$ rpki-client -vvf rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft File: 9dBHSQ3jpO3P3Df27KuUk42nxvY.mft (raw, json) Hash identifier: A7+2gcouqwVoKdqtEf0KrBz2JN/jZPAQPBngas3jkKY= Subject key identifier: 7C:4D:7B:59:1A:CA:5A:4C:B7:79:0D:AB:05:E1:55:59:08:1A:E0:9D Authority key identifier: F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6 Certificate issuer: /CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6 Certificate serial: 072F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft Manifest number: 0728 Signing time: Fri 22 Nov 2024 21:17:55 +0000 Manifest this update: Fri 22 Nov 2024 21:17:54 +0000 Manifest next update: Fri 29 Nov 2024 21:17:54 +0000 Files and hashes: 1: 9dBHSQ3jpO3P3Df27KuUk42nxvY.crl (hash: nte6UOGDcsYDoKe1cePX5YlOxe3cPFspgYOOS6yZrGg=) 2: 86BB53D0105611EB85F56114C4F9AE02.roa (hash: WcDWxE3j9p1VFrhk+5Av6h7oQt2r0PNsjg2nFhhQ81o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6 Validity Not Before: Nov 22 21:17:54 2024 GMT Not After : Nov 29 21:17:54 2024 GMT Subject: CN=6740f502-2d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:02:78:27:bd:d8:d2:2e:aa:61:01:5d:62:f8: 3e:8a:0b:11:0a:69:3a:ab:d0:78:64:e2:9f:b5:e7: 4d:de:92:21:74:0c:75:a2:62:0e:8b:84:00:f7:ad: c3:ca:4d:26:5d:5c:3c:d5:1c:c0:1e:7a:a1:b8:55: ef:6a:f3:7c:26:6f:6e:0d:b8:0c:eb:b9:60:d8:f1: eb:c8:55:e8:3e:bf:34:32:37:77:cf:97:14:a3:0f: 98:b2:e4:f1:6c:f7:ef:7b:6a:45:f8:c0:18:62:e3: 71:ba:11:0a:4d:18:14:05:49:c8:d3:11:b9:66:d3: f8:0b:8b:e4:16:81:42:9b:1d:05:e8:89:01:20:1d: 99:af:fe:7f:4f:19:55:00:7a:72:3a:c5:14:1d:bf: dd:dc:16:e5:7d:e0:c5:d8:9a:71:9f:05:b5:be:31: 3f:df:06:fa:ef:b5:11:f8:13:37:26:e1:f4:28:8e: cf:4d:8b:c0:39:e9:ef:a0:10:9c:d4:e3:67:96:41: d6:6a:66:5a:dc:2d:b4:0d:5e:95:b7:7f:f8:b8:e8: 83:59:9c:f8:98:3a:07:e6:8f:30:68:c4:2a:68:56: 7b:66:c8:69:fe:35:5c:a7:20:5f:b1:b9:86:ee:b1: 8e:3a:f0:1c:c7:12:2b:63:c7:ff:68:59:ab:98:30: 17:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4D:7B:59:1A:CA:5A:4C:B7:79:0D:AB:05:E1:55:59:08:1A:E0:9D X509v3 Authority Key Identifier: keyid:F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a2:77:12:ba:12:23:8a:e9:c7:bd:04:36:87:3a:23:4b:75: b8:60:ed:9a:06:f4:cd:20:46:24:d6:35:ac:6b:59:90:37:ae: fa:45:ab:bf:33:18:bc:16:fc:a0:14:f2:1b:c3:05:4f:94:bd: cb:c3:7a:8c:d5:61:f4:a1:62:67:31:a3:c0:5f:c0:d3:41:63: 5d:55:07:13:8f:87:3f:28:bc:8d:d2:18:e3:32:c2:c9:23:cd: f8:98:7f:81:4e:83:d3:88:b9:7e:ce:a8:1b:fd:9c:ed:c2:b9: 0f:12:7c:4c:f2:99:82:05:be:9c:5e:b0:13:f4:6c:00:b3:7b: 6a:bb:66:d9:f6:37:53:bc:b0:b2:7f:db:3a:91:6b:9a:16:3b: b5:57:70:e9:c2:f4:5d:0c:c1:f0:b9:f3:92:da:25:ee:62:a5: 99:5c:a1:a9:ef:13:12:85:86:2c:a9:fe:22:67:f6:93:83:d6: f7:05:86:40:f7:cc:36:ed:c3:72:d1:b1:88:c9:88:1a:ef:66: 3e:0f:50:9c:b9:3d:c0:d0:04:36:55:c9:85:67:86:33:3d:6b: 8d:96:43:b4:dd:ff:36:6f:bc:67:c9:5b:1d:88:0c:10:a6:f5: 8b:90:43:be:66:f3:ee:e2:fc:60:11:28:c2:66:e2:48:54:f2: 04:3b:15:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk5MEUxMTAvBgNVBAUTKEY1RDA0NzQ5MERFM0E0RURDRkRDMzdGNkVDQUI5NDkz OERBN0M2RjYwHhcNMjQxMTIyMjExNzU0WhcNMjQxMTI5MjExNzU0WjAYMRYwFAYD VQQDEw02NzQwZjUwMi0yZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8gJ4J73Y0i6qYQFdYvg+igsRCmk6q9B4ZOKftedN3pIhdAx1omIOi4QA963D yk0mXVw81RzAHnqhuFXvavN8Jm9uDbgM67lg2PHryFXoPr80Mjd3z5cUow+YsuTx bPfve2pF+MAYYuNxuhEKTRgUBUnI0xG5ZtP4C4vkFoFCmx0F6IkBIB2Zr/5/TxlV AHpyOsUUHb/d3BblfeDF2JpxnwW1vjE/3wb677UR+BM3JuH0KI7PTYvAOenvoBCc 1ONnlkHWamZa3C20DV6Vt3/4uOiDWZz4mDoH5o8waMQqaFZ7Zshp/jVcpyBfsbmG 7rGOOvAcxxIrY8f/aFmrmDAXIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxNe1ka ylpMt3kNqwXhVVkIGuCdMB8GA1UdIwQYMBaAFPXQR0kN46Ttz9w39uyrlJONp8b2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTkwRS83RTQ2NEIzNDEw NTUxMUVCODBGODgxMTNDNEY5QUUwMi85ZEJIU1EzanBPM1AzRGYyN0t1VWs0Mm54 dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlkQkhTUTNqcE8zUDNEZjI3S3VVazQybnh2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTkwRS83RTQ2NEIzNDEwNTUxMUVCODBGODgxMTNDNEY5QUUwMi85ZEJIU1EzanBP M1AzRGYyN0t1VWs0Mm54dlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMoncSuhIjiunHvQQ2hzojS3W4YO2aBvTNIEYk1jWsa1mQN676Rau/ Mxi8FvygFPIbwwVPlL3Lw3qM1WH0oWJnMaPAX8DTQWNdVQcTj4c/KLyN0hjjMsLJ I834mH+BToPTiLl+zqgb/ZztwrkPEnxM8pmCBb6cXrAT9GwAs3tqu2bZ9jdTvLCy f9s6kWuaFju1V3DpwvRdDMHwufOS2iXuYqWZXKGp7xMShYYsqf4iZ/aTg9b3BYZA 98w27cNy0bGIyYga72Y+D1CcuT3A0AQ2VcmFZ4YzPWuNlkO03f82b7xnyVsdiAwQ pvWLkEO+ZvPu4vxgESjCZuJIVPIEOxVW -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org