$ rpki-client -vvf rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft File: H2wzTrxkYqJkUoZ6u1-E72itwCw.mft (raw, json) Hash identifier: cw5jUGAVMQHaaK0EpNcCEmeaV1JoHW7OhpfcaWlJmZ0= Subject key identifier: 0C:62:8A:BC:69:27:47:49:87:68:51:8E:46:52:55:B8:C2:BB:9C:54 Authority key identifier: 1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C Certificate issuer: /CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C Certificate serial: 0888 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft Manifest number: 087A Signing time: Fri 22 Nov 2024 20:22:51 +0000 Manifest this update: Fri 22 Nov 2024 20:22:51 +0000 Manifest next update: Fri 29 Nov 2024 20:22:51 +0000 Files and hashes: 1: H2wzTrxkYqJkUoZ6u1-E72itwCw.crl (hash: CJa4oPCTeJeivy+DAQU86uz8BoJmgSOHtwwmm5EPCjs=) 2: 6AD73A584A8811ED8D0B8B38C4F9AE02.roa (hash: fXl2igGJye4ZYwQR43jAvZ6b6h7qYdiNfyIYWYelBPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138447/serialNumber=1F6C334EBC6462A26452867ABB5F84EF68ADC02C Validity Not Before: Nov 22 20:22:51 2024 GMT Not After : Nov 29 20:22:51 2024 GMT Subject: CN=6740e81b-90f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8e:2d:c0:d8:f7:07:45:8f:86:06:1c:6e:57: 20:12:e8:95:65:bc:2f:93:11:d4:47:f7:3c:91:ca: c1:6a:15:64:e9:7d:f9:0c:41:95:ae:39:36:fe:c0: 8e:4a:9d:ed:2f:60:e1:aa:a9:86:2d:63:e4:89:77: 0b:03:60:9f:ed:be:c5:9b:92:49:0b:87:6d:76:08: 78:24:41:32:a9:60:e0:74:0b:dc:39:6c:d0:89:0e: b8:e6:9f:14:9d:12:9e:44:b5:f2:f5:cb:67:5d:db: 67:e5:dc:af:ac:d2:0c:70:83:13:90:9b:87:78:8f: db:96:f8:66:c1:8b:78:c7:20:d0:a6:f0:9e:d3:9f: 2c:01:c6:80:58:23:15:98:b9:2b:cc:d5:d2:2f:7c: 6e:36:60:b5:34:b0:9d:10:d2:4c:3b:40:d6:b5:2d: fd:de:30:c7:7d:22:7e:54:ae:bd:3e:c4:da:d3:a2: f0:c3:f1:35:9b:5d:61:ac:5e:62:e9:e0:eb:88:63: 73:23:65:c4:b2:c5:4a:4b:98:62:6e:1d:98:4b:81: 6a:ae:61:b9:20:b5:30:94:c0:58:f0:9e:57:83:4d: 21:91:11:fc:51:80:48:f6:a8:be:98:63:ea:ca:d1: bb:8e:89:f5:73:5e:7c:12:14:6f:fd:70:ba:b9:12: 92:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:62:8A:BC:69:27:47:49:87:68:51:8E:46:52:55:B8:C2:BB:9C:54 X509v3 Authority Key Identifier: keyid:1F:6C:33:4E:BC:64:62:A2:64:52:86:7A:BB:5F:84:EF:68:AD:C0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2wzTrxkYqJkUoZ6u1-E72itwCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138447/4CEB3C3CB0FD11EA8A099242C4F9AE02/H2wzTrxkYqJkUoZ6u1-E72itwCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:32:25:9f:fc:d3:8a:01:1d:f5:b1:d9:4b:a0:01:df:9b:6a: 