$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: amiX4Q3I9J1Ff4ruHTi6d9jg3xUhmwMhAEvr+DF3bwM= Subject key identifier: F8:82:1C:85:38:81:D2:CC:2C:FB:73:60:5C:E9:57:45:BB:7B:40:BE Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 0248 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 0245 Signing time: Thu 21 Nov 2024 01:19:42 +0000 Manifest this update: Thu 21 Nov 2024 01:19:41 +0000 Manifest next update: Thu 28 Nov 2024 01:19:41 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: dfRQWD4CvjzIl9Ma/lPueE1+fiR5GGdv3qIppySECIg=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: V8vWxpZQHTe4bEgYXHGNOT4WbmjvJ2CQz2pLr1HqlCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 584 (0x248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: Nov 21 01:19:41 2024 GMT Not After : Nov 28 01:19:41 2024 GMT Subject: CN=673e8aad-c42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:98:26:0b:06:c9:e6:c6:f2:c5:fb:98:0f: 8f:88:61:1e:e1:36:f1:db:29:00:ea:80:6e:69:71: e5:83:8f:cb:75:28:66:71:20:e3:9c:19:c8:c3:bc: 11:a5:02:93:92:ae:f0:ec:ec:d4:88:69:a6:b1:cf: 6f:ac:80:14:99:2a:3a:9c:19:c3:d9:75:07:50:d0: 5c:23:0e:d9:d9:a9:6f:18:40:e8:3c:0a:b4:5c:a0: bc:a1:2a:ba:84:ec:36:3f:a3:81:08:30:c1:94:89: 9c:a0:8b:93:ad:0e:c3:d0:8e:46:88:18:11:e1:3d: 2b:c4:a8:1e:8d:1e:c0:1e:e9:99:16:82:b0:86:be: 82:d3:90:19:29:98:a2:44:a0:a4:38:5b:d5:3e:37: 2d:c7:b1:50:d5:45:fc:a4:02:95:6d:7b:af:6e:73: 53:1c:3b:01:61:f8:f9:c6:e2:9a:15:61:95:56:90: f5:ec:f3:ed:00:f5:82:0f:98:84:3b:fd:cd:95:de: 50:19:fc:16:0a:df:bc:75:7d:04:36:d1:69:11:75: 60:74:36:a1:a1:d0:54:1d:7c:01:32:33:9e:60:ed: 4f:c9:6b:8f:73:9b:8e:28:40:be:5d:00:d6:29:f2: 49:ff:f3:87:02:90:45:fd:b5:27:db:2a:3f:16:05: 33:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:82:1C:85:38:81:D2:CC:2C:FB:73:60:5C:E9:57:45:BB:7B:40:BE X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ed:95:fa:cb:db:cf:92:d6:bc:0b:aa:c3:b3:76:82:60:38: b4:df:39:67:c4:36:f5:90:0f:6f:51:81:31:b5:e1:3a:37:ce: d5:a7:df:90:42:b5:00:4c:28:0a:38:f9:6e:1c:15:c9:03:97: 6b:94:11:35:b6:95:9e:0c:8e:d1:70:8a:76:8a:77:9f:8c:06: a0:b9:20:8f:d5:42:06:e6:bb:3f:63:84:1d:de:83:10:ad:3d: 2b:bc:dd:12:57:23:e4:5f:40:1e:9c:6b:72:b2:ed:ea:bd:9b: c7:fb:88:27:99:4c:1c:3c:30:b8:73:99:85:c7:d0:70:9a:a8: aa:a6:fd:a9:b6:cf:15:9e:92:57:4c:cf:bb:98:83:21:85:e1: 40:ae:45:1e:ad:3f:69:7e:f1:4d:98:1c:83:91:1b:d0:7a:d6: b9:3e:cf:df:c0:16:50:5f:bb:3d:5d:b6:bf:92:31:a0:db:9c: e3:34:69:30:97:91:d4:f2:f2:a4:67:cc:bf:ff:6b:69:d2:22: c0:e7:9a:cb:55:f5:ad:f2:da:d5:6c:82:a3:a8:05:7f:91:71: c1:39:6f:58:4f:bf:c9:69:6d:50:f7:3d:c3:7f:ee:aa:cc:5e: 3a:4f:db:9b:ba:d7:9f:8a:da:8e:de:10:09:6d:72:1a:3d:b4: a3:a2:00:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjQxMTIxMDExOTQxWhcNMjQxMTI4MDExOTQxWjAYMRYwFAYD VQQDEw02NzNlOGFhZC1jNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLmYJgsGyebG8sX7mA+PiGEe4Tbx2ykA6oBuaXHlg4/LdShmcSDjnBnIw7wR pQKTkq7w7OzUiGmmsc9vrIAUmSo6nBnD2XUHUNBcIw7Z2alvGEDoPAq0XKC8oSq6 hOw2P6OBCDDBlImcoIuTrQ7D0I5GiBgR4T0rxKgejR7AHumZFoKwhr6C05AZKZii RKCkOFvVPjctx7FQ1UX8pAKVbXuvbnNTHDsBYfj5xuKaFWGVVpD17PPtAPWCD5iE O/3Nld5QGfwWCt+8dX0ENtFpEXVgdDahodBUHXwBMjOeYO1PyWuPc5uOKEC+XQDW KfJJ//OHApBF/bUn2yo/FgUzkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiCHIU4 gdLMLPtzYFzpV0W7e0C+MB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD7ZX6y9vPkta8C6rDs3aCYDi03zlnxDb1kA9vUYExteE6N87Vp9+Q QrUATCgKOPluHBXJA5drlBE1tpWeDI7RcIp2inefjAaguSCP1UIG5rs/Y4Qd3oMQ rT0rvN0SVyPkX0AenGtysu3qvZvH+4gnmUwcPDC4c5mFx9Bwmqiqpv2pts8VnpJX TM+7mIMhheFArkUerT9pfvFNmByDkRvQeta5Ps/fwBZQX7s9Xba/kjGg25zjNGkw l5HU8vKkZ8y//2tp0iLA55rLVfWt8trVbIKjqAV/kXHBOW9YT7/JaW1Q9z3Df+6q zF46T9ubutefitqO3hAJbXIaPbSjogCe -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:03 2024 by rpki-client on console-fra.rpki-client.org