$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json) Hash identifier: C1+QdB+uSGukahTYmirR64o2LYqw84cp9JJ0GCs1GzE= Subject key identifier: 26:E4:F6:D0:41:2C:16:17:3C:4A:73:52:89:2C:EB:64:17:6F:3A:F0 Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft Manifest number: 011F Signing time: Sat 23 Nov 2024 03:04:58 +0000 Manifest this update: Sat 23 Nov 2024 03:04:57 +0000 Manifest next update: Sat 30 Nov 2024 03:04:57 +0000 Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: GuXa+9K1l7LGia+NbsH4phYZwZnruWMhKybeBRQdMVo=) 2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: o91C1jFze1aQemqWDwZsi+b9/Rmy3VyieJUeIkyvzoc=) 3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: /JrzSFgR8sIchQqbAkxuKHvug5BLuVR/st4b3ZlxES8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: Nov 23 03:04:57 2024 GMT Not After : Nov 30 03:04:57 2024 GMT Subject: CN=67414659-9c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:1e:fb:45:f6:a8:e8:9f:fe:27:1c:32:a8: fc:55:af:4e:a1:b9:6e:29:35:28:5b:0a:c3:13:a9: 0a:23:ac:a1:83:99:33:cd:68:c5:b9:83:e3:e9:76: a9:ae:c9:8c:87:f9:19:6d:a8:40:dd:fc:d0:2e:8f: 9f:34:34:fa:2a:67:92:34:ff:f7:9f:12:48:8e:49: b0:5d:82:e3:71:24:9a:af:4a:ab:85:0b:03:e6:fc: cd:e5:c3:27:15:89:f3:f3:7b:6a:c7:43:7c:f0:5d: 6f:64:92:61:3f:e0:89:26:f2:c5:d2:a5:dd:6e:94: ac:54:53:2a:4d:3f:c3:f7:4b:b2:05:3d:8c:41:b5: d2:ac:bb:d3:0a:1a:98:2f:24:13:42:3e:a9:3b:ba: 36:16:c3:e6:03:68:d1:58:10:a6:72:d7:f7:3e:6d: 38:28:4e:ba:2c:90:6f:d6:d9:9d:22:63:06:30:02: b7:56:08:22:02:fa:e0:56:39:83:a8:16:b6:32:48: ff:9c:a4:4a:15:60:27:23:d5:b4:68:30:1f:f9:51: c0:98:6b:96:fa:c9:b5:98:89:4a:02:d1:6e:8e:76: 53:95:e8:fa:44:08:29:26:21:b6:1e:c1:2d:38:13: c1:86:bd:fb:49:82:c0:20:26:3e:8a:07:2d:5d:1b: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E4:F6:D0:41:2C:16:17:3C:4A:73:52:89:2C:EB:64:17:6F:3A:F0 X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:13:7a:15:03:9c:bb:76:8c:1e:37:1f:b0:9a:b4:2a:67:93: 6c:e6:cb:80:61:39:b0:1e:d6:33:ab:0c:11:aa:bd:3d:fb:50: ff:e3:ee:54:ba:81:f6:51:10:20:ac:e7:60:e5:fe:c4:5c:6e: aa:61:0e:5e:72:6c:b5:6b:31:c4:6d:9d:00:d5:98:a6:91:8b: 72:ee:dc:bc:f9:b9:01:a9:e7:f8:dd:8f:1d:93:df:02:11:33: 7e:66:d3:57:e8:f5:21:b5:5f:a0:4c:c0:28:7e:12:b1:f4:59: 1d:33:9c:aa:61:73:66:28:ea:ab:d2:bd:95:e8:a2:09:ef:20: 83:fa:be:45:4d:11:b6:77:be:75:a5:46:16:63:e7:32:69:10: 3f:98:67:42:34:5a:0e:4b:d8:83:9b:ec:b8:76:c3:46:48:b0: 9b:08:96:8d:97:ef:be:de:56:18:b0:ad:a4:ab:8a:95:8f:4c: 28:9f:ab:10:b9:03:ce:18:65:7a:5f:2b:44:37:21:1d:64:75: 03:97:15:af:14:38:17:10:be:b6:e7:4b:a5:c2:f5:1c:c3:81: 95:74:b5:ad:19:81:2f:68:f4:d9:ef:db:8b:03:9f:6d:3e:09: b1:da:9d:a1:6f:29:c7:ac:14:f8:93:03:82:3f:20:d7:9f:b7: f3:b3:ad:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjQxMTIzMDMwNDU3WhcNMjQxMTMwMDMwNDU3WjAYMRYwFAYD VQQDEw02NzQxNDY1OS05YzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4Ue+0X2qOif/iccMqj8Va9OobluKTUoWwrDE6kKI6yhg5kzzWjFuYPj6Xap rsmMh/kZbahA3fzQLo+fNDT6KmeSNP/3nxJIjkmwXYLjcSSar0qrhQsD5vzN5cMn FYnz83tqx0N88F1vZJJhP+CJJvLF0qXdbpSsVFMqTT/D90uyBT2MQbXSrLvTChqY LyQTQj6pO7o2FsPmA2jRWBCmctf3Pm04KE66LJBv1tmdImMGMAK3VggiAvrgVjmD qBa2Mkj/nKRKFWAnI9W0aDAf+VHAmGuW+sm1mIlKAtFujnZTlej6RAgpJiG2HsEt OBPBhr37SYLAICY+igctXRvu9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbk9tBB LBYXPEpzUoks62QXbzrwMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn aEhDZ09wUjR5RThqNUZBRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPE3oVA5y7doweNx+wmrQqZ5Ns5suAYTmwHtYzqwwRqr09+1D/4+5U uoH2URAgrOdg5f7EXG6qYQ5ecmy1azHEbZ0A1ZimkYty7ty8+bkBqef43Y8dk98C ETN+ZtNX6PUhtV+gTMAofhKx9FkdM5yqYXNmKOqr0r2V6KIJ7yCD+r5FTRG2d751 pUYWY+cyaRA/mGdCNFoOS9iDm+y4dsNGSLCbCJaNl+++3lYYsK2kq4qVj0won6sQ uQPOGGV6XytENyEdZHUDlxWvFDgXEL6250ulwvUcw4GVdLWtGYEvaPTZ79uLA59t Pgmx2p2hbynHrBT4kwOCPyDXn7fzs61S -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org