$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft File: 53anM2-PZ4WjagEEaEC1FKDUGSk.mft (raw, json) Hash identifier: BKYm36FbTGyTwVpHuMzrK2GYWSgAob+G7xJzJ3iSDZI= Subject key identifier: 54:42:F3:F7:F2:48:4C:07:81:7B:7B:CC:35:C8:D6:E7:A2:0A:C6:7D Authority key identifier: E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 Certificate issuer: /CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Certificate serial: 0BDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft Manifest number: 0BD9 Signing time: Fri 22 Nov 2024 18:28:22 +0000 Manifest this update: Fri 22 Nov 2024 18:28:21 +0000 Manifest next update: Fri 29 Nov 2024 18:28:21 +0000 Files and hashes: 1: 53anM2-PZ4WjagEEaEC1FKDUGSk.crl (hash: P9Df9hZaxoeYrLSkuCCqtFvQSuImnDJMBelLDeZcO/U=) 2: 964FB9AE06A111EAAE446E30C4F9AE02.roa (hash: 7T6rttGkDUZMLr7YNcGWXFP6okk75uTuQj2yDiVmYPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3039 (0xbdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1486/serialNumber=E776A7336F8F6785A36A01046840B514A0D41929 Validity Not Before: Nov 22 18:28:21 2024 GMT Not After : Nov 29 18:28:21 2024 GMT Subject: CN=6740cd46-0e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:1c:9f:a2:aa:08:e6:b1:e9:7c:b5:0e:f6: fe:56:da:f9:ed:6a:89:5b:c9:4e:27:d5:c7:7d:f2: 9e:7f:0a:e0:5d:ba:ad:e5:0a:b1:c3:78:96:30:c6: 09:ee:db:d4:b5:bb:16:e1:75:48:70:7d:4a:61:55: 95:74:91:83:8d:21:1c:4b:ef:63:d7:71:71:43:ea: 88:25:20:de:1d:8b:62:45:f1:c4:07:2e:d6:a0:04: 7f:d8:b6:30:57:98:00:60:7a:ba:1c:aa:d1:20:c8: 10:b3:9b:21:88:9d:f8:48:68:ac:98:cd:28:c9:e2: c9:5d:27:ae:65:c5:0c:dd:2e:42:05:83:98:a6:55: 40:18:87:fb:9c:37:72:d5:b0:bc:5e:14:38:ef:c9: 3e:af:9a:dc:92:4a:2d:15:cd:81:f3:e9:05:b3:07: c5:1b:69:9a:0e:2b:f9:7f:f8:28:2f:89:b0:e0:16: eb:40:1d:fd:0f:b3:c3:1c:29:a8:fe:a8:60:ea:3e: 57:78:af:f1:84:9e:21:05:b1:a4:cf:14:a3:2a:c5: 3f:e4:42:1d:54:12:88:0c:1b:28:3a:40:4f:0a:cc: b8:b4:8f:29:68:52:2e:05:ee:d3:c8:3c:70:82:6f: e1:66:54:f2:65:84:8a:83:53:dc:4c:f6:cc:30:32: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:42:F3:F7:F2:48:4C:07:81:7B:7B:CC:35:C8:D6:E7:A2:0A:C6:7D X509v3 Authority Key Identifier: keyid:E7:76:A7:33:6F:8F:67:85:A3:6A:01:04:68:40:B5:14:A0:D4:19:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53anM2-PZ4WjagEEaEC1FKDUGSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1486/06C4B2FE06A011EAAD69DC2AC4F9AE02/53anM2-PZ4WjagEEaEC1FKDUGSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:80:ca:e1:cb:23:85:3d:6f:ff:20:08:49:71:da:9e:82:eb: 12:b1:7a:05:56:4c:e8:9b:e9:43:19:4c:85:c6:9f:83:b7:3e: c1:39:86:b0:2d:53:a5:a4:50:09:51:75:cf:bf:7e:5d:b4:c8: 11:37:0a:bd:17:5b:03:05:5b:02:35:ca:f9:99:d3:27:d4:28: 2f:d7:4c:38:e3:14:cc:04:68:fa:46:94:9e:a5:c7:f7:4b:70: 11:5e:ee:0c:9b:97:4d:ad:71:08:0d:4d:e0:16:e3:d1:55:f6: 3d:58:54:34:d7:2c:93:33:b5:b1:52:7b:ed:57:9c:f9:1b:b7: fb:63:9f:b5:9e:26:6a:b0:f3:d0:e5:5f:c5:61:25:87:b3:28: e1:1b:ed:f9:bf:dc:ed:ea:c8:b1:8c:b0:3e:1c:8f:d8:d5:94: e2:6f:3f:ae:1e:85:7e:43:f5:f6:6f:7c:5a:2b:32:d6:82:be: 34:db:fe:01:f7:62:69:85:6a:80:df:33:73:7a:dd:87:c9:b1: a7:bb:e6:a7:bd:d7:9d:04:9e:06:9c:aa:eb:bc:84:b7:62:6a: d8:1e:3d:bc:d7:be:69:5d:50:d5:8d:a2:ff:69:b9:48:56:42: 79:ef:38:c2:32:ba:68:ef:0c:8c:a5:40:de:d7:22:5f:ff:04: c8:83:9f:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE0ODYxMTAvBgNVBAUTKEU3NzZBNzMzNkY4RjY3ODVBMzZBMDEwNDY4NDBCNTE0 QTBENDE5MjkwHhcNMjQxMTIyMTgyODIxWhcNMjQxMTI5MTgyODIxWjAYMRYwFAYD VQQDEw02NzQwY2Q0Ni0wZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlykcn6KqCOax6Xy1Dvb+Vtr57WqJW8lOJ9XHffKefwrgXbqt5Qqxw3iWMMYJ 7tvUtbsW4XVIcH1KYVWVdJGDjSEcS+9j13FxQ+qIJSDeHYtiRfHEBy7WoAR/2LYw V5gAYHq6HKrRIMgQs5shiJ34SGismM0oyeLJXSeuZcUM3S5CBYOYplVAGIf7nDdy 1bC8XhQ478k+r5rckkotFc2B8+kFswfFG2maDiv5f/goL4mw4BbrQB39D7PDHCmo /qhg6j5XeK/xhJ4hBbGkzxSjKsU/5EIdVBKIDBsoOkBPCsy4tI8paFIuBe7TyDxw gm/hZlTyZYSKg1PcTPbMMDLPsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRC8/fy SEwHgXt7zDXI1ueiCsZ9MB8GA1UdIwQYMBaAFOd2pzNvj2eFo2oBBGhAtRSg1Bkp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTQ4Ni8wNkM0QjJGRTA2 QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0V2phZ0VFYUVDMUZLRFVH U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUzYW5NMi1QWjRXamFnRUVhRUMxRktEVUdTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTQ4Ni8wNkM0QjJGRTA2QTAxMUVBQUQ2OURDMkFDNEY5QUUwMi81M2FuTTItUFo0 V2phZ0VFYUVDMUZLRFVHU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCngMrhyyOFPW//IAhJcdqegusSsXoFVkzom+lDGUyFxp+Dtz7BOYaw LVOlpFAJUXXPv35dtMgRNwq9F1sDBVsCNcr5mdMn1Cgv10w44xTMBGj6RpSepcf3 S3ARXu4Mm5dNrXEIDU3gFuPRVfY9WFQ01yyTM7WxUnvtV5z5G7f7Y5+1niZqsPPQ 5V/FYSWHsyjhG+35v9zt6sixjLA+HI/Y1ZTibz+uHoV+Q/X2b3xaKzLWgr402/4B 92JphWqA3zNzet2HybGnu+anvdedBJ4GnKrrvIS3YmrYHj28175pXVDVjaL/ablI VkJ57zjCMrpo7wyMpUDe1yJf/wTIg5/A -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org