$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json) Hash identifier: RS4fzZJuVT28oN56++MUdsJ3duMWkz/4mTMbbLA1suw= Subject key identifier: CF:63:BC:F7:E6:DA:4B:19:03:DC:C8:05:95:38:A8:96:06:1C:98:90 Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Certificate serial: 0698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft Manifest number: 068B Signing time: Fri 22 Nov 2024 21:51:00 +0000 Manifest this update: Fri 22 Nov 2024 21:51:00 +0000 Manifest next update: Fri 29 Nov 2024 21:51:00 +0000 Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: 0noPiITg+TpE0OrRRQXU95kcnHYWw/LP3ucn4jKx+3g=) 2: 14D6A2A0EE3A11ED9BD27558C4F9AE02.roa (hash: cRW6xls82aNu9r4zlZg3aNPT8AuOMYQ8YEx35nnpvAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Validity Not Before: Nov 22 21:51:00 2024 GMT Not After : Nov 29 21:51:00 2024 GMT Subject: CN=6740fcc4-c25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:75:ad:61:45:dd:92:e5:e6:d6:03:c3:7b: 5a:e7:05:a7:5d:46:24:72:6e:25:49:1d:70:83:09: e1:d6:c6:0b:05:f6:12:b7:59:ce:68:0d:28:05:d8: 99:fc:f3:80:aa:d1:ac:e7:1a:23:3b:09:a7:9f:1e: 3e:b2:b6:60:03:28:6e:58:f2:31:dd:91:2a:81:8e: 6f:35:11:bd:83:48:2b:de:b7:db:d7:ef:11:38:a8: 52:cd:1a:ff:0e:a9:4e:e4:f2:6a:1f:fb:dd:3d:c5: bc:33:5e:3f:7c:0e:2e:52:76:dd:dc:21:44:90:4e: cb:3c:f5:e1:76:f6:1e:28:c9:60:fb:7c:c3:31:83: 8b:76:6b:25:d5:87:84:d1:f2:36:ab:56:c5:1d:e9: 60:33:87:8e:51:48:0b:a4:6a:ba:f1:e5:dc:9a:03: e3:51:98:f1:f6:74:a0:fe:d6:0f:73:56:7a:3b:cb: b1:5b:81:92:1a:f7:e1:ec:ab:82:01:49:43:d9:b3: 7e:52:f3:97:88:78:1a:52:9f:21:9e:15:1e:89:ae: e9:ef:14:3c:60:db:c9:7b:1c:2d:9d:9d:3a:18:69: d6:d7:fa:95:cf:0a:99:9b:90:9f:6a:68:73:5e:32: f3:59:d0:76:89:44:54:71:57:f5:2c:33:56:3d:2e: 5d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:63:BC:F7:E6:DA:4B:19:03:DC:C8:05:95:38:A8:96:06:1C:98:90 X509v3 Authority Key Identifier: keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:4e:19:4f:da:ae:be:32:c5:36:0d:a7:91:38:84:6d:89:f6: 92:b0:b4:7b:37:9e:67:2e:a1:4b:b3:9f:40:bd:62:11:d4:c0: 0c:76:22:c6:19:3f:b1:6e:a3:9a:51:48:96:b2:1e:e1:1b:f7: 6b:8d:d7:b4:a0:66:74:99:4c:bc:5d:ac:b8:25:c6:00:24:64: c6:6c:51:df:42:2f:df:2d:03:ff:30:d7:5c:62:69:52:cf:05: 8f:ac:29:43:0b:ab:79:9a:57:ac:b8:db:08:5c:80:e1:ac:48: ce:ed:0c:eb:f4:61:7b:33:b4:99:06:5c:30:c6:16:ad:3b:1a: 4c:2a:98:ca:fc:f1:91:99:29:50:f7:ab:dd:ea:00:bc:8d:2b: 21:68:2b:cf:8d:e0:f4:6e:a8:e9:b1:45:c5:b9:f0:02:f0:70: ad:de:c3:f7:fd:e2:66:21:2c:82:5b:5b:ed:08:18:ce:bd:67: 14:90:4c:3d:68:f3:2c:d9:00:04:2d:45:88:c9:14:7f:5b:23: e5:c8:da:03:91:92:54:69:6c:f0:e6:82:bf:c8:72:76:3c:ff: dd:31:9e:11:1c:23:a2:8b:13:2c:21:0b:8a:63:5d:70:86:2c: 18:a5:cc:48:e8:d5:e8:ce:8c:da:12:35:14:df:59:a0:a5:cd: 22:1f:8b:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0RkUxMTAvBgNVBAUTKDA3Q0Y4MTcwNEFEODcwMjMxRTFFRDgzN0JDM0I4MDY3 NUEwMjdDNjkwHhcNMjQxMTIyMjE1MTAwWhcNMjQxMTI5MjE1MTAwWjAYMRYwFAYD VQQDEw02NzQwZmNjNC1jMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAR1rWFF3ZLl5tYDw3ta5wWnXUYkcm4lSR1wgwnh1sYLBfYSt1nOaA0oBdiZ /POAqtGs5xojOwmnnx4+srZgAyhuWPIx3ZEqgY5vNRG9g0gr3rfb1+8ROKhSzRr/ DqlO5PJqH/vdPcW8M14/fA4uUnbd3CFEkE7LPPXhdvYeKMlg+3zDMYOLdmsl1YeE 0fI2q1bFHelgM4eOUUgLpGq68eXcmgPjUZjx9nSg/tYPc1Z6O8uxW4GSGvfh7KuC AUlD2bN+UvOXiHgaUp8hnhUeia7p7xQ8YNvJexwtnZ06GGnW1/qVzwqZm5Cfamhz XjLzWdB2iURUcVf1LDNWPS5d5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9jvPfm 2ksZA9zIBZU4qJYGHJiQMB8GA1UdIwQYMBaAFAfPgXBK2HAjHh7YN7w7gGdaAnxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTRGRS9GRUREQzBDMDUx MTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWNDTWVIdGczdkR1QVoxb0Nm R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4LUJjRXJZY0NNZUh0ZzN2RHVBWjFvQ2ZHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTRGRS9GRUREQzBDMDUxMTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWND TWVIdGczdkR1QVoxb0NmR2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVThlP2q6+MsU2DaeROIRtifaSsLR7N55nLqFLs59AvWIR1MAMdiLG GT+xbqOaUUiWsh7hG/drjde0oGZ0mUy8Xay4JcYAJGTGbFHfQi/fLQP/MNdcYmlS zwWPrClDC6t5mlesuNsIXIDhrEjO7Qzr9GF7M7SZBlwwxhatOxpMKpjK/PGRmSlQ 96vd6gC8jSshaCvPjeD0bqjpsUXFufAC8HCt3sP3/eJmISyCW1vtCBjOvWcUkEw9 aPMs2QAELUWIyRR/WyPlyNoDkZJUaWzw5oK/yHJ2PP/dMZ4RHCOiixMsIQuKY11w hiwYpcxI6NXozozaEjUU31mgpc0iH4ue -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:33 2024 by rpki-client on console-fra.rpki-client.org