$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: 0mQfYUjUtaW3qQ/U55ilEaZZMa8pWNCDL+ulyhj9YIo= Subject key identifier: D5:E2:A2:25:C6:48:7D:EA:3A:97:2A:9E:FE:D0:6A:D4:20:1A:53:8A Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0B37 Signing time: Fri 22 Nov 2024 18:57:58 +0000 Manifest this update: Fri 22 Nov 2024 18:57:58 +0000 Manifest next update: Fri 29 Nov 2024 18:57:58 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: VP05+DnmSqXG1WCyBwkO/t1+XzYo/vuRutgJOwwMZno=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: ukt0pxqY8ok4zBKJR2dRuTwyGN5+UeLkjnvL96GEj4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Validity Not Before: Nov 22 18:57:58 2024 GMT Not After : Nov 29 18:57:58 2024 GMT Subject: CN=6740d436-e3db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1d:00:34:6d:c6:65:99:0f:f7:01:c7:93:b9: 93:8b:33:75:08:b9:6a:11:fe:54:3d:96:04:ff:f4: 99:88:2a:0f:58:f7:eb:02:35:91:c6:5b:06:3b:1a: a8:c6:3d:32:9c:c5:35:67:73:2a:4a:99:6b:5a:58: dd:64:b0:8e:64:a4:49:83:36:b8:b1:02:1b:fd:cd: 41:d6:cc:cb:58:46:dc:4b:16:85:fd:2d:7f:0b:76: 02:26:e4:a9:ea:5d:b4:bc:c3:80:9e:fb:6f:8b:83: 35:15:9a:27:81:17:0f:80:98:b2:c7:57:7e:7b:d2: 49:00:d6:e9:0e:d8:80:ca:fc:50:71:5a:6d:74:67: 91:c0:a4:6b:1b:71:bb:f6:5f:78:8c:b1:93:40:e5: b2:17:41:23:57:e2:74:30:fc:3c:e9:bd:b7:4b:49: 30:6a:5a:d4:02:a0:b6:7e:23:84:01:f4:08:02:b3: 72:08:89:f8:46:f9:34:47:1e:6e:65:b0:fe:3e:66: 3b:06:0b:2d:e8:cf:53:22:07:3e:d4:2f:d3:d3:40: 75:f2:87:d3:38:12:9b:cd:d1:62:ed:ce:4d:5f:16: 9d:79:68:57:42:37:bc:49:41:cf:e6:e8:d9:a6:42: dd:23:ee:a1:85:57:ea:bf:22:5b:e8:a8:30:c3:40: 37:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E2:A2:25:C6:48:7D:EA:3A:97:2A:9E:FE:D0:6A:D4:20:1A:53:8A X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e2:8f:a2:87:5e:5d:82:7f:4a:8d:14:04:06:b4:9f:cc:b1: 75:ac:ed:7e:7b:e9:4b:f9:a4:50:87:3e:e8:e7:c4:ba:04:83: da:ad:a2:96:9e:3e:8a:30:f3:27:70:68:f3:7c:3c:9f:8e:17: 46:2e:46:9c:52:d5:49:e4:95:5e:1d:a4:9d:2d:38:c0:d3:94: 4f:4f:7c:fd:41:55:6d:7f:69:d5:f5:24:eb:1e:64:d6:6b:35: dc:2e:18:be:00:be:59:72:ca:47:d9:7b:fe:32:01:8e:cd:a2: 92:7a:66:d5:98:3b:85:66:5f:86:bb:44:61:16:8a:7e:1c:23: aa:f8:76:2f:1a:5e:ce:de:22:a0:14:fd:44:44:1d:0c:ed:3a: db:eb:0f:5b:e1:4d:b6:3b:b8:f2:9a:29:c1:da:3d:f8:e3:96: f7:5c:ac:86:84:7e:8a:75:0a:16:7f:9a:a6:2d:05:ab:8b:ad: 83:f3:c4:66:20:e1:61:7c:c7:d9:44:1d:f0:9b:12:8b:11:9f: 6b:41:e5:16:11:34:fb:b1:39:31:05:25:cf:fe:e0:b8:03:89: 90:5f:35:d3:47:df:23:f0:10:8b:13:de:64:62:75:55:f7:e7: 5b:41:ef:e1:ec:bd:52:07:d5:d8:43:48:83:07:a3:d1:ed:ae: 67:ff:34:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjQxMTIyMTg1NzU4WhcNMjQxMTI5MTg1NzU4WjAYMRYwFAYD VQQDEw02NzQwZDQzNi1lM2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzh0ANG3GZZkP9wHHk7mTizN1CLlqEf5UPZYE//SZiCoPWPfrAjWRxlsGOxqo xj0ynMU1Z3MqSplrWljdZLCOZKRJgza4sQIb/c1B1szLWEbcSxaF/S1/C3YCJuSp 6l20vMOAnvtvi4M1FZongRcPgJiyx1d+e9JJANbpDtiAyvxQcVptdGeRwKRrG3G7 9l94jLGTQOWyF0EjV+J0MPw86b23S0kwalrUAqC2fiOEAfQIArNyCIn4Rvk0Rx5u ZbD+PmY7Bgst6M9TIgc+1C/T00B18ofTOBKbzdFi7c5NXxadeWhXQje8SUHP5ujZ pkLdI+6hhVfqvyJb6Kgww0A3AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXioiXG SH3qOpcqnv7QatQgGlOKMB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY4o+ih15dgn9KjRQEBrSfzLF1rO1+e+lL+aRQhz7o58S6BIParaKW nj6KMPMncGjzfDyfjhdGLkacUtVJ5JVeHaSdLTjA05RPT3z9QVVtf2nV9STrHmTW azXcLhi+AL5ZcspH2Xv+MgGOzaKSembVmDuFZl+Gu0RhFop+HCOq+HYvGl7O3iKg FP1ERB0M7Trb6w9b4U22O7jyminB2j3445b3XKyGhH6KdQoWf5qmLQWri62D88Rm IOFhfMfZRB3wmxKLEZ9rQeUWETT7sTkxBSXP/uC4A4mQXzXTR98j8BCLE95kYnVV 9+dbQe/h7L1SB9XYQ0iDB6PR7a5n/zRH -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:55 2024 by rpki-client on console-fra.rpki-client.org