$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: C1OccQa09HAWfaQ+Gbxi0JnhIAOpY2lnBTGDhUSALW8= Subject key identifier: 20:3D:7C:A0:A4:12:E9:F5:1C:AE:12:20:89:0F:F2:88:BD:9B:A1:93 Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: 0109 Signing time: Sat 23 Nov 2024 03:08:50 +0000 Manifest this update: Sat 23 Nov 2024 03:08:50 +0000 Manifest next update: Sat 30 Nov 2024 03:08:50 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: F2MBMQxM6vM3Q9lYkJEWNfZ/WM8rWXjSngvZjB3jkZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: Nov 23 03:08:50 2024 GMT Not After : Nov 30 03:08:50 2024 GMT Subject: CN=67414742-454b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:27:b4:e8:c2:0e:74:2e:e9:d2:b9:94:63: 8f:4a:c6:f5:fa:80:7a:e7:75:55:77:1d:d2:4f:2a: 2d:c2:86:50:00:49:e1:a0:77:2b:f3:5d:a7:36:84: 72:f3:69:00:af:c4:b4:84:77:eb:39:d4:e1:d2:f9: b1:7a:1e:d5:29:ed:1c:56:fb:f0:d2:3c:4a:95:2e: d1:9e:6a:4a:ac:27:bf:49:ad:1f:df:17:d0:05:3d: 94:90:7b:95:fd:e4:6b:72:00:dc:e4:c5:c9:8a:fd: 64:db:47:5a:87:bd:c0:1b:8d:2b:e1:51:48:bb:d8: 66:f3:67:8e:26:9b:22:4d:2c:23:a3:57:b1:84:3f: 37:02:04:58:7a:6b:38:80:f9:38:e6:bd:ba:11:d4: 95:d8:fc:a9:e7:38:54:ba:ec:da:eb:f3:c3:1b:a5: 36:9e:56:90:16:ef:99:60:17:b7:2f:63:85:a1:ed: 91:44:32:95:5b:90:ec:93:31:41:d2:ab:4d:9f:c6: 2a:a6:e8:56:ef:b2:96:2d:f6:25:23:b8:cc:b6:25: 0d:7c:97:a5:06:1e:f9:3d:27:0b:cf:f6:25:a4:7b: c8:d8:e0:b5:93:64:f8:6a:33:05:2a:ab:54:83:f4: 70:03:18:12:62:3a:68:11:2b:a8:e7:70:38:43:2d: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3D:7C:A0:A4:12:E9:F5:1C:AE:12:20:89:0F:F2:88:BD:9B:A1:93 X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f1:90:d4:cb:8d:83:99:6a:f8:15:2b:68:b8:c8:d1:fc:fe: d2:95:b5:08:19:9a:46:be:76:77:b8:9d:0e:2e:df:5b:81:b5: e4:af:ae:0a:89:6b:9e:bf:4b:47:c4:6a:4a:77:a2:69:ef:46: 99:97:f8:63:ba:3a:c1:75:b1:57:92:fe:b6:3c:1f:40:b5:5b: b1:33:37:45:47:88:8b:18:29:05:8f:82:c4:91:23:70:8c:4b: f1:f1:71:91:12:2a:77:91:72:33:74:82:34:b3:bf:51:f7:38: 96:26:c4:a0:9a:2b:32:f9:2d:2c:76:51:ca:8b:78:ee:7a:84: 43:44:35:67:ad:55:a2:6c:22:ce:92:d0:13:b9:ef:c5:81:7a: be:f2:ad:20:f4:6d:d1:6f:2a:c4:60:4c:09:0f:6e:82:84:7e: f4:50:41:19:ef:5f:fd:3b:ba:0c:32:ab:06:ab:b6:9c:2f:28: e3:dc:35:19:f3:08:25:63:af:52:cc:d0:69:5f:0b:41:22:4b: a1:70:05:06:c9:64:bd:56:54:3b:f3:c0:71:4d:a2:85:0a:86: bd:b8:86:ea:17:e5:52:8d:f9:9c:f9:e2:ad:1d:4f:c9:35:a1: 30:a4:e8:e6:a7:ab:52:79:65:a0:05:05:95:c6:af:98:7d:75: c3:54:52:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjQxMTIzMDMwODUwWhcNMjQxMTMwMDMwODUwWjAYMRYwFAYD VQQDEw02NzQxNDc0Mi00NTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAou8ntOjCDnQu6dK5lGOPSsb1+oB653VVdx3STyotwoZQAEnhoHcr812nNoRy 82kAr8S0hHfrOdTh0vmxeh7VKe0cVvvw0jxKlS7RnmpKrCe/Sa0f3xfQBT2UkHuV /eRrcgDc5MXJiv1k20dah73AG40r4VFIu9hm82eOJpsiTSwjo1exhD83AgRYems4 gPk45r26EdSV2Pyp5zhUuuza6/PDG6U2nlaQFu+ZYBe3L2OFoe2RRDKVW5DskzFB 0qtNn8YqpuhW77KWLfYlI7jMtiUNfJelBh75PScLz/YlpHvI2OC1k2T4ajMFKqtU g/RwAxgSYjpoESuo53A4Qy2l7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCA9fKCk Eun1HK4SIIkP8oi9m6GTMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw8ZDUy42DmWr4FStouMjR/P7SlbUIGZpGvnZ3uJ0OLt9bgbXkr64K iWuev0tHxGpKd6Jp70aZl/hjujrBdbFXkv62PB9AtVuxMzdFR4iLGCkFj4LEkSNw jEvx8XGREip3kXIzdII0s79R9ziWJsSgmisy+S0sdlHKi3jueoRDRDVnrVWibCLO ktATue/FgXq+8q0g9G3RbyrEYEwJD26ChH70UEEZ71/9O7oMMqsGq7acLyjj3DUZ 8wglY69SzNBpXwtBIkuhcAUGyWS9VlQ788BxTaKFCoa9uIbqF+VSjfmc+eKtHU/J NaEwpOjmp6tSeWWgBQWVxq+YfXXDVFIV -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org