$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft File: GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json) Hash identifier: HLtg2CQkyw8iSEJP1Yk7+LzikdcM0b9p1lgMLejTEi0= Subject key identifier: C1:79:D1:F1:50:4A:7E:AA:65:8D:44:C5:7A:E4:B9:A6:38:3E:8F:A9 Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Certificate serial: 3456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft Manifest number: 3441 Signing time: Fri 22 Nov 2024 14:36:42 +0000 Manifest this update: Fri 22 Nov 2024 14:36:42 +0000 Manifest next update: Fri 29 Nov 2024 14:36:42 +0000 Files and hashes: 1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: Ena4RdCr+oTMXf7E5g+ZWxMs/M8RMbMJgu2+Pq5ELOw=) 2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: Ml46u2z0U+I2ZQaPPsePPmtgvCBhdMDLTPQJk8d3bl4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13398 (0x3456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83 Validity Not Before: Nov 22 14:36:42 2024 GMT Not After : Nov 29 14:36:42 2024 GMT Subject: CN=674096fa-24c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:0f:ce:45:04:1c:28:0c:1b:4c:a8:17:61: 67:ae:ff:45:a7:6c:50:9c:88:4d:53:d0:35:ca:dd: 57:e5:03:78:e8:b1:c9:2b:24:fd:28:ac:b2:78:ab: de:f1:78:a3:5b:f9:81:a0:f3:1e:19:33:c7:04:58: 1a:20:ed:a0:38:c8:65:9e:c6:9b:68:1b:22:c0:b6: 78:52:0e:ca:33:77:5b:19:d4:c8:60:fd:a0:3f:72: a4:d4:f3:af:f7:16:0b:5b:4d:d7:b4:d5:20:26:09: 6b:3f:1d:36:ad:d3:22:e7:61:e5:1b:ef:a7:b8:47: e1:fb:43:33:b6:5e:8d:b0:fb:9b:5c:5b:00:6a:f4: 45:ba:77:c4:8c:5a:3d:e1:20:a9:03:80:89:8b:f3: 2d:5f:1d:b6:d0:4a:14:99:3f:2f:9a:2c:8f:74:84: d8:23:ef:1d:cc:f2:44:14:45:8d:a8:7d:c8:ae:8a: 8a:e8:04:ee:34:0b:f1:eb:07:a5:2a:b1:3f:31:b6: 02:f9:ad:b8:ac:bf:f9:35:93:5a:21:f9:58:f7:d7: 31:da:b5:5e:e0:f0:5b:c2:5f:f7:a0:10:bb:5b:cb: 59:1c:dd:a0:0c:bd:b7:48:09:93:b2:ca:e7:55:16: d9:0b:7a:b8:9d:b4:e9:d4:dd:40:91:08:4e:6e:a3: 6e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:79:D1:F1:50:4A:7E:AA:65:8D:44:C5:7A:E4:B9:A6:38:3E:8F:A9 X509v3 Authority Key Identifier: keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:31:89:52:04:36:76:4b:79:40:41:f4:85:98:12:9d:27:6a: df:3f:be:47:df:07:26:e2:b3:12:16:1c:bd:d4:86:09:05:a9: df:71:9f:eb:b5:4f:1c:18:5b:1f:fc:38:74:d2:7d:14:10:58: 0e:f7:62:0e:24:b8:cd:e0:7a:bc:6c:5f:10:d2:98:4a:7a:0e: 02:d4:76:15:2c:bb:cf:c6:31:c9:c7:e2:80:07:26:fd:a0:b8: 36:0d:5c:1a:11:92:79:ea:00:b4:9a:22:98:49:47:02:bd:4b: 0e:f6:c2:69:ad:31:4b:02:5f:cf:65:26:ce:be:bf:7c:a4:c2: 12:ac:2e:4d:75:68:9e:fe:aa:7c:ff:48:69:4f:d5:1e:8e:0c: c0:8d:96:a8:cb:a6:27:5c:a8:e8:04:83:c9:a0:56:81:6b:b3: 4e:af:d0:8f:2a:60:c4:08:91:8a:e8:fd:be:67:5b:ac:2f:d5: a9:5d:5b:c8:6e:01:fc:ae:8a:37:04:cc:62:3f:dd:cc:a7:5e: 93:ca:06:9e:7b:36:46:c3:d3:cf:21:66:bf:8b:4b:33:c5:28: 91:f8:28:35:f4:c4:95:12:4a:e7:ec:a1:72:21:fe:d0:89:89: 70:55:55:95:55:67:71:73:1d:e1:bf:96:6c:b0:ba:73:54:5d: 8f:ab:72:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG ODY0MTRFODMwHhcNMjQxMTIyMTQzNjQyWhcNMjQxMTI5MTQzNjQyWjAYMRYwFAYD VQQDEw02NzQwOTZmYS0yNGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzwPzkUEHCgMG0yoF2Fnrv9Fp2xQnIhNU9A1yt1X5QN46LHJKyT9KKyyeKve 8XijW/mBoPMeGTPHBFgaIO2gOMhlnsabaBsiwLZ4Ug7KM3dbGdTIYP2gP3Kk1POv 9xYLW03XtNUgJglrPx02rdMi52HlG++nuEfh+0Mztl6NsPubXFsAavRFunfEjFo9 4SCpA4CJi/MtXx220EoUmT8vmiyPdITYI+8dzPJEFEWNqH3IroqK6ATuNAvx6wel KrE/MbYC+a24rL/5NZNaIflY99cx2rVe4PBbwl/3oBC7W8tZHN2gDL23SAmTssrn VRbZC3q4nbTp1N1AkQhObqNuXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMF50fFQ Sn6qZY1ExXrkuaY4Po+pMB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC82OUFEQzE5RTFEOEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxr c21aeTdnNGRkUkw0WkJUb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkMYlSBDZ2S3lAQfSFmBKdJ2rfP75H3wcm4rMSFhy91IYJBanfcZ/r tU8cGFsf/Dh00n0UEFgO92IOJLjN4Hq8bF8Q0phKeg4C1HYVLLvPxjHJx+KAByb9 oLg2DVwaEZJ56gC0miKYSUcCvUsO9sJprTFLAl/PZSbOvr98pMISrC5NdWie/qp8 /0hpT9UejgzAjZaoy6YnXKjoBIPJoFaBa7NOr9CPKmDECJGK6P2+Z1usL9WpXVvI bgH8roo3BMxiP93Mp16TygaeezZGw9PPIWa/i0szxSiR+Cg19MSVEkrn7KFyIf7Q iYlwVVWVVWdxcx3hv5ZssLpzVF2Pq3Lu -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:44 2024 by rpki-client on console-fra.rpki-client.org