:dc:21:3a:f5:f2:56:d1:0f:76:15:87:11:3c:4d:48:74: d4:3f:89:92:52:17:a3:78:b9:21:44:23:ff:e5:f7:ea:16:8e: 7b:4d:88:02:f9:50:24:92:d0:fe:1e:a5:44:c2:0c:10:c4:30: f0:19:5d:66:4a:07:69:3e:3a:1e:30:85:1e:80:f4:17:3f:94: 3d:79:4d:4f:d1:58:0b:56:70:d1:fb:44:bb:62:62:18:a0:85: 86:35:b8:9a:d2:6d:86:98:3e:01:ee:28:bc:16:19:79:89:34: 3c:58:26:25:20:6c:7c:8b:7f:fa:22:d8:10:2e:15:fe:c8:cf: 7e:f1:8b:0f:d6:58:ad:5a:73:b2:8b:35:7c:b1:fa:44:f6:fc: ff:fd:67:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1 NkQzNDQyNTQwHhcNMjQxMTIwMTczMTA4WhcNMjQxMTI3MTczMTA4WjAYMRYwFAYD VQQDEw02NzNlMWNkYy04NTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveaLbT+jmla3jzhMU6dtigi2pjl0SmrJoicTAo3MBpDvWBPMy4L4kDOtwBXc esj/tFvUg6xYTl4EuIzWbkPZual+KIPFZTPEablwdF64oHSgi+Di9ftzc+YYN1WY rv3FQlZff/FbsDfh0XBZwd+2x8CVoWLqdr0DSLES02v0TucCaYEUnCKM/wF4UMk/ TkItOBiRI/pRAjLmEXnKMzidxydb2QV200KsuJibyR3m1rVaZsRu6I0hnov4nj8g eDEdQG1nkzZXzQM5hS7jweo7vBU5E/7oi27zwOkJTqWTmFIZsHm5jgc6P5HD3ts8 uv0aMdWgsPRtrV+75ySDvSsN2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8jwKg6 kJ326X5Gsrm9p2aQ/mJgMB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUUxNi8wRUFDRjgyQzVCQjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5W c1NXbUFzZEdhNXBXMDBRbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC++Sqe438FjT/92gjySBZkg1/ZlIlTBhhn9sH9oltaqpN0kmQen2IS Vz50sXs0ZHiofEj8O+mqXR5cQ50CSmW3ghJEGwSIVNFclvW9XbASOfHZdlP4wpF8 JwKsU7FwA/myOvKyeQDbEU/Ect0AH9whOvXyVtEPdhWHETxNSHTUP4mSUhejeLkh RCP/5ffqFo57TYgC+VAkktD+HqVEwgwQxDDwGV1mSgdpPjoeMIUegPQXP5Q9eU1P 0VgLVnDR+0S7YmIYoIWGNbia0m2GmD4B7ii8Fhl5iTQ8WCYlIGx8i3/6ItgQLhX+ yM9+8YsP1litWnOyizV8sfpE9vz//Wez -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:03 2024 by rpki-client on console-fra.rpki-client.org