$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft File: O4dpDvQFVnODtvcv3TARYM6CHys.mft (raw, json) Hash identifier: Wzl1gmd5xvLDEc+RcYrcCayT8aLqlHlLfPXp59l3kIM= Subject key identifier: D8:7B:DE:10:F8:56:7A:02:22:D2:BB:F1:28:D6:84:D2:E8:61:EE:03 Authority key identifier: 3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B Certificate issuer: /CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft Manifest number: 01C8 Signing time: Sat 23 Nov 2024 01:45:09 +0000 Manifest this update: Sat 23 Nov 2024 01:45:08 +0000 Manifest next update: Sat 30 Nov 2024 01:45:08 +0000 Files and hashes: 1: O4dpDvQFVnODtvcv3TARYM6CHys.crl (hash: xV9ONc2FFqdvKgtTwo6NMd1C79gSMQmOGP6bIisptZ8=) 2: F9424C6C80FA11ED9B35954DC4F9AE02.roa (hash: GNMO+8voOxNBOb5ixsUP/MtpdlZbS27Vb7o1TavyMdI=) 3: F86A2F7680FA11ED9B35954DC4F9AE02.roa (hash: vq0srwLbA5KHVy52W5biflCYsAzYNYb+3xV7SnajFW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD/serialNumber=3B87690EF405567383B6F72FDD301160CE821F2B Validity Not Before: Nov 23 01:45:08 2024 GMT Not After : Nov 30 01:45:08 2024 GMT Subject: CN=674133a4-bf61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:a3:6a:53:9a:9c:58:fb:9a:23:81:57:0d: 4d:62:38:f7:32:73:3d:dc:09:88:5e:65:c6:2b:e0: d8:d0:16:67:be:8f:e4:3d:08:1c:f8:21:8e:6e:99: 61:85:07:41:c5:eb:e8:e5:33:a5:0c:fc:39:c4:2f: 00:4a:2e:70:cb:b6:2c:91:77:a9:53:71:ef:31:7e: 04:8e:c6:b5:7b:bc:e6:4d:2d:1e:5d:d0:92:e3:5c: 27:3b:ec:f6:80:19:8c:70:76:98:3d:f9:43:54:36: 9d:e2:44:5f:7b:97:94:ea:27:8c:9e:b5:20:b8:2a: d6:de:d8:0e:64:04:2a:81:89:e6:6c:fc:9b:f7:20: 80:3d:23:8e:54:f4:5e:20:98:c0:e1:f2:4a:89:db: 83:90:2b:d3:bd:e5:d3:d0:79:b1:d6:39:ca:87:78: ae:e0:87:68:a6:4b:34:49:22:0d:d5:d8:15:21:2f: 05:db:e4:32:4b:78:7b:0b:bc:7f:8c:cd:a5:df:79: d8:00:01:6e:dc:1c:65:1a:de:c2:8c:39:25:86:c8: 08:ce:34:df:5e:6d:da:90:66:1b:63:18:30:8c:3b: 9b:06:eb:bc:38:c1:f1:39:99:a0:cb:30:a2:a4:9a: e5:8b:b8:03:3a:d7:02:76:96:0c:2b:c6:a5:db:07: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7B:DE:10:F8:56:7A:02:22:D2:BB:F1:28:D6:84:D2:E8:61:EE:03 X509v3 Authority Key Identifier: keyid:3B:87:69:0E:F4:05:56:73:83:B6:F7:2F:DD:30:11:60:CE:82:1F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O4dpDvQFVnODtvcv3TARYM6CHys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/43A511AE2CBE11ED99824B4CC4F9AE02/O4dpDvQFVnODtvcv3TARYM6CHys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:79:e3:f3:1b:af:c4:13:52:d6:f9:c6:59:56:22:a5:8e:9b: 