$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: yZN/w+Stt3YWi8t11wdCMYj97cdRKRunLj0HL6fnoM0= Subject key identifier: 4C:30:A9:73:96:92:2C:A3:F6:94:C9:87:F7:35:05:E1:5A:F0:CA:09 Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 08DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 08BE Signing time: Fri 22 Nov 2024 20:19:55 +0000 Manifest this update: Fri 22 Nov 2024 20:19:54 +0000 Manifest next update: Fri 29 Nov 2024 20:19:54 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: euN8augql4/Qa5mT8Lvt+eUtYNmvmxulhGCYwsR7zp8=) 2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: VkXeJADbgC1iLcyGig1kIv1NV3Ug6u8npbrUll9zDmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2271 (0x8df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: Nov 22 20:19:54 2024 GMT Not After : Nov 29 20:19:54 2024 GMT Subject: CN=6740e76b-e798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:f8:05:f1:16:38:60:16:cb:99:56:e0:b8: 45:d0:6e:c9:8c:a5:f9:40:e8:c6:2f:3e:1e:4e:7b: 28:f0:fe:5b:41:aa:dd:4b:81:8f:c3:63:98:57:43: c0:c6:0c:d5:f3:4b:99:74:13:2c:99:73:4d:75:6f: fe:e9:30:6a:48:b3:b2:e9:33:d8:03:74:b2:27:89: 7f:e8:1c:51:ed:0e:dc:82:ad:08:53:d3:cb:b1:bc: 18:cd:f0:ee:7e:21:da:88:76:02:8c:66:52:25:d2: 07:87:21:24:15:24:11:cf:62:01:60:d6:9c:b8:ab: 89:50:3f:60:55:4e:4a:a8:93:fd:7d:06:7c:4f:05: f4:ee:33:4f:3d:a3:80:a0:51:8d:61:07:48:e5:67: 5d:42:ec:bd:36:db:3d:1b:39:d9:42:5e:0a:76:85: 5d:3a:62:1d:54:d9:b2:c0:eb:82:2d:23:b0:04:93: ab:da:d2:8b:96:26:9e:11:e5:88:b4:af:32:51:8c: 20:63:9e:11:4e:fa:c8:e4:62:af:0d:89:f1:d5:e6: a8:15:1c:f4:27:ee:2a:55:e3:f3:c8:2d:ee:b5:1a: 9f:ee:43:a7:24:d1:7c:5c:1a:d2:32:11:b6:92:ad: 5d:4f:4e:97:78:2c:dc:50:b4:46:71:23:7e:11:da: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:30:A9:73:96:92:2C:A3:F6:94:C9:87:F7:35:05:E1:5A:F0:CA:09 X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d7:79:10:ce:08:18:c9:b3:5f:f6:6d:85:0d:d7:7f:32:59: 68:ad:32:41:d6:39:77:a8:b1:72:c3:ae:5b:92:b7:26:32:b5: 01:ce:5c:e0:dd:5e:6d:2b:db:a5:84:ed:d9:2b:a0:cd:bc:6e: f9:93:a0:31:6a:7b:5c:e1:3b:8f:42:09:a3:9b:a6:64:dd:5a: e0:5f:99:c0:bf:00:06:1c:9e:b7:bf:31:3b:63:02:15:b2:fe: 85:8b:37:86:a4:c1:3e:3f:b2:c8:73:b4:c4:23:7d:f3:f1:f1: 4e:11:78:bc:ea:69:f3:e9:c8:f4:aa:51:99:8b:95:b6:c0:ae: 1d:75:27:d8:92:6b:17:9d:92:ef:28:2e:19:46:58:3a:6e:fb: 23:81:14:fd:3b:d4:06:b8:37:7b:78:ef:c3:a0:46:de:7d:91: 8f:8a:2e:25:3e:98:6a:7d:17:24:a0:e8:91:db:d2:cf:1d:ed: cd:64:a7:dc:cf:32:8f:3b:9f:10:f2:d7:e3:2e:16:14:7a:3d: 26:18:2c:3a:6f:f6:d9:42:8d:84:9b:b4:61:ad:2e:a1:19:e7: 5f:ec:bb:65:30:ae:f7:ee:10:97:8a:1c:9b:f3:7c:2c:f3:5a: ed:50:18:51:06:dd:55:eb:7d:d8:64:d2:e1:ac:0e:61:b2:e8: e7:cb:4f:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjQxMTIyMjAxOTU0WhcNMjQxMTI5MjAxOTU0WjAYMRYwFAYD VQQDEw02NzQwZTc2Yi1lNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMj4BfEWOGAWy5lW4LhF0G7JjKX5QOjGLz4eTnso8P5bQardS4GPw2OYV0PA xgzV80uZdBMsmXNNdW/+6TBqSLOy6TPYA3SyJ4l/6BxR7Q7cgq0IU9PLsbwYzfDu fiHaiHYCjGZSJdIHhyEkFSQRz2IBYNacuKuJUD9gVU5KqJP9fQZ8TwX07jNPPaOA oFGNYQdI5WddQuy9Nts9GznZQl4KdoVdOmIdVNmywOuCLSOwBJOr2tKLliaeEeWI tK8yUYwgY54RTvrI5GKvDYnx1eaoFRz0J+4qVePzyC3utRqf7kOnJNF8XBrSMhG2 kq1dT06XeCzcULRGcSN+EdoESQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwwqXOW kiyj9pTJh/c1BeFa8MoJMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm13kQzggYybNf9m2FDdd/MllorTJB1jl3qLFyw65bkrcmMrUBzlzg 3V5tK9ulhO3ZK6DNvG75k6Axantc4TuPQgmjm6Zk3VrgX5nAvwAGHJ63vzE7YwIV sv6FizeGpME+P7LIc7TEI33z8fFOEXi86mnz6cj0qlGZi5W2wK4ddSfYkmsXnZLv KC4ZRlg6bvsjgRT9O9QGuDd7eO/DoEbefZGPii4lPphqfRckoOiR29LPHe3NZKfc zzKPO58Q8tfjLhYUej0mGCw6b/bZQo2Em7RhrS6hGedf7LtlMK737hCXihyb83ws 81rtUBhRBt1V633YZNLhrA5hsujny09r -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org