$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json) Hash identifier: 1I3uRCUxkE1YjB1BKWJo5axi+WiXIQoRsMi2aF44smI= Subject key identifier: 66:B5:B3:AE:40:DC:82:08:DD:5B:5A:52:11:1D:FB:80:2E:06:55:B8 Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 0729 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft Manifest number: 071F Signing time: Fri 22 Nov 2024 21:18:15 +0000 Manifest this update: Fri 22 Nov 2024 21:18:14 +0000 Manifest next update: Fri 29 Nov 2024 21:18:14 +0000 Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: mxPauwDilAvFJ8gdV2zElTX6xZehpjDMCCHUEuUBV8U=) 2: 1ACA9A7011BC11EBA0759F52C4F9AE02.roa (hash: 1/WmY9YBhKiu5MIvT1vmw+1SrQM0aVWoRuNlt6WnK0s=) 3: 1A0FD01411BC11EBA0759F52C4F9AE02.roa (hash: 0XN9EZ4o4OF/LsbCrndQVN6EKGwIuwGsOPBGXuiVcqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1833 (0x729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Nov 22 21:18:14 2024 GMT Not After : Nov 29 21:18:14 2024 GMT Subject: CN=6740f517-a8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:61:af:30:34:99:d9:fd:e2:a3:9b:f0:a9: bb:ce:10:e9:7f:42:b5:cc:ed:40:17:e4:76:90:74: fd:84:77:0a:67:d6:a3:6f:6b:63:be:d3:eb:2b:34: ea:91:d4:83:72:a7:ba:e0:c3:e0:aa:cd:ab:d8:c7: 28:c9:5e:ae:f8:9c:98:55:f3:e3:40:fe:cd:bb:4e: 22:d9:52:a3:e5:05:5f:5c:88:32:7f:f8:56:c6:fb: 9a:fb:69:e6:7e:87:50:72:3c:70:6a:3c:41:21:76: b3:f1:e3:42:38:02:7d:67:88:d4:e2:46:a2:d6:bc: a8:8a:03:ca:17:e0:ee:30:e0:b5:c9:dc:f9:6e:7f: b9:a4:5a:1e:cb:9c:1e:80:5a:0b:7f:ac:0f:69:04: 22:16:b4:f2:32:98:37:c7:3a:ff:0a:43:70:6d:cb: 8a:84:fd:d2:4c:d6:e1:9f:69:be:35:4b:f5:bc:f0: 45:65:e4:7d:26:aa:1a:b8:9e:7c:e2:b1:c9:1b:78: 52:5a:9a:86:d5:8e:67:63:a5:92:c6:17:24:eb:39: ba:f2:1e:5d:75:3a:95:6d:2b:45:75:cd:3f:91:cc: ff:e1:bf:2b:09:3e:a9:3b:45:c4:47:7d:12:4e:fa: c8:49:9f:0e:8d:51:50:34:5f:6d:fd:6f:84:63:ee: 7c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B5:B3:AE:40:DC:82:08:DD:5B:5A:52:11:1D:FB:80:2E:06:55:B8 X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:09:fd:f7:ba:e8:85:37:e8:22:44:7a:7a:73:3f:53:e8:d7: 21:5e:bd:f1:b3:ac:c6:21:2f:00:14:f0:07:23:20:e4:82:af: 1f:3e:e2:ee:37:3b:6a:92:ff:46:ec:85:df:d8:9d:9d:c0:d7: 33:c9:be:c0:87:3d:81:58:15:80:bf:cc:55:b8:dd:2e:7d:19: 21:65:6b:a9:1a:3b:52:f2:59:10:2f:64:5c:22:f4:c0:7e:54: 1b:99:4c:d5:cb:ca:0a:b3:0a:2c:6f:fd:14:bf:5c:bd:1a:63: 7a:1e:3a:bf:d1:07:99:24:57:d0:22:88:b0:8f:09:09:57:b5: 60:b2:de:29:3e:b3:bd:ff:f3:ca:11:10:1b:e1:f4:e6:06:15: 7e:26:b6:78:74:2d:b7:c9:4f:d5:3a:d6:97:aa:d3:37:ff:53: 01:df:db:3d:74:14:97:1e:58:38:bd:fb:c7:a7:e6:f4:45:51: ba:7e:00:df:1c:86:bf:f7:65:4a:a0:3c:37:ad:35:d4:99:2c: 6e:2d:e4:ae:0a:34:69:e6:93:cd:3a:0c:c9:60:9b:50:ab:e1: 79:cd:3a:99:22:08:e9:88:b9:d3:4f:92:65:5a:25:ca:9c:ab: d0:91:14:de:98:b4:74:d8:eb:ba:ea:1d:53:0f:81:0e:80:f6: e0:70:22:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjQxMTIyMjExODE0WhcNMjQxMTI5MjExODE0WjAYMRYwFAYD VQQDEw02NzQwZjUxNy1hOGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzi5hrzA0mdn94qOb8Km7zhDpf0K1zO1AF+R2kHT9hHcKZ9ajb2tjvtPrKzTq kdSDcqe64MPgqs2r2McoyV6u+JyYVfPjQP7Nu04i2VKj5QVfXIgyf/hWxvua+2nm fodQcjxwajxBIXaz8eNCOAJ9Z4jU4kai1ryoigPKF+DuMOC1ydz5bn+5pFoey5we gFoLf6wPaQQiFrTyMpg3xzr/CkNwbcuKhP3STNbhn2m+NUv1vPBFZeR9JqoauJ58 4rHJG3hSWpqG1Y5nY6WSxhck6zm68h5ddTqVbStFdc0/kcz/4b8rCT6pO0XER30S TvrISZ8OjVFQNF9t/W+EY+583QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGa1s65A 3III3VtaUhEd+4AuBlW4MB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0 TUcwZUZzaTVVak5LM1VEeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDECf33uuiFN+giRHp6cz9T6NchXr3xs6zGIS8AFPAHIyDkgq8fPuLu Nztqkv9G7IXf2J2dwNczyb7Ahz2BWBWAv8xVuN0ufRkhZWupGjtS8lkQL2RcIvTA flQbmUzVy8oKswosb/0Uv1y9GmN6Hjq/0QeZJFfQIoiwjwkJV7Vgst4pPrO9//PK ERAb4fTmBhV+JrZ4dC23yU/VOtaXqtM3/1MB39s9dBSXHlg4vfvHp+b0RVG6fgDf HIa/92VKoDw3rTXUmSxuLeSuCjRp5pPNOgzJYJtQq+F5zTqZIgjpiLnTT5JlWiXK nKvQkRTemLR02Ou66h1TD4EOgPbgcCIv -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-fra.rpki-client.org