$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: daMU4UbjY9fukdiONG+GHPB55RSFwQ4azyF+LT+1Vuk= Subject key identifier: 65:D3:06:A4:DA:1E:4B:63:98:32:D9:6D:BC:BD:B7:00:88:34:90:CF Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 0444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 0440 Signing time: Fri 22 Nov 2024 23:49:14 +0000 Manifest this update: Fri 22 Nov 2024 23:49:14 +0000 Manifest next update: Fri 29 Nov 2024 23:49:14 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: QmXOX9WRiU76qFONQM3NAXF2a90dJZnC71Jv1bOzhkg=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: 8D/20Uwr6gsdj74w8re/Pl0pD6S5jZ4kXrR8EA86scs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: Nov 22 23:49:14 2024 GMT Not After : Nov 29 23:49:14 2024 GMT Subject: CN=6741187a-fcf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6a:43:b6:c1:98:93:07:51:a1:ce:81:56:8a: 45:0f:ae:9b:9a:12:31:bd:01:5b:12:64:05:f0:76: 3b:c4:dc:80:cf:9c:d8:4b:c6:0f:98:14:94:f0:d0: 02:e8:59:1c:c6:b5:11:b2:5f:27:5e:7a:f0:33:f9: 07:bd:c5:34:75:00:2e:84:10:8e:7e:94:33:fc:b3: dd:ab:f8:69:86:6d:af:57:6e:3f:e5:0b:9a:68:d1: 25:c1:de:9a:1f:0a:3c:4d:65:35:0d:b6:03:75:9a: db:52:20:94:e5:a6:de:d7:04:48:72:fb:dd:1d:fc: 8e:94:19:9f:60:f7:97:ac:3d:27:eb:14:74:60:2a: eb:5d:90:0d:25:fe:58:e4:33:87:3c:65:96:93:0d: d0:ad:84:83:89:2f:40:e5:94:9c:dd:75:55:e2:59: 2f:8e:76:05:1b:4f:da:f3:39:b2:f5:8d:af:76:84: 7f:a1:86:e4:41:e2:43:d7:71:b2:75:1e:e7:e3:19: 24:1b:60:37:80:37:8d:db:cb:70:11:5d:c7:9f:58: 72:5d:d4:a2:b4:74:1d:4d:0f:7e:99:d0:bc:78:f6: b4:c0:e0:e5:b5:8a:7b:66:93:ca:fa:cc:ac:82:2a: 69:80:d2:4f:95:34:f9:8b:b1:c6:43:7e:72:20:a9: 94:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D3:06:A4:DA:1E:4B:63:98:32:D9:6D:BC:BD:B7:00:88:34:90:CF X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:6c:65:ff:be:50:33:f7:ad:34:7a:ff:c9:a9:2b:eb:3f:73: 76:bd:0d:ac:9d:21:42:51:c4:ec:c3:4b:65:e4:65:3f:09:6e: 9e:ab:07:e5:86:ca:a8:4b:c6:c4:35:e0:ea:45:be:b7:fb:3b: c9:4b:d9:e8:a4:09:92:10:c9:74:56:b4:e5:0f:fc:c9:75:c1: 48:3b:ea:a2:a4:fb:20:af:6f:08:91:69:16:41:9d:87:3f:d4: 78:05:63:98:ac:92:0d:ce:7e:97:07:aa:93:ad:f4:99:d7:84: c1:a2:fc:ef:4c:9a:64:0c:51:53:3d:ff:8f:50:c2:f1:bb:d0: 1f:a6:f0:c6:f3:10:97:64:4d:f0:23:96:ed:c7:02:c4:a1:f1: d3:0b:da:d5:31:e7:cc:0e:3b:b1:cd:b6:90:02:ed:86:ea:72: 3a:2e:8c:8f:44:d6:09:4a:ac:77:cd:1b:d7:44:33:a5:82:73: 6b:70:de:fa:70:6f:d3:cc:eb:04:71:4e:e6:3b:a2:86:29:cf: 84:b1:30:23:3b:e4:2b:99:50:97:72:39:a1:3d:d9:3a:a0:e7: 5e:69:2a:ce:96:e9:c3:60:e9:7a:7b:f3:92:da:a3:b1:f2:df: 3b:d3:87:c5:9d:15:59:8d:24:b9:91:27:d3:cf:5e:b8:db:18: f2:6c:84:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjQxMTIyMjM0OTE0WhcNMjQxMTI5MjM0OTE0WjAYMRYwFAYD VQQDEw02NzQxMTg3YS1mY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2pDtsGYkwdRoc6BVopFD66bmhIxvQFbEmQF8HY7xNyAz5zYS8YPmBSU8NAC 6FkcxrURsl8nXnrwM/kHvcU0dQAuhBCOfpQz/LPdq/hphm2vV24/5QuaaNElwd6a Hwo8TWU1DbYDdZrbUiCU5abe1wRIcvvdHfyOlBmfYPeXrD0n6xR0YCrrXZANJf5Y 5DOHPGWWkw3QrYSDiS9A5ZSc3XVV4lkvjnYFG0/a8zmy9Y2vdoR/oYbkQeJD13Gy dR7n4xkkG2A3gDeN28twEV3Hn1hyXdSitHQdTQ9+mdC8ePa0wODltYp7ZpPK+sys gippgNJPlTT5i7HGQ35yIKmUQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXTBqTa HktjmDLZbby9twCINJDPMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1bGX/vlAz9600ev/JqSvrP3N2vQ2snSFCUcTsw0tl5GU/CW6eqwfl hsqoS8bENeDqRb63+zvJS9nopAmSEMl0VrTlD/zJdcFIO+qipPsgr28IkWkWQZ2H P9R4BWOYrJINzn6XB6qTrfSZ14TBovzvTJpkDFFTPf+PUMLxu9AfpvDG8xCXZE3w I5btxwLEofHTC9rVMefMDjuxzbaQAu2G6nI6LoyPRNYJSqx3zRvXRDOlgnNrcN76 cG/TzOsEcU7mO6KGKc+EsTAjO+QrmVCXcjmhPdk6oOdeaSrOlunDYOl6e/OS2qOx 8t8704fFnRVZjSS5kSfTz1642xjybITK -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:37 2024 by rpki-client on console-fra.rpki-client.org