$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: Kys0a8zWaq+N3oyBIkv76nV8jHzFzLaRRd1G+VLgqHQ= Subject key identifier: 92:9F:CC:4C:03:F0:A7:16:14:6F:F2:C2:3E:21:B6:FE:97:C5:CF:76 Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: 37 Signing time: Sat 23 Nov 2024 05:34:45 +0000 Manifest this update: Sat 23 Nov 2024 05:34:44 +0000 Manifest next update: Sat 30 Nov 2024 05:34:44 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: 6SGMAtWemO2UasSMyEIGNpzsJ5QJjVd4kYzsNxyaTBA=) 2: A0F2A674602D11EFB3EDC17DC4F9AE02.roa (hash: Y0SprfGXuk9ZeZpLIRYztGI2XRTzed8i4vqaqaJCMQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: Nov 23 05:34:44 2024 GMT Not After : Nov 30 05:34:44 2024 GMT Subject: CN=67416975-33ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:07:9a:f7:91:d7:44:2b:a4:04:00:7c:82: b3:77:f2:72:a6:77:9b:95:bd:9b:70:de:f7:dc:f8: 11:76:3e:64:9e:8e:97:83:9b:d4:47:d7:c5:ca:69: b2:97:6d:03:fb:fe:56:d4:3a:02:7e:b5:ad:74:ca: 89:1f:80:39:ac:87:1e:db:be:19:00:f8:79:ac:4b: 4e:0e:11:5b:c0:04:92:7d:69:67:37:b2:59:f6:46: 0e:e1:c9:15:59:98:8f:94:39:3e:77:70:c9:5f:91: fc:18:4a:34:85:5a:50:e6:34:08:16:e9:69:33:0e: 96:87:18:e7:9d:1c:da:fa:72:39:ff:a2:40:44:cd: 7b:df:d2:c0:9d:f7:5b:53:2a:08:cb:7d:50:0b:48: d3:c9:50:b4:5a:f4:2c:57:b8:39:c3:46:ab:80:60: a1:63:78:bb:1c:8b:ad:82:65:e5:2a:62:49:80:be: 45:aa:dd:67:2c:bf:54:ca:49:9f:07:0c:fc:6a:a1: 3c:60:14:9d:dd:62:cf:51:af:51:b0:20:48:7e:55: 18:49:5c:4c:88:42:5e:fe:aa:7a:ab:53:62:c7:f8: d3:32:7e:cc:f3:97:c9:bf:65:66:df:73:33:bd:12: 1c:ce:a3:c7:99:23:2b:bc:70:3c:ce:9d:ee:85:eb: dd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9F:CC:4C:03:F0:A7:16:14:6F:F2:C2:3E:21:B6:FE:97:C5:CF:76 X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5a:64:5f:e5:19:e0:85:ab:a4:72:43:dd:66:ed:3c:ee:8e: a9:fd:e2:8f:06:48:0d:19:07:2a:44:a8:6b:27:13:70:ef:3e: a8:36:a1:55:7e:6f:d2:c9:35:06:ef:84:e1:e4:22:13:49:9d: ce:6d:eb:36:61:3f:31:e9:0e:cb:0e:b1:6c:ab:34:7f:5a:d0: 3c:e8:47:96:b2:71:5a:41:9c:b3:60:9d:f2:a1:b9:3a:8d:a1: 84:0d:03:df:6a:91:92:4a:49:96:57:b9:43:d1:2d:56:c6:bf: b2:4b:fb:32:4c:1e:e3:45:e6:11:23:da:90:dc:75:3d:9c:10: 76:6a:19:a3:d3:39:35:7e:53:05:46:77:40:a1:b8:0d:1e:3f: 75:2d:fb:18:df:6c:64:7f:dc:e1:3e:05:51:a5:42:87:2a:17: 5d:dc:72:11:cc:ca:d5:45:01:45:5d:0a:7d:da:15:30:a6:b6: 8f:e2:45:87:83:3f:ee:16:cf:27:c5:dc:98:3d:ed:c2:82:4d: 86:69:ae:9d:a2:9a:6b:70:7f:d5:98:06:c9:7d:35:f2:85:f1: 30:79:9a:a8:24:b1:e9:13:22:d2:9a:34:d6:ce:71:48:50:23: 48:6f:ee:d7:c3:54:4f:82:8e:05:60:8c:88:22:7c:63:09:7e: aa:c5:69:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG Q0Y0NDExMC8GA1UEBRMoNjk5OEQ5QjUzMjdCQkY4OTRFRDU2MTk3QzQ3RUM4OTZG QUU1OUUzNDAeFw0yNDExMjMwNTM0NDRaFw0yNDExMzAwNTM0NDRaMBgxFjAUBgNV BAMTDTY3NDE2OTc1LTMzZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtmwea95HXRCukBAB8grN38nKmd5uVvZtw3vfc+BF2PmSejpeDm9RH18XKabKX bQP7/lbUOgJ+ta10yokfgDmshx7bvhkA+HmsS04OEVvABJJ9aWc3sln2Rg7hyRVZ mI+UOT53cMlfkfwYSjSFWlDmNAgW6WkzDpaHGOedHNr6cjn/okBEzXvf0sCd91tT KgjLfVALSNPJULRa9CxXuDnDRquAYKFjeLsci62CZeUqYkmAvkWq3Wcsv1TKSZ8H DPxqoTxgFJ3dYs9Rr1GwIEh+VRhJXEyIQl7+qnqrU2LH+NMyfszzl8m/ZWbfczO9 EhzOo8eZIyu8cDzOne6F693TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkp/MTAPw pxYUb/LCPiG2/pfFz3YwHwYDVR0jBBgwFoAUaZjZtTJ7v4lO1WGXxH7IlvrlnjQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDRjQ0Lzk0MTEwNjA0NjAy QzExRUY5N0Q3M0M1RkM0RjlBRTAyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5q US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYVpqWnRUSjd2NGxPMVdHWHhIN0lsdnJsbmpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD RjQ0Lzk0MTEwNjA0NjAyQzExRUY5N0Q3M0M1RkM0RjlBRTAyL2Faalp0VEo3djRs TzFXR1h4SDdJbHZybG5qUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI5aZF/lGeCFq6RyQ91m7Tzujqn94o8GSA0ZBypEqGsnE3DvPqg2oVV+ b9LJNQbvhOHkIhNJnc5t6zZhPzHpDssOsWyrNH9a0DzoR5aycVpBnLNgnfKhuTqN oYQNA99qkZJKSZZXuUPRLVbGv7JL+zJMHuNF5hEj2pDcdT2cEHZqGaPTOTV+UwVG d0ChuA0eP3Ut+xjfbGR/3OE+BVGlQocqF13cchHMytVFAUVdCn3aFTCmto/iRYeD P+4WzyfF3Jg97cKCTYZprp2immtwf9WYBsl9NfKF8TB5mqgksekTItKaNNbOcUhQ I0hv7tfDVE+CjgVgjIgifGMJfqrFaQM= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:32 2024 by rpki-client on console-fra.rpki-client.org