$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft File: Aqo6dsRZSXsbRfJukESsxvLoBE8.mft (raw, json) Hash identifier: teCpYt6MJXa+ADd4QPeLxCKuxvtla0+a7umuEYrzAQM= Subject key identifier: 2C:D5:26:39:86:E2:75:22:41:93:78:7D:68:8E:3C:A6:DA:E8:A9:03 Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Certificate serial: 0312 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft Manifest number: 0301 Signing time: Sat 23 Nov 2024 00:50:22 +0000 Manifest this update: Sat 23 Nov 2024 00:50:22 +0000 Manifest next update: Sat 30 Nov 2024 00:50:22 +0000 Files and hashes: 1: Aqo6dsRZSXsbRfJukESsxvLoBE8.crl (hash: 19oIXS8kS+h6toH9k8fc6ZNpApR/Ei6NGn5yltPQhl4=) 2: 87F2D334F2D811EC8F663D52C4F9AE02.roa (hash: /NuTqSUBTeFJ9CyVzXuBIUWT5gpveEGDRyxNvLNEQIM=) 3: 5FFA5548B5A311EEA95C5732C4F9AE02.roa (hash: GQNcpw13U6rTwcbD2+x10d2Oo9BkdgjUG3Bpk2yiXDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F Validity Not Before: Nov 23 00:50:22 2024 GMT Not After : Nov 30 00:50:22 2024 GMT Subject: CN=674126ce-7b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:fa:3d:3d:99:30:53:44:24:0c:07:dc:1c: 96:c2:9b:84:cb:fd:93:28:f9:59:a6:27:d1:b0:99: 13:3f:8d:42:6a:a1:45:19:ae:49:f7:aa:35:ba:4f: 91:42:05:8a:32:88:9a:c8:3d:ea:1e:45:18:5e:52: 17:46:8e:57:82:de:ab:32:a3:df:f4:74:72:07:1c: ee:69:88:2d:7b:2a:9e:28:3b:50:1e:32:ef:d5:bb: b9:3a:f7:33:33:56:d7:68:7a:c2:d0:51:25:b5:dd: e7:66:31:21:83:a5:81:04:ca:88:10:5f:49:1f:b7: 14:a9:f4:0d:cc:32:13:9f:da:76:ca:6e:a5:5e:f9: 1f:fa:81:eb:97:1a:12:b3:f4:d0:8b:d4:19:af:97: d1:cd:20:41:1d:77:f3:01:23:12:a2:e4:4b:2c:06: ff:80:47:fc:9a:2a:fe:02:83:37:8c:4e:1b:8d:02: 3b:56:73:80:cd:d4:1d:b8:a8:d0:e1:50:fd:53:a0: 5f:40:84:b8:98:fa:fe:e4:bd:82:3f:b0:7e:06:e3: 87:c5:0f:9b:79:18:61:fe:a1:69:cb:e2:2b:f6:b2: 9d:c6:d8:69:c4:fe:64:4c:c7:cf:04:7b:0c:a1:31: 5b:7d:0b:18:86:2f:55:41:bc:c0:cf:fc:da:0d:11: de:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D5:26:39:86:E2:75:22:41:93:78:7D:68:8E:3C:A6:DA:E8:A9:03 X509v3 Authority Key Identifier: keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:5e:61:a6:80:e0:c1:5b:10:29:a1:bc:13:3d:88:5f:74:61: af:a8:2f:6a:eb:c5:8e:15:a4:02:2f:26:a4:50:d9:f6:ca:50: 4d:b7:b0:0e:33:e5:59:2f:07:d6:d4:13:50:0b:9a:ef:a1:8f: dd:db:e2:21:14:82:67:49:c1:ad:bb:94:de:df:41:48:51:9b: d4:e3:07:16:a6:b7:4a:11:1d:7d:9e:dc:4e:91:fa:b1:d6:ff: ca:5b:f8:2f:e5:79:eb:cc:99:25:53:81:37:d1:1e:56:fd:0a: 64:d5:54:2a:21:45:1c:41:a5:30:28:9e:db:5b:79:f5:1c:a1: 6f:c3:3f:bf:48:d2:90:6d:3f:37:90:1e:f5:af:8f:a6:ad:95: bc:fc:e7:85:4f:e4:cc:a0:46:cd:0a:6a:4e:e2:e8:eb:66:1e: da:a9:24:58:52:ab:dd:55:23:8a:7a:fe:75:74:dd:18:29:cd: 76:6f:fb:15:b3:47:35:95:07:30:a7:36:c6:fc:67:d7:7a:31: 5d:78:75:4a:f5:92:bd:7d:5d:32:af:a8:49:46:3c:6c:8e:12: e1:52:f7:17:6c:3d:ff:0e:70:f0:d6:9d:25:46:7a:ea:d6:33: 88:4b:b6:66:9a:37:21:80:9e:43:52:25:ad:18:56:d1:f7:52: ca:4b:f3:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1QkExMTAvBgNVBAUTKDAyQUEzQTc2QzQ1OTQ5N0IxQjQ1RjI2RTkwNDRBQ0M2 RjJFODA0NEYwHhcNMjQxMTIzMDA1MDIyWhcNMjQxMTMwMDA1MDIyWjAYMRYwFAYD VQQDEw02NzQxMjZjZS03Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsk76PT2ZMFNEJAwH3ByWwpuEy/2TKPlZpifRsJkTP41CaqFFGa5J96o1uk+R QgWKMoiayD3qHkUYXlIXRo5Xgt6rMqPf9HRyBxzuaYgteyqeKDtQHjLv1bu5Ovcz M1bXaHrC0FEltd3nZjEhg6WBBMqIEF9JH7cUqfQNzDITn9p2ym6lXvkf+oHrlxoS s/TQi9QZr5fRzSBBHXfzASMSouRLLAb/gEf8mir+AoM3jE4bjQI7VnOAzdQduKjQ 4VD9U6BfQIS4mPr+5L2CP7B+BuOHxQ+beRhh/qFpy+Ir9rKdxthpxP5kTMfPBHsM oTFbfQsYhi9VQbzAz/zaDRHe1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzVJjmG 4nUiQZN4fWiOPKba6KkDMB8GA1UdIwQYMBaAFAKqOnbEWUl7G0XybpBErMby6ARP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTVCQS80MzI2Q0JDMEI3 Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNYc2JSZkp1a0VTc3h2TG9C RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxbzZkc1JaU1hzYlJmSnVrRVNzeHZMb0JFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTVCQS80MzI2Q0JDMEI3Q0QxMUVDQUY2ODEzMzVDNEY5QUUwMi9BcW82ZHNSWlNY c2JSZkp1a0VTc3h2TG9CRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzXmGmgODBWxApobwTPYhfdGGvqC9q68WOFaQCLyakUNn2ylBNt7AO M+VZLwfW1BNQC5rvoY/d2+IhFIJnScGtu5Te30FIUZvU4wcWprdKER19ntxOkfqx 1v/KW/gv5XnrzJklU4E30R5W/Qpk1VQqIUUcQaUwKJ7bW3n1HKFvwz+/SNKQbT83 kB71r4+mrZW8/OeFT+TMoEbNCmpO4ujrZh7aqSRYUqvdVSOKev51dN0YKc12b/sV s0c1lQcwpzbG/GfXejFdeHVK9ZK9fV0yr6hJRjxsjhLhUvcXbD3/DnDw1p0lRnrq 1jOIS7ZmmjchgJ5DUiWtGFbR91LKS/Mr -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:44 2024 by rpki-client on console-fra.rpki-client.org