$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: gKPQO0eoDDuPri+Ec7uPniQpRGIAGG27+mbxX88Z6V8= Subject key identifier: 9C:22:9B:54:54:BA:3C:6B:6D:18:F9:4E:DA:CC:0E:3E:55:51:F4:5D Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 3445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 3432 Signing time: Sun 24 Nov 2024 15:15:23 +0000 Manifest this update: Sun 24 Nov 2024 15:15:22 +0000 Manifest next update: Sun 01 Dec 2024 15:15:22 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: Q9aq9DrEyXQo6yCIOtLKSIQTeCbqq/9N/8AM45YJmaE=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: Uiye7cqZlanXJWgI4AXX+yyZ4vhsuuEZPw69WEAiEn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13381 (0x3445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Nov 24 15:15:22 2024 GMT Not After : Dec 1 15:15:22 2024 GMT Subject: CN=6743430a-d450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:53:d0:3d:dc:ef:27:5b:29:9a:32:a1:ed: 28:bf:9c:a7:48:9d:92:25:74:b0:aa:a6:87:44:91: 69:bc:ad:a3:06:27:03:94:c6:dd:04:df:98:dc:c8: 85:ba:14:6a:36:0b:60:dd:71:f2:f0:51:b9:c1:22: b6:2f:ad:fa:83:d7:0e:9d:73:72:91:23:ba:e5:f0: 80:16:91:63:d4:fc:e7:9b:41:43:68:d1:02:d9:80: e3:bb:cc:c4:ee:ae:dc:f1:f9:a7:c0:36:04:16:0b: 94:80:d2:86:d4:68:7d:51:a1:ad:96:8c:ff:98:ea: fc:92:85:77:89:df:c5:9e:27:56:06:ca:ed:55:af: 37:79:9b:b2:51:94:ee:37:d1:7a:25:1f:4e:0a:ce: c4:8b:2b:81:c8:e0:72:b2:91:fb:ec:30:16:7c:85: 21:d4:9e:39:61:78:cc:6a:58:70:3f:12:9e:00:97: a0:f6:90:c2:cd:81:7d:36:92:69:c6:57:e4:0e:d9: a5:f4:57:99:7e:fa:18:ef:27:29:5a:0c:b3:bd:02: dd:ec:cb:d6:b4:f2:79:05:28:a3:ef:a5:6b:ba:5d: c4:4b:aa:7f:ea:34:65:9d:38:75:45:2f:eb:fe:53: 47:35:5d:6c:22:64:46:52:5b:5c:f8:58:04:11:94: 98:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:22:9B:54:54:BA:3C:6B:6D:18:F9:4E:DA:CC:0E:3E:55:51:F4:5D X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:95:37:4a:46:06:16:04:ca:4a:0d:6c:6d:1c:ba:b3:e9:62: ac:a6:d9:d8:c2:ba:11:4d:8d:9b:7c:ca:bf:f1:cf:9c:84:e0: 87:d9:c1:62:6b:8a:d3:20:37:78:53:28:ad:61:a0:1b:57:c4: 37:17:a6:67:4d:1b:0f:2a:c8:33:4e:71:03:f8:fa:7e:fb:93: 80:2b:77:5f:68:af:44:38:c9:00:f4:74:dc:f9:20:40:b3:4f: db:2c:c0:ed:e9:dd:4b:49:d7:7b:30:ed:e9:26:56:a6:e3:1d: 9a:1a:b9:c0:66:23:12:bd:dc:dc:e0:ba:fa:39:73:bb:f5:f4: 41:5a:05:1e:a7:de:17:26:00:05:3b:23:78:93:32:f0:4a:62: c7:9f:70:dc:96:9f:26:7d:9c:8f:b6:00:e4:b7:50:1a:98:a0: c1:0d:1f:c6:ac:22:93:2c:68:b1:b2:1c:91:00:06:34:00:c6: 79:e9:c8:78:4a:41:90:46:39:87:b6:68:bd:ac:85:41:04:32: d5:ff:b7:c9:5c:34:d9:c6:c9:86:a3:57:0b:8e:c7:c2:50:49: 22:38:a5:bc:22:aa:05:db:4b:f4:3f:22:1f:c4:87:b6:a1:ed: 9f:6d:6a:65:10:b2:4a:ae:1b:4b:ca:f0:70:03:bd:28:18:cd: 3a:08:76:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjQxMTI0MTUxNTIyWhcNMjQxMjAxMTUxNTIyWjAYMRYwFAYD VQQDEw02NzQzNDMwYS1kNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnZT0D3c7ydbKZoyoe0ov5ynSJ2SJXSwqqaHRJFpvK2jBicDlMbdBN+Y3MiF uhRqNgtg3XHy8FG5wSK2L636g9cOnXNykSO65fCAFpFj1Pznm0FDaNEC2YDju8zE 7q7c8fmnwDYEFguUgNKG1Gh9UaGtloz/mOr8koV3id/FnidWBsrtVa83eZuyUZTu N9F6JR9OCs7EiyuByOByspH77DAWfIUh1J45YXjMalhwPxKeAJeg9pDCzYF9NpJp xlfkDtml9FeZfvoY7ycpWgyzvQLd7MvWtPJ5BSij76Vrul3ES6p/6jRlnTh1RS/r /lNHNV1sImRGUltc+FgEEZSYfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJwim1RU ujxrbRj5TtrMDj5VUfRdMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/lTdKRgYWBMpKDWxtHLqz6WKsptnYwroRTY2bfMq/8c+chOCH2cFi a4rTIDd4UyitYaAbV8Q3F6ZnTRsPKsgzTnED+Pp++5OAK3dfaK9EOMkA9HTc+SBA s0/bLMDt6d1LSdd7MO3pJlam4x2aGrnAZiMSvdzc4Lr6OXO79fRBWgUep94XJgAF OyN4kzLwSmLHn3Dclp8mfZyPtgDkt1AamKDBDR/GrCKTLGixshyRAAY0AMZ56ch4 SkGQRjmHtmi9rIVBBDLV/7fJXDTZxsmGo1cLjsfCUEkiOKW8IqoF20v0PyIfxIe2 oe2fbWplELJKrhtLyvBwA70oGM06CHYE -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:51 2024 by rpki-client on console-fra.rpki-client.org