$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json) Hash identifier: o9A/LfcVEGBVytjACpmYZcPTv+IgyHl9nlcDbph00h8= Subject key identifier: 15:DC:CA:1D:78:5F:C1:F1:D7:EC:FA:0F:15:46:C8:1D:B4:19:CA:52 Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Certificate serial: 0768 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft Manifest number: 075F Signing time: Fri 22 Nov 2024 21:02:35 +0000 Manifest this update: Fri 22 Nov 2024 21:02:35 +0000 Manifest next update: Fri 29 Nov 2024 21:02:35 +0000 Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: pXpihUBQOMh+hN0i2CqXSCPVxvK55URV73XRj22gVB0=) 2: BAE25202230011EEB5448B3FC4F9AE02.roa (hash: O4U6QhNQohxpVwDyPSiufJNl5sO+U9ntn2l654JjT5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Validity Not Before: Nov 22 21:02:35 2024 GMT Not After : Nov 29 21:02:35 2024 GMT Subject: CN=6740f16b-7d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:48:8c:22:b0:d4:77:c2:03:8c:b7:62:58: 1f:b6:21:83:b1:85:77:4f:2e:17:9b:5a:bb:0e:94: f5:76:f2:ab:a5:33:c6:06:51:c0:35:7f:f7:b4:49: 97:97:21:0c:3c:60:da:8c:12:c8:b3:c9:1b:6c:5e: eb:a4:3f:77:61:53:41:d9:f8:01:02:ce:ca:7f:a7: 4e:d3:3d:20:44:0d:dc:9c:3a:24:bc:d9:9a:29:69: 3f:a4:6c:f8:b3:f8:32:2c:c5:28:56:a3:fc:16:55: 55:85:d1:0b:6a:a7:db:d6:ea:7e:f4:c2:bd:ac:17: 49:11:90:a0:18:43:ee:a9:cf:14:13:59:1c:80:bc: c0:f1:bf:fe:8d:7a:c7:41:fe:a6:3f:a0:a5:aa:75: ec:eb:e3:1b:62:fb:f4:f8:0a:d6:07:96:2c:61:88: 8c:60:28:87:8a:78:91:f5:25:de:f6:3e:31:df:f1: e7:f5:f5:55:8f:25:ae:b2:06:ac:d8:04:27:ad:c5: b7:db:49:26:05:42:4a:b6:2d:18:a5:a1:c7:9c:8e: 5b:17:79:79:b3:74:8b:e5:44:db:c3:24:be:a9:8e: ee:45:f5:45:cd:5a:02:26:2f:ba:d4:6a:4e:05:34: 78:d1:d5:cd:d0:34:a4:a4:cd:0c:ca:c0:07:67:56: d1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DC:CA:1D:78:5F:C1:F1:D7:EC:FA:0F:15:46:C8:1D:B4:19:CA:52 X509v3 Authority Key Identifier: keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:17:41:f2:26:e0:35:5a:ef:8d:1c:57:58:28:de:42:61:a0: 9b:ee:52:fa:e7:f1:42:41:2b:b6:73:b6:90:8d:71:67:8b:a8: 83:30:4e:39:51:77:8c:d5:41:d0:21:28:cd:a4:b8:fd:e1:20: 50:2b:77:65:d5:f7:e8:6c:5e:ae:91:e6:26:1a:e3:33:f6:c9: 77:e3:67:08:63:a5:9f:cf:a1:8c:08:ef:e3:4b:d5:57:cf:11: ad:07:33:37:2e:71:d9:7a:ad:5f:67:8c:00:d6:83:f8:c7:62: b5:79:2a:e1:95:3a:c1:c5:e4:e0:d5:d4:53:0d:59:91:b0:12: 5c:b0:2b:5c:d5:f2:5d:a4:89:78:41:d3:8b:5a:04:49:6d:2b: 62:2e:c8:09:5e:59:a2:94:1c:0d:43:c0:1d:9f:d3:7f:f6:73: 7a:36:1b:48:d9:d6:5d:f8:dd:1d:0a:61:f3:12:27:53:d8:66: 3f:13:f3:e0:73:1e:8b:1f:d8:54:c6:76:be:cb:56:71:a8:a8: 7a:4b:0d:07:3a:43:ab:b7:62:0b:b3:a0:9b:14:e3:84:1d:ac: bc:81:46:28:ee:af:d2:95:b0:91:e3:d6:16:40:01:ec:f7:c1: c6:0a:8e:08:56:e9:c4:f4:b0:60:87:59:56:33:38:32:db:3f: 12:5f:d3:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1RTkxMTAvBgNVBAUTKEJCNUFCQjU5RjMxN0FCN0NFOTU1NDFDQTVBQzUyRjIx N0ZFOTU5MzEwHhcNMjQxMTIyMjEwMjM1WhcNMjQxMTI5MjEwMjM1WjAYMRYwFAYD VQQDEw02NzQwZjE2Yi03ZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBhIjCKw1HfCA4y3YlgftiGDsYV3Ty4Xm1q7DpT1dvKrpTPGBlHANX/3tEmX lyEMPGDajBLIs8kbbF7rpD93YVNB2fgBAs7Kf6dO0z0gRA3cnDokvNmaKWk/pGz4 s/gyLMUoVqP8FlVVhdELaqfb1up+9MK9rBdJEZCgGEPuqc8UE1kcgLzA8b/+jXrH Qf6mP6ClqnXs6+MbYvv0+ArWB5YsYYiMYCiHiniR9SXe9j4x3/Hn9fVVjyWusgas 2AQnrcW320kmBUJKti0YpaHHnI5bF3l5s3SL5UTbwyS+qY7uRfVFzVoCJi+61GpO BTR40dXN0DSkpM0MysAHZ1bRAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBXcyh14 X8Hx1+z6DxVGyB20GcpSMB8GA1UdIwQYMBaAFLtau1nzF6t86VVBylrFLyF/6Vkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzVFOS9FNjk0RkM0QUZC RDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEzenBWVUhLV3NVdklYX3BX VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxcTdXZk1YcTN6cFZVSEtXc1V2SVhfcFdURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzVFOS9FNjk0RkM0QUZCRDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEz enBWVUhLV3NVdklYX3BXVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPF0HyJuA1Wu+NHFdYKN5CYaCb7lL65/FCQSu2c7aQjXFni6iDME45 UXeM1UHQISjNpLj94SBQK3dl1ffobF6ukeYmGuMz9sl342cIY6Wfz6GMCO/jS9VX zxGtBzM3LnHZeq1fZ4wA1oP4x2K1eSrhlTrBxeTg1dRTDVmRsBJcsCtc1fJdpIl4 QdOLWgRJbStiLsgJXlmilBwNQ8Adn9N/9nN6NhtI2dZd+N0dCmHzEidT2GY/E/Pg cx6LH9hUxna+y1ZxqKh6Sw0HOkOrt2ILs6CbFOOEHay8gUYo7q/SlbCR49YWQAHs 98HGCo4IVunE9LBgh1lWMzgy2z8SX9Ow -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:15 2024 by rpki-client on console-fra.rpki-client.org