$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json) Hash identifier: pW8d2JuNN26Lb8OR6W/FEBA3q+heLepr8tJtSS+EGaQ= Subject key identifier: F2:65:8A:F8:C3:10:2C:56:71:59:73:CD:E7:2D:A5:7E:35:1C:59:DA Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 0771 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft Manifest number: 075F Signing time: Wed 20 Nov 2024 21:03:08 +0000 Manifest this update: Wed 20 Nov 2024 21:03:08 +0000 Manifest next update: Wed 27 Nov 2024 21:03:08 +0000 Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: YygyTue1WgsRN1IMnojCD9u1oIPb44zS3oySfc4HB2w=) 2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: VwKaIz3U6aDghRoNhWv7S/G0XuOUWwKqRpkvmSggRD4=) 3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: KGmpX6V6GwHwuicQlQLq7ntPEMjkSVAxnjSlxc3wQ2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1905 (0x771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: Nov 20 21:03:08 2024 GMT Not After : Nov 27 21:03:08 2024 GMT Subject: CN=673e4e8c-9ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4e:30:3f:59:76:55:3d:9d:2b:e7:0c:b2:4d: 8f:c1:0a:e8:a8:c1:a9:3e:d1:a5:41:a4:4d:e6:77: 02:ab:e8:63:b7:a0:a7:ba:fc:2b:fc:8e:63:30:a5: 43:13:e3:4f:b8:12:b8:fe:41:30:6e:87:fd:70:c7: ce:ab:38:5f:a3:6f:86:bf:83:b3:e2:fb:53:12:69: 2b:10:f6:8b:ce:0d:5c:7d:c3:a5:55:d8:7c:11:85: 59:b8:e7:3e:9f:aa:ee:e1:19:3a:52:ac:ce:ef:39: 97:6e:c8:4d:06:91:85:38:89:cc:0a:ba:f1:71:48: bc:a6:48:ed:d0:cc:16:f7:f1:89:7d:f7:bf:3a:e5: d1:03:61:b9:46:14:1b:92:08:54:5c:74:20:79:bc: 4f:aa:13:1b:fc:65:12:71:09:12:f5:01:d4:d2:be: 67:8f:7c:01:3d:2c:01:91:11:45:22:08:49:c1:66: c3:da:94:ad:f8:3f:bd:8f:e5:b2:7b:f3:7d:16:df: 5f:80:fa:25:9c:b2:82:35:d7:3f:3d:58:f0:c6:7d: c6:e5:6d:02:7c:14:90:0a:b5:32:41:df:34:ab:a1: a6:95:8d:fa:58:a8:5b:29:d5:71:32:c4:ee:62:3a: 0e:7d:d8:8c:12:d7:c7:72:c6:21:78:09:ab:83:cc: d0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:65:8A:F8:C3:10:2C:56:71:59:73:CD:E7:2D:A5:7E:35:1C:59:DA X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:36:66:04:4f:e6:30:bf:d0:1e:26:cb:b8:b9:e0:e6:b9:fc: 2f:20:e0:0e:72:e8:f2:73:c3:03:ee:45:84:f0:3c:0a:b8:11: 9c:ad:46:fe:ff:7a:aa:66:0a:c3:ca:29:7b:55:bc:3e:6a:4e: 71:21:d7:fe:a4:92:da:62:2c:a7:26:83:43:85:11:e4:e8:a0: 03:6e:ab:5e:e3:b2:d2:07:3c:0a:cf:59:24:70:f7:25:64:47: 37:b3:d4:03:20:fa:54:42:12:21:1f:d2:cc:a1:a7:0d:6f:41: 95:ce:d3:03:9f:76:3f:e6:92:16:c2:8d:d3:2b:0d:0f:61:ca: 04:89:f7:45:9b:eb:af:ba:78:d1:28:fb:c9:ad:73:2c:70:cd: 5b:9b:09:ea:a5:34:03:be:23:3d:2b:8e:8f:b9:5d:c7:55:11: 6a:2a:3e:f6:89:3c:47:53:f8:8b:d5:e3:50:59:7f:3d:11:b1: b8:be:b6:ff:8d:06:53:a7:9d:e0:8e:a7:d8:50:57:84:a4:5f: 40:90:c0:0a:ca:1c:a9:31:16:6b:be:6d:8d:fc:95:18:d4:a2: 4d:9e:07:f5:18:86:2d:b3:58:80:d2:c5:f2:2d:15:b0:34:0c: df:99:5f:08:31:1c:8d:30:d2:df:54:2c:df:01:31:47:97:4c: 3b:ab:2a:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjQxMTIwMjEwMzA4WhcNMjQxMTI3MjEwMzA4WjAYMRYwFAYD VQQDEw02NzNlNGU4Yy05YWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk4wP1l2VT2dK+cMsk2PwQroqMGpPtGlQaRN5ncCq+hjt6Cnuvwr/I5jMKVD E+NPuBK4/kEwbof9cMfOqzhfo2+Gv4Oz4vtTEmkrEPaLzg1cfcOlVdh8EYVZuOc+ n6ru4Rk6UqzO7zmXbshNBpGFOInMCrrxcUi8pkjt0MwW9/GJffe/OuXRA2G5RhQb kghUXHQgebxPqhMb/GUScQkS9QHU0r5nj3wBPSwBkRFFIghJwWbD2pSt+D+9j+Wy e/N9Ft9fgPolnLKCNdc/PVjwxn3G5W0CfBSQCrUyQd80q6GmlY36WKhbKdVxMsTu YjoOfdiMEtfHcsYheAmrg8zQWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJlivjD ECxWcVlzzectpX41HFnaMB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T N2h5SGFqSVdjZUhXd3F1YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4NmYET+Ywv9AeJsu4ueDmufwvIOAOcujyc8MD7kWE8DwKuBGcrUb+ /3qqZgrDyil7Vbw+ak5xIdf+pJLaYiynJoNDhRHk6KADbqte47LSBzwKz1kkcPcl ZEc3s9QDIPpUQhIhH9LMoacNb0GVztMDn3Y/5pIWwo3TKw0PYcoEifdFm+uvunjR KPvJrXMscM1bmwnqpTQDviM9K46PuV3HVRFqKj72iTxHU/iL1eNQWX89EbG4vrb/ jQZTp53gjqfYUFeEpF9AkMAKyhypMRZrvm2N/JUY1KJNngf1GIYts1iA0sXyLRWw NAzfmV8IMRyNMNLfVCzfATFHl0w7qyqP -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:46 2024 by rpki-client on console-fra.rpki-client.org