$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: 5H584zBVeabOYqTpwIv8+PI4/4tFPd3JSirzsZDaTMU= Subject key identifier: 63:4C:3A:BB:6F:46:73:A2:B2:7D:ED:BA:AF:C0:A0:1D:E0:83:DB:F1 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 244C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 2422 Signing time: Sun 24 Nov 2024 15:01:00 +0000 Manifest this update: Sun 24 Nov 2024 15:00:59 +0000 Manifest next update: Sun 01 Dec 2024 15:00:59 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: QWyLXwTDJfNWmx67cStAVJCMBROdb4/QzoKcU/hzNGU=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: 3kDcxjoJt+uLwNPAJETs74uGi0S+qOhaB4Kap466oyI=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: TvzuvljGMYe65nUWCoyGwWoTpT0hk8WJPlKCbHuFU80=) 4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: nb4ekLYfMcmcZ6P490LxZTkaHaEPmz90vPJhXehdrTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9292 (0x244c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Nov 24 15:00:59 2024 GMT Not After : Dec 1 15:00:59 2024 GMT Subject: CN=67433fac-c0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:70:7a:95:41:1d:be:87:a1:25:f4:b2:89:0b: e2:b5:34:30:64:10:5f:96:63:48:29:8d:0b:4e:42: 90:52:7c:3d:d7:f7:20:dc:f8:d9:e1:c9:2b:9a:b1: b6:5a:8a:c8:f2:ee:03:5c:23:83:07:b7:51:28:32: b5:3b:ab:28:77:d1:8d:a4:54:99:ff:bf:0e:1a:67: d2:0e:e5:02:e2:47:ec:ee:43:d5:6b:7a:d2:b5:1b: 0f:c5:99:99:c8:f7:6d:d0:b6:49:f7:95:57:ab:a7: 66:01:4f:85:6b:ed:77:21:29:63:c1:78:15:07:6d: a3:68:2f:5e:bb:71:14:47:25:47:ad:2b:30:48:fa: 43:c8:d4:8b:02:e4:19:bf:50:eb:33:de:51:8a:d6: 7f:d9:4c:9c:ef:b4:7f:4a:b2:85:f8:6e:a5:4e:53: ab:fc:90:b0:c0:78:95:1c:e1:1f:03:4e:1a:bf:96: 39:57:43:3e:57:b8:6d:06:54:73:5b:fd:d0:9a:98: 0e:6b:37:d5:9e:55:99:6d:f6:20:bb:df:74:15:af: a5:2d:97:1d:0a:f8:d1:79:eb:a0:77:ab:67:e8:34: 23:dd:24:08:60:29:82:80:ce:ca:43:96:57:aa:85: a8:1c:67:f3:33:00:d6:7f:11:58:c7:8b:68:cc:bd: 46:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4C:3A:BB:6F:46:73:A2:B2:7D:ED:BA:AF:C0:A0:1D:E0:83:DB:F1 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:67:7a:1e:e5:2a:09:23:ce:7e:cf:a5:4d:ea:74:53:82:33: 13:7e:c2:f7:79:00:1d:02:f1:6b:a0:70:f1:4c:2f:bf:4f:b3: df:96:2b:e3:96:6d:21:d0:3e:72:ea:3d:75:32:ad:f0:ed:39: c8:b5:12:7d:aa:35:37:0e:c6:4e:6d:f9:7c:5c:72:9e:e9:f2: 91:ee:b7:74:8d:d9:77:a9:06:a2:57:5d:27:27:51:ad:ba:47: 36:1f:58:8a:b4:07:93:66:95:d0:02:9c:00:f2:f9:75:42:88: 92:65:1d:0e:11:86:a9:e5:7f:b2:5c:4b:59:68:30:36:5f:4e: 87:54:dc:f2:f4:48:12:e4:f8:78:f2:3e:95:89:7a:7d:51:3d: da:6b:51:0c:d1:e0:09:48:82:92:62:8a:f9:b4:67:1e:50:be: bd:78:0f:ef:9e:d1:51:60:5c:09:47:31:cf:57:ba:5d:ee:fd: f4:2a:20:42:81:cb:e0:45:91:40:70:97:c8:e3:2f:0e:90:98: 1d:f6:f1:e5:ae:c6:1c:3c:4b:31:73:ea:e7:cd:f3:6e:da:76: a2:a6:79:37:bb:fe:db:34:34:b4:b3:59:86:f3:93:ce:97:63: 73:f9:ce:36:cf:54:a8:6f:aa:be:3e:0a:98:f4:45:3e:09:bc: 84:71:f8:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjQxMTI0MTUwMDU5WhcNMjQxMjAxMTUwMDU5WjAYMRYwFAYD VQQDEw02NzQzM2ZhYy1jMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nB6lUEdvoehJfSyiQvitTQwZBBflmNIKY0LTkKQUnw91/cg3PjZ4ckrmrG2 WorI8u4DXCODB7dRKDK1O6sod9GNpFSZ/78OGmfSDuUC4kfs7kPVa3rStRsPxZmZ yPdt0LZJ95VXq6dmAU+Fa+13ISljwXgVB22jaC9eu3EURyVHrSswSPpDyNSLAuQZ v1DrM95RitZ/2Uyc77R/SrKF+G6lTlOr/JCwwHiVHOEfA04av5Y5V0M+V7htBlRz W/3QmpgOazfVnlWZbfYgu990Fa+lLZcdCvjReeugd6tn6DQj3SQIYCmCgM7KQ5ZX qoWoHGfzMwDWfxFYx4tozL1GHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNMOrtv RnOisn3tuq/AoB3gg9vxMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASZ3oe5SoJI85+z6VN6nRTgjMTfsL3eQAdAvFroHDxTC+/T7Pflivj lm0h0D5y6j11Mq3w7TnItRJ9qjU3DsZObfl8XHKe6fKR7rd0jdl3qQaiV10nJ1Gt ukc2H1iKtAeTZpXQApwA8vl1QoiSZR0OEYap5X+yXEtZaDA2X06HVNzy9EgS5Ph4 8j6ViXp9UT3aa1EM0eAJSIKSYor5tGceUL69eA/vntFRYFwJRzHPV7pd7v30KiBC gcvgRZFAcJfI4y8OkJgd9vHlrsYcPEsxc+rnzfNu2naipnk3u/7bNDS0s1mG85PO l2Nz+c42z1Sob6q+PgqY9EU+CbyEcfjU -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:53 2024 by rpki-client on console-fra.rpki-client.org