$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: 3U0onbnLspnzOCS8ideS4OAt3+De5iv0gK+htwVA/18= Subject key identifier: D9:36:9E:A8:48:D0:D4:01:E6:FB:37:BB:2F:5F:75:4D:7C:69:2F:DF Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: CE Signing time: Sat 23 Nov 2024 03:49:26 +0000 Manifest this update: Sat 23 Nov 2024 03:49:25 +0000 Manifest next update: Sat 30 Nov 2024 03:49:25 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: G1B+TGiN+QVGSUd5QRkitBlgQcE0SHgEhQJxwfmHVB8=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: S9XPQFthPE5Y2c4Zah68ASzF7/aBsexwAKNyaxY/Mbo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: Nov 23 03:49:25 2024 GMT Not After : Nov 30 03:49:25 2024 GMT Subject: CN=674150c6-9a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6e:03:7d:a5:96:4f:e8:7a:1c:89:71:77:db: 9e:78:af:79:06:a2:3c:fa:1d:8b:08:ef:19:20:43: c7:4e:5a:f1:64:74:fe:a2:06:0f:e6:57:4f:a7:39: 83:fe:22:f0:7d:70:d2:e8:6a:a3:3e:bf:56:1c:55: 10:e1:bb:74:60:30:71:e6:8f:a2:b1:79:2c:63:0e: 8a:dd:aa:aa:1e:51:86:75:d8:9d:05:ea:ec:f7:8d: 62:63:93:c1:c0:5f:16:07:9e:59:6c:d1:20:8e:fa: 15:b6:51:ce:5a:d7:af:91:b3:69:9e:79:c1:32:d6: 52:90:f2:fe:aa:4f:aa:34:70:b4:d0:17:3e:51:2f: b2:c2:56:94:d0:01:01:ff:af:80:28:99:eb:30:7f: 76:a6:86:d5:ec:43:cb:d2:1b:cd:46:e2:8a:d2:6c: 16:47:a0:a5:b5:08:13:46:48:b8:d0:fb:3b:be:59: 29:de:6d:87:18:44:a1:8d:19:de:67:f9:6f:d3:80: c2:56:ff:74:0a:73:2c:a3:38:0d:a7:65:f3:f4:92: d1:60:8c:73:0c:a1:62:c6:6b:2f:0c:b0:15:52:a2: 09:59:8a:96:27:7d:23:a8:85:e8:87:df:5f:3d:2a: 89:61:6a:b4:97:97:31:01:3c:36:22:d9:20:a0:6c: 69:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:36:9E:A8:48:D0:D4:01:E6:FB:37:BB:2F:5F:75:4D:7C:69:2F:DF X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:44:20:a4:8d:b0:74:c6:b0:28:4a:8d:3d:d3:32:94:5b:cc: 59:91:d0:e2:79:df:2f:ba:1a:67:07:22:36:0e:3c:4d:25:9c: ed:fc:2c:fc:45:cc:3f:d3:97:c4:8d:ce:8b:c1:df:0a:ed:0e: b1:a6:1f:4c:e2:25:73:ce:13:62:35:0e:a9:84:11:eb:42:a7: 32:39:c9:6f:05:ac:f3:df:e0:08:68:dd:b8:43:a0:c5:60:b5: d2:91:47:5b:75:66:0e:84:7d:67:c2:13:17:53:9d:3f:14:f3: 7c:08:88:f4:55:c4:8b:0b:54:7b:e1:d5:46:b1:5c:fa:2b:88: 14:e9:c9:d6:f2:9c:27:11:de:51:76:53:b1:e6:89:84:50:2d: 7c:6a:eb:8d:f0:7f:b1:80:6d:fe:2d:15:6a:1b:ca:20:2e:46: 33:af:fc:3e:4f:ba:cd:cc:e1:b2:37:ff:c8:b2:ca:b9:e8:e6: 6f:9a:0b:4c:49:39:86:70:de:2f:11:2b:c6:c7:fd:dc:cf:0c: 23:38:2c:f9:83:c7:4d:44:63:b3:cd:68:6c:28:8a:b3:ca:74: 91:65:72:78:00:c8:0c:c4:8e:67:f7:71:43:78:ea:07:3c:f3: c7:47:a2:29:e9:70:41:7f:b2:64:1b:91:80:8c:18:be:8d:72: da:24:b4:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy MTFEOUREMkIwHhcNMjQxMTIzMDM0OTI1WhcNMjQxMTMwMDM0OTI1WjAYMRYwFAYD VQQDEw02NzQxNTBjNi05YTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4m4DfaWWT+h6HIlxd9ueeK95BqI8+h2LCO8ZIEPHTlrxZHT+ogYP5ldPpzmD /iLwfXDS6GqjPr9WHFUQ4bt0YDBx5o+isXksYw6K3aqqHlGGddidBers941iY5PB wF8WB55ZbNEgjvoVtlHOWtevkbNpnnnBMtZSkPL+qk+qNHC00Bc+US+ywlaU0AEB /6+AKJnrMH92pobV7EPL0hvNRuKK0mwWR6CltQgTRki40Ps7vlkp3m2HGEShjRne Z/lv04DCVv90CnMsozgNp2Xz9JLRYIxzDKFixmsvDLAVUqIJWYqWJ30jqIXoh99f PSqJYWq0l5cxATw2ItkgoGxp3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNk2nqhI 0NQB5vs3uy9fdU18aS/fMB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh QnN5UWZFN1FTOW9oSFozU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCURCCkjbB0xrAoSo090zKUW8xZkdDied8vuhpnByI2DjxNJZzt/Cz8 Rcw/05fEjc6Lwd8K7Q6xph9M4iVzzhNiNQ6phBHrQqcyOclvBazz3+AIaN24Q6DF YLXSkUdbdWYOhH1nwhMXU50/FPN8CIj0VcSLC1R74dVGsVz6K4gU6cnW8pwnEd5R dlOx5omEUC18auuN8H+xgG3+LRVqG8ogLkYzr/w+T7rNzOGyN//Issq56OZvmgtM STmGcN4vESvGx/3czwwjOCz5g8dNRGOzzWhsKIqzynSRZXJ4AMgMxI5n93FDeOoH PPPHR6Ip6XBBf7JkG5GAjBi+jXLaJLRO -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org