$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json) Hash identifier: dPxnTqSpzTJBk+x1V/gQcb90VzYRtwT+IhYf3vHrCi0= Subject key identifier: B6:8A:30:86:4D:0D:1B:20:D0:A2:60:90:0D:3D:DD:0E:F2:9F:76:2C Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft Manifest number: 11 Signing time: Sat 23 Nov 2024 06:00:50 +0000 Manifest this update: Sat 23 Nov 2024 06:00:50 +0000 Manifest next update: Sat 30 Nov 2024 06:00:50 +0000 Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: lYKMVxjaqFsCBzr7f9gNn0NoxpL1+pjJ8tC/MBZRN0k=) 2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: gWk0VsOcbG73/lmCIcmaJtgvf1O8GLTJ+JuzqZmFgTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Validity Not Before: Nov 23 06:00:50 2024 GMT Not After : Nov 30 06:00:50 2024 GMT Subject: CN=67416f92-5fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:02:ba:2f:f4:58:c7:ac:00:13:b3:eb:25: 02:79:98:d3:fd:96:fb:79:9e:7f:11:1a:43:f1:8e: 09:b4:ec:5a:b9:d6:fe:12:22:35:0a:e8:ce:98:c5: 41:82:86:65:79:f9:55:9f:c9:7b:4f:cd:45:d9:d8: a5:48:d3:bf:a4:b2:1f:c8:51:9b:d3:11:6c:c0:5a: 09:08:8e:8d:a6:b8:de:5c:74:91:52:87:c9:34:be: 9e:5c:b2:ed:92:63:fd:56:82:0a:c4:7f:4c:a4:35: 9a:77:cb:97:eb:f7:75:fc:57:49:81:50:b5:73:ce: a9:09:33:77:1d:bf:a8:7e:99:07:44:1e:5e:50:13: a5:93:91:19:ab:44:3f:03:bc:31:03:2c:57:65:01: 26:80:3d:e2:6f:b2:29:a5:17:ca:c9:3f:91:e3:a4: 75:94:33:65:cd:44:ea:88:5c:52:09:1c:7f:d1:7b: cc:6c:81:2b:d7:59:1f:45:b6:08:5c:3a:13:bb:10: bf:a4:71:de:0d:a4:1f:2a:6a:ce:f4:e8:b6:85:26: 68:ec:d9:a7:00:46:8a:e1:23:95:40:f5:e7:65:6f: fd:b4:df:ec:7d:c5:9f:8f:6e:19:f5:e6:fa:13:2c: 19:dc:73:c0:f5:3a:58:66:65:8d:2a:3e:16:f7:9b: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8A:30:86:4D:0D:1B:20:D0:A2:60:90:0D:3D:DD:0E:F2:9F:76:2C X509v3 Authority Key Identifier: keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:32:82:a8:97:eb:e1:85:80:ee:15:db:e1:56:38:07:0e:40: 48:02:fd:ad:a0:1f:94:64:a6:1c:1a:84:0b:d3:90:51:e8:86: 26:b5:67:4a:c8:30:6c:39:94:33:4c:7d:54:f9:bb:69:d0:cc: 1e:10:ce:ff:88:d2:34:23:ed:8d:9b:0d:5e:8c:85:32:e3:03: cc:c0:c1:e9:b2:be:01:4d:6a:49:72:a4:0a:a7:67:37:a7:0e: b6:75:30:cd:46:25:3f:7c:19:53:8c:4e:e6:ac:9b:4e:e2:f1: 59:f3:1c:b9:61:00:7c:93:43:28:e4:b1:13:6a:c3:69:3f:4b: b3:38:78:ee:38:36:39:e1:0d:21:e0:8a:ec:8a:93:15:ac:5c: a3:51:3d:05:05:96:b0:49:53:f6:59:ab:12:4b:86:1c:40:4a: 86:12:c4:a0:75:a6:1b:e1:13:04:e1:a2:23:97:36:93:62:7f: 19:4f:e9:b9:b9:f0:fa:36:56:dd:4f:82:c5:ec:ae:2c:9c:77: 98:0a:ee:50:64:f4:9f:51:9e:81:01:c3:3d:01:19:58:73:f8: 6e:41:04:f9:33:cb:32:30:db:a5:24:b8:cf:ed:85:30:34:4a: ac:d6:70:70:cd:aa:39:34:e2:1a:91:d8:f3:23:87:96:36:b3: 87:14:8f:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkM5NDExMC8GA1UEBRMoQUNCNzAyNTFFQjE1Qjc1RDQyMjlBQTIxMzFFM0Q5QTg3 QzI5NDVDMDAeFw0yNDExMjMwNjAwNTBaFw0yNDExMzAwNjAwNTBaMBgxFjAUBgNV BAMTDTY3NDE2ZjkyLTVmZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG/wK6L/RYx6wAE7PrJQJ5mNP9lvt5nn8RGkPxjgm07Fq51v4SIjUK6M6YxUGC hmV5+VWfyXtPzUXZ2KVI07+ksh/IUZvTEWzAWgkIjo2muN5cdJFSh8k0vp5csu2S Y/1WggrEf0ykNZp3y5fr93X8V0mBULVzzqkJM3cdv6h+mQdEHl5QE6WTkRmrRD8D vDEDLFdlASaAPeJvsimlF8rJP5HjpHWUM2XNROqIXFIJHH/Re8xsgSvXWR9Ftghc OhO7EL+kcd4NpB8qas706LaFJmjs2acARorhI5VA9edlb/203+x9xZ+Pbhn15voT LBncc8D1OlhmZY0qPhb3m/yXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtoowhk0N GyDQomCQDT3dDvKfdiwwHwYDVR0jBBgwFoAUrLcCUesVt11CKaohMePZqHwpRcAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQzk0L0IxNDQ5QzRFOTRE QTExRUY4OTA4NkQyMUM0RjlBRTAyL3JMY0NVZXNWdDExQ0thb2hNZVBacUh3cFJj QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckxjQ1Vlc1Z0MTFDS2FvaE1lUFpxSHdwUmNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Qzk0L0IxNDQ5QzRFOTREQTExRUY4OTA4NkQyMUM0RjlBRTAyL3JMY0NVZXNWdDEx Q0thb2hNZVBacUh3cFJjQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHIygqiX6+GFgO4V2+FWOAcOQEgC/a2gH5RkphwahAvTkFHohia1Z0rI MGw5lDNMfVT5u2nQzB4Qzv+I0jQj7Y2bDV6MhTLjA8zAwemyvgFNaklypAqnZzen DrZ1MM1GJT98GVOMTuasm07i8VnzHLlhAHyTQyjksRNqw2k/S7M4eO44NjnhDSHg iuyKkxWsXKNRPQUFlrBJU/ZZqxJLhhxASoYSxKB1phvhEwThoiOXNpNifxlP6bm5 8Po2Vt1PgsXsriycd5gK7lBk9J9RnoEBwz0BGVhz+G5BBPkzyzIw26UkuM/thTA0 SqzWcHDNqjk04hqR2PMjh5Y2s4cUj5s= -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org