$ rpki-client -vvf rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft File: 5S3osZGTOKPiVWZOiASKVpihINA.mft (raw, json) Hash identifier: CbRYXyGPsZ/puYwwpg5Ljhe1gPvFRyVoROITVkTZL+A= Subject key identifier: BA:E3:4A:14:B1:AB:50:FE:82:EB:2F:D8:F2:57:FE:AD:86:45:25:6F Authority key identifier: E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0 Certificate issuer: /CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0 Certificate serial: 0B12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft Manifest number: 0B09 Signing time: Fri 22 Nov 2024 19:01:56 +0000 Manifest this update: Fri 22 Nov 2024 19:01:56 +0000 Manifest next update: Fri 29 Nov 2024 19:01:56 +0000 Files and hashes: 1: 5S3osZGTOKPiVWZOiASKVpihINA.crl (hash: oicvjI6PsTUl9XWNfL/bv1rpLesxpJkDuQ26i9zFqI8=) 2: 6DCC06C231BC11EA9AACCA4BC4F9AE02.roa (hash: +AY4f5uhDa+iIwRiDR23i6XlDUBAKMl99YAiHZiRwOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160701/serialNumber=E52DE8B1919338A3E255664E88048A5698A120D0 Validity Not Before: Nov 22 19:01:56 2024 GMT Not After : Nov 29 19:01:56 2024 GMT Subject: CN=6740d524-e028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:9f:06:b0:a2:7d:83:bd:ff:af:c3:a9:e2: 13:e4:b6:a9:ef:35:9e:a6:db:80:df:8f:83:6a:87: df:58:0d:33:53:b7:3d:a1:10:52:bc:91:a8:ad:1e: 83:74:5b:43:ed:b2:c5:08:cc:98:b5:30:84:02:24: 7e:62:60:80:0d:ca:90:5f:07:c5:99:22:b6:3c:4c: 79:e2:85:4c:28:39:c2:e5:ac:af:2b:9b:1a:65:48: b6:ef:7c:a8:3a:b2:39:04:2f:09:40:26:54:77:1c: ed:83:4c:9d:d1:e1:60:98:d2:ce:a5:17:a2:06:b2: c1:e5:2f:41:94:ca:d0:db:a5:c6:cc:87:1c:e0:25: e0:35:db:ef:a6:a2:ed:13:ff:46:ce:54:bc:65:e8: fe:59:72:35:fd:8f:7e:b2:52:45:47:17:ed:c6:a2: 7b:07:13:fe:a1:91:e4:27:b9:5d:98:8d:56:5a:f2: 37:0c:1f:2f:5e:3f:57:45:75:59:fc:1d:0c:5d:2c: ce:1d:b5:2b:b5:52:3a:c8:c0:f2:e5:62:ff:b6:db: 09:00:9d:e3:c4:e8:3e:a3:d8:a8:76:80:ac:a0:93: 12:35:f0:b8:8a:9c:95:c8:ff:9b:39:ae:f7:94:b5: 77:a1:a9:b9:cb:39:37:8c:ce:93:76:6d:37:1b:0e: b7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E3:4A:14:B1:AB:50:FE:82:EB:2F:D8:F2:57:FE:AD:86:45:25:6F X509v3 Authority Key Identifier: keyid:E5:2D:E8:B1:91:93:38:A3:E2:55:66:4E:88:04:8A:56:98:A1:20:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S3osZGTOKPiVWZOiASKVpihINA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160701/5400C418303011EAA72F367AC4F9AE02/5S3osZGTOKPiVWZOiASKVpihINA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:17:51:9e:dd:b4:0f:13:7f:50:51:c3:01:d6:1c:40:fc:5b: 