$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: hCTqCBtJiYu5RJw/fWVhPw3rNbxkvpts015uvTjx60U= Subject key identifier: 07:97:B6:7A:0C:42:46:A8:83:2E:CA:6F:5D:D0:9C:24:5B:5C:B4:12 Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 0490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 048A Signing time: Fri 22 Nov 2024 23:35:16 +0000 Manifest this update: Fri 22 Nov 2024 23:35:15 +0000 Manifest next update: Fri 29 Nov 2024 23:35:15 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: Ll/0ZSce1B8OGlM3reOVjHQYZKYjRzIzxNDiCEQm57Q=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: /RmAWe3bm7uFqeMNb4uaNurOTOXrUZgieKkDs6gSDuQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1168 (0x490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Validity Not Before: Nov 22 23:35:15 2024 GMT Not After : Nov 29 23:35:15 2024 GMT Subject: CN=67411533-c773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:4c:ff:91:60:be:4f:e4:94:d7:f8:ff:0f: 3d:ad:ac:f0:8c:70:ca:74:c3:7c:c5:9c:a1:16:c0: de:15:e9:ca:f1:51:69:2d:8f:35:06:94:e3:83:29: 79:a2:3c:73:19:9e:ff:d4:59:e4:fd:86:9c:20:90: 38:66:6d:a6:ee:18:27:8b:ba:da:79:b5:d3:c1:cf: 07:a7:bd:c6:93:d1:c2:40:4d:e7:85:d0:b7:a3:24: 32:34:4f:b4:90:9b:c6:a3:9c:a0:83:44:b2:0b:b2: 3d:05:77:ad:2b:82:85:17:77:96:6b:17:35:cc:81: 06:4e:a2:e9:24:44:ad:40:e6:ba:25:37:41:a9:d7: e3:ca:89:b6:7b:08:41:8a:45:6e:96:56:4d:5d:f9: 12:49:06:26:17:21:56:3f:0c:ea:d2:af:5d:9a:16: c6:40:27:ab:db:6a:a7:58:4e:2c:42:ee:fd:bd:b2: 8c:ec:53:c3:e0:4a:f7:8c:bf:4d:8f:7d:99:fe:30: 1b:a9:a3:66:fb:56:3c:c3:ff:6a:a9:53:c5:1c:92: b9:e2:91:54:0c:dd:12:9e:e6:92:9c:e5:a2:c3:4b: 1a:0c:22:e5:74:86:17:16:ff:fd:c7:da:93:c7:84: ff:19:0c:a3:af:0d:b4:cd:36:15:96:4e:a2:62:81: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:97:B6:7A:0C:42:46:A8:83:2E:CA:6F:5D:D0:9C:24:5B:5C:B4:12 X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c1:7e:8c:11:1c:33:d7:fc:43:8d:d6:e6:bc:94:15:63:02: 39:53:38:d4:97:65:ae:64:f0:96:79:d8:96:ef:f8:a2:72:51: f2:57:89:f7:2e:5e:2b:3e:11:00:9d:8a:b9:02:9a:c8:e2:29: c3:d0:3e:76:e6:bd:de:dc:60:f5:d5:58:9d:bf:a1:08:b5:be: 4b:3a:0f:5a:c2:f1:8c:01:43:86:c0:db:9e:07:3a:7d:5c:0e: 6f:6a:8d:ff:9a:86:bd:5e:22:c8:d0:8c:8d:06:b7:15:db:38: be:b4:21:f5:24:e2:46:07:65:31:a5:91:f6:a8:87:59:58:52: 1b:d1:93:8c:dc:31:8f:8d:3b:9e:f9:52:72:83:74:2f:4d:5c: 5b:aa:49:73:03:33:9e:c0:a7:f7:6c:ed:b8:34:3d:98:83:15: bf:a3:48:c1:39:28:dd:51:63:bc:b4:84:4b:a0:64:e5:84:4b: a5:e6:e5:86:f6:37:6c:ea:e1:45:da:f0:0a:86:ed:39:21:74: 7c:bb:dd:3c:06:69:e1:7e:7c:8a:7c:6b:92:95:12:fd:83:d2: 99:0a:ac:2c:45:09:19:5f:5c:d6:60:c7:a3:be:78:38:51:aa: ff:65:5e:9e:81:3b:51:05:f7:07:53:da:ce:41:d4:0a:52:e9: 6f:28:b4:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjQxMTIyMjMzNTE1WhcNMjQxMTI5MjMzNTE1WjAYMRYwFAYD VQQDEw02NzQxMTUzMy1jNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi5M/5Fgvk/klNf4/w89razwjHDKdMN8xZyhFsDeFenK8VFpLY81BpTjgyl5 ojxzGZ7/1Fnk/YacIJA4Zm2m7hgni7raebXTwc8Hp73Gk9HCQE3nhdC3oyQyNE+0 kJvGo5ygg0SyC7I9BXetK4KFF3eWaxc1zIEGTqLpJEStQOa6JTdBqdfjyom2ewhB ikVullZNXfkSSQYmFyFWPwzq0q9dmhbGQCer22qnWE4sQu79vbKM7FPD4Er3jL9N j32Z/jAbqaNm+1Y8w/9qqVPFHJK54pFUDN0SnuaSnOWiw0saDCLldIYXFv/9x9qT x4T/GQyjrw20zTYVlk6iYoF5vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeXtnoM Qkaogy7Kb13QnCRbXLQSMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYwX6MERwz1/xDjdbmvJQVYwI5UzjUl2WuZPCWediW7/iiclHyV4n3 Ll4rPhEAnYq5AprI4inD0D525r3e3GD11Vidv6EItb5LOg9awvGMAUOGwNueBzp9 XA5vao3/moa9XiLI0IyNBrcV2zi+tCH1JOJGB2UxpZH2qIdZWFIb0ZOM3DGPjTue +VJyg3QvTVxbqklzAzOewKf3bO24ND2YgxW/o0jBOSjdUWO8tIRLoGTlhEul5uWG 9jds6uFF2vAKhu05IXR8u908BmnhfnyKfGuSlRL9g9KZCqwsRQkZX1zWYMejvng4 Uar/ZV6egTtRBfcHU9rOQdQKUulvKLQX -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org