$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft File: iV-zzi-cLke5FLsqa2bHfVOXpAo.mft (raw, json) Hash identifier: yAz9182flbTVNj1mzXskUMLbD/x2uAe8mkgLy5GJ50E= Subject key identifier: E8:D6:B2:5E:49:F7:13:62:71:03:26:72:4D:22:8B:3D:84:53:9D:DE Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft Manifest number: 0189 Signing time: Sat 23 Nov 2024 01:56:56 +0000 Manifest this update: Sat 23 Nov 2024 01:56:55 +0000 Manifest next update: Sat 30 Nov 2024 01:56:55 +0000 Files and hashes: 1: iV-zzi-cLke5FLsqa2bHfVOXpAo.crl (hash: RMJM+dmro9fJpL/Lds7+/WgMEn8oOYcc59jhaR6C1QU=) 2: 38DEC3C04ED611ED84336740C4F9AE02.roa (hash: SYKjgHEXo5m2moa0ugIv9WzIl1i1pLYgcR5vMrtTYOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Validity Not Before: Nov 23 01:56:55 2024 GMT Not After : Nov 30 01:56:55 2024 GMT Subject: CN=67413667-89ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:02:08:84:25:65:14:fc:4e:48:5e:8a:3c:d5: f9:ac:f4:74:1f:b1:be:3f:b8:18:e4:0f:34:42:2c: b1:5f:5a:fe:d8:05:4f:2c:69:00:b8:80:ce:94:09: f0:95:27:a6:86:b5:c2:68:cf:8c:f5:e7:0c:e1:af: 82:69:ac:88:92:16:5a:35:77:ef:6c:eb:08:cb:8e: 28:87:de:52:7e:7e:a7:e4:e0:c1:49:c4:fe:61:ac: f7:c6:e5:74:a8:1d:b1:30:4a:a8:ff:dd:88:02:00: 01:02:bb:b9:14:0a:c0:d1:6a:cd:02:f4:c1:02:18: 5d:e1:0e:fb:bd:ac:af:26:2d:87:3d:08:31:e6:e7: 56:f9:95:44:ab:08:04:a3:82:e6:c6:3d:00:73:ca: 41:10:8f:6c:77:a1:93:be:9f:74:39:f7:07:95:d9: 55:58:16:6f:3e:39:8c:2d:28:c5:d5:c4:77:b0:b5: 96:36:17:bd:dc:36:c3:f4:3c:cd:cf:26:9a:96:2b: 19:6e:70:bd:62:3c:33:e4:f0:e0:f5:c4:a2:b0:82: aa:51:89:95:f8:89:16:a8:af:e4:56:c7:32:5d:d6: f5:3e:4e:1e:dd:c6:9d:8d:2a:fa:ab:b7:89:eb:22: 05:42:40:b4:e2:59:d5:bb:cb:c4:d3:e4:91:82:5b: 1c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D6:B2:5E:49:F7:13:62:71:03:26:72:4D:22:8B:3D:84:53:9D:DE X509v3 Authority Key Identifier: keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:13:18:f7:13:00:80:3e:fa:18:ad:d9:21:72:0c:74:17:ff: 00:35:a2:09:ab:95:b2:93:57:df:a7:5a:d2:28:f1:20:13:92: d3:eb:b0:29:8b:81:82:14:47:33:ac:88:16:45:62:57:93:15: a6:83:eb:90:48:68:22:0d:eb:78:88:77:4a:fa:25:28:7c:a2: 59:9b:1f:9f:05:c6:4d:9e:7f:f4:73:c3:2a:b8:19:ab:6c:50: 1f:58:6e:f2:ca:c5:d5:df:b7:21:75:fd:c3:c5:1a:5b:f3:8a: 42:3f:a7:1d:3d:09:21:63:90:f7:8a:f5:ad:bb:a6:31:ba:cf: 0d:34:c1:e1:d0:a1:d7:63:1d:f3:fc:c4:87:68:e5:53:d4:ba: b0:e8:2b:fd:a9:74:5f:aa:8c:89:ab:6c:8a:9c:f3:f6:39:dc: 13:b8:4f:aa:37:ea:68:56:0a:34:60:6e:44:18:9f:dc:b1:47: 0f:ba:d7:67:05:1d:15:6c:88:55:fe:83:50:04:87:a6:33:9f: 10:18:3b:be:78:0a:37:7c:19:9b:27:67:73:1f:d8:1a:34:12: 8f:db:9f:53:91:f3:32:5e:34:31:0d:bd:30:0e:98:87:01:6c: 63:22:75:97:e6:97:bc:25:20:98:f7:e6:58:bb:3c:26:bf:10: 40:bc:d8:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE NTM5N0E0MEEwHhcNMjQxMTIzMDE1NjU1WhcNMjQxMTMwMDE1NjU1WjAYMRYwFAYD VQQDEw02NzQxMzY2Ny04OWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QIIhCVlFPxOSF6KPNX5rPR0H7G+P7gY5A80QiyxX1r+2AVPLGkAuIDOlAnw lSemhrXCaM+M9ecM4a+CaayIkhZaNXfvbOsIy44oh95Sfn6n5ODBScT+Yaz3xuV0 qB2xMEqo/92IAgABAru5FArA0WrNAvTBAhhd4Q77vayvJi2HPQgx5udW+ZVEqwgE o4Lmxj0Ac8pBEI9sd6GTvp90OfcHldlVWBZvPjmMLSjF1cR3sLWWNhe93DbD9DzN zyaalisZbnC9Yjwz5PDg9cSisIKqUYmV+IkWqK/kVscyXdb1Pk4e3cadjSr6q7eJ 6yIFQkC04lnVu8vE0+SRglscowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjWsl5J 9xNicQMmck0iiz2EU53eMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjQxOS9GQTZFMzZDQzRFRDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xr ZTVGTHNxYTJiSGZWT1hwQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuExj3EwCAPvoYrdkhcgx0F/8ANaIJq5Wyk1ffp1rSKPEgE5LT67Ap i4GCFEczrIgWRWJXkxWmg+uQSGgiDet4iHdK+iUofKJZmx+fBcZNnn/0c8MquBmr bFAfWG7yysXV37chdf3DxRpb84pCP6cdPQkhY5D3ivWtu6Yxus8NNMHh0KHXYx3z /MSHaOVT1Lqw6Cv9qXRfqoyJq2yKnPP2OdwTuE+qN+poVgo0YG5EGJ/csUcPutdn BR0VbIhV/oNQBIemM58QGDu+eAo3fBmbJ2dzH9gaNBKP259TkfMyXjQxDb0wDpiH AWxjInWX5pe8JSCY9+ZYuzwmvxBAvNg4 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org