42:d4:47:52:1b:99:6a:42:39:91:2c:87:64:9f:8d:68:3a:b6: 3c:4f:46:c6:4e:63:f8:13:00:80:75:78:ad:a0:5b:3b:af:f4: 56:4f:8f:7b:2d:b7:95:26:ea:75:e3:10:ff:6e:6e:21:d0:c4: 3c:d4:38:eb:50:27:ea:69:4a:94:ae:19:35:e9:62:6f:83:56: 39:65:dc:b1:70:45:84:08:8f:5a:10:1e:3d:24:4e:19:36:d4: d4:8c:77:97:c3:3c:77:5c:2b:e1:33:7d:bc:39:dd:dd:4c:18: 88:b1:ee:2a:3d:ff:93:0e:6a:d6:f2:79:4e:5e:0e:f6:04:2d: 82:a1:b3:50:82:67:4e:b6:35:ea:52:b5:57:4d:84:f9:e3:d5: e6:78:1d:3f:2f:1d:3b:5e:0f:91:f2:9b:3c:67:80:81:7c:c0: 05:98:9e:db:b5:87:d5:4a:26:43:63:05:0c:18:5c:e8:06:f4: 65:19:ce:35:9e:2a:78:a5:e0:98:2c:db:e9:be:98:c1:f1:a7: 22:39:5d:51:c1:1a:ff:0a:8e:6d:f0:83:1b:ab:39:d3:5f:80: 3c:a3:2f:b8:47:d2:70:4e:84:b0:a8:ab:51:22:3e:ef:db:78: a6:5f:87:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKDNCODc2OTBFRjQwNTU2NzM4M0I2RjcyRkREMzAxMTYw Q0U4MjFGMkIwHhcNMjQxMTIzMDE0NTA4WhcNMjQxMTMwMDE0NTA4WjAYMRYwFAYD VQQDEw02NzQxMzNhNC1iZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUejalOanFj7miOBVw1NYjj3MnM93AmIXmXGK+DY0BZnvo/kPQgc+CGObplh hQdBxevo5TOlDPw5xC8ASi5wy7YskXepU3HvMX4Ejsa1e7zmTS0eXdCS41wnO+z2 gBmMcHaYPflDVDad4kRfe5eU6ieMnrUguCrW3tgOZAQqgYnmbPyb9yCAPSOOVPRe IJjA4fJKiduDkCvTveXT0Hmx1jnKh3iu4Idopks0SSIN1dgVIS8F2+QyS3h7C7x/ jM2l33nYAAFu3BxlGt7CjDklhsgIzjTfXm3akGYbYxgwjDubBuu8OMHxOZmgyzCi pJrli7gDOtcCdpYMK8al2wcuJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNh73hD4 VnoCItK78SjWhNLoYe4DMB8GA1UdIwQYMBaAFDuHaQ70BVZzg7b3L90wEWDOgh8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80M0E1MTFBRTJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZuT0R0dmN2M1RBUllNNkNI eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL080ZHBEdlFGVm5PRHR2Y3YzVEFSWU02Q0h5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80M0E1MTFBRTJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9PNGRwRHZRRlZu T0R0dmN2M1RBUllNNkNIeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMeePzG6/EE1LW+cZZViKljptC1EdSG5lqQjmRLIdkn41oOrY8T0bG TmP4EwCAdXitoFs7r/RWT497LbeVJup14xD/bm4h0MQ81DjrUCfqaUqUrhk16WJv g1Y5ZdyxcEWECI9aEB49JE4ZNtTUjHeXwzx3XCvhM328Od3dTBiIse4qPf+TDmrW 8nlOXg72BC2CobNQgmdOtjXqUrVXTYT549XmeB0/Lx07Xg+R8ps8Z4CBfMAFmJ7b tYfVSiZDYwUMGFzoBvRlGc41nip4peCYLNvpvpjB8aciOV1RwRr/Co5t8IMbqznT X4A8oy+4R9JwToSwqKtRIj7v23imX4ek -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:51 2024 by rpki-client on console-fra.rpki-client.org