1e:be:63:c5:94:a3:c4:8d:5b:51:ca:ad:98:e1:4b:08:88:47: 7f:ba:87:a8:0b:0d:de:cd:a4:ee:72:6e:ef:6e:ae:06:0d:81: 71:2f:7b:61:15:1a:34:ea:96:ef:16:85:c2:d1:62:f0:eb:88: aa:01:3e:40:f4:69:96:e5:3c:79:94:f9:29:ee:a2:a9:61:97: 71:2b:c0:47:63:15:55:15:57:35:83:78:ea:d4:50:93:33:d6: 8a:0b:a3:eb:cf:70:1f:32:f5:85:a0:27:56:0b:fe:2e:e8:f7: 2d:1d:f0:43:46:64:0b:b4:27:09:40:06:f0:a3:6a:38:0f:3b: d4:cb:75:4c:9f:96:4d:17:5d:8a:c5:97:c3:25:20:ac:de:06: fc:f2:ac:a1:33:84:86:7f:bb:57:6d:ba:dd:d3:90:89:19:21: eb:a3:71:ca:20:60:9f:f9:13:28:01:76:7b:7e:35:71:7e:d9: 35:4d:48:84:44:7a:43:ab:8e:d2:3d:9b:55:3f:05:f4:b7:16: cb:15:8e:4e:a4:ff:81:62:7f:fb:73:1f:5e:1f:e5:8c:0c:63: a6:d0:13:5b:a5:e0:b8:cc:1b:78:40:a3:5a:7c:53:e1:24:fb: a5:4f:5a:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3MDExMTAvBgNVBAUTKEU1MkRFOEIxOTE5MzM4QTNFMjU1NjY0RTg4MDQ4QTU2 OThBMTIwRDAwHhcNMjQxMTIyMTkwMTU2WhcNMjQxMTI5MTkwMTU2WjAYMRYwFAYD VQQDEw02NzQwZDUyNC1lMDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudifBrCifYO9/6/DqeIT5Lap7zWeptuA34+DaoffWA0zU7c9oRBSvJGorR6D dFtD7bLFCMyYtTCEAiR+YmCADcqQXwfFmSK2PEx54oVMKDnC5ayvK5saZUi273yo OrI5BC8JQCZUdxztg0yd0eFgmNLOpReiBrLB5S9BlMrQ26XGzIcc4CXgNdvvpqLt E/9GzlS8Zej+WXI1/Y9+slJFRxftxqJ7BxP+oZHkJ7ldmI1WWvI3DB8vXj9XRXVZ /B0MXSzOHbUrtVI6yMDy5WL/ttsJAJ3jxOg+o9iodoCsoJMSNfC4ipyVyP+bOa73 lLV3oam5yzk3jM6Tdm03Gw63LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrjShSx q1D+gusv2PJX/q2GRSVvMB8GA1UdIwQYMBaAFOUt6LGRkzij4lVmTogEilaYoSDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDcwMS81NDAwQzQxODMw MzAxMUVBQTcyRjM2N0FDNEY5QUUwMi81UzNvc1pHVE9LUGlWV1pPaUFTS1ZwaWhJ TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTM29zWkdUT0tQaVZXWk9pQVNLVnBpaElOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDcwMS81NDAwQzQxODMwMzAxMUVBQTcyRjM2N0FDNEY5QUUwMi81UzNvc1pHVE9L UGlWV1pPaUFTS1ZwaWhJTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRF1Ge3bQPE39QUcMB1hxA/FsevmPFlKPEjVtRyq2Y4UsIiEd/uoeo Cw3ezaTucm7vbq4GDYFxL3thFRo06pbvFoXC0WLw64iqAT5A9GmW5Tx5lPkp7qKp YZdxK8BHYxVVFVc1g3jq1FCTM9aKC6Prz3AfMvWFoCdWC/4u6PctHfBDRmQLtCcJ QAbwo2o4DzvUy3VMn5ZNF12KxZfDJSCs3gb88qyhM4SGf7tXbbrd05CJGSHro3HK IGCf+RMoAXZ7fjVxftk1TUiERHpDq47SPZtVPwX0txbLFY5OpP+BYn/7cx9eH+WM DGOm0BNbpeC4zBt4QKNafFPhJPulT1pM -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org