$ rpki-client -vvf rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft File: MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft (raw, json) Hash identifier: tvSAXW5oHD6ao6BrJP5nOrFNzJyyLSZG8fa0rdcqCrE= Subject key identifier: 88:EF:80:DD:D4:2A:CF:36:0D:8D:CD:3C:E7:0D:08:BB:DD:2D:F3:37 Authority key identifier: 31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 Certificate issuer: /CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft Manifest number: 83 Signing time: Thu 21 Nov 2024 04:44:12 +0000 Manifest this update: Thu 21 Nov 2024 04:44:12 +0000 Manifest next update: Thu 28 Nov 2024 04:44:12 +0000 Files and hashes: 1: MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl (hash: F+letx61nCVvs7HspS4bRvv6LZifvMygaaQGy83MkQI=) 2: 4FCB21E6E05211EE8AEC805CC4F9AE02.roa (hash: +YBZ5ZIb6u7/Qx6y05kFQ2mmnk33q8W1HFBaQuaUJcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Validity Not Before: Nov 21 04:44:12 2024 GMT Not After : Nov 28 04:44:12 2024 GMT Subject: CN=673eba9c-d894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:9e:e4:4a:49:c4:05:f3:e5:bc:3f:b4:4d: f7:a6:3e:e8:0e:d6:fe:5b:35:6f:c4:d6:50:6c:a3: b1:b5:fd:98:92:0e:e8:48:95:2c:e2:ce:7b:a8:32: 2b:3d:b8:83:3c:2b:b2:27:98:c1:3b:a1:bd:29:c0: 0c:f2:65:b4:59:15:4e:72:98:a3:29:6d:7c:b2:20: 0b:99:47:b6:3d:05:f3:ef:09:a6:7b:ad:19:d3:a4: aa:a6:0c:51:2d:e7:1a:26:7f:aa:8b:37:0c:cf:69: 0b:68:d9:ba:28:c1:78:eb:e4:74:b8:5d:1b:4d:9f: 90:c2:42:c7:b7:16:c3:c2:74:6c:12:95:d4:ec:bc: 78:9b:5b:87:6d:a7:de:84:b5:80:2a:5b:9f:dc:ea: 2c:cf:fb:3e:01:d8:15:a7:9b:74:61:45:bc:57:8a: 2e:50:b5:a2:a6:45:13:5f:7a:86:47:ad:7b:55:69: 23:e2:d7:f9:17:18:e2:84:92:5c:10:a1:fa:e6:e3: 2d:89:bc:74:4b:ae:04:6f:1a:12:ec:ec:db:ca:5d: 7a:5d:3a:07:b6:0e:75:3f:f2:0d:48:07:74:d1:a3: 41:57:c1:05:ac:60:cf:62:ac:31:9b:0b:17:23:61: db:61:71:3c:a5:f9:55:19:99:f1:e9:f0:be:8c:fb: cb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EF:80:DD:D4:2A:CF:36:0D:8D:CD:3C:E7:0D:08:BB:DD:2D:F3:37 X509v3 Authority Key Identifier: keyid:31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:fd:a9:20:01:16:d1:3d:91:a7:32:49:4a:22:ec:0e:80:ad: 86:24:e1:c4:cd:a6:ff:ff:f0:74:b4:1f:45:83:be:3b:e9:cc: e5:30:1a:17:4f:04:e9:53:e7:fb:80:aa:91:e4:72:f9:00:fe: 03:bc:56:38:36:b3:ac:d2:49:08:59:af:a4:f9:e5:0d:f6:48: 46:84:5b:e2:7a:4f:aa:93:a7:fe:45:c4:0d:8c:20:d2:ce:55: 5d:98:78:e7:fd:75:6a:5d:84:81:72:90:cd:da:2b:78:01:e8: 97:58:2a:3f:50:3e:12:44:4b:99:73:68:be:63:cd:29:9e:fa: 20:92:95:75:78:1e:9e:c8:01:cc:a7:81:1e:3a:85:30:0f:9a: b3:9c:a9:32:f1:ff:3d:6a:0b:a6:98:43:c4:e9:d5:be:66:79: 2f:6a:74:49:14:5b:05:62:ea:3c:6e:d6:6f:d1:8e:b3:3b:ca: 40:9e:96:cc:81:da:d3:25:7c:bc:87:2d:04:1d:f0:db:13:e0: 09:41:53:fb:b0:4a:c8:44:c3:32:7c:dd:b5:11:fe:ff:11:76: 07:dd:5e:d5:d7:bf:5e:d4:d0:6c:71:13:4d:ba:8f:a1:ee:d3: 75:60:f7:b2:93:0c:f3:e3:88:84:4b:d1:71:96:b3:15:f1:c0: 9e:76:76:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3OEIxMTAvBgNVBAUTKDMxODU1M0VEMDlDMjAwOTU4Q0IxNURDQ0UyNzdDQzQ4 QUE0MkEzODgwHhcNMjQxMTIxMDQ0NDEyWhcNMjQxMTI4MDQ0NDEyWjAYMRYwFAYD VQQDEw02NzNlYmE5Yy1kODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNue5EpJxAXz5bw/tE33pj7oDtb+WzVvxNZQbKOxtf2Ykg7oSJUs4s57qDIr PbiDPCuyJ5jBO6G9KcAM8mW0WRVOcpijKW18siALmUe2PQXz7wmme60Z06SqpgxR LecaJn+qizcMz2kLaNm6KMF46+R0uF0bTZ+QwkLHtxbDwnRsEpXU7Lx4m1uHbafe hLWAKluf3Oosz/s+AdgVp5t0YUW8V4ouULWipkUTX3qGR617VWkj4tf5FxjihJJc EKH65uMtibx0S64EbxoS7Ozbyl16XToHtg51P/INSAd00aNBV8EFrGDPYqwxmwsX I2HbYXE8pflVGZnx6fC+jPvLFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjvgN3U Ks82DY3NPOcNCLvdLfM3MB8GA1UdIwQYMBaAFDGFU+0JwgCVjLFdzOJ3zEiqQqOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzc4Qi9DMTNBQTc3NkUw NTExMUVFQjVCMDkyNUJDNEY5QUUwMi9NWVZUN1FuQ0FKV01zVjNNNG5mTVNLcENv NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01ZVlQ3UW5DQUpXTXNWM000bmZNU0twQ280Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzc4Qi9DMTNBQTc3NkUwNTExMUVFQjVCMDkyNUJDNEY5QUUwMi9NWVZUN1FuQ0FK V01zVjNNNG5mTVNLcENvNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn/akgARbRPZGnMklKIuwOgK2GJOHEzab///B0tB9Fg7476czlMBoX TwTpU+f7gKqR5HL5AP4DvFY4NrOs0kkIWa+k+eUN9khGhFviek+qk6f+RcQNjCDS zlVdmHjn/XVqXYSBcpDN2it4AeiXWCo/UD4SREuZc2i+Y80pnvogkpV1eB6eyAHM p4EeOoUwD5qznKky8f89agummEPE6dW+ZnkvanRJFFsFYuo8btZv0Y6zO8pAnpbM gdrTJXy8hy0EHfDbE+AJQVP7sErIRMMyfN21Ef7/EXYH3V7V179e1NBscRNNuo+h 7tN1YPeykwzz44iES9FxlrMV8cCednab -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:52 2024 by rpki-client on console-fra.rpki-client.org