$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft File: VFxHwOQxMzjcm0QCwSuty06YV8E.mft (raw, json) Hash identifier: u1z3XSOfOf7otUkvziu0HkQZjs7dJ2SCGdO0WP4hL4o= Subject key identifier: E2:AD:26:15:02:92:81:3E:51:B5:07:72:66:7C:CC:8F:F8:82:56:F4 Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 Certificate issuer: /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft Manifest number: BD Signing time: Thu 21 Nov 2024 04:12:16 +0000 Manifest this update: Thu 21 Nov 2024 04:12:15 +0000 Manifest next update: Thu 28 Nov 2024 04:12:15 +0000 Files and hashes: 1: VFxHwOQxMzjcm0QCwSuty06YV8E.crl (hash: 7A9DvnwWw8k4fodWBdu83V/fxb4ZQLx+9p2WjPJpU5k=) 2: 77F8EAD29CF811EFA2E0CD6AC4F9AE02.roa (hash: y/yD0MDufxRC5QYBUpInnm0jihUmN3dO71suVvBFClY=) 3: 0F440AB26E7711EFAA4A1C1AC4F9AE02.roa (hash: jl6j4Zl1ySra6BuQln0dyvcQ4SJ2ODMpW1lq9LnWlSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1 Validity Not Before: Nov 21 04:12:15 2024 GMT Not After : Nov 28 04:12:15 2024 GMT Subject: CN=673eb320-2b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6c:00:f1:ce:ce:d7:12:22:0e:92:b9:c5:6d: ec:f0:be:4a:59:fd:50:c0:2c:1b:42:cd:85:6e:26: 7f:3b:b0:fc:3f:a2:a3:75:1d:97:cf:17:55:bc:0a: 15:6f:d0:b7:e8:1b:95:89:9b:a3:2d:30:56:94:1f: dc:89:7b:d5:64:d4:67:3e:74:dc:7b:bb:9a:66:94: 1b:a6:75:81:7e:ce:63:f1:60:f9:2e:63:43:f2:77: c2:c4:ee:dd:c5:84:c1:38:6e:ce:cf:60:d0:e9:fd: c2:72:fb:2b:72:36:aa:a2:e6:8d:eb:8c:fd:58:9e: ed:07:3b:8e:78:6b:36:c4:29:5a:3f:18:b5:4e:2c: 17:61:12:a3:c2:80:bc:16:51:0d:0c:4d:c3:b0:a2: 77:5f:d1:0c:c7:0d:87:c8:b7:af:52:40:d8:0c:8a: d4:ae:ca:dd:04:06:3c:ba:d2:cc:7b:5f:88:62:84: 8e:31:17:e7:d9:c3:84:9c:93:c7:89:66:23:8d:50: b8:bc:27:fd:65:3a:c5:80:68:80:8a:59:46:a3:9b: ef:d4:4a:43:7f:ff:35:a4:4e:bd:38:e4:b5:b3:40: 62:7b:37:5d:a1:5c:6d:6c:6b:22:17:dd:25:6c:4f: 0b:41:3f:2c:5e:71:3f:85:4d:3c:c3:63:1e:06:0d: f9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AD:26:15:02:92:81:3E:51:B5:07:72:66:7C:CC:8F:F8:82:56:F4 X509v3 Authority Key Identifier: keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:f2:6e:97:74:05:66:cc:21:a0:cd:b8:4b:71:6b:98:78:0a: 56:4b:bf:ef:7d:d6:60:cc:86:f4:82:d9:8f:4b:9b:27:23:74: 4f:10:3a:8e:cf:13:07:e5:4a:0e:90:26:c5:45:8f:a0:22:50: 30:04:09:66:a2:ce:57:d3:c4:06:e1:d8:3d:a8:72:ce:79:7d: 13:79:e3:37:43:56:b4:c6:1c:3d:55:28:2b:13:5a:0f:32:4d: 00:4a:ad:c7:12:4d:22:14:ac:ef:22:15:ab:74:d7:1a:37:16: 87:50:a0:59:24:f7:54:84:e7:24:11:d1:72:eb:cb:5c:46:9b: 91:2a:d3:3f:f2:24:68:db:a8:04:40:d4:03:a2:d0:98:a8:91: b3:d7:29:d3:72:b7:a4:a0:62:3f:60:06:e6:51:fc:34:c4:be: d9:13:1a:b6:06:8d:49:e0:70:12:7a:17:4e:fc:f2:39:1b:1b: 90:a5:2e:73:00:9c:ca:7a:5f:ff:1f:28:9e:be:75:70:ac:dd: f8:92:08:c7:7f:ef:59:ab:20:3a:39:5a:17:d0:a4:b6:39:61: f9:6f:17:49:d8:df:86:9f:ae:58:93:78:d4:97:a1:18:60:fb: de:84:77:9f:ff:f3:cf:6e:e1:72:06:65:9d:e3:fb:87:3d:39: 6a:28:e6:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIxMDMxMTAvBgNVBAUTKDU0NUM0N0MwRTQzMTMzMzhEQzlCNDQwMkMxMkJBRENC NEU5ODU3QzEwHhcNMjQxMTIxMDQxMjE1WhcNMjQxMTI4MDQxMjE1WjAYMRYwFAYD VQQDEw02NzNlYjMyMC0yYjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7WwA8c7O1xIiDpK5xW3s8L5KWf1QwCwbQs2FbiZ/O7D8P6KjdR2XzxdVvAoV b9C36BuViZujLTBWlB/ciXvVZNRnPnTce7uaZpQbpnWBfs5j8WD5LmND8nfCxO7d xYTBOG7Oz2DQ6f3CcvsrcjaqouaN64z9WJ7tBzuOeGs2xClaPxi1TiwXYRKjwoC8 FlENDE3DsKJ3X9EMxw2HyLevUkDYDIrUrsrdBAY8utLMe1+IYoSOMRfn2cOEnJPH iWYjjVC4vCf9ZTrFgGiAillGo5vv1EpDf/81pE69OOS1s0BiezddoVxtbGsiF90l bE8LQT8sXnE/hU08w2MeBg35yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKtJhUC koE+UbUHcmZ8zI/4glb0MB8GA1UdIwQYMBaAFFRcR8DkMTM43JtEAsErrctOmFfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjEwMy8yRkI5ODUwODkz RkIxMUVFOTY4RUU0NDJDNEY5QUUwMi9WRnhId09ReE16amNtMFFDd1N1dHkwNllW OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZGeEh3T1F4TXpqY20wUUN3U3V0eTA2WVY4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjEwMy8yRkI5ODUwODkzRkIxMUVFOTY4RUU0NDJDNEY5QUUwMi9WRnhId09ReE16 amNtMFFDd1N1dHkwNllWOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz8m6XdAVmzCGgzbhLcWuYeApWS7/vfdZgzIb0gtmPS5snI3RPEDqO zxMH5UoOkCbFRY+gIlAwBAlmos5X08QG4dg9qHLOeX0TeeM3Q1a0xhw9VSgrE1oP Mk0ASq3HEk0iFKzvIhWrdNcaNxaHUKBZJPdUhOckEdFy68tcRpuRKtM/8iRo26gE QNQDotCYqJGz1ynTcrekoGI/YAbmUfw0xL7ZExq2Bo1J4HASehdO/PI5GxuQpS5z AJzKel//HyievnVwrN34kgjHf+9ZqyA6OVoX0KS2OWH5bxdJ2N+Gn65Yk3jUl6EY YPvehHef//PPbuFyBmWd4/uHPTlqKOaI -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:09 2024 by rpki-client on console-fra.rpki-client.org