$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft File: giq84EQXvhV7KDO6OwIw3iOEwkA.mft (raw, json) Hash identifier: 8BsoAyZ9NIUJxWzpueYcP48jxW6btXP52LpHg3RYvGg= Subject key identifier: 52:BD:9C:68:69:35:FF:E1:6F:59:42:B4:48:EF:9D:CC:22:CA:52:67 Authority key identifier: 82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 Certificate issuer: /CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Certificate serial: 0B01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft Manifest number: 0AFB Signing time: Fri 22 Nov 2024 19:03:40 +0000 Manifest this update: Fri 22 Nov 2024 19:03:40 +0000 Manifest next update: Fri 29 Nov 2024 19:03:40 +0000 Files and hashes: 1: giq84EQXvhV7KDO6OwIw3iOEwkA.crl (hash: 6drH9GBUyPCKJXKulk+5HuNnfRqqSXKHoG100F9tB3s=) 2: BFB35A9831E011EA91E99C3CC4F9AE02.roa (hash: 0GHCZ6nEXf3be8gydYVqGJhj2BigeoKuyRGIxasVxbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FCC1/serialNumber=822ABCE04417BE157B2833BA3B0230DE2384C240 Validity Not Before: Nov 22 19:03:40 2024 GMT Not After : Nov 29 19:03:40 2024 GMT Subject: CN=6740d58c-983f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a6:9b:44:0a:dc:c0:d3:38:30:fb:79:56:d2: 4d:b2:64:0e:34:1b:98:b6:4a:54:aa:e0:6f:db:bb: a1:88:79:56:2d:1c:a5:2f:a9:9d:d0:bd:4d:c3:14: d5:09:83:03:4c:4c:21:e6:8b:d7:37:dd:1d:82:dd: 25:8c:86:32:66:1b:3b:b9:fd:22:0f:fb:70:33:b9: f4:54:8b:0d:15:cc:9e:31:d7:8f:e6:fd:e9:d5:b8: 5d:24:44:7b:94:12:de:98:9a:4b:bd:00:19:57:1d: cd:8c:7d:d6:73:b9:67:9f:6f:f5:21:3a:27:7b:d2: b6:00:db:31:09:e4:8c:52:60:c3:e9:65:46:ad:3c: 5c:7c:bf:b2:09:da:5e:3b:ea:3d:e5:d0:11:fd:0d: bc:b1:a4:9a:9b:8a:22:34:34:a3:2b:67:c6:ca:f2: 7f:d6:58:d9:67:44:cf:55:95:8c:b7:a7:c8:e5:bc: f5:0e:cf:cc:81:7e:3f:cf:c1:c0:96:a2:2a:81:b9: 16:65:da:d8:72:48:9d:aa:b0:54:fc:c4:8b:9b:03: 3b:d7:25:d8:7d:79:8d:09:cd:3d:39:90:5b:44:1c: de:79:47:a8:91:25:7a:bc:1e:f7:cb:df:3d:3b:91: 83:ac:73:ae:51:c9:7f:e3:de:b4:ab:82:92:3c:9b: c4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BD:9C:68:69:35:FF:E1:6F:59:42:B4:48:EF:9D:CC:22:CA:52:67 X509v3 Authority Key Identifier: keyid:82:2A:BC:E0:44:17:BE:15:7B:28:33:BA:3B:02:30:DE:23:84:C2:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/giq84EQXvhV7KDO6OwIw3iOEwkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCC1/1498FC9E31E011EA837BDE3BC4F9AE02/giq84EQXvhV7KDO6OwIw3iOEwkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ac:e8:a6:a5:68:5e:3e:b5:64:c8:57:1f:97:fc:0b:69:3e: 