$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft File: 6bez7TFz3kD-TB_m2P5CucvpyDM.mft (raw, json) Hash identifier: lGHFonsEQUZnyQWhM+JX4kt0/p5dBZPZdsP0wVdNorQ= Subject key identifier: A2:B8:07:1D:A5:91:F7:E5:B1:9C:9D:54:60:8E:7F:AC:CE:24:E0:D8 Authority key identifier: E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33 Certificate issuer: /CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft Manifest number: 32 Signing time: Sat 23 Nov 2024 05:34:38 +0000 Manifest this update: Sat 23 Nov 2024 05:34:37 +0000 Manifest next update: Sat 30 Nov 2024 05:34:37 +0000 Files and hashes: 1: 6bez7TFz3kD-TB_m2P5CucvpyDM.crl (hash: t55jwJefib1dgmvRGtua8Nt6HJgoLmnJpthtqxIIqWk=) 2: 367EF0645F9B11EFB904A774C4F9AE02.roa (hash: 3W7nBW0WrwwdyBp8pjE1mfPE0OY95LGfcdO49bT/mKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833 Validity Not Before: Nov 23 05:34:37 2024 GMT Not After : Nov 30 05:34:37 2024 GMT Subject: CN=6741696e-4437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:79:aa:ae:63:8b:7f:e5:2d:78:1c:34:7d: 0e:32:d5:62:94:e2:24:88:2c:b4:be:83:9c:69:ba: 0f:29:3f:b1:ff:9b:3d:67:25:40:1f:cf:5b:58:64: ee:bd:44:c6:63:27:5a:69:ff:5b:f2:d2:2e:43:3b: 11:a8:f3:70:47:27:1b:d4:14:20:c9:14:40:2f:36: 3e:87:e0:55:2d:18:74:51:9d:36:c4:c4:1f:c9:45: d3:37:dc:0e:d9:d8:c4:ae:dc:dd:68:d5:95:d4:05: aa:18:d2:27:ba:58:9b:a3:80:b0:46:48:68:3d:a5: 21:51:8a:00:d6:56:35:92:1c:33:7e:e2:ad:b1:21: 70:79:2e:e1:37:0f:06:2c:d2:75:bc:84:55:ab:d5: 9d:35:1f:28:8d:c1:ad:dc:a7:0c:c3:d2:e8:e9:23: bc:06:2f:c5:08:ed:ba:95:14:b6:79:f4:3a:b6:2c: 59:39:6f:6f:b1:55:95:6f:0f:e9:9e:7d:e2:8d:ff: e5:8c:e6:ad:8d:ad:b1:1c:9f:fb:b2:93:1b:7c:0c: f9:56:e9:9b:a4:19:91:a2:3b:2e:7d:31:fc:bd:17: 61:96:b1:25:05:75:09:dc:cb:7d:48:5d:10:5a:cc: d8:ee:8e:ad:e4:ab:05:4e:e8:5d:16:35:f7:d2:5c: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B8:07:1D:A5:91:F7:E5:B1:9C:9D:54:60:8E:7F:AC:CE:24:E0:D8 X509v3 Authority Key Identifier: keyid:E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:1c:93:ef:3e:f9:36:63:9a:c7:af:8f:b5:35:7e:e5:b9:14: 60:ef:c3:89:a7:0d:83:62:5e:75:3b:25:7e:50:0e:56:8d:8b: db:f0:df:68:b0:61:b3:be:36:7e:8c:43:3b:2c:65:ef:56:0a: 10:a8:96:5e:d0:23:e7:58:46:da:01:65:0e:25:a1:cd:98:6c: 0c:f8:55:23:f8:aa:01:21:86:a1:99:00:8b:6c:e7:2f:e3:05: 71:a2:db:52:94:14:94:03:42:ae:28:e3:13:77:b9:71:e2:36: 71:8a:3e:8b:e0:73:16:7c:62:50:4e:25:7a:bd:5f:02:1a:19: 90:34:f5:6d:2d:50:4c:63:d5:01:6c:d3:f9:a8:cd:b3:36:ef: 6b:b1:a1:80:a9:52:6d:af:77:b9:e0:fa:4e:66:9c:72:5e:8f: 7f:09:b2:0a:67:aa:98:34:f1:0e:b6:cd:71:f5:42:cc:05:95: 04:bb:f4:46:c5:1c:8a:63:dd:b4:25:69:57:b3:c0:0b:c9:36: 93:a2:fd:b1:cc:3d:13:b6:b3:31:7f:25:a5:7a:8a:e2:83:9c: 3a:02:03:26:16:5e:57:72:39:40:c0:49:a1:e4:03:5b:74:58: c3:31:23:cc:c0:69:4d:f2:6c:d6:27:e0:86:cb:07:23:5c:e1: 23:53:3e:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz N0UxMjExMC8GA1UEBRMoRTlCN0IzRUQzMTczREU0MEZFNEMxRkU2RDhGRTQyQjlD QkU5QzgzMzAeFw0yNDExMjMwNTM0MzdaFw0yNDExMzAwNTM0MzdaMBgxFjAUBgNV BAMTDTY3NDE2OTZlLTQ0MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCjnmqrmOLf+UteBw0fQ4y1WKU4iSILLS+g5xpug8pP7H/mz1nJUAfz1tYZO69 RMZjJ1pp/1vy0i5DOxGo83BHJxvUFCDJFEAvNj6H4FUtGHRRnTbExB/JRdM33A7Z 2MSu3N1o1ZXUBaoY0ie6WJujgLBGSGg9pSFRigDWVjWSHDN+4q2xIXB5LuE3DwYs 0nW8hFWr1Z01HyiNwa3cpwzD0ujpI7wGL8UI7bqVFLZ59Dq2LFk5b2+xVZVvD+me feKN/+WM5q2NrbEcn/uykxt8DPlW6ZukGZGiOy59Mfy9F2GWsSUFdQncy31IXRBa zNjujq3kqwVO6F0WNffSXDWjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUorgHHaWR 9+WxnJ1UYI5/rM4k4NgwHwYDVR0jBBgwFoAU6bez7TFz3kD+TB/m2P5CucvpyDMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3RTEyL0M3MjgwRjM0NUY5 QTExRUZCNDQyQkY3M0M0RjlBRTAyLzZiZXo3VEZ6M2tELVRCX20yUDVDdWN2cHlE TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNmJlejdURnoza0QtVEJfbTJQNUN1Y3ZweURNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 RTEyL0M3MjgwRjM0NUY5QTExRUZCNDQyQkY3M0M0RjlBRTAyLzZiZXo3VEZ6M2tE LVRCX20yUDVDdWN2cHlETS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACIck+8++TZjmsevj7U1fuW5FGDvw4mnDYNiXnU7JX5QDlaNi9vw32iw YbO+Nn6MQzssZe9WChColl7QI+dYRtoBZQ4loc2YbAz4VSP4qgEhhqGZAIts5y/j BXGi21KUFJQDQq4o4xN3uXHiNnGKPovgcxZ8YlBOJXq9XwIaGZA09W0tUExj1QFs 0/mozbM272uxoYCpUm2vd7ng+k5mnHJej38Jsgpnqpg08Q62zXH1QswFlQS79EbF HIpj3bQlaVezwAvJNpOi/bHMPRO2szF/JaV6iuKDnDoCAyYWXldyOUDASaHkA1t0 WMMxI8zAaU3ybNYn4IbLByNc4SNTPpk= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:23 2024 by rpki-client on console-fra.rpki-client.org