$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: a0Ms3HQGoWXMUHGzhqsPFxnAwn6QuIKo0jnjYBPrVN4= Subject key identifier: 57:C4:BA:29:D7:71:1D:98:B5:14:27:70:45:48:B6:F9:67:80:3C:83 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 02EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 02E2 Signing time: Mon 25 Nov 2024 00:43:40 +0000 Manifest this update: Mon 25 Nov 2024 00:43:40 +0000 Manifest next update: Mon 02 Dec 2024 00:43:40 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: FjQYY6QmzX3oPpjBmsc42kIHA7xHdRtYobdnv+/dDeY=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: VA6DOr5reCVDmdW7e6+yczGsK4jaqOhoIdkvGeDybRU=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: o+InfXL4ukjFr34bbrRuhamkpyzK3H/+DY8jO61Lmc0=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: vtKO3SjXmvH9dx82EC9zDXe8Vmhi92GTEywUdw7xySE=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: PESjMQOAZB7rvOiAhEgdB1/OLnkYT/S5AzMdHgU3c1g=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: YTVR1eRZmLQDmpmvp4FXUX1YjYSfdRBEsPsmW02Am8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Nov 25 00:43:40 2024 GMT Not After : Dec 2 00:43:40 2024 GMT Subject: CN=6743c83c-e369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d8:e9:ca:a0:c3:de:41:01:95:72:3b:d3:7f: b0:1f:83:22:4b:2d:1b:9b:5c:54:72:2b:8b:8a:b9: ab:e5:32:cc:87:84:36:66:2b:df:a7:72:91:7c:8e: 89:4c:ab:67:4e:78:0c:fd:b6:c4:47:9b:6e:41:9a: 71:c3:27:3a:93:f6:0b:c0:fa:23:dc:38:25:d2:bd: 5f:d0:e2:d4:2a:8e:eb:0f:cd:8c:21:6f:57:f9:e9: 64:2b:18:5f:4c:73:1a:22:43:56:86:db:47:dc:bd: ec:11:87:da:0b:13:b9:49:42:8c:1d:c1:85:3f:46: 51:11:be:12:ed:8e:6c:3a:ba:79:f7:bb:71:fd:ea: c1:42:a6:65:de:d9:5f:7c:bb:1a:4c:d1:3d:77:68: 3c:1f:ee:ef:c5:8c:f0:cc:83:be:91:9c:29:f7:fe: ea:fc:bf:7a:b9:8c:10:17:36:65:3d:15:cc:01:02: 32:26:be:89:4b:bc:f4:fd:27:2e:97:5b:f3:28:4b: 70:c7:3e:23:30:e4:5e:63:09:3f:29:67:71:9a:83: 99:42:be:32:3f:d9:a8:2e:9f:a7:af:4d:a3:98:fc: b5:64:28:c6:48:c9:63:c0:3e:5d:60:48:27:6d:45: 1a:fb:fb:1c:49:b3:eb:55:6e:80:6b:32:dc:f2:84: 34:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C4:BA:29:D7:71:1D:98:B5:14:27:70:45:48:B6:F9:67:80:3C:83 X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:3f:80:d9:46:3d:ed:43:3a:6d:af:e4:98:95:b4:13:e3:ec: dd:b2:4e:73:03:10:72:cf:78:c9:e2:fc:88:13:65:51:68:ca: 6c:0d:80:03:c0:3c:23:b9:2f:e8:19:a3:97:fb:08:db:ab:6d: 85:01:5f:b9:ec:f9:ea:23:1d:4c:f2:c0:40:12:96:02:f0:b9: 8d:ed:59:9a:78:88:a0:e9:d1:66:b6:45:ff:d9:c1:83:06:a9: 9b:de:1a:d9:ec:5e:69:b3:ef:77:1d:9c:f7:1a:c5:de:92:e3: 88:c1:bf:79:e7:5f:e3:68:ad:a5:16:a3:98:50:48:cf:2d:58: 5d:d8:67:7b:08:e0:7f:24:4b:75:0f:0b:19:94:44:e4:60:b4: 94:a9:1d:30:5d:e6:16:9e:45:7c:d6:95:30:f4:ac:a0:43:d3: 9f:dc:e1:88:74:f6:2e:1f:8a:68:ea:ca:88:99:74:cd:4c:f5: 99:c4:ff:a6:56:a5:b9:f8:09:b9:2b:64:00:d6:d8:44:f2:74: dd:05:7a:9d:51:20:2d:0c:c5:de:f4:71:15:dc:e5:23:98:81: 4a:34:d5:3f:51:b0:e9:14:65:52:a7:91:7a:52:2b:fd:4b:b2: dc:9c:0a:4b:0e:5a:e9:e1:b5:0e:2d:fd:e2:64:0d:bd:5b:ba: ac:d3:05:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjQxMTI1MDA0MzQwWhcNMjQxMjAyMDA0MzQwWjAYMRYwFAYD VQQDEw02NzQzYzgzYy1lMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNjpyqDD3kEBlXI703+wH4MiSy0bm1xUciuLirmr5TLMh4Q2Zivfp3KRfI6J TKtnTngM/bbER5tuQZpxwyc6k/YLwPoj3Dgl0r1f0OLUKo7rD82MIW9X+elkKxhf THMaIkNWhttH3L3sEYfaCxO5SUKMHcGFP0ZREb4S7Y5sOrp597tx/erBQqZl3tlf fLsaTNE9d2g8H+7vxYzwzIO+kZwp9/7q/L96uYwQFzZlPRXMAQIyJr6JS7z0/Scu l1vzKEtwxz4jMOReYwk/KWdxmoOZQr4yP9moLp+nr02jmPy1ZCjGSMljwD5dYEgn bUUa+/scSbPrVW6AazLc8oQ0sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfEuinX cR2YtRQncEVItvlngDyDMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATP4DZRj3tQzptr+SYlbQT4+zdsk5zAxByz3jJ4vyIE2VRaMpsDYAD wDwjuS/oGaOX+wjbq22FAV+57PnqIx1M8sBAEpYC8LmN7VmaeIig6dFmtkX/2cGD Bqmb3hrZ7F5ps+93HZz3GsXekuOIwb9551/jaK2lFqOYUEjPLVhd2Gd7COB/JEt1 DwsZlETkYLSUqR0wXeYWnkV81pUw9KygQ9Of3OGIdPYuH4po6sqImXTNTPWZxP+m VqW5+Am5K2QA1thE8nTdBXqdUSAtDMXe9HEV3OUjmIFKNNU/UbDpFGVSp5F6Uiv9 S7LcnApLDlrp4bUOLf3iZA29W7qs0wVX -----END CERTIFICATE-----Generated at Mon Nov 25 03:00:27 2024 by rpki-client on console-fra.rpki-client.org