40:40:29:18:73:c6:11:ba:67:1f:a7:ed:e2:e8:f0:b1:0a:a5: a5:c6:73:98:11:6b:0b:b4:33:47:64:54:37:27:fb:ce:93:f4: db:1c:19:ef:8c:4d:aa:25:ea:7a:ed:78:f2:9e:00:d3:c1:d8: 45:e0:7a:18:4f:c4:45:b9:a6:87:90:29:55:8b:14:0b:51:59: 1b:a3:ae:3d:07:85:4f:3a:52:24:22:59:7a:a6:e4:67:3d:ed: 14:66:ab:8a:e1:f3:88:6f:64:c6:47:35:ee:a8:26:5f:1c:e0: 2f:14:1a:c8:65:c8:92:3b:23:e3:80:56:c7:53:ca:74:de:a1: 94:08:93:3d:b7:f0:6b:a3:42:99:8f:43:2c:86:59:ba:28:09: 4e:32:3a:eb:92:bf:fa:80:f5:1f:02:3c:70:e2:91:a6:90:e4: f4:4b:fb:09:bc:a8:a7:27:8a:33:dc:87:4c:23:f2:97:5e:a2: 71:ca:42:11:a7:c2:51:af:e5:03:04:a8:55:14:30:f5:f3:ac: f8:7d:a7:08:e0:71:84:4e:93:ce:5e:29:12:5f:c7:d6:ab:06: d7:d7:63:2e:f7:6e:7c:22:d6:fd:48:c5:76:cb:d7:75:fe:28: f2:d3:29:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZDQzExMTAvBgNVBAUTKDgyMkFCQ0UwNDQxN0JFMTU3QjI4MzNCQTNCMDIzMERF MjM4NEMyNDAwHhcNMjQxMTIyMTkwMzQwWhcNMjQxMTI5MTkwMzQwWjAYMRYwFAYD VQQDEw02NzQwZDU4Yy05ODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7aabRArcwNM4MPt5VtJNsmQONBuYtkpUquBv27uhiHlWLRylL6md0L1NwxTV CYMDTEwh5ovXN90dgt0ljIYyZhs7uf0iD/twM7n0VIsNFcyeMdeP5v3p1bhdJER7 lBLemJpLvQAZVx3NjH3Wc7lnn2/1ITone9K2ANsxCeSMUmDD6WVGrTxcfL+yCdpe O+o95dAR/Q28saSam4oiNDSjK2fGyvJ/1ljZZ0TPVZWMt6fI5bz1Ds/MgX4/z8HA lqIqgbkWZdrYckidqrBU/MSLmwM71yXYfXmNCc09OZBbRBzeeUeokSV6vB73y989 O5GDrHOuUcl/4960q4KSPJvEDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFK9nGhp Nf/hb1lCtEjvncwiylJnMB8GA1UdIwQYMBaAFIIqvOBEF74VeygzujsCMN4jhMJA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkNDMS8xNDk4RkM5RTMx RTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZoVjdLRE82T3dJdzNpT0V3 a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dpcTg0RVFYdmhWN0tETzZPd0l3M2lPRXdrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkNDMS8xNDk4RkM5RTMxRTAxMUVBODM3QkRFM0JDNEY5QUUwMi9naXE4NEVRWHZo VjdLRE82T3dJdzNpT0V3a0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4rOimpWhePrVkyFcfl/wLaT5AQCkYc8YRumcfp+3i6PCxCqWlxnOY EWsLtDNHZFQ3J/vOk/TbHBnvjE2qJep67XjyngDTwdhF4HoYT8RFuaaHkClVixQL UVkbo649B4VPOlIkIll6puRnPe0UZquK4fOIb2TGRzXuqCZfHOAvFBrIZciSOyPj gFbHU8p03qGUCJM9t/Bro0KZj0Mshlm6KAlOMjrrkr/6gPUfAjxw4pGmkOT0S/sJ vKinJ4oz3IdMI/KXXqJxykIRp8JRr+UDBKhVFDD186z4facI4HGETpPOXikSX8fW qwbX12Mu9258Itb9SMV2y9d1/ijy0yki -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org