9e:88:12:2a:af:49:c6:58:f5:07:6d:e4:f1:ef:9d:f8:b5:56: de:56:0d:33:7b:30:e4:8b:c7:ab:f7:aa:fe:e1:cd:7d:2e:2d: a5:da:cd:c9:f5:5d:a6:56:ce:81:f5:c1:56:27:59:bd:6a:60: dd:5d:1f:5b:62:26:0b:94:1b:8c:f6:fe:67:1b:fa:93:d1:7c: cd:14:19:d2:2f:e3:4d:aa:f5:cb:52:29:29:2d:27:43:e5:f0: e4:05:b2:69:6a:31:bc:56:50:3c:ee:28:a4:60:cb:98:d7:03: 6b:25:f4:a3:40:b2:d5:b4:e6:22:ce:d0:4f:af:84:7f:19:9c: 73:4d:dd:f1:fe:8f:d0:57:c1:b5:7a:32:05:a9:cf:c2:9c:c0: 16:82:46:10:e1:13:1a:69:32:e0:ef:d9:9c:34:46:0c:fb:b6: fd:9f:e2:a4:00:9d:40:da:f7:81:f2:d5:86:90:a1:80:50:c7: 8e:9f:ea:39:5e:db:e6:c0:07:a5:54:d5:c0:1b:c7:94:1c:51: 3a:6f:58:21:92:dc:6c:f3:8d:5a:66:79:26:61:68:49:ae:38: 08:f3:ab:d8:45:dd:41:5f:3a:0f:dd:69:b1:ed:06:66:8d:ba: c1:32:eb:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NDcxMTAvBgNVBAUTKDFGNkMzMzRFQkM2NDYyQTI2NDUyODY3QUJCNUY4NEVG NjhBREMwMkMwHhcNMjQxMTIyMjAyMjUxWhcNMjQxMTI5MjAyMjUxWjAYMRYwFAYD VQQDEw02NzQwZTgxYi05MGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzI4twNj3B0WPhgYcblcgEuiVZbwvkxHUR/c8kcrBahVk6X35DEGVrjk2/sCO Sp3tL2DhqqmGLWPkiXcLA2Cf7b7Fm5JJC4dtdgh4JEEyqWDgdAvcOWzQiQ645p8U nRKeRLXy9ctnXdtn5dyvrNIMcIMTkJuHeI/blvhmwYt4xyDQpvCe058sAcaAWCMV mLkrzNXSL3xuNmC1NLCdENJMO0DWtS393jDHfSJ+VK69PsTa06Lww/E1m11hrF5i 6eDriGNzI2XEssVKS5hibh2YS4FqrmG5ILUwlMBY8J5Xg00hkRH8UYBI9qi+mGPq ytG7jon1c158EhRv/XC6uRKSzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxiirxp J0dJh2hRjkZSVbjCu5xUMB8GA1UdIwQYMBaAFB9sM068ZGKiZFKGertfhO9orcAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ0Ny80Q0VCM0MzQ0Iw RkQxMUVBOEEwOTkyNDJDNEY5QUUwMi9IMnd6VHJ4a1lxSmtVb1o2dTEtRTcyaXR3 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyd3pUcnhrWXFKa1VvWjZ1MS1FNzJpdHdDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ0Ny80Q0VCM0MzQ0IwRkQxMUVBOEEwOTkyNDJDNEY5QUUwMi9IMnd6VHJ4a1lx SmtVb1o2dTEtRTcyaXR3Q3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdMiWf/NOKAR31sdlLoAHfm2qeiBIqr0nGWPUHbeTx7534tVbeVg0z ezDki8er96r+4c19Li2l2s3J9V2mVs6B9cFWJ1m9amDdXR9bYiYLlBuM9v5nG/qT 0XzNFBnSL+NNqvXLUikpLSdD5fDkBbJpajG8VlA87iikYMuY1wNrJfSjQLLVtOYi ztBPr4R/GZxzTd3x/o/QV8G1ejIFqc/CnMAWgkYQ4RMaaTLg79mcNEYM+7b9n+Kk AJ1A2veB8tWGkKGAUMeOn+o5XtvmwAelVNXAG8eUHFE6b1ghktxs841aZnkmYWhJ rjgI86vYRd1BXzoP3Wmx7QZmjbrBMutY -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org