$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft File: p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json) Hash identifier: OBUVOJDTeP40zksjYqxghRvl7eKkiniFQW0EBq9KLQM= Subject key identifier: 86:03:3D:7A:C8:B6:A8:09:0A:FC:07:31:3B:84:88:D8:0C:FD:44:4B Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014 Certificate serial: 0B56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft Manifest number: 0B50 Signing time: Fri 22 Nov 2024 18:54:59 +0000 Manifest this update: Fri 22 Nov 2024 18:54:58 +0000 Manifest next update: Fri 29 Nov 2024 18:54:58 +0000 Files and hashes: 1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: FFut4eAMmxnP9O7EhXifcudh9EiK3/19z7HllG5FMXo=) 2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: fVwaR7oxSksyLHVRcYVo6TOHPah+wm3ypcA3PooO91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2902 (0xb56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014 Validity Not Before: Nov 22 18:54:58 2024 GMT Not After : Nov 29 18:54:58 2024 GMT Subject: CN=6740d382-fefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:3f:52:a8:f9:67:03:f9:b0:e6:cb:8d:2a: cf:de:7c:da:b5:ec:13:79:c2:c6:a1:c4:ef:87:3a: 5c:14:43:29:1d:dc:8f:d7:c7:9b:33:da:7b:b8:ca: 98:58:5a:71:eb:65:b7:ef:ef:03:14:6e:a5:e2:c3: eb:08:9f:c9:83:31:e0:a9:07:6b:22:ad:1c:6f:79: 73:0c:7d:75:59:39:66:1a:85:dd:11:38:5f:f6:4f: 34:d8:0b:99:18:2a:b2:0d:26:e9:92:64:3f:cb:c8: 94:01:7a:24:83:d2:6a:ff:c0:fb:ce:e0:4b:65:b4: 66:3a:da:70:cd:76:4c:85:61:0c:91:3b:66:1d:d9: dc:dc:54:e2:f8:ed:59:d6:54:8d:c9:48:c8:a0:f5: fe:51:17:e8:d1:29:6a:16:09:16:78:d3:85:15:a0: 29:26:1c:07:96:94:ac:47:6b:72:dd:ad:d6:06:0b: 62:ce:68:b9:ef:00:ef:ea:43:6f:48:9f:c9:9b:73: 77:75:e0:d6:18:ac:75:a0:fb:9f:0e:69:a9:6f:e5: 70:0a:00:b1:00:b5:2f:c9:02:a8:b3:c4:15:c6:91: a1:8c:4e:7f:1f:c8:1a:31:28:8c:05:fb:1e:a5:87: 9d:ce:3e:85:90:a8:6f:03:2c:47:9d:57:0c:d5:11: b8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:03:3D:7A:C8:B6:A8:09:0A:FC:07:31:3B:84:88:D8:0C:FD:44:4B X509v3 Authority Key Identifier: keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:32:51:dd:f5:cc:c1:04:a6:17:e9:13:14:b8:9e:c8:80:8c: db:25:5b:8a:19:21:1b:77:1e:6f:8c:51:37:2b:01:a0:5e:88: cc:bb:71:7c:0e:9a:ea:9e:b6:c0:96:24:8a:6f:84:d7:23:12: 87:1e:a7:80:d5:25:5e:ec:41:58:bd:0a:f6:96:f8:8a:e7:22: 19:42:92:a5:bb:e7:79:63:41:e9:de:b0:5a:d2:4c:fa:80:8d: d3:97:12:ee:97:5f:7a:c4:62:0d:8c:cb:db:69:e4:a9:94:7a: 35:e8:a6:f0:29:c1:c0:44:1a:78:d8:7d:eb:62:30:3c:a7:1c: e7:04:37:b8:ac:49:4c:78:b3:86:4d:d6:4a:b5:97:1d:90:b2: 81:7b:b8:9d:d9:6c:f7:ea:63:50:98:ef:ad:38:fe:f3:40:c1: 05:ee:ca:66:1f:14:0c:c5:b9:38:f9:8b:a6:56:5c:d3:12:1c: cf:cb:1f:a8:0e:61:b2:2c:50:a5:eb:4e:2d:63:88:61:28:74: 4b:33:c2:27:d2:f7:9e:3a:3e:b3:c1:1a:fa:b6:90:36:13:5b: 8f:95:80:22:db:09:fa:10:02:67:5f:31:b1:d0:c1:3f:ae:b3: 09:c5:0f:a2:49:0b:b7:3d:59:d6:7e:f1:62:d8:5f:46:3f:01: e0:d2:b8:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRjMxMTAvBgNVBAUTKEE3QTI2NzRFODQ4NDYwMzkyMDc3OUEzNTJDNTU4MDRF NTUzNjUwMTQwHhcNMjQxMTIyMTg1NDU4WhcNMjQxMTI5MTg1NDU4WjAYMRYwFAYD VQQDEw02NzQwZDM4Mi1mZWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0M/Uqj5ZwP5sObLjSrP3nzatewTecLGocTvhzpcFEMpHdyP18ebM9p7uMqY WFpx62W37+8DFG6l4sPrCJ/JgzHgqQdrIq0cb3lzDH11WTlmGoXdEThf9k802AuZ GCqyDSbpkmQ/y8iUAXokg9Jq/8D7zuBLZbRmOtpwzXZMhWEMkTtmHdnc3FTi+O1Z 1lSNyUjIoPX+URfo0SlqFgkWeNOFFaApJhwHlpSsR2ty3a3WBgtizmi57wDv6kNv SJ/Jm3N3deDWGKx1oPufDmmpb+VwCgCxALUvyQKos8QVxpGhjE5/H8gaMSiMBfse pYedzj6FkKhvAyxHnVcM1RG4FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYDPXrI tqgJCvwHMTuEiNgM/URLMB8GA1UdIwQYMBaAFKeiZ06EhGA5IHeaNSxVgE5VNlAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNGMy80QkRENTE4RTIx MzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlEa2dkNW8xTEZXQVRsVTJV QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A2Sm5Ub1NFWURrZ2Q1bzFMRldBVGxVMlVCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNGMy80QkRENTE4RTIxMzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlE a2dkNW8xTEZXQVRsVTJVQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbMlHd9czBBKYX6RMUuJ7IgIzbJVuKGSEbdx5vjFE3KwGgXojMu3F8 DprqnrbAliSKb4TXIxKHHqeA1SVe7EFYvQr2lviK5yIZQpKlu+d5Y0Hp3rBa0kz6 gI3TlxLul196xGINjMvbaeSplHo16KbwKcHARBp42H3rYjA8pxznBDe4rElMeLOG TdZKtZcdkLKBe7id2Wz36mNQmO+tOP7zQMEF7spmHxQMxbk4+YumVlzTEhzPyx+o DmGyLFCl604tY4hhKHRLM8In0veeOj6zwRr6tpA2E1uPlYAi2wn6EAJnXzGx0ME/ rrMJxQ+iSQu3PVnWfvFi2F9GPwHg0rjL -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org