$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json) Hash identifier: Y9lZSeGoXsjTt21ytbTIoX/T8ovOGPH/ASdBLG9KKhQ= Subject key identifier: 5B:A5:F5:CB:2A:BE:EA:DE:D6:1D:32:94:07:67:E2:B0:46:A5:9F:D0 Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft Manifest number: 02BF Signing time: Thu 21 Nov 2024 01:00:45 +0000 Manifest this update: Thu 21 Nov 2024 01:00:44 +0000 Manifest next update: Thu 28 Nov 2024 01:00:44 +0000 Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: P7U0JPWrJpGvfGN77RXCel96Mm0XztCkoZXSKhtEnDw=) 2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: 2IeO54Cp6b06u4xrChfhugqf5OR3NU+qoLsUiOOPr8M=) 3: B1CE8816650411EEBE8D4512C4F9AE02.roa (hash: xl/v3HFE5XZWMUy9IIOzuRvTobJH6hv4JoT6vWaFF1Q=) 4: 9389FFE8650411EE80570A12C4F9AE02.roa (hash: IhHnqIJSUKHQvAUemNA8DV1wdnkLH6BV1/tBV7gGepE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC Validity Not Before: Nov 21 01:00:44 2024 GMT Not After : Nov 28 01:00:44 2024 GMT Subject: CN=673e863d-3628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:a6:30:44:2a:18:4c:f4:74:c7:88:78:52: 53:2f:36:65:cc:0a:35:d0:a9:8c:3a:63:e4:0a:c2: 9c:05:e6:ec:44:53:94:47:eb:2b:ee:35:53:e8:85: 35:b4:50:b6:13:0c:a4:6b:24:8e:c5:f9:8d:64:48: 42:50:b6:c9:87:72:e0:d5:2c:0d:42:55:c9:a4:b5: b6:d5:d5:95:27:8c:25:b4:61:9e:68:e8:92:48:14: bd:4e:00:2b:fc:d4:62:90:c9:26:cf:61:ae:4d:b9: be:19:d3:18:ff:11:22:b5:56:a8:08:71:55:23:01: 85:3b:71:68:1e:6a:2d:4d:ad:f1:41:f1:5f:e9:92: c9:a9:a0:27:0c:8c:12:fd:2d:fc:55:21:2a:8b:0f: fe:5d:1a:9d:a0:09:3a:99:c6:1d:e1:52:88:66:47: ef:53:b8:f1:cd:b8:9f:dd:cf:6a:76:f5:66:ae:ad: a4:4b:dc:0d:f4:69:e2:11:70:39:44:cc:4e:60:28: 1c:fd:21:b7:d8:83:eb:47:5f:7e:7c:40:b4:5c:aa: 69:d2:ef:42:c2:5a:87:05:e5:5a:48:9f:d0:9a:39: c3:74:e6:25:57:f6:2f:89:5b:c3:85:80:d7:21:dc: bc:0e:10:a6:11:5d:c2:88:69:06:ec:a5:0a:41:19: 50:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A5:F5:CB:2A:BE:EA:DE:D6:1D:32:94:07:67:E2:B0:46:A5:9F:D0 X509v3 Authority Key Identifier: keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:10:a0:95:db:06:b5:0c:a2:80:ae:22:5f:87:ba:63:d2:f6: 4b:e0:2a:f1:b8:f6:10:6f:fb:9f:ef:2e:08:d4:94:ad:4a:2b: 80:23:f6:56:b0:93:ea:19:ec:cb:f4:37:c9:6f:c3:97:07:ff: 70:4b:60:a8:3e:4d:f5:e2:fd:21:24:45:49:e3:9f:51:0d:e4: 7a:f7:dd:ba:69:15:30:97:22:ea:f1:58:ba:a8:22:08:20:12: a4:b4:67:5b:5d:22:07:45:d2:24:78:81:3a:a0:22:22:5e:12: 9b:66:b8:9d:54:b0:a7:e4:59:4d:d1:d8:6b:c3:81:e7:30:90: a3:6d:b3:6c:41:82:89:82:cd:78:1b:8a:af:1b:bc:f0:af:1a: 66:01:f1:40:72:03:4d:6c:87:88:80:af:fc:64:89:25:77:68: 19:db:cc:6c:45:0f:03:b6:34:af:4f:f8:90:90:60:5d:45:7b: 95:96:9a:69:db:06:a8:c7:69:ba:65:76:21:1e:84:58:f9:b5: 0d:52:32:8f:78:5f:a6:c5:df:3b:03:1f:af:34:f0:3f:a2:2d: 64:1b:2c:cb:73:dd:81:9a:54:a0:c1:c8:37:d8:36:41:83:5d: 5e:aa:fd:ea:ea:51:f4:4a:3f:9f:3a:2f:ad:93:d9:5e:99:47: 4c:3e:1c:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1NzkxMTAvBgNVBAUTKEM3RURGQjc1N0Y1OTRCREYyM0FERDcxMjFGNURCRTNE MjVBRTAwRkMwHhcNMjQxMTIxMDEwMDQ0WhcNMjQxMTI4MDEwMDQ0WjAYMRYwFAYD VQQDEw02NzNlODYzZC0zNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ2mMEQqGEz0dMeIeFJTLzZlzAo10KmMOmPkCsKcBebsRFOUR+sr7jVT6IU1 tFC2EwykaySOxfmNZEhCULbJh3Lg1SwNQlXJpLW21dWVJ4wltGGeaOiSSBS9TgAr /NRikMkmz2GuTbm+GdMY/xEitVaoCHFVIwGFO3FoHmotTa3xQfFf6ZLJqaAnDIwS /S38VSEqiw/+XRqdoAk6mcYd4VKIZkfvU7jxzbif3c9qdvVmrq2kS9wN9GniEXA5 RMxOYCgc/SG32IPrR19+fEC0XKpp0u9CwlqHBeVaSJ/QmjnDdOYlV/YviVvDhYDX Idy8DhCmEV3CiGkG7KUKQRlQDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFul9csq vure1h0ylAdn4rBGpZ/QMB8GA1UdIwQYMBaAFMft+3V/WUvfI63XEh9dvj0lrgD8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODU3OS8wMTc2MDNGQ0NF QjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5OGpyZGNTSDEyLVBTV3VB UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtMzdkWDlaUzk4anJkY1NIMTItUFNXdUFQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODU3OS8wMTc2MDNGQ0NFQjIxMUVDQUUwMDE4MjNDNEY5QUUwMi94LTM3ZFg5WlM5 OGpyZGNTSDEyLVBTV3VBUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/EKCV2wa1DKKAriJfh7pj0vZL4CrxuPYQb/uf7y4I1JStSiuAI/ZW sJPqGezL9DfJb8OXB/9wS2CoPk314v0hJEVJ459RDeR69926aRUwlyLq8Vi6qCII IBKktGdbXSIHRdIkeIE6oCIiXhKbZridVLCn5FlN0dhrw4HnMJCjbbNsQYKJgs14 G4qvG7zwrxpmAfFAcgNNbIeIgK/8ZIkld2gZ28xsRQ8DtjSvT/iQkGBdRXuVlppp 2waox2m6ZXYhHoRY+bUNUjKPeF+mxd87Ax+vNPA/oi1kGyzLc92BmlSgwcg32DZB g11eqv3q6lH0Sj+fOi+tk9lemUdMPhyF -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:09 2024 by rpki-client on console-fra.rpki-client.org