$ rpki-client -vvf rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft File: 5v6wYDITaH99TA3YxdHl8ycflmo.mft (raw, json) Hash identifier: dWfCi5a8T5a2SVk7EvGRwXgGUzY5uC9/xX0znoyObmY= Subject key identifier: 30:F5:3E:0B:07:F8:82:DC:75:82:4B:C9:D2:DC:B1:2D:28:F6:4F:CA Authority key identifier: E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A Certificate issuer: /CN=A9117602/serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft Manifest number: 8F Signing time: Sat 23 Nov 2024 04:31:34 +0000 Manifest this update: Sat 23 Nov 2024 04:31:33 +0000 Manifest next update: Sat 30 Nov 2024 04:31:33 +0000 Files and hashes: 1: 5v6wYDITaH99TA3YxdHl8ycflmo.crl (hash: Hxwnycs7NnbiJptFrBWRwm9voSccd8t0BxPlkfitlWM=) 2: 1EF0CB38CEFB11EE9D1FB686C4F9AE02.roa (hash: TdWbrQouM5tMsxDZgyF71MAPlIDYzdDMiQL7lgFXRP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117602/serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A Validity Not Before: Nov 23 04:31:33 2024 GMT Not After : Nov 30 04:31:33 2024 GMT Subject: CN=67415aa6-f516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:cd:7b:26:c6:98:bd:e4:b6:95:04:d4:d4: ae:95:48:49:75:1c:6f:e8:3e:d4:86:b9:a8:17:79: 34:27:db:d6:ab:07:b8:9d:b7:11:b0:42:49:86:02: 7b:d3:f3:0a:54:c5:6c:23:6c:84:41:48:e4:a2:83: 8f:2f:27:d2:9c:af:ea:dd:eb:e4:0b:8b:67:fd:33: 4a:82:aa:3a:d8:ab:92:e2:05:d4:eb:e1:80:be:69: 80:ac:5a:c8:17:15:0e:7e:33:1e:d5:00:e7:90:01: 07:92:d9:94:01:23:67:4c:70:aa:89:74:b6:b6:45: 13:51:d7:8e:0a:85:ac:0b:69:74:b8:94:b8:bf:03: 85:14:6f:7a:3d:83:e9:76:ec:32:98:21:b7:22:e0: d3:c2:87:a7:bd:d7:27:d4:b7:e7:db:d4:7f:3f:a7: e0:17:dc:f2:6d:74:fa:4a:20:2e:70:cf:ef:3a:fd: bd:88:b8:11:38:3d:0b:8a:09:a5:20:f9:0a:3c:5b: 3b:c4:e8:e5:19:57:c1:85:76:fc:6d:5a:c9:ba:5b: 0e:87:35:4a:f2:c4:27:d6:46:f8:54:cf:6b:b1:5a: 9b:6b:27:dc:b0:23:f3:e0:23:99:fa:b2:39:41:38: 7a:7d:56:6b:9c:55:c5:a7:a1:56:64:79:c7:7e:45: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F5:3E:0B:07:F8:82:DC:75:82:4B:C9:D2:DC:B1:2D:28:F6:4F:CA X509v3 Authority Key Identifier: keyid:E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:9e:6c:ed:08:c7:a7:d3:ef:0a:b9:51:2a:69:7c:42:f9:93: 75:5d:66:80:6d:d0:c6:67:31:93:6c:36:c2:b4:81:8c:cb:a8: 1d:e1:f5:db:ff:f0:d2:e4:70:98:cf:37:b2:8b:bc:31:ef:30: f3:e3:c3:82:cd:21:b4:e6:51:73:2a:a9:f5:5c:eb:8f:be:7b: 5a:ed:28:91:a3:3d:62:36:96:15:a0:7c:0e:16:e9:f5:97:e9: 70:ba:43:90:31:8c:53:a5:75:23:99:bb:3e:4b:e6:79:29:00: 4c:10:b1:94:ff:fb:3d:a0:98:76:29:d5:ef:e4:d9:2a:d5:cd: 74:02:67:31:8c:bb:1d:fe:d5:da:0b:70:f6:6e:c2:17:2c:fb: f4:b0:ea:4b:fa:d7:88:91:9f:c9:1c:1c:f3:37:72:9e:2e:57: a7:64:3e:97:8c:aa:19:b4:55:97:36:72:86:97:08:02:8a:d0: 54:20:39:b6:dc:c6:9d:75:1e:a5:88:d8:96:b7:b0:3b:81:8d: f6:7b:3e:42:47:79:48:cb:a2:24:de:0c:44:da:a6:3c:16:ef: f0:ad:ec:5a:66:c8:66:8c:b8:5a:be:e6:1e:cf:ed:e6:6d:67: c3:08:bd:ee:d8:ea:98:b3:a9:b4:6f:77:5f:be:01:b2:34:34: 8b:24:43:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc2MDIxMTAvBgNVBAUTKEU2RkVCMDYwMzIxMzY4N0Y3RDRDMEREOEM1RDFFNUYz MjcxRjk2NkEwHhcNMjQxMTIzMDQzMTMzWhcNMjQxMTMwMDQzMTMzWjAYMRYwFAYD VQQDEw02NzQxNWFhNi1mNTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxffNeybGmL3ktpUE1NSulUhJdRxv6D7UhrmoF3k0J9vWqwe4nbcRsEJJhgJ7 0/MKVMVsI2yEQUjkooOPLyfSnK/q3evkC4tn/TNKgqo62KuS4gXU6+GAvmmArFrI FxUOfjMe1QDnkAEHktmUASNnTHCqiXS2tkUTUdeOCoWsC2l0uJS4vwOFFG96PYPp duwymCG3IuDTwoenvdcn1Lfn29R/P6fgF9zybXT6SiAucM/vOv29iLgROD0Ligml IPkKPFs7xOjlGVfBhXb8bVrJulsOhzVK8sQn1kb4VM9rsVqbayfcsCPz4COZ+rI5 QTh6fVZrnFXFp6FWZHnHfkVm/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDD1PgsH +ILcdYJLydLcsS0o9k/KMB8GA1UdIwQYMBaAFOb+sGAyE2h/fUwN2MXR5fMnH5Zq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzYwMi9BRUJDNUNGNkNF RkExMUVFOTdGODhDODVDNEY5QUUwMi81djZ3WURJVGFIOTlUQTNZeGRIbDh5Y2Zs bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2NndZRElUYUg5OVRBM1l4ZEhsOHljZmxtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzYwMi9BRUJDNUNGNkNFRkExMUVFOTdGODhDODVDNEY5QUUwMi81djZ3WURJVGFI OTlUQTNZeGRIbDh5Y2ZsbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0nmztCMen0+8KuVEqaXxC+ZN1XWaAbdDGZzGTbDbCtIGMy6gd4fXb //DS5HCYzzeyi7wx7zDz48OCzSG05lFzKqn1XOuPvnta7SiRoz1iNpYVoHwOFun1 l+lwukOQMYxTpXUjmbs+S+Z5KQBMELGU//s9oJh2KdXv5Nkq1c10AmcxjLsd/tXa C3D2bsIXLPv0sOpL+teIkZ/JHBzzN3KeLlenZD6XjKoZtFWXNnKGlwgCitBUIDm2 3MaddR6liNiWt7A7gY32ez5CR3lIy6Ik3gxE2qY8Fu/wrexaZshmjLhavuYez+3m bWfDCL3u2OqYs6m0b3dfvgGyNDSLJEPP -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:21 2024 by rpki-client on console-fra.rpki-client.org