$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft File: 9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json) Hash identifier: pNsR3sbwmwEsevw3Wfu7tU0Gsjx+3QwG97PZ5eTYqDE= Subject key identifier: BB:6B:CE:82:27:74:75:DF:8F:5F:7E:2E:0A:59:1A:33:00:73:71:B2 Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF Certificate issuer: /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft Manifest number: 79 Signing time: Sat 23 Nov 2024 04:44:37 +0000 Manifest this update: Sat 23 Nov 2024 04:44:37 +0000 Manifest next update: Sat 30 Nov 2024 04:44:37 +0000 Files and hashes: 1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: 4i+xe5KpLKCZta7VT2gN5E9mtTFNdzJFzmjxaU8CYf8=) 2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: CY+0lVCE8pyV/yuqoYwTYIt3uyuTBJHx9OgX18w8m2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF Validity Not Before: Nov 23 04:44:37 2024 GMT Not After : Nov 30 04:44:37 2024 GMT Subject: CN=67415db5-dd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:ed:f8:d1:2f:21:55:d2:1a:fd:5f:a2:b1: c9:f6:1e:76:47:7e:92:d4:ef:cb:29:8b:25:aa:69: aa:1d:fc:a9:df:92:77:50:81:a8:4b:26:6a:c5:09: 8e:b0:59:0e:a0:90:33:f3:3f:f2:06:f1:ef:32:9f: fd:4c:a3:c4:ad:9e:78:cc:72:e6:7b:61:d7:99:eb: a7:c9:d7:44:3a:d0:87:a0:c0:ea:82:b5:83:a0:90: fc:3f:e6:12:3a:e1:6c:56:eb:a8:6b:43:80:22:d3: 7b:f4:c9:f6:e8:47:ed:5f:9e:c4:11:20:57:9a:b7: 80:50:09:30:cd:d5:e1:58:3a:fe:d8:ee:0a:2f:6b: 14:6b:72:f8:8b:a0:58:7f:a7:d8:67:1c:78:c0:73: e7:e4:96:32:5c:73:c8:c8:73:23:3c:97:3a:40:44: e3:63:a9:77:5b:4a:80:26:16:77:6c:e1:f5:7b:a8: 98:f8:67:28:8e:66:da:46:6f:9a:1b:71:a0:1b:e0: a1:4b:ae:12:cf:33:9d:dd:cc:42:57:2a:75:85:a7: b8:7a:40:a5:60:65:f6:ec:41:d1:a3:bd:f5:c2:7e: 6b:59:95:01:a2:38:01:00:bc:9b:a5:2c:32:40:cc: 82:94:c8:83:39:52:f9:e4:06:6b:59:cf:38:ea:17: ba:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6B:CE:82:27:74:75:DF:8F:5F:7E:2E:0A:59:1A:33:00:73:71:B2 X509v3 Authority Key Identifier: keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a1:48:25:9e:a5:05:37:9d:69:1f:30:64:35:e7:7e:ad:47: a8:e9:3e:00:9a:9e:6b:55:5d:dc:aa:20:42:43:c9:5b:54:62: cc:ec:94:22:a3:a8:a2:7a:41:9c:d7:d1:1f:4f:79:87:0e:45: f4:a7:0c:51:3e:22:93:c9:59:4e:76:96:28:a0:b3:7f:a9:3d: a5:1d:f7:fc:ab:4b:c2:c7:b0:f0:c2:53:7b:d0:93:7f:11:b1: 6c:e3:34:75:00:7e:6b:d2:81:1d:44:93:47:06:99:f5:ff:25: 7c:20:41:de:73:dd:5e:7e:56:1a:eb:81:94:61:b5:30:a7:58: 68:b0:94:e5:35:4d:59:dd:fa:16:a3:cf:9c:94:08:69:d7:ad: a4:56:aa:30:11:b8:46:99:a1:89:9a:c7:82:c0:49:2d:3f:9b: a2:16:35:81:25:ed:b9:2c:50:d2:51:b8:4f:e0:da:d9:86:3e: c0:c9:f2:2f:f4:46:21:dd:80:18:8d:55:56:4d:80:5a:21:b8: 4a:ad:74:ee:ed:28:ba:02:df:9d:25:36:bb:17:52:49:67:07: f4:fb:df:53:dd:da:75:f2:dd:ed:2c:98:8a:fb:21:c9:56:f1: 6d:ca:ab:18:14:22:0a:87:7f:50:74:a9:09:50:e3:34:cb:7f: cf:d8:27:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MENDMzExMC8GA1UEBRMoRjQxM0Y1MUQ4N0JCRkY0QjBBNDEwNzIxODc0NzZFQkUw N0QzNjFCRjAeFw0yNDExMjMwNDQ0MzdaFw0yNDExMzAwNDQ0MzdaMBgxFjAUBgNV BAMTDTY3NDE1ZGI1LWRkMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2Ee340S8hVdIa/V+iscn2HnZHfpLU78spiyWqaaod/KnfkndQgahLJmrFCY6w WQ6gkDPzP/IG8e8yn/1Mo8StnnjMcuZ7YdeZ66fJ10Q60IegwOqCtYOgkPw/5hI6 4WxW66hrQ4Ai03v0yfboR+1fnsQRIFeat4BQCTDN1eFYOv7Y7govaxRrcviLoFh/ p9hnHHjAc+fkljJcc8jIcyM8lzpARONjqXdbSoAmFnds4fV7qJj4ZyiOZtpGb5ob caAb4KFLrhLPM53dzEJXKnWFp7h6QKVgZfbsQdGjvfXCfmtZlQGiOAEAvJulLDJA zIKUyIM5UvnkBmtZzzjqF7pdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu2vOgid0 dd+PX34uClkaMwBzcbIwHwYDVR0jBBgwFoAU9BP1HYe7/0sKQQchh0duvgfTYb8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwQ0MzLzI0QjhFMjU4RUU3 QzExRUU5RjI5MEU4MEM0RjlBRTAyLzlCUDFIWWU3XzBzS1FRY2hoMGR1dmdmVFli OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUJQMUhZZTdfMHNLUVFjaGgwZHV2Z2ZUWWI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw Q0MzLzI0QjhFMjU4RUU3QzExRUU5RjI5MEU4MEM0RjlBRTAyLzlCUDFIWWU3XzBz S1FRY2hoMGR1dmdmVFliOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALGhSCWepQU3nWkfMGQ1536tR6jpPgCanmtVXdyqIEJDyVtUYszslCKj qKJ6QZzX0R9PeYcORfSnDFE+IpPJWU52liigs3+pPaUd9/yrS8LHsPDCU3vQk38R sWzjNHUAfmvSgR1Ek0cGmfX/JXwgQd5z3V5+VhrrgZRhtTCnWGiwlOU1TVnd+haj z5yUCGnXraRWqjARuEaZoYmax4LASS0/m6IWNYEl7bksUNJRuE/g2tmGPsDJ8i/0 RiHdgBiNVVZNgFohuEqtdO7tKLoC350lNrsXUklnB/T731Pd2nXy3e0smIr7IclW 8W3KqxgUIgqHf1B0qQlQ4zTLf8/YJ4k= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:14 2024 by rpki-client on console-ams.rpki-client.org