$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft File: fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json) Hash identifier: MBwfZJy1tXz4yGDjJTzdmGUDVX+A1542QwXiXDQs/e8= Subject key identifier: 1D:C0:23:44:29:65:C3:05:CC:AD:EC:85:0F:7E:90:28:F1:CD:19:25 Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 Certificate issuer: /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft Manifest number: 93 Signing time: Wed 20 Nov 2024 23:21:11 +0000 Manifest this update: Wed 20 Nov 2024 23:21:11 +0000 Manifest next update: Wed 27 Nov 2024 23:21:11 +0000 Files and hashes: 1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: pCjYNEpK0oOZXOfe0hhiRgquZ6wCHuTDhL0aPG/YlMU=) 2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: 7qAgqeHaZPQYvPPHuv1+My9lZgN4hj2uJJ26C3QxuHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2 Validity Not Before: Nov 20 23:21:11 2024 GMT Not After : Nov 27 23:21:11 2024 GMT Subject: CN=673e6ee7-e6b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e7:20:6a:3a:ec:4b:86:80:de:87:f6:61:88: e4:f0:48:7f:f5:65:92:cc:6a:98:b5:02:54:76:0b: d9:fb:eb:00:54:10:03:b5:25:04:18:df:5f:04:b1: bc:de:2a:4d:b9:e6:9c:f3:46:fa:b8:f0:4b:79:fc: 0c:2a:ad:75:4b:b2:55:d5:79:a1:9e:8b:50:c4:6c: 62:37:ee:48:a2:9c:2d:81:9c:27:d7:b6:e9:d8:41: 3d:7c:d6:50:46:7d:42:73:85:7e:c8:95:89:2a:fb: 57:d2:17:e5:e2:48:f6:06:32:a6:53:b6:c5:2b:9a: 6b:dd:e0:b6:6b:5d:a6:e7:49:a3:bc:99:81:e5:44: 80:aa:44:87:6e:62:7a:69:38:d9:b9:1e:e9:1f:c6: d2:58:39:ea:15:ef:23:d9:40:ef:76:ff:e8:a8:9e: 91:03:3d:27:a9:41:44:1c:9b:35:f0:07:f9:61:8b: 2d:f0:c0:8b:71:b4:bf:5a:72:20:06:fb:92:50:4f: eb:e3:8c:31:7c:cd:8b:49:c6:5b:b2:03:da:3f:9c: da:99:88:6f:fa:3a:6b:21:2f:8a:78:26:e7:9d:42: 91:0e:b7:64:01:38:02:eb:6b:2c:ea:42:f2:bc:c2: 3e:95:18:3c:a6:40:1c:a7:e1:d6:87:83:7a:8c:84: 22:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C0:23:44:29:65:C3:05:CC:AD:EC:85:0F:7E:90:28:F1:CD:19:25 X509v3 Authority Key Identifier: keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e7:86:51:1d:2a:37:5d:4b:c8:24:48:41:f8:cf:c9:4d:ab: 83:c6:48:7b:ca:22:cb:9a:e8:ef:f1:ac:5a:ae:49:e5:87:7c: b2:f6:14:46:54:74:ee:81:25:2d:06:d0:f8:af:03:12:eb:bb: 38:30:dc:9b:24:d9:75:cb:f4:7a:f4:e0:c3:c0:5c:cb:10:bb: 42:78:8a:4f:99:1b:f0:84:9d:59:70:43:97:86:2d:95:51:65: 0a:51:f5:4e:8d:15:c1:a5:b3:93:12:87:3a:bf:97:ce:25:48: c8:d6:01:8e:53:42:e3:59:a9:d8:1e:0b:d6:de:44:a6:14:a4: 07:2f:62:9d:b6:75:24:9b:3e:37:64:43:64:52:57:c1:7d:0d: 79:6a:8e:95:ab:c5:04:77:0a:96:8b:8f:04:bf:37:43:4e:e3: 9f:82:15:64:dc:d3:16:b3:30:17:fe:5c:f1:5e:bf:49:9e:6d: 95:77:b6:ba:fc:b8:32:02:5d:8b:d0:4e:83:80:87:85:07:e6: 4a:90:d4:4d:71:9b:8e:e7:63:bc:a0:6b:1f:37:85:07:49:1e: 1a:3e:e5:5e:4d:79:4a:3b:9e:f8:9a:26:f6:51:d7:bf:5e:e4: 47:39:e7:0b:99:5e:78:52:05:ea:37:57:8a:76:73:43:c0:19: 3a:dd:dd:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwNTYxMTAvBgNVBAUTKDdDMTk0RkVEQjhBNUM4Qzk3NkVCREVDODQ5M0RGM0Mz RjA4Q0M4RTIwHhcNMjQxMTIwMjMyMTExWhcNMjQxMTI3MjMyMTExWjAYMRYwFAYD VQQDEw02NzNlNmVlNy1lNmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+cgajrsS4aA3of2YYjk8Eh/9WWSzGqYtQJUdgvZ++sAVBADtSUEGN9fBLG8 3ipNueac80b6uPBLefwMKq11S7JV1XmhnotQxGxiN+5IopwtgZwn17bp2EE9fNZQ Rn1Cc4V+yJWJKvtX0hfl4kj2BjKmU7bFK5pr3eC2a12m50mjvJmB5USAqkSHbmJ6 aTjZuR7pH8bSWDnqFe8j2UDvdv/oqJ6RAz0nqUFEHJs18Af5YYst8MCLcbS/WnIg BvuSUE/r44wxfM2LScZbsgPaP5zamYhv+jprIS+KeCbnnUKRDrdkATgC62ss6kLy vMI+lRg8pkAcp+HWh4N6jIQiEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3AI0Qp ZcMFzK3shQ9+kCjxzRklMB8GA1UdIwQYMBaAFHwZT+24pcjJduveyEk988PwjMji MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni8wMDNFMTE1OEQ3 OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlNbDI2OTdJU1QzendfQ015 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZCbFA3YmlseU1sMjY5N0lTVDN6d19DTXlPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA1Ni8wMDNFMTE1OEQ3OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlN bDI2OTdJU1QzendfQ015T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd54ZRHSo3XUvIJEhB+M/JTauDxkh7yiLLmujv8axarknlh3yy9hRG VHTugSUtBtD4rwMS67s4MNybJNl1y/R69ODDwFzLELtCeIpPmRvwhJ1ZcEOXhi2V UWUKUfVOjRXBpbOTEoc6v5fOJUjI1gGOU0LjWanYHgvW3kSmFKQHL2KdtnUkmz43 ZENkUlfBfQ15ao6Vq8UEdwqWi48EvzdDTuOfghVk3NMWszAX/lzxXr9Jnm2Vd7a6 /LgyAl2L0E6DgIeFB+ZKkNRNcZuO52O8oGsfN4UHSR4aPuVeTXlKO574mib2Ude/ XuRHOecLmV54UgXqN1eKdnNDwBk63d1k -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:24 2024 by rpki-client on console-fra.rpki-client.org