$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: r8aTBDtG4vi7dhUNZaxEbZl3hU11TFkVarmE/Yx4Fnc= Subject key identifier: 04:EF:41:D4:55:6D:9D:97:C5:15:CF:88:C7:BC:9A:7F:CE:72:A7:8A Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 0333 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 0325 Signing time: Thu 21 Nov 2024 00:44:39 +0000 Manifest this update: Thu 21 Nov 2024 00:44:39 +0000 Manifest next update: Thu 28 Nov 2024 00:44:39 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: 0k8DOntrlQrp2GQ7ZC2R33llsh/RTU5fPKfLEdYO3ho=) 2: 0A90D37481F111EE9004B21AC4F9AE02.roa (hash: 2I9IEN9zY1M9/iiiNpTlxWghriCahKvG+6nECUgG5Vk=) 3: F3EFD9AA8E8711EE90D68539C4F9AE02.roa (hash: scWbmVnpew3VrLWYiHJOJEyclO7ltcpuSiXsKrZEPPQ=) 4: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: /H7hEX3IRe+0Qg7bRz9490rS3U3jpmFmeZtXJb+9BUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 819 (0x333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Nov 21 00:44:39 2024 GMT Not After : Nov 28 00:44:39 2024 GMT Subject: CN=673e8277-88c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:8a:29:77:68:5b:5d:81:8d:86:90:0f:65: d4:c1:f6:98:f1:8f:4f:7b:ef:28:3d:51:27:41:34: 53:32:56:9e:ff:86:4c:f8:07:0b:21:5f:c2:a5:fa: 7b:3f:f1:a0:db:a0:54:3a:28:3b:df:33:a5:49:e6: da:10:30:fd:35:60:79:81:1b:3a:30:d0:03:3a:7a: 47:1e:0a:00:e0:90:a6:2e:d6:88:9b:d7:5c:22:7a: 51:6a:13:e4:21:8b:5b:f4:5a:79:d0:1c:7d:86:e8: fe:67:a9:98:97:a2:d5:dd:06:47:23:63:8c:78:62: e0:d3:45:b2:65:cf:04:16:d4:58:91:69:b6:43:11: dc:8f:e7:20:65:00:1b:3d:3a:d5:8d:b2:f8:26:2c: b4:ba:b3:3b:51:69:db:e8:ad:f5:2e:93:b1:2e:19: 1d:85:37:d2:84:65:4f:91:60:98:d1:c1:f2:6d:d7: 76:48:76:9f:4a:4a:08:3b:c3:51:32:fe:5d:90:6a: 79:5a:82:3b:0c:3b:2d:55:5d:03:5f:f7:e1:bd:9f: 2d:6d:6e:fa:e2:de:4d:4d:3e:c5:8f:1f:8d:53:b9: fb:fc:d9:4d:9c:3d:99:81:bc:8b:b5:c2:af:87:77: 95:82:21:77:5e:18:50:69:31:85:a6:b8:10:3e:56: bd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EF:41:D4:55:6D:9D:97:C5:15:CF:88:C7:BC:9A:7F:CE:72:A7:8A X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2a:99:27:ce:6a:f1:f3:1e:ac:84:a8:25:6f:f2:2a:4e:72: 5b:59:2a:f0:78:b8:c6:7c:08:a3:cd:fe:a2:80:1a:83:de:e4: 33:30:af:0b:d9:a8:c2:cb:1b:5f:00:65:29:8b:22:ca:9a:0c: 4d:b8:73:c3:34:69:d3:e1:44:16:50:6e:06:a4:b4:43:98:15: 81:54:56:a3:9a:8d:ac:83:73:54:a3:92:31:59:62:c4:e9:52: 87:d4:45:03:fd:a9:1b:5a:e9:e4:14:58:47:f0:f3:23:1f:51: ba:34:ed:fd:b7:4b:5c:ad:6a:41:a7:b7:ff:e2:76:36:c6:d9: 18:2d:c3:1f:14:54:ef:81:e0:a2:82:0c:06:da:37:7a:01:e8: d8:df:79:a5:1f:d2:3b:11:b3:af:a4:38:8d:01:ac:1c:5d:29: b2:ba:71:61:4e:1a:4d:d6:83:90:12:3a:80:9e:00:c9:4e:44: 8e:06:8e:2e:76:b9:93:40:6e:91:af:9c:42:cd:0b:bf:d0:85: 21:d1:49:9f:ff:f5:72:7d:3d:6b:cd:51:23:45:db:4c:0a:5d: 40:17:1f:da:9f:7b:18:7a:22:ed:5e:00:77:ff:18:00:46:be: 00:6f:d4:88:58:3c:be:70:2c:c7:5b:d6:e2:67:85:98:d3:ae: 5e:4a:e6:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjQxMTIxMDA0NDM5WhcNMjQxMTI4MDA0NDM5WjAYMRYwFAYD VQQDEw02NzNlODI3Ny04OGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPGKKXdoW12BjYaQD2XUwfaY8Y9Pe+8oPVEnQTRTMlae/4ZM+AcLIV/Cpfp7 P/Gg26BUOig73zOlSebaEDD9NWB5gRs6MNADOnpHHgoA4JCmLtaIm9dcInpRahPk IYtb9Fp50Bx9huj+Z6mYl6LV3QZHI2OMeGLg00WyZc8EFtRYkWm2QxHcj+cgZQAb PTrVjbL4Jiy0urM7UWnb6K31LpOxLhkdhTfShGVPkWCY0cHybdd2SHafSkoIO8NR Mv5dkGp5WoI7DDstVV0DX/fhvZ8tbW764t5NTT7Fjx+NU7n7/NlNnD2ZgbyLtcKv h3eVgiF3XhhQaTGFprgQPla9CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATvQdRV bZ2XxRXPiMe8mn/OcqeKMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaKpknzmrx8x6shKglb/IqTnJbWSrweLjGfAijzf6igBqD3uQzMK8L 2ajCyxtfAGUpiyLKmgxNuHPDNGnT4UQWUG4GpLRDmBWBVFajmo2sg3NUo5IxWWLE 6VKH1EUD/akbWunkFFhH8PMjH1G6NO39t0tcrWpBp7f/4nY2xtkYLcMfFFTvgeCi ggwG2jd6AejY33mlH9I7EbOvpDiNAawcXSmyunFhThpN1oOQEjqAngDJTkSOBo4u drmTQG6Rr5xCzQu/0IUh0Umf//VyfT1rzVEjRdtMCl1AFx/an3sYeiLtXgB3/xgA Rr4Ab9SIWDy+cCzHW9biZ4WY065eSuau -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:57 2024 by rpki-client on console-fra.rpki-client.org