$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json) Hash identifier: Z/eAV63/puFFBPHYm7KB9ELST4ocSnqfD91X2zrZ0ME= Subject key identifier: 08:85:0C:9D:AC:FC:37:10:59:B2:C0:50:BF:86:FB:4B:E7:6A:AA:5B Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft Manifest number: 01FE Signing time: Sat 23 Nov 2024 01:38:28 +0000 Manifest this update: Sat 23 Nov 2024 01:38:28 +0000 Manifest next update: Sat 30 Nov 2024 01:38:28 +0000 Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: L9t391i7Cwm+KJY791vBIBt+a7i1JE+x+XkcUfM5YZs=) 2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: Yrv7ZBN66aHo1fxboSYdyeMXxVo+vZh3rt3Di282sAw=) 3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: 4shhW+hfwKEr12lvGKCQFs6BqumTNDAweN+QTLEQJao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Validity Not Before: Nov 23 01:38:28 2024 GMT Not After : Nov 30 01:38:28 2024 GMT Subject: CN=67413214-44d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f3:37:3c:71:40:96:63:10:12:3c:a8:23:3d: 9f:d2:22:b3:27:73:ef:7f:66:37:80:4d:94:ac:16: a2:e8:1f:b9:cd:91:7a:2d:85:91:8f:e1:3d:d4:45: 38:2b:fa:20:4c:10:29:8f:36:06:79:f0:bd:97:04: f5:09:d7:ab:34:f6:d9:33:eb:09:e5:24:68:a6:bf: e2:2f:51:ae:7d:0e:6c:d4:7d:5a:86:be:5b:bc:9a: b6:bb:ae:13:95:b9:3b:7f:61:fa:d9:48:fa:a9:3e: 75:4b:7e:de:41:95:a5:c9:13:c9:25:50:a8:e3:60: 93:8a:6c:1e:a0:f8:2e:b1:fc:5d:ac:11:c3:7e:c7: 40:bb:e1:a8:fb:b4:3d:62:ac:72:81:48:fd:6c:bb: 25:be:d5:44:85:3d:18:89:14:3c:0d:a5:01:79:f8: 39:eb:bb:d5:39:59:0b:f7:78:4a:98:cf:49:9b:1a: 92:db:f1:05:72:95:b6:94:e4:f3:2b:36:e4:14:fe: 54:08:63:28:71:64:95:c2:35:4a:6d:5d:e1:a6:7b: 66:ca:54:6f:6a:11:2c:f3:e7:bb:4a:14:81:e2:eb: e3:42:a4:69:a4:26:6b:34:7b:60:7c:5d:14:9d:6b: 1b:4f:fb:70:e1:7f:bb:32:34:10:a9:f9:2a:6f:0b: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:85:0C:9D:AC:FC:37:10:59:B2:C0:50:BF:86:FB:4B:E7:6A:AA:5B X509v3 Authority Key Identifier: keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:4a:9d:63:68:fd:ba:d2:2f:7c:9f:b2:c0:5a:6d:c2:94:25: cf:8d:53:01:db:d1:90:75:9c:db:95:15:a6:77:16:9e:71:f2: 39:6a:e8:75:a3:6c:52:80:8b:01:9e:13:2e:30:a5:de:53:1a: d2:68:87:38:be:ff:ec:0d:44:22:e9:c8:5c:fd:fd:dc:f3:32: 23:39:7a:33:41:b9:29:5b:90:23:1c:e9:d0:13:72:55:3a:50: db:6d:ac:01:64:c1:0c:62:ef:57:ce:23:6b:52:ff:08:d9:2e: 8d:ae:57:c6:25:1b:34:29:6e:d4:73:21:b4:d3:54:13:bc:7c: 62:f3:f3:e2:17:50:03:4a:40:e4:6e:05:29:30:2d:72:39:52: bc:ed:44:d0:19:f4:1a:b1:0d:43:bf:8a:69:52:8b:8d:08:81: 44:1a:f1:e6:fe:19:53:b1:c3:38:eb:b4:d5:75:91:12:7c:eb: e2:f5:c2:e4:f6:1f:ab:2b:6e:42:7e:ab:c8:92:c9:de:3f:c9: 33:94:a0:f0:05:30:dd:12:a0:5d:0c:b6:ad:a1:f8:bd:7d:f1: f4:2e:b4:49:0c:66:3f:52:d8:20:1f:df:af:6e:93:3b:46:3c: 46:68:f7:8b:ed:ec:7a:3e:e5:68:16:58:db:24:6e:4a:e6:7d: ab:8e:ee:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFGOTUxMTAvBgNVBAUTKEQ2RjA2NzI0RDA5Njg3MDdFRDFERkFGREJCMjI1ODAy QjNEQUExOTQwHhcNMjQxMTIzMDEzODI4WhcNMjQxMTMwMDEzODI4WjAYMRYwFAYD VQQDEw02NzQxMzIxNC00NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/M3PHFAlmMQEjyoIz2f0iKzJ3Pvf2Y3gE2UrBai6B+5zZF6LYWRj+E91EU4 K/ogTBApjzYGefC9lwT1CderNPbZM+sJ5SRopr/iL1GufQ5s1H1ahr5bvJq2u64T lbk7f2H62Uj6qT51S37eQZWlyRPJJVCo42CTimweoPgusfxdrBHDfsdAu+Go+7Q9 YqxygUj9bLslvtVEhT0YiRQ8DaUBefg567vVOVkL93hKmM9JmxqS2/EFcpW2lOTz KzbkFP5UCGMocWSVwjVKbV3hpntmylRvahEs8+e7ShSB4uvjQqRppCZrNHtgfF0U nWsbT/tw4X+7MjQQqfkqbwusKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiFDJ2s /DcQWbLAUL+G+0vnaqpbMB8GA1UdIwQYMBaAFNbwZyTQlocH7R36/bsiWAKz2qGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUY5NS9GRjkzRUM3MjE5 NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3ZnRIZnI5dXlKWUFyUGFv WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2Qm5KTkNXaHdmdEhmcjl1eUpZQXJQYW9aUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUY5NS9GRjkzRUM3MjE5NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3 ZnRIZnI5dXlKWUFyUGFvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvSp1jaP260i98n7LAWm3ClCXPjVMB29GQdZzblRWmdxaecfI5auh1 o2xSgIsBnhMuMKXeUxrSaIc4vv/sDUQi6chc/f3c8zIjOXozQbkpW5AjHOnQE3JV OlDbbawBZMEMYu9XziNrUv8I2S6NrlfGJRs0KW7UcyG001QTvHxi8/PiF1ADSkDk bgUpMC1yOVK87UTQGfQasQ1Dv4ppUouNCIFEGvHm/hlTscM467TVdZESfOvi9cLk 9h+rK25CfqvIksneP8kzlKDwBTDdEqBdDLatofi9ffH0LrRJDGY/UtggH9+vbpM7 RjxGaPeL7ex6PuVoFljbJG5K5n2rju4B -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org