$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft File: PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft (raw, json) Hash identifier: Hu4ttVFGG67IqplAS3sqiYhu5lHFtExJgRoLppTxHvY= Subject key identifier: 7F:BA:8E:A7:C2:DF:73:46:3C:FC:81:03:CA:23:C4:4F:C0:B9:29:1D Authority key identifier: 3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 Certificate issuer: /CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft Manifest number: 0131 Signing time: Sat 23 Nov 2024 02:52:14 +0000 Manifest this update: Sat 23 Nov 2024 02:52:13 +0000 Manifest next update: Sat 30 Nov 2024 02:52:13 +0000 Files and hashes: 1: PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl (hash: yT0tFD6JmCJC2b15Hliy/+0vQJscmN3h8xe845jjAhs=) 2: 650CB2EE081C11EFA47C4687C4F9AE02.roa (hash: A1/zPNq14u99ArX0Q61KCnQwIFfKUwlpWUZD/5n5WfY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B0D/serialNumber=3E9358DCF2C53F6621052B3AA852454E2FB31C18 Validity Not Before: Nov 23 02:52:13 2024 GMT Not After : Nov 30 02:52:13 2024 GMT Subject: CN=6741435d-9a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7a:89:3b:5c:6d:84:a7:63:64:62:52:f0:1c: 44:5d:fd:11:94:85:a3:35:90:9b:8d:6e:26:b3:0a: 21:03:d5:9a:61:9c:40:f7:40:ad:94:c9:a4:6f:a3: 5e:d1:c5:dd:80:c1:13:38:63:fe:23:c0:df:86:d3: 1e:a0:49:c8:4b:70:42:82:b2:e0:b3:29:33:49:80: 13:20:37:50:3f:d7:b6:1b:61:f1:54:07:90:b7:5b: 9b:57:87:6c:3c:3a:8b:30:b2:1c:1e:3c:6b:5d:74: 09:b0:9a:0a:aa:e4:c0:4f:fb:f8:57:10:7f:e1:80: 3d:c6:aa:a5:47:a9:5b:61:8b:56:99:30:84:1a:f1: a4:f1:00:a2:ea:03:66:c8:1e:ca:ce:b0:83:9c:b2: 66:22:52:a3:0d:b5:36:9d:c0:59:dc:19:37:d4:d0: 53:23:5b:20:38:03:68:ad:22:a1:36:83:a2:ba:46: b1:c0:0e:50:2d:2e:b3:a4:b9:07:62:e8:f4:88:4f: 28:9c:87:0b:c6:6b:2a:d2:9a:09:6f:de:93:28:30: e0:4c:f2:88:47:93:79:1a:68:8d:38:4f:34:64:fb: c0:ed:4f:b6:20:22:f1:34:9f:bd:26:10:14:70:00: 03:5e:24:9f:2b:cf:77:5f:26:6e:6a:3a:a5:cb:19: f3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BA:8E:A7:C2:DF:73:46:3C:FC:81:03:CA:23:C4:4F:C0:B9:29:1D X509v3 Authority Key Identifier: keyid:3E:93:58:DC:F2:C5:3F:66:21:05:2B:3A:A8:52:45:4E:2F:B3:1C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PpNY3PLFP2YhBSs6qFJFTi-zHBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B0D/909B79F0E52B11EDB2EB6585C4F9AE02/PpNY3PLFP2YhBSs6qFJFTi-zHBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:60:40:1a:55:35:87:4f:fd:e6:90:d0:c1:33:29:f2:5d:7e: a1:16:8c:1f:57:ac:e5:2f:ed:ca:b0:0d:2f:cf:68:51:21:60: 17:42:fe:92:00:28:4d:ed:eb:08:4b:53:63:ce:b1:bc:80:3e: 11:77:62:a9:68:e2:7d:27:94:d9:65:82:44:61:c2:41:1d:03: 12:b8:4c:8d:56:bf:e3:fb:81:f2:0d:13:4f:f1:74:3e:46:ae: 9f:5c:28:de:5c:8a:c2:ff:30:5a:d0:3b:7e:d1:53:3f:7b:6f: 21:f4:44:e3:54:6c:eb:64:cd:36:2d:66:b9:9b:bf:ad:75:a5: 13:3f:ae:a5:ff:5d:d1:f6:21:5a:b5:fe:a3:f4:95:8a:7d:88: 04:83:d3:48:da:ea:66:b6:93:b1:44:82:3d:b9:09:e8:aa:43: 42:e1:fe:3e:a1:39:59:5e:90:ad:9d:83:6d:11:a6:88:a3:e3: ee:1f:52:a9:c8:60:50:5d:5f:02:a1:a2:c0:e3:f9:89:9d:3e: bb:50:44:21:14:d0:0b:cb:51:2e:ce:07:51:a8:ac:52:b9:8b: c2:c2:59:a1:af:90:95:8c:a2:1d:5b:a7:0d:f2:b9:96:5b:a7: 7c:ef:40:c9:2e:85:28:78:ae:8a:bf:b2:d5:54:2f:8e:00:83: 9a:e0:62:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJCMEQxMTAvBgNVBAUTKDNFOTM1OERDRjJDNTNGNjYyMTA1MkIzQUE4NTI0NTRF MkZCMzFDMTgwHhcNMjQxMTIzMDI1MjEzWhcNMjQxMTMwMDI1MjEzWjAYMRYwFAYD VQQDEw02NzQxNDM1ZC05YTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HqJO1xthKdjZGJS8BxEXf0RlIWjNZCbjW4mswohA9WaYZxA90CtlMmkb6Ne 0cXdgMETOGP+I8DfhtMeoEnIS3BCgrLgsykzSYATIDdQP9e2G2HxVAeQt1ubV4ds PDqLMLIcHjxrXXQJsJoKquTAT/v4VxB/4YA9xqqlR6lbYYtWmTCEGvGk8QCi6gNm yB7KzrCDnLJmIlKjDbU2ncBZ3Bk31NBTI1sgOANorSKhNoOiukaxwA5QLS6zpLkH Yuj0iE8onIcLxmsq0poJb96TKDDgTPKIR5N5GmiNOE80ZPvA7U+2ICLxNJ+9JhAU cAADXiSfK893XyZuajqlyxnzEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+6jqfC 33NGPPyBA8ojxE/AuSkdMB8GA1UdIwQYMBaAFD6TWNzyxT9mIQUrOqhSRU4vsxwY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkIwRC85MDlCNzlGMEU1 MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAyWWhCU3M2cUZKRlRpLXpI QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BwTlkzUExGUDJZaEJTczZxRkpGVGktekhCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkIwRC85MDlCNzlGMEU1MkIxMUVEQjJFQjY1ODVDNEY5QUUwMi9QcE5ZM1BMRlAy WWhCU3M2cUZKRlRpLXpIQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYYEAaVTWHT/3mkNDBMynyXX6hFowfV6zlL+3KsA0vz2hRIWAXQv6S AChN7esIS1NjzrG8gD4Rd2KpaOJ9J5TZZYJEYcJBHQMSuEyNVr/j+4HyDRNP8XQ+ Rq6fXCjeXIrC/zBa0Dt+0VM/e28h9ETjVGzrZM02LWa5m7+tdaUTP66l/13R9iFa tf6j9JWKfYgEg9NI2upmtpOxRII9uQnoqkNC4f4+oTlZXpCtnYNtEaaIo+PuH1Kp yGBQXV8CoaLA4/mJnT67UEQhFNALy1EuzgdRqKxSuYvCwlmhr5CVjKIdW6cN8rmW W6d870DJLoUoeK6Kv7LVVC+OAIOa4GIl -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:45 2024 by rpki-client on console-fra.rpki-client.org