$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json) Hash identifier: D66FFCNVo1S0v6b55WUDC3jfitok81ujccnCWjOmlTA= Subject key identifier: 7B:C9:39:92:DD:79:EB:24:14:8D:8E:B5:9D:CD:99:72:88:E0:9C:72 Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft Manifest number: DB Signing time: Sat 23 Nov 2024 03:39:44 +0000 Manifest this update: Sat 23 Nov 2024 03:39:44 +0000 Manifest next update: Sat 30 Nov 2024 03:39:44 +0000 Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: 1GaMpmZZjieNSA7L+FvSOooaM/e/k2quKNV9mWGnilg=) 2: 0404E7B2672911EE9967640AC4F9AE02.roa (hash: 5vjFNwdorZQHn2sdj7sTYCMmbYEOY9pH8kC5XApbLFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Validity Not Before: Nov 23 03:39:44 2024 GMT Not After : Nov 30 03:39:44 2024 GMT Subject: CN=67414e80-671a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:33:6b:dd:b9:46:5e:05:d7:25:c2:f2:87: 4a:aa:b3:55:53:84:86:a1:d3:9f:e1:e5:70:24:32: ea:e0:9a:11:cf:89:06:82:44:e8:27:41:1f:99:bc: 9b:be:a6:1b:f4:4f:c9:45:fb:df:6c:9d:59:6b:ec: c3:28:73:07:00:5e:0a:0a:72:8a:35:98:a8:31:2b: a8:60:f2:45:58:66:67:3b:66:09:88:26:c7:e5:b1: f3:89:bb:e2:dc:ea:0c:97:6d:f6:c2:07:69:3c:85: bf:3a:20:07:6d:b9:8c:d4:3c:4e:24:13:1c:a3:e0: 5e:03:bc:82:92:04:a3:90:d6:20:8f:88:1c:27:2b: b5:f6:ef:ea:dd:87:22:5e:1e:34:a6:cd:9a:68:ad: 82:86:2d:7f:1b:bf:30:46:87:b7:e0:76:6c:80:68: a3:23:f5:3c:48:e4:6e:97:08:91:5f:f4:95:4e:66: e6:51:23:27:66:18:fb:46:24:53:08:d6:61:06:01: 56:aa:66:ef:cf:ed:0c:59:7c:92:85:3a:f1:48:82: ab:5d:76:e5:0c:6a:1c:db:d2:84:f9:b2:5e:fd:a1: 58:d5:f1:3b:0e:4f:06:5d:1d:2e:84:4b:ff:bd:24: d5:22:63:a9:a7:77:c1:1a:6b:c6:d1:eb:26:d0:83: 97:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C9:39:92:DD:79:EB:24:14:8D:8E:B5:9D:CD:99:72:88:E0:9C:72 X509v3 Authority Key Identifier: keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c0:83:c3:79:1a:71:f3:eb:c5:71:b6:a5:60:63:9e:d0:f3: 75:99:4e:ae:83:79:56:6c:b2:f7:cc:52:44:00:37:36:d4:df: 68:91:e6:af:ac:21:8d:30:c2:36:06:b0:83:20:a3:dc:57:d4: 31:e1:0f:bc:13:49:af:27:55:c9:4c:dc:8c:75:b5:10:da:7a: d4:d1:5b:63:89:cc:2d:cb:5e:f2:74:4b:8f:54:3f:f6:f9:5e: b3:8b:2b:23:7d:9f:a7:c0:83:18:98:63:94:70:62:bc:c8:a3: 75:5a:b9:e7:41:94:10:b3:44:55:d6:ee:7d:f9:74:87:fe:60: cf:3c:6d:12:39:f1:21:e0:8b:b6:92:07:10:5d:e0:b0:03:9d: 1c:41:f0:46:e4:c4:09:df:03:e4:e7:ac:20:59:b0:60:70:ac: a0:2d:8f:5b:5f:6c:a6:92:b3:62:70:84:c1:7b:f6:b3:27:95: 11:2d:8b:d9:54:89:48:34:42:73:59:e3:7f:e6:aa:9a:02:f4: 70:50:4e:18:99:0f:71:88:2d:d6:04:68:8e:a9:3f:3a:5f:4e: e2:e9:29:8e:b4:c3:2f:06:fe:d4:dc:68:81:8f:3f:6f:fd:a9: 7e:f3:f8:c1:74:2a:eb:93:31:87:74:61:db:ec:3c:90:ce:9a: f5:f4:ff:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxMjcxMTAvBgNVBAUTKDMyMTVDNTUxNkFGQjU0RDhFNjEyRDFFQzNENTE4MkQz MjFFNTMxNzEwHhcNMjQxMTIzMDMzOTQ0WhcNMjQxMTMwMDMzOTQ0WjAYMRYwFAYD VQQDEw02NzQxNGU4MC02NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GUza925Rl4F1yXC8odKqrNVU4SGodOf4eVwJDLq4JoRz4kGgkToJ0Efmbyb vqYb9E/JRfvfbJ1Za+zDKHMHAF4KCnKKNZioMSuoYPJFWGZnO2YJiCbH5bHzibvi 3OoMl232wgdpPIW/OiAHbbmM1DxOJBMco+BeA7yCkgSjkNYgj4gcJyu19u/q3Yci Xh40ps2aaK2Chi1/G78wRoe34HZsgGijI/U8SORulwiRX/SVTmbmUSMnZhj7RiRT CNZhBgFWqmbvz+0MWXyShTrxSIKrXXblDGoc29KE+bJe/aFY1fE7Dk8GXR0uhEv/ vSTVImOpp3fBGmvG0esm0IOXaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvJOZLd eeskFI2OtZ3NmXKI4JxyMB8GA1UdIwQYMBaAFDIVxVFq+1TY5hLR7D1RgtMh5TFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDEyNy8xNkFGMUQyMDVC N0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZOam1FdEhzUFZHQzB5SGxN WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oWEZVV3I3Vk5qbUV0SHNQVkdDMHlIbE1YRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDEyNy8xNkFGMUQyMDVCN0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZO am1FdEhzUFZHQzB5SGxNWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGwIPDeRpx8+vFcbalYGOe0PN1mU6ug3lWbLL3zFJEADc21N9okeav rCGNMMI2BrCDIKPcV9Qx4Q+8E0mvJ1XJTNyMdbUQ2nrU0Vtjicwty17ydEuPVD/2 +V6ziysjfZ+nwIMYmGOUcGK8yKN1WrnnQZQQs0RV1u59+XSH/mDPPG0SOfEh4Iu2 kgcQXeCwA50cQfBG5MQJ3wPk56wgWbBgcKygLY9bX2ymkrNicITBe/azJ5URLYvZ VIlINEJzWeN/5qqaAvRwUE4YmQ9xiC3WBGiOqT86X07i6SmOtMMvBv7U3GiBjz9v /al+8/jBdCrrkzGHdGHb7DyQzpr19P/9 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org