$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft File: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft (raw, json) Hash identifier: C9jyS0ywb2nfmqKquvvoGz5msvP32IchwW/tX6R6Fp0= Subject key identifier: 86:E3:C9:C1:CF:F6:3C:10:BF:E3:A9:69:92:4F:21:26:6B:A8:DA:EF Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 12C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft Manifest number: 12BA Signing time: Fri 22 Nov 2024 17:04:42 +0000 Manifest this update: Fri 22 Nov 2024 17:04:42 +0000 Manifest next update: Fri 29 Nov 2024 17:04:42 +0000 Files and hashes: 1: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl (hash: ETzVkvlX4niqQEWhhlNIaEOw0J0kQ3xvqdXG8zAC2gc=) 2: 7AFCACAEADB311E8AF75E557C4F9AE02.roa (hash: mM8Bmhl9DbAqaugXBOcgBTc1BLMKnAsF1zyijPb4bXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4803 (0x12c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Validity Not Before: Nov 22 17:04:42 2024 GMT Not After : Nov 29 17:04:42 2024 GMT Subject: CN=6740b9aa-971f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:01:74:2b:f3:9a:10:a3:46:ce:e6:ea:3d: dd:25:0a:db:fd:48:dd:ee:fa:f5:57:46:6b:41:f8: 95:9d:ab:55:c1:a2:8c:1e:b7:0c:3c:cc:1b:c1:c9: 93:31:71:a9:e9:ce:4c:82:ec:9c:8c:7b:23:be:4b: 95:4b:fa:51:c0:a2:96:f8:99:f7:2e:d4:4d:67:b3: 13:d8:e7:33:e3:a4:5c:56:ed:ed:fd:af:d1:90:39: 65:31:7e:5d:00:7d:ca:5a:5d:65:db:61:78:3f:19: 81:0f:4e:a2:bd:da:d9:7a:34:b2:e5:74:52:c8:31: 4c:79:8f:40:c7:63:a2:dd:98:01:19:bb:61:2c:d4: 72:df:96:0b:0e:42:a5:9d:82:86:6c:fd:1c:03:a3: 75:29:9d:54:89:9b:07:a4:ad:a2:5b:8c:08:8f:6c: 5b:7c:a4:f6:c8:8e:9f:9d:3a:52:36:7c:ac:b6:6a: 7f:0f:c8:ed:36:26:50:da:9f:75:f3:1a:95:58:3a: 7c:e0:a5:37:a1:02:ed:a4:61:14:4b:89:07:69:5f: ef:48:63:51:d4:33:76:24:d7:cb:2e:9a:3f:64:a4: d6:e6:45:1b:48:59:05:0a:d6:3f:4f:be:6b:d7:ac: a7:e9:44:45:9d:69:70:0e:4f:e3:97:57:46:cd:4c: f8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E3:C9:C1:CF:F6:3C:10:BF:E3:A9:69:92:4F:21:26:6B:A8:DA:EF X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ec:06:57:da:05:40:da:5a:0f:80:9f:9f:41:ff:f3:3d:8b: 1c:9c:86:75:ed:b4:bf:fc:40:cc:6d:07:e3:b6:9a:7d:07:2b: 6d:1d:c4:51:c2:b0:c6:58:14:95:50:35:2c:ae:5c:5b:a1:10: c8:ab:53:6f:cb:c6:4f:5d:50:0a:97:e7:f8:8b:23:7e:1e:53: 8c:82:f5:ce:54:ac:de:4f:30:68:16:0d:dd:7d:44:fc:72:99: 19:99:43:ca:3e:94:cd:fa:07:1c:51:54:8f:7b:0d:35:a9:98: 91:b5:c7:ac:0d:29:02:dd:ec:94:cf:7f:9d:8c:7d:8d:5f:0e: 67:a4:16:12:43:b3:81:b9:b7:1f:c3:f2:df:61:8f:f5:cc:39: 6d:22:42:49:ad:be:d1:10:22:ef:9b:5b:71:e5:7f:2b:71:05: 3a:f5:3c:9d:9c:23:ba:55:ae:9a:02:a1:6b:1c:fc:e4:c9:3d: 38:51:a5:8b:ab:60:21:38:d7:f3:a2:0b:f2:b9:31:6e:b9:9d: 54:1a:38:69:9d:d1:99:aa:ca:ae:d6:59:63:6d:74:b6:53:df: 32:28:79:52:06:df:0e:23:0d:83:fd:0b:4a:03:4b:29:27:16: 69:ce:e1:63:cc:71:b6:e2:0c:95:74:d9:8f:2d:c9:07:45:38: ff:74:57:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjQxMTIyMTcwNDQyWhcNMjQxMTI5MTcwNDQyWjAYMRYwFAYD VQQDEw02NzQwYjlhYS05NzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+IBdCvzmhCjRs7m6j3dJQrb/Ujd7vr1V0ZrQfiVnatVwaKMHrcMPMwbwcmT MXGp6c5MguycjHsjvkuVS/pRwKKW+Jn3LtRNZ7MT2Ocz46RcVu3t/a/RkDllMX5d AH3KWl1l22F4PxmBD06ivdrZejSy5XRSyDFMeY9Ax2Oi3ZgBGbthLNRy35YLDkKl nYKGbP0cA6N1KZ1UiZsHpK2iW4wIj2xbfKT2yI6fnTpSNnystmp/D8jtNiZQ2p91 8xqVWDp84KU3oQLtpGEUS4kHaV/vSGNR1DN2JNfLLpo/ZKTW5kUbSFkFCtY/T75r 16yn6URFnWlwDk/jl1dGzUz4OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbjycHP 9jwQv+OpaZJPISZrqNrvMB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkZGMC80NEZFQkM5MkFEQjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1 MWs1QjVQSkZISjZJU3VhYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX7AZX2gVA2loPgJ+fQf/zPYscnIZ17bS//EDMbQfjtpp9ByttHcRR wrDGWBSVUDUsrlxboRDIq1Nvy8ZPXVAKl+f4iyN+HlOMgvXOVKzeTzBoFg3dfUT8 cpkZmUPKPpTN+gccUVSPew01qZiRtcesDSkC3eyUz3+djH2NXw5npBYSQ7OBubcf w/LfYY/1zDltIkJJrb7RECLvm1tx5X8rcQU69TydnCO6Va6aAqFrHPzkyT04UaWL q2AhONfzogvyuTFuuZ1UGjhpndGZqsqu1lljbXS2U98yKHlSBt8OIw2D/QtKA0sp JxZpzuFjzHG24gyVdNmPLckHRTj/dFf3 -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:22 2024 by rpki-client on console-fra.rpki-client.org