$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft File: b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json) Hash identifier: QsSR2fvIXx4l4NWOLgsKZDvtm4TphaZo0PrVwa4cywY= Subject key identifier: 9D:46:FF:9D:C5:70:3F:05:AA:94:A8:AE:2C:B8:3B:B0:B6:6B:6D:DC Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft Manifest number: E2 Signing time: Sat 23 Nov 2024 03:35:41 +0000 Manifest this update: Sat 23 Nov 2024 03:35:40 +0000 Manifest next update: Sat 30 Nov 2024 03:35:40 +0000 Files and hashes: 1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: Fiqvy7rp7drtSIMc1JOlLLalbMEN3jQHSRhIDz9RsR0=) 2: 089A55E052CB11EEB275AA16C4F9AE02.roa (hash: OAbMIDlyrmwRlQtoGDtJTGqeGRYOM+KyLuHj+udJQVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Validity Not Before: Nov 23 03:35:40 2024 GMT Not After : Nov 30 03:35:40 2024 GMT Subject: CN=67414d8d-35e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:05:db:79:f9:e2:c4:4c:45:1e:06:6d:97: d3:01:84:d4:4a:9c:b4:bf:5f:3d:ea:45:90:dd:b6: f6:d9:da:1e:83:8e:14:68:b8:28:c7:11:9b:c2:17: f4:ab:7e:03:47:31:91:9b:64:cd:03:84:cc:c2:aa: d4:25:1f:c4:72:b3:04:5c:8b:2d:a9:b6:3a:1f:0a: 07:91:43:11:73:16:f9:eb:5e:4d:bb:fa:d7:23:91: 4e:12:b6:ea:29:e9:50:17:f4:53:68:3c:ba:bf:51: 14:aa:62:43:9e:80:1b:ce:56:c4:c3:f2:28:97:b8: 5b:4f:03:95:91:6d:35:2e:7f:ce:d2:9d:c4:e3:78: 8d:1d:cf:d1:5b:3f:1f:27:65:cb:bd:9d:7e:e9:59: b3:36:5a:23:f5:27:2a:c1:25:68:1d:9e:d4:81:b6: 27:41:4f:e4:6d:d1:24:be:4a:46:15:c8:49:50:4a: 09:64:c1:97:09:52:03:1f:64:4c:3c:13:64:c9:c8: 18:df:24:86:94:1c:71:47:e3:20:bb:b4:17:35:24: 85:eb:d0:c9:05:0a:34:16:37:2c:a4:a5:7d:6a:1c: b0:5a:51:8a:3e:21:64:a3:59:e9:a9:94:06:ee:70: a9:37:47:5e:c1:4c:8c:5b:2f:d0:7a:3e:a0:fe:9c: 7d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:46:FF:9D:C5:70:3F:05:AA:94:A8:AE:2C:B8:3B:B0:B6:6B:6D:DC X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f8:18:95:1f:4f:ae:33:ab:d0:c2:19:4d:b0:85:1b:41:44: 82:50:21:44:0f:95:74:41:99:cc:e8:3a:19:73:e0:f0:0e:4f: b1:c4:15:58:a1:a4:b3:65:ff:b3:40:b2:e2:29:2a:ca:7e:e1: 7c:a1:46:cb:a4:a9:c6:6f:0c:b3:c6:8d:a7:63:2b:c9:c4:bc: 3e:71:91:d6:b7:94:22:88:5e:68:7b:d3:3e:5e:01:07:dd:1f: 9f:a5:ea:97:b4:7a:f7:7e:20:a2:04:6a:44:8b:56:cf:00:09: a7:75:7b:a5:77:52:8c:6c:84:15:71:e8:f2:48:6c:fc:49:52: bf:98:db:de:18:86:d6:28:00:98:e9:7a:b8:ce:d9:8d:d5:b2: d4:20:6b:05:24:82:46:