$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json) Hash identifier: 99y9XdU5d2pXFHXASRV8kC/9YBAjPW+FWkzUsuAphfc= Subject key identifier: B3:CC:15:44:D2:7E:19:60:D2:1C:E9:F8:C2:F5:EC:50:5A:E5:F5:B0 Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Certificate serial: 0357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft Manifest number: 034A Signing time: Thu 21 Nov 2024 00:34:49 +0000 Manifest this update: Thu 21 Nov 2024 00:34:48 +0000 Manifest next update: Thu 28 Nov 2024 00:34:48 +0000 Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: ekSk/um/i7MWU857cuZ1oCK5z/nfnRuyWhY+2+1Ceog=) 2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: 7UvGO2r60JLS/okHiWx8rHAHMyUcsuX/jNwXXCmMBho=) 3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: TzVnkqN0tq39UUa2lfdZqlKLVdLg+S4NlfoqQ2G24uU=) 4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: 4G2u0IIjNz0CyenUMTN7OBV5SwfSrRJSXkJu6HMP/+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 855 (0x357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB Validity Not Before: Nov 21 00:34:48 2024 GMT Not After : Nov 28 00:34:48 2024 GMT Subject: CN=673e8029-a059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:f1:51:86:98:c3:83:28:90:4e:9f:b8:0f:0b: c4:fc:40:97:21:3d:15:cd:65:f1:71:80:75:4c:a6: 2f:32:f4:14:2d:84:00:ec:1b:e5:09:81:05:ad:24: e0:60:1c:35:ef:ff:3c:ae:30:bb:8f:25:34:fa:ef: 76:71:a2:37:f2:18:82:38:76:52:4c:4e:45:5d:a1: 8f:be:6a:0f:9e:22:4a:bd:9d:cd:07:ab:56:5f:90: f2:c5:3b:e1:5d:05:38:92:86:66:7f:73:00:d4:0e: ee:cb:86:c6:53:f7:b0:b0:a9:b9:df:66:0e:fc:3e: 1b:95:cf:0c:f9:98:b9:cf:89:02:3b:4c:b6:1b:e8: 5a:03:b2:3b:a0:4d:38:6d:d5:ac:87:d4:a8:82:ca: 76:e0:9e:b2:d1:f7:26:68:97:b1:b0:ef:e5:af:f0: 52:d3:8c:67:e3:00:f7:f6:f2:3d:6f:f5:61:df:4c: 94:de:2c:5a:4b:0c:a2:2b:a7:20:17:f9:44:66:80: 18:78:7e:96:fe:34:e2:fd:bb:1d:2c:04:cc:51:09: b8:f5:9b:f1:79:a2:ec:68:a0:48:ee:d0:04:4c:da: 2e:f2:f3:5c:79:9c:68:5c:45:6b:08:67:c9:9e:0c: 1a:1a:ab:5a:6f:d0:ef:d2:5d:3a:8e:49:27:8c:c4: b8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CC:15:44:D2:7E:19:60:D2:1C:E9:F8:C2:F5:EC:50:5A:E5:F5:B0 X509v3 Authority Key Identifier: keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:0f:86:3b:b1:70:e7:9c:ab:d5:df:1b:b6:f2:7f:17:3e:cd: 2b:3c:35:9f:a3:0a:70:28:c0:60:e9:14:f2:75:88:f1:bc:0d: 80:93:a2:90:8b:5f:2b:40:2b:aa:44:bd:93:c7:2e:11:f3:3c: c8:73:d0:09:02:34:d2:4a:d2:f2:4e:54:bd:7f:9b:25:fe:f0: 3e:7b:30:81:af:c7:b3:98:e8:66:0f:d5:5c:92:d4:d2:4c:9b: c6:bf:9a:2d:d9:d5:0b:26:ac:dd:53:c7:56:3d:ee:12:f8:da: 38:d5:e7:01:09:95:45:ba:f8:e3:c7:37:47:63:1b:b3:a2:b2: 2d:a5:bc:1f:06:46:19:79:b7:74:2b:6e:d6:2b:e1:88:1a:3a: 1a:6d:89:7a:67:7e:0c:a6:f5:f1:91:7c:0f:1b:d2:75:fa:ec: f7:91:d9:b9:6d:03:d6:6e:39:d5:e8:27:14:83:a9:88:0b:9b: e9:85:a8:a9:32:8a:52:6a:89:b1:ca:b9:72:33:ff:7e:d0:22: 6c:2f:0e:1c:36:da:3b:0e:f7:fd:5a:d3:4d:e5:cb:f2:64:c3: fd:17:aa:e7:33:03:6e:c4:53:66:b7:ef:2b:eb:8a:8f:25:27: 02:94:ad:23:e8:7d:eb:e3:fa:79:80:fc:ca:e6:20:a1:be:37: 42:f0:32:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBNjExMTAvBgNVBAUTKDJCNTE3QzZCNzlFM0NFQjAzODlENDFBQkM1RUNFMjEw N0ZFQzUzRkIwHhcNMjQxMTIxMDAzNDQ4WhcNMjQxMTI4MDAzNDQ4WjAYMRYwFAYD VQQDEw02NzNlODAyOS1hMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/fFRhpjDgyiQTp+4DwvE/ECXIT0VzWXxcYB1TKYvMvQULYQA7BvlCYEFrSTg YBw17/88rjC7jyU0+u92caI38hiCOHZSTE5FXaGPvmoPniJKvZ3NB6tWX5DyxTvh XQU4koZmf3MA1A7uy4bGU/ewsKm532YO/D4blc8M+Zi5z4kCO0y2G+haA7I7oE04 bdWsh9Sogsp24J6y0fcmaJexsO/lr/BS04xn4wD39vI9b/Vh30yU3ixaSwyiK6cg F/lEZoAYeH6W/jTi/bsdLATMUQm49ZvxeaLsaKBI7tAETNou8vNceZxoXEVrCGfJ ngwaGqtab9Dv0l06jkknjMS4YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPMFUTS fhlg0hzp+ML17FBa5fWwMB8GA1UdIwQYMBaAFCtRfGt5486wOJ1Bq8Xs4hB/7FP7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkE2MS9FREMwOEZFNjk2 MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpyQTRuVUdyeGV6aUVIX3NV X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxRjhhM25qenJBNG5VR3J4ZXppRUhfc1Vfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkE2MS9FREMwOEZFNjk2MEIxMUVDQkJFNEJFNjRDNEY5QUUwMi9LMUY4YTNuanpy QTRuVUdyeGV6aUVIX3NVX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1D4Y7sXDnnKvV3xu28n8XPs0rPDWfowpwKMBg6RTydYjxvA2Ak6KQ i18rQCuqRL2Txy4R8zzIc9AJAjTSStLyTlS9f5sl/vA+ezCBr8ezmOhmD9VcktTS TJvGv5ot2dULJqzdU8dWPe4S+No41ecBCZVFuvjjxzdHYxuzorItpbwfBkYZebd0 K27WK+GIGjoabYl6Z34MpvXxkXwPG9J1+uz3kdm5bQPWbjnV6CcUg6mIC5vphaip MopSaomxyrlyM/9+0CJsLw4cNto7Dvf9WtNN5cvyZMP9F6rnMwNuxFNmt+8r64qP JScClK0j6H3r4/p5gPzK5iChvjdC8DLD -----END CERTIFICATE-----Generated at Thu Nov 21 01:31:59 2024 by rpki-client on console-fra.rpki-client.org