$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json) Hash identifier: Sm70GvuYMEfYGBzZAeeXDNxwzbPlloAwMmpGPqKqK3A= Subject key identifier: 41:84:BF:49:4C:0E:2B:5B:3D:AF:0C:94:F1:98:97:2F:61:50:17:B8 Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft Manifest number: 0435 Signing time: Wed 20 Nov 2024 23:51:18 +0000 Manifest this update: Wed 20 Nov 2024 23:51:18 +0000 Manifest next update: Wed 27 Nov 2024 23:51:18 +0000 Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: jGy4T1p2PwrecovjhQngtoUfy5wXfyvrcP+4IucjDwY=) 2: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: NFITE7TJAb/KXxBkyjqQoKIW0rgE3xHfQ2EjzFnf43U=) 3: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: zzgWG6q6KItbF0m0zrC3rt7sfg/sytV8ZrJ1Qdcqn+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Validity Not Before: Nov 20 23:51:18 2024 GMT Not After : Nov 27 23:51:18 2024 GMT Subject: CN=673e75f6-41eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:68:ac:aa:0d:eb:70:a7:e1:22:de:e6:3e: ad:e4:1b:62:67:08:94:c1:2b:09:1c:cd:65:dc:92: 67:f0:68:4d:26:6d:ec:44:36:92:4a:c0:ef:6a:23: d9:91:92:13:96:72:fa:18:cd:cf:32:c8:68:82:af: b7:a4:57:c8:55:1a:96:7e:17:0a:e3:29:c1:a0:60: f4:5c:0a:63:a5:b5:8c:be:ea:91:60:46:90:91:76: 4e:3e:2c:78:53:f9:e9:66:18:44:4e:af:4a:7c:c2: 98:bd:73:cb:4c:a9:cf:4d:df:e9:65:74:d5:af:c8: 7b:32:d6:f5:2c:e1:b0:a8:e2:49:2d:34:23:32:48: ac:59:12:39:bc:57:97:5f:f1:75:fa:dc:59:63:58: 46:7a:ff:cc:0a:98:78:1f:18:6a:6e:05:93:4f:2a: 8a:af:f9:b1:f5:d1:91:c8:1e:f7:c5:13:95:af:49: c3:d3:47:87:00:f7:f5:d5:22:6e:c2:7e:db:d8:0c: 1d:a7:a6:10:94:f5:75:64:25:0e:bc:1f:b9:ea:79: 93:32:18:0a:a1:88:34:ac:f7:a7:1e:59:8c:21:af: 22:53:1c:c5:33:28:b0:60:1d:7b:08:52:a1:7a:b2: 3a:54:8f:4a:91:0a:b5:2b:87:8a:3c:98:f0:35:f0: 28:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:84:BF:49:4C:0E:2B:5B:3D:AF:0C:94:F1:98:97:2F:61:50:17:B8 X509v3 Authority Key Identifier: keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:15:ee:49:6b:31:6d:53:33:aa:90:3c:b4:5d:e9:f4:17:da: 57:31:3f:48:2a:c5:69:e2:1b:93:a9:04:ec:07:45:dc:4f:c7: 92:d1:c7:5c:e7:41:03:48:01:40:9e:d9:1d:dc:8f:44:a7:a6: c3:ff:82:48:d7:4f:b5:85:e0:16:de:ec:63:af:73:b0:4f:80: 45:5a:1c:92:87:a9:98:2c:ec:14:0f:d0:0a:e1:d5:0b:e9:66: 2e:df:65:aa:2f:3c:db:71:fb:94:59:c0:a0:8c:a8:e9:27:bd: f2:58:0b:57:fb:c0:b8:36:c3:3b:9f:6f:e4:aa:ad:2c:d4:72: b1:ea:b4:d2:42:5f:c5:d0:5f:89:94:f5:19:bd:81:37:20:98: 16:59:f8:18:4f:c8:8d:41:b8:c1:43:a3:07:93:71:48:4b:37: d7:fa:c0:a2:d9:c2:65:1c:72:98:0c:84:7b:4b:5a:5c:35:a1: cc:b0:db:8b:75:fd:41:a7:71:1b:2b:d9:e0:3c:dc:3e:fc:51: ce:6a:99:d4:33:c4:32:b4:24:64:c6:89:2b:a4:84:19:a4:e5: 58:21:c7:30:98:25:02:c4:90:df:33:43:bf:2b:2e:eb:10:84: 8d:c6:f4:99:cb:80:9f:88:11:e5:b5:27:aa:37:74:4d:15:2e: 38:54:f7:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy MDZCQUM2MjYwHhcNMjQxMTIwMjM1MTE4WhcNMjQxMTI3MjM1MTE4WjAYMRYwFAYD VQQDEw02NzNlNzVmNi00MWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AZorKoN63Cn4SLe5j6t5BtiZwiUwSsJHM1l3JJn8GhNJm3sRDaSSsDvaiPZ kZITlnL6GM3PMshogq+3pFfIVRqWfhcK4ynBoGD0XApjpbWMvuqRYEaQkXZOPix4 U/npZhhETq9KfMKYvXPLTKnPTd/pZXTVr8h7Mtb1LOGwqOJJLTQjMkisWRI5vFeX X/F1+txZY1hGev/MCph4HxhqbgWTTyqKr/mx9dGRyB73xROVr0nD00eHAPf11SJu wn7b2Awdp6YQlPV1ZCUOvB+56nmTMhgKoYg0rPenHlmMIa8iUxzFMyiwYB17CFKh erI6VI9KkQq1K4eKPJjwNfAoOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGEv0lM DitbPa8MlPGYly9hUBe4MB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4 aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QURDRS8wRjcyODFCQzNBRjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFa NnJRcFU3YThpbGNnYTZ4aVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfFe5JazFtUzOqkDy0Xen0F9pXMT9IKsVp4huTqQTsB0XcT8eS0cdc 50EDSAFAntkd3I9Ep6bD/4JI10+1heAW3uxjr3OwT4BFWhySh6mYLOwUD9AK4dUL 6WYu32WqLzzbcfuUWcCgjKjpJ73yWAtX+8C4NsM7n2/kqq0s1HKx6rTSQl/F0F+J lPUZvYE3IJgWWfgYT8iNQbjBQ6MHk3FISzfX+sCi2cJlHHKYDIR7S1pcNaHMsNuL df1Bp3EbK9ngPNw+/FHOapnUM8QytCRkxokrpIQZpOVYIccwmCUCxJDfM0O/Ky7r EISNxvSZy4CfiBHltSeqN3RNFS44VPc/ -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:57 2024 by rpki-client on console-fra.rpki-client.org