$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json) Hash identifier: knuHVsGkgGU0P1uuQKyFo37fRx7HZrzSG8ifUlsGdEc= Subject key identifier: AF:B9:A9:A9:9B:D6:1C:ED:71:BC:3B:8D:20:1D:49:DF:4D:91:4D:16 Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft Manifest number: BE Signing time: Sat 23 Nov 2024 03:56:59 +0000 Manifest this update: Sat 23 Nov 2024 03:56:59 +0000 Manifest next update: Sat 30 Nov 2024 03:56:59 +0000 Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: wdgOs6SFJaxSSDgrYkbjbEuVJpfePSN3L7+4gBXEQLE=) 2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: XnGiaZTL2Hv3YZbAOxRpbKT7n7AsmKwDOuzgfwWiTks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Validity Not Before: Nov 23 03:56:59 2024 GMT Not After : Nov 30 03:56:59 2024 GMT Subject: CN=6741528b-44f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5b:a0:3d:22:46:df:c9:3f:95:c3:56:d1:cf: 30:00:ae:3f:85:b9:3a:98:05:41:92:17:66:a5:5e: 5f:79:42:c5:6d:dc:96:e5:3f:22:84:a3:e8:74:44: 2e:b2:63:ff:46:46:c8:34:36:6d:4d:05:ff:4d:64: 8b:b9:c4:3d:97:fe:85:e6:dc:16:4e:31:22:13:f0: a4:b6:4c:5e:72:b9:65:f2:91:f7:aa:66:75:7e:f0: 33:9a:80:c1:53:f1:8e:9e:97:f6:88:2b:b4:cf:d1: 79:64:d1:b3:fc:3a:2c:3c:e2:d1:ce:f3:bf:26:5a: ed:82:c9:26:d5:62:d6:73:c1:bb:0f:fe:7a:4b:85: 44:40:bd:45:4c:cf:33:cb:4e:bc:15:fb:8d:c1:4a: b8:02:57:a6:cb:19:8f:19:cf:5c:0d:58:56:63:7b: b8:c8:5c:43:bb:1d:10:cc:5e:30:45:8d:a5:29:99: a6:80:67:57:00:cc:84:e3:7c:1a:0f:05:c0:4c:ff: 88:a6:db:3b:46:ce:b8:71:36:74:30:07:5a:2d:a7: 66:14:91:04:01:32:2d:ee:be:1b:76:4e:ed:ad:7f: 8f:d4:9f:be:d5:04:04:cf:0a:d6:5d:46:f2:82:72: 64:80:7d:be:79:7d:2b:64:12:f8:97:2a:fe:63:d2: d2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B9:A9:A9:9B:D6:1C:ED:71:BC:3B:8D:20:1D:49:DF:4D:91:4D:16 X509v3 Authority Key Identifier: keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:4d:b0:9d:c8:eb:a0:a9:ad:f7:87:22:b6:e5:93:85:48:75: ef:a8:ba:f0:5e:03:09:dc:cb:82:9c:86:ca:cc:ac:1b:65:2b: ce:12:59:b3:45:71:a2:e0:3b:0a:f7:0f:ec:5e:b6:6c:e7:94: d0:35:dc:e9:30:06:c3:21:3a:41:c7:49:0f:5f:6c:56:59:32: 24:47:fd:8a:75:c8:17:42:46:48:60:9a:60:fd:56:bc:51:16: e4:15:1f:0d:66:46:40:dd:1b:fa:74:12:c6:08:57:b8:a5:6d: b0:77:ce:38:56:e7:81:f2:03:01:ce:46:bf:f8:ea:bd:9c:43: 1e:cb:60:96:bd:35:04:57:dc:7a:84:3b:a7:53:d6:d4:d4:33: 78:99:90:d6:98:c9:d7:63:77:9d:19:de:c0:2a:77:94:65:d8: d0:cc:40:78:07:4d:38:e3:61:d8:be:b9:5a:b1:c8:69:9f:df: fc:8b:20:ed:ae:fe:78:bb:aa:b4:57:b1:75:8e:0f:8e:6e:36: ca:b7:a4:24:5f:8f:44:52:a5:33:44:7a:c0:fb:54:4f:34:78: 42:85:40:69:43:41:25:55:98:a3:17:6e:93:94:c8:59:8c:29: 67:6d:72:14:ad:d2:14:0c:4b:4c:59:87:b3:55:2b:e6:8d:13: b4:d0:b4:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux RjYxQjQ5NEIwHhcNMjQxMTIzMDM1NjU5WhcNMjQxMTMwMDM1NjU5WjAYMRYwFAYD VQQDEw02NzQxNTI4Yi00NGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulugPSJG38k/lcNW0c8wAK4/hbk6mAVBkhdmpV5feULFbdyW5T8ihKPodEQu smP/RkbINDZtTQX/TWSLucQ9l/6F5twWTjEiE/Cktkxecrll8pH3qmZ1fvAzmoDB U/GOnpf2iCu0z9F5ZNGz/DosPOLRzvO/Jlrtgskm1WLWc8G7D/56S4VEQL1FTM8z y068FfuNwUq4AlemyxmPGc9cDVhWY3u4yFxDux0QzF4wRY2lKZmmgGdXAMyE43wa DwXATP+Ipts7Rs64cTZ0MAdaLadmFJEEATIt7r4bdk7trX+P1J++1QQEzwrWXUby gnJkgH2+eX0rZBL4lyr+Y9LSkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+5qamb 1hztcbw7jSAdSd9NkU0WMB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0E4RS9BMDUxNTZBNjgzNUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJw NjBOTlpXWm5fczRmWWJTVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAATbCdyOugqa33hyK25ZOFSHXvqLrwXgMJ3MuCnIbKzKwbZSvOElmz RXGi4DsK9w/sXrZs55TQNdzpMAbDITpBx0kPX2xWWTIkR/2KdcgXQkZIYJpg/Va8 URbkFR8NZkZA3Rv6dBLGCFe4pW2wd844VueB8gMBzka/+Oq9nEMey2CWvTUEV9x6 hDunU9bU1DN4mZDWmMnXY3edGd7AKneUZdjQzEB4B00442HYvrlaschpn9/8iyDt rv54u6q0V7F1jg+ObjbKt6QkX49EUqUzRHrA+1RPNHhChUBpQ0ElVZijF26TlMhZ jClnbXIUrdIUDEtMWYezVSvmjRO00LQO -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org