$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft File: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json) Hash identifier: j0ZneW0xqz7uTtAumSaGa7c+994qZS7uC4R9vzqu89k= Subject key identifier: 55:50:54:F0:D9:CB:DB:FD:0B:87:FF:BE:9C:42:8B:C0:9A:C3:51:5D Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 3459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft Manifest number: 3439 Signing time: Fri 22 Nov 2024 15:07:06 +0000 Manifest this update: Fri 22 Nov 2024 15:07:06 +0000 Manifest next update: Fri 29 Nov 2024 15:07:06 +0000 Files and hashes: 1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: /JUuuSFqHh5+XQoZ0xpZNZA+RDpfcdUqAC12riKZhn4=) 2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: d8SyVppxPlIuR4fpNFIkYTURn6Yx4CMf1TSPHGG+TtY=) 3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: 2HjZqBm6c0Bz0zik/PCkuHSNvhZSOIqG0dnIWyE0YeQ=) 4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: EbIaf/1Sy/3aBx9khl+6A1cQZxzTMmTyasNR7QqdjR8=) 5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: 0RxGIy0cRn46gMQ4a+LKJK3dXVABCl5t2jG6UZ82riU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13401 (0x3459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: Nov 22 15:07:06 2024 GMT Not After : Nov 29 15:07:06 2024 GMT Subject: CN=67409e1a-1841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:af:ab:65:7e:f2:7b:90:e0:b8:bd:ba:59: 05:10:95:58:ea:5d:b6:e6:2d:03:6f:7c:8a:51:6a: f6:ab:9b:9f:58:5f:2f:ca:27:b1:4e:13:7a:4b:d2: 5e:a7:f4:07:61:1c:2a:11:d2:11:83:3d:fb:7e:97: 71:7a:c1:33:93:ed:86:be:e9:e4:a0:15:d4:47:db: 53:83:d6:07:80:31:53:68:fa:d6:66:a6:da:52:15: cb:39:47:c8:12:28:1a:7f:19:bb:a4:26:ca:ed:9f: af:19:08:5a:18:56:73:b6:fb:2b:5c:ae:b2:63:69: ed:03:ca:b7:81:f8:2f:14:fb:1f:5a:76:e3:74:2b: bf:19:a2:14:62:3a:7f:70:c2:46:01:d5:f2:09:6a: b8:dd:00:da:6a:f6:c1:56:dd:e2:2a:ab:5a:07:3d: 4d:43:49:e2:fa:19:63:20:c0:bf:87:ae:79:48:8b: 6c:d7:c3:1c:ce:be:27:e6:10:cb:87:a1:cd:a8:0a: 74:90:ae:e0:6f:d2:28:99:9e:29:f8:c6:50:50:72: f1:e2:4b:9d:6f:5b:21:a1:40:3c:f3:d3:bc:5c:78: d7:7c:af:e3:1d:69:ea:20:3b:71:d6:c9:54:91:52: d2:c4:92:9e:2c:cc:c6:a7:a9:8b:f4:b5:0d:47:e6: cc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:50:54:F0:D9:CB:DB:FD:0B:87:FF:BE:9C:42:8B:C0:9A:C3:51:5D X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:10:6a:57:2e:2f:b8:23:01:62:89:94:d9:67:82:47:4d:ce: 92:68:8d:ac:0f:ac:6e:d6:6a:a3:22:8a:5e:50:ac:51:74:20: 55:74:59:8a:f2:37:69:73:55:03:9d:f6:a9:d1:df:9b:4f:87: d7:bd:51:b9:fe:2c:7f:48:bd:81:2d:e7:94:25:2e:6e:4d:a0: 3e:1e:36:90:25:94:17:34:fb:5b:dc:1e:d3:7c:b9:27:ef:d8: dd:08:20:f3:f3:bf:bd:13:1b:12:68:8c:bd:f5:75:9c:01:b9: 5b:71:90:a6:ab:36:04:ed:7c:16:01:1b:09:78:ae:e6:99:18: 49:fb:8e:45:9d:c1:25:00:5c:30:99:41:e7:35:ac:67:55:a4: 4a:e0:b2:db:3b:4c:82:88:62:ce:61:15:c9:d0:ed:29:b2:65: 41:08:52:e7:b4:f8:c0:e6:a2:7f:50:22:1a:7f:ce:0a:31:68: 65:70:cd:81:ae:50:92:e1:92:d7:3a:db:35:fc:3a:b1:69:9b: f3:e5:b4:90:22:90:6b:21:41:17:35:a4:43:d3:0b:1c:96:c3: 80:07:c3:d1:ac:79:44:91:a4:ae:d7:85:ac:cc:ba:bd:57:01: f4:1a:b3:7b:79:d8:31:60:e9:3b:7f:5b:f8:ef:bc:da:1b:8a: 72:d3:5a:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjQxMTIyMTUwNzA2WhcNMjQxMTI5MTUwNzA2WjAYMRYwFAYD VQQDEw02NzQwOWUxYS0xODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8Svq2V+8nuQ4Li9ulkFEJVY6l225i0Db3yKUWr2q5ufWF8vyiexThN6S9Je p/QHYRwqEdIRgz37fpdxesEzk+2GvunkoBXUR9tTg9YHgDFTaPrWZqbaUhXLOUfI Eigafxm7pCbK7Z+vGQhaGFZztvsrXK6yY2ntA8q3gfgvFPsfWnbjdCu/GaIUYjp/ cMJGAdXyCWq43QDaavbBVt3iKqtaBz1NQ0ni+hljIMC/h655SIts18Mczr4n5hDL h6HNqAp0kK7gb9IomZ4p+MZQUHLx4kudb1shoUA889O8XHjXfK/jHWnqIDtx1slU kVLSxJKeLMzGp6mL9LUNR+bMYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVQVPDZ y9v9C4f/vpxCi8Caw1FdMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUVCOC84RTBGMkNCNjFEQTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pL cHFnSHlCUWVPV1MxVWJ1VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNEGpXLi+4IwFiiZTZZ4JHTc6SaI2sD6xu1mqjIopeUKxRdCBVdFmK 8jdpc1UDnfap0d+bT4fXvVG5/ix/SL2BLeeUJS5uTaA+HjaQJZQXNPtb3B7TfLkn 79jdCCDz87+9ExsSaIy99XWcAblbcZCmqzYE7XwWARsJeK7mmRhJ+45FncElAFww mUHnNaxnVaRK4LLbO0yCiGLOYRXJ0O0psmVBCFLntPjA5qJ/UCIaf84KMWhlcM2B rlCS4ZLXOts1/DqxaZvz5bSQIpBrIUEXNaRD0wsclsOAB8PRrHlEkaSu14WszLq9 VwH0GrN7edgxYOk7f1v477zaG4py01oH -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org