$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft File: eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json) Hash identifier: NNP+NSsowld01zPI/wGLkGizhI64lpyv7tcFGhlXsT0= Subject key identifier: E2:38:2D:F3:2F:99:19:D4:9F:C1:CD:26:25:BE:1B:8F:C6:9C:F2:02 Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A Certificate issuer: /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Certificate serial: 04AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft Manifest number: 04A8 Signing time: Fri 22 Nov 2024 23:30:19 +0000 Manifest this update: Fri 22 Nov 2024 23:30:18 +0000 Manifest next update: Fri 29 Nov 2024 23:30:18 +0000 Files and hashes: 1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: Ry2YtbmEa7WV9TFLscfDz8sRCgjBv2UMLihJxmr7BCU=) 2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: ZSVjtijV+Et42Y6SlGoz0UPyq2QiZ9xC7vE305M8da8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1197 (0x4ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A Validity Not Before: Nov 22 23:30:18 2024 GMT Not After : Nov 29 23:30:18 2024 GMT Subject: CN=6741140b-a3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:90:e0:5f:2e:1c:af:ec:8c:ee:60:79:0c: 64:e7:e5:03:74:b4:68:ab:08:80:59:7e:3f:63:19: 31:88:eb:5a:ee:12:b4:cd:be:68:6e:8f:b5:61:38: 58:81:d4:c0:f2:59:32:7b:76:aa:23:b4:e3:f7:4a: 15:4d:ac:8b:73:d5:e3:02:a8:f7:f0:4c:2a:a8:f5: dc:f2:40:8d:c3:5b:c4:7d:c4:ac:40:2e:67:5f:52: 94:21:6a:71:e5:21:5c:18:ba:cf:1e:d6:be:da:fb: 51:27:d0:f4:9e:7d:5b:00:11:53:67:23:cb:0b:f7: f4:5f:cd:c6:47:4a:ed:7c:ab:9b:b3:bd:49:81:93: 8c:a0:98:89:51:b9:1c:af:d3:ee:48:85:99:cc:d8: 10:97:4d:a2:fb:7c:08:f6:4e:8d:5b:07:75:57:1a: 66:87:6e:10:6a:98:e2:5d:37:59:3c:16:e5:55:2e: bf:05:8d:a1:79:a6:b6:cc:50:ac:8c:83:1d:61:36: cd:93:8e:06:f3:ff:40:72:18:95:31:bd:e1:f2:1c: 5b:bf:0f:95:af:bc:b1:8e:8a:ac:7e:10:30:22:1b: c8:c9:87:95:77:47:f1:d8:08:14:ab:a1:1f:a5:d6: 07:bb:53:c2:05:b7:f6:f6:62:58:00:df:ad:02:9d: 1f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:38:2D:F3:2F:99:19:D4:9F:C1:CD:26:25:BE:1B:8F:C6:9C:F2:02 X509v3 Authority Key Identifier: keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5e:b3:67:52:bd:88:2e:15:99:66:22:4d:f3:31:c7:a2:db: 37:09:59:4b:55:b4:ba:d9:15:a5:d1:74:1e:4d:d4:53:0b:cc: 43:2d:e9:40:03:d9:90:36:86:c8:be:2a:79:2f:ca:b8:7b:8e: 4f:39:b7:e0:9c:f3:ce:8e:af:66:2d:f2:ec:77:4d:6f:a3:cb: a5:82:0c:66:a4:88:db:63:9d:f3:5b:dc:76:df:b4:09:a5:26: db:69:00:19:4b:81:7d:17:f5:7f:90:30:d3:63:c3:17:21:c6: b2:2f:87:b2:1e:21:f3:2d:7b:33:3b:f4:57:04:1b:5b:59:61: 66:1c:4f:05:54:eb:49:06:29:79:78:58:0a:c6:08:23:1e:86: d1:fa:70:4d:b6:b2:1e:76:dc:67:40:84:23:88:4c:fd:d5:10: 7f:2a:e0:dd:48:4f:69:45:55:fa:a6:bd:64:f0:4d:40:40:20: b3:bd:c2:5a:ef:77:6f:e1:df:34:ba:3f:0f:74:7d:22:1e:bf: 4e:96:1b:7c:7c:42:9c:6f:5a:6e:40:d1:a0:81:09:f9:4c:63: 56:1c:46:2e:3e:85:00:45:1e:b4:d1:cf:20:4e:8d:c7:35:ed: c7:34:b9:a2:d1:81:5b:05:ab:b4:c1:ad:d1:cd:55:a7:58:ee: 6a:a8:f7:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU1NTIxMTAvBgNVBAUTKDc4MjkxMzZGNzlCN0Y4OUIzQ0Q0N0M1MzZGQzc0OTYy MzJCOUUxM0EwHhcNMjQxMTIyMjMzMDE4WhcNMjQxMTI5MjMzMDE4WjAYMRYwFAYD VQQDEw02NzQxMTQwYi1hM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwz6Q4F8uHK/sjO5geQxk5+UDdLRoqwiAWX4/YxkxiOta7hK0zb5obo+1YThY gdTA8lkye3aqI7Tj90oVTayLc9XjAqj38EwqqPXc8kCNw1vEfcSsQC5nX1KUIWpx 5SFcGLrPHta+2vtRJ9D0nn1bABFTZyPLC/f0X83GR0rtfKubs71JgZOMoJiJUbkc r9PuSIWZzNgQl02i+3wI9k6NWwd1Vxpmh24QapjiXTdZPBblVS6/BY2heaa2zFCs jIMdYTbNk44G8/9AchiVMb3h8hxbvw+Vr7yxjoqsfhAwIhvIyYeVd0fx2AgUq6Ef pdYHu1PCBbf29mJYAN+tAp0fEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOI4LfMv mRnUn8HNJiW+G4/GnPICMB8GA1UdIwQYMBaAFHgpE295t/ibPNR8U2/HSWIyueE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTU1Mi82RjYwRjc3QzBC Q0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1KczgxSHhUYjhkSllqSzU0 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VDa1RiM20zLUpzODFIeFRiOGRKWWpLNTRUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTU1Mi82RjYwRjc3QzBCQ0MxMUVDODU3MENEMUZDNEY5QUUwMi9lQ2tUYjNtMy1K czgxSHhUYjhkSllqSzU0VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaXrNnUr2ILhWZZiJN8zHHots3CVlLVbS62RWl0XQeTdRTC8xDLelA A9mQNobIvip5L8q4e45PObfgnPPOjq9mLfLsd01vo8ulggxmpIjbY53zW9x237QJ pSbbaQAZS4F9F/V/kDDTY8MXIcayL4eyHiHzLXszO/RXBBtbWWFmHE8FVOtJBil5 eFgKxggjHobR+nBNtrIedtxnQIQjiEz91RB/KuDdSE9pRVX6pr1k8E1AQCCzvcJa 73dv4d80uj8PdH0iHr9Olht8fEKcb1puQNGggQn5TGNWHEYuPoUARR600c8gTo3H Ne3HNLmi0YFbBau0wa3RzVWnWO5qqPco -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org