$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json) Hash identifier: ljeJq53ZyJ40UI9Mx9q6drxl4Hwy0jXJC+ir4PgbCpo= Subject key identifier: 31:0E:C9:88:4F:5E:E2:5B:E3:74:D0:16:3C:C0:08:D9:13:32:CE:95 Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft Manifest number: 01DE Signing time: Sat 23 Nov 2024 01:42:22 +0000 Manifest this update: Sat 23 Nov 2024 01:42:21 +0000 Manifest next update: Sat 30 Nov 2024 01:42:21 +0000 Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: tRTQq8HqQ/f8iK88LmngVwGACysXvZtpdAv5iVMrqpo=) 2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: IKMSMoP4FZHtjcEKMqFnrIo38xV8+ALkLijv5FtXb3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096 Validity Not Before: Nov 23 01:42:21 2024 GMT Not After : Nov 30 01:42:21 2024 GMT Subject: CN=674132fe-ac5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ff:33:03:18:29:ba:d5:9f:7e:1f:a5:0c:d1: 76:fc:9e:1c:43:36:d1:82:2f:b5:fc:fa:0f:da:5e: ea:50:81:29:a8:3b:83:86:f6:89:90:4c:a4:f1:f4: be:02:82:32:9b:d1:be:c5:98:a1:b0:0c:59:41:37: 24:9f:1f:cc:d8:e6:10:a0:f0:65:7e:3f:2f:8d:04: 9b:c8:f7:be:81:89:d4:ec:96:ce:11:65:74:cc:db: 57:c2:0c:1f:11:41:66:a3:55:1f:e4:ec:1e:4c:12: 24:ee:a3:65:1e:cb:c1:ea:1e:04:64:2d:c2:8a:20: 01:6e:ac:dd:14:1a:0e:a4:b0:b9:a2:6f:82:f8:61: 58:2e:ba:ae:8b:70:73:66:a5:41:c1:d7:a4:91:1c: 09:2b:dc:f0:03:ab:a7:4f:7f:63:d4:c2:db:06:4d: 16:08:cf:1f:38:74:27:1d:89:f1:74:cf:67:1b:b2: ed:a7:28:e8:dd:03:33:7d:94:3b:2e:45:b9:d5:18: 1b:98:d3:72:d5:46:bc:6b:e1:a3:13:53:d8:63:e9: e0:f5:e9:06:c0:51:c3:b9:64:e2:20:f1:b7:fb:50: e9:3c:7d:cb:c0:3f:f6:b0:2c:e9:3b:f8:07:e9:9c: 57:3e:fb:d1:9b:e2:62:a8:0e:9d:e2:3b:ba:89:2b: 1a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0E:C9:88:4F:5E:E2:5B:E3:74:D0:16:3C:C0:08:D9:13:32:CE:95 X509v3 Authority Key Identifier: keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:8a:94:d7:fc:26:aa:57:65:22:0d:04:8e:5f:22:ff:e2:e8: e6:fb:a3:d5:db:17:17:01:48:89:bb:0c:c6:d8:0b:12:60:98: a0:2b:c9:aa:e2:9d:3b:14:cf:48:bc:ae:e4:c3:d4:88:6f:89: ad:be:e3:9f:b7:40:54:cb:8f:7b:79:24:95:e3:ab:a0:c7:0c: 13:74:9c:d7:ab:e6:6a:12:e2:ca:83:04:44:4e:d8:c9:89:1a: a5:ad:7b:12:af:45:68:3a:0a:6a:9c:b8:c1:ac:4a:62:6f:b3: ae:5f:b2:b8:79:0f:2e:76:2d:5e:46:7d:59:3d:c0:b8:fe:c5: b1:d7:06:9b:48:42:04:bc:58:8e:4a:5a:3c:4f:c6:e0:98:4e: 50:b4:21:e5:d7:84:cf:c0:f8:6b:25:0d:d1:c6:58:67:90:5e: f9:e6:21:35:6b:7b:e9:0a:87:56:c1:f6:31:ed:7f:82:a0:c1: 95:14:61:57:81:8e:08:a2:78:88:e9:00:6d:32:f4:a7:15:6d: d1:10:cd:61:fa:7b:e1:cf:03:f5:38:d8:23:85:fc:99:a9:63: e7:a6:a3:90:94:28:c3:5f:0e:2f:a6:ab:06:c0:27:1a:02:3a: e8:c1:7e:19:70:fc:e0:9f:21:4e:4c:e9:eb:32:44:1e:01:3c: ff:8e:38:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCODkxMTAvBgNVBAUTKEJEMTZCNTY0MzJBRTVGNDMwMjVDNERBMTEzNDUzN0Y3 MDRFQjQwOTYwHhcNMjQxMTIzMDE0MjIxWhcNMjQxMTMwMDE0MjIxWjAYMRYwFAYD VQQDEw02NzQxMzJmZS1hYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4v8zAxgputWffh+lDNF2/J4cQzbRgi+1/PoP2l7qUIEpqDuDhvaJkEyk8fS+ AoIym9G+xZihsAxZQTcknx/M2OYQoPBlfj8vjQSbyPe+gYnU7JbOEWV0zNtXwgwf EUFmo1Uf5OweTBIk7qNlHsvB6h4EZC3CiiABbqzdFBoOpLC5om+C+GFYLrqui3Bz ZqVBwdekkRwJK9zwA6unT39j1MLbBk0WCM8fOHQnHYnxdM9nG7Ltpyjo3QMzfZQ7 LkW51RgbmNNy1Ua8a+GjE1PYY+ng9ekGwFHDuWTiIPG3+1DpPH3LwD/2sCzpO/gH 6ZxXPvvRm+JiqA6d4ju6iSsa9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEOyYhP XuJb43TQFjzACNkTMs6VMB8GA1UdIwQYMBaAFL0WtWQyrl9DAlxNoRNFN/cE60CW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUI4OS85NkQzQkE1QzI0 RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgwTUNYRTJoRTBVMzl3VHJR SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZSYTFaREt1WDBNQ1hFMmhFMFUzOXdUclFKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUI4OS85NkQzQkE1QzI0RUQxMUVEQjg2NzYxMThDNEY5QUUwMi92UmExWkRLdVgw TUNYRTJoRTBVMzl3VHJRSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhipTX/CaqV2UiDQSOXyL/4ujm+6PV2xcXAUiJuwzG2AsSYJigK8mq 4p07FM9IvK7kw9SIb4mtvuOft0BUy497eSSV46ugxwwTdJzXq+ZqEuLKgwRETtjJ iRqlrXsSr0VoOgpqnLjBrEpib7OuX7K4eQ8udi1eRn1ZPcC4/sWx1wabSEIEvFiO Slo8T8bgmE5QtCHl14TPwPhrJQ3RxlhnkF755iE1a3vpCodWwfYx7X+CoMGVFGFX gY4IoniI6QBtMvSnFW3REM1h+nvhzwP1ONgjhfyZqWPnpqOQlCjDXw4vpqsGwCca AjrowX4ZcPzgnyFOTOnrMkQeATz/jjh0 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:52 2024 by rpki-client on console-fra.rpki-client.org