$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: JXHvKD/+Ba8lDXL4i/9w92BnYfEY3TC7OJUIMTxPqZs= Subject key identifier: 57:DC:2D:27:10:6F:9C:7F:35:FE:60:37:9C:3B:2F:6E:95:D2:82:DC Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: D3 Signing time: Sat 23 Nov 2024 03:46:29 +0000 Manifest this update: Sat 23 Nov 2024 03:46:29 +0000 Manifest next update: Sat 30 Nov 2024 03:46:29 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: yl8S4/FQs2BQCtdsyjVD9qO/XmlhFQ3rIaBl2KO9gAE=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: uM3aIpNluGtsYzZphAI84X+sXAAc8YbQ0FM++FIKSB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Nov 23 03:46:29 2024 GMT Not After : Nov 30 03:46:29 2024 GMT Subject: CN=67415015-5853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:92:89:f8:2b:86:4e:50:46:da:23:92:f5: fe:be:ce:78:15:a7:3b:23:45:f3:05:31:93:e4:4c: b0:2a:7f:35:93:9c:55:2e:d5:f3:33:a9:a3:b7:97: 4e:47:3d:b8:ff:85:1b:fa:96:52:d6:20:75:48:a1: c6:6b:70:91:46:58:1b:e5:e8:af:a5:28:6c:63:b4: e7:c5:da:41:26:38:83:5d:e3:af:49:0f:06:42:db: eb:79:26:c7:73:96:41:66:dd:57:c5:57:af:52:a1: 21:69:1b:1d:40:80:ea:e5:73:fc:c9:3d:98:31:8d: 62:b4:36:2c:ea:54:7c:a7:32:4a:0a:36:8a:38:7b: ec:44:33:d4:fb:6e:cd:3b:8e:eb:cc:39:b6:4e:f6: 3e:23:54:e4:2c:01:4d:ed:3c:ad:9d:70:d9:4f:01: ee:59:85:4c:9d:0e:73:2e:3b:08:41:0f:6a:bb:66: 76:23:17:03:2b:3b:a3:4a:17:d7:42:c1:7f:11:da: 29:e4:01:25:a8:87:8e:56:91:12:b3:99:ec:aa:52: 4d:12:9f:16:18:bf:94:05:28:35:45:01:d0:61:8b: 16:60:fb:95:e7:d2:b2:0e:19:a0:cd:9c:a8:51:2d: 41:9a:be:ef:ae:2f:19:45:34:cc:0c:10:b7:7e:19: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DC:2D:27:10:6F:9C:7F:35:FE:60:37:9C:3B:2F:6E:95:D2:82:DC X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f4:1f:b9:d2:3d:9e:18:70:35:99:47:98:89:31:a0:97:bc: 80:3f:08:b7:c4:9b:42:8a:13:2d:d4:95:8f:7d:0f:05:40:0c: c0:fe:f5:3e:2d:b3:22:90:55:db:ed:6d:83:d9:85:e7:05:96: 36:6e:bc:67:21:76:00:d0:1d:fe:ec:fd:d2:90:40:75:a3:11: 3b:8c:44:a7:ba:f2:d2:26:be:3b:57:0b:de:9c:38:a0:5c:1a: c4:b0:cb:50:49:7e:f4:09:04:65:e9:78:48:78:f3:99:76:89: b9:df:0f:43:37:71:9f:9d:a3:bb:14:4c:be:4b:18:f2:aa:67: 63:43:e3:d0:bd:3b:97:a2:41:1c:1b:05:7d:6b:83:ef:25:71: 22:3f:c3:f8:f6:5b:73:b7:80:f9:f4:0c:ee:cc:e7:db:cc:3b: aa:7f:8e:a7:fe:b8:90:f5:02:12:77:19:b0:02:6d:ea:96:cd: dc:e2:b4:20:a0:cb:0a:75:db:61:47:99:b9:c3:9f:44:38:ea: a4:08:93:f9:80:b8:d3:92:a6:e1:ed:91:42:32:01:c6:7b:99: 89:fb:e2:06:e9:e8:9c:2f:ea:30:e8:3a:29:b3:8a:b1:69:95: 39:1c:15:18:0c:9b:aa:ae:cc:f2:1c:a1:c8:81:78:ea:3d:f4: 34:55:4e:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjQxMTIzMDM0NjI5WhcNMjQxMTMwMDM0NjI5WjAYMRYwFAYD VQQDEw02NzQxNTAxNS01ODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydSSifgrhk5QRtojkvX+vs54Fac7I0XzBTGT5EywKn81k5xVLtXzM6mjt5dO Rz24/4Ub+pZS1iB1SKHGa3CRRlgb5eivpShsY7TnxdpBJjiDXeOvSQ8GQtvreSbH c5ZBZt1XxVevUqEhaRsdQIDq5XP8yT2YMY1itDYs6lR8pzJKCjaKOHvsRDPU+27N O47rzDm2TvY+I1TkLAFN7TytnXDZTwHuWYVMnQ5zLjsIQQ9qu2Z2IxcDKzujShfX QsF/Edop5AElqIeOVpESs5nsqlJNEp8WGL+UBSg1RQHQYYsWYPuV59KyDhmgzZyo US1Bmr7vri8ZRTTMDBC3fhkNrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfcLScQ b5x/Nf5gN5w7L26V0oLcMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT9B+50j2eGHA1mUeYiTGgl7yAPwi3xJtCihMt1JWPfQ8FQAzA/vU+ LbMikFXb7W2D2YXnBZY2brxnIXYA0B3+7P3SkEB1oxE7jESnuvLSJr47VwvenDig XBrEsMtQSX70CQRl6XhIePOZdom53w9DN3GfnaO7FEy+SxjyqmdjQ+PQvTuXokEc GwV9a4PvJXEiP8P49ltzt4D59AzuzOfbzDuqf46n/riQ9QISdxmwAm3qls3c4rQg oMsKddthR5m5w59EOOqkCJP5gLjTkqbh7ZFCMgHGe5mJ++IG6eicL+ow6Dops4qx aZU5HBUYDJuqrszyHKHIgXjqPfQ0VU6F -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:44 2024 by rpki-client on console-fra.rpki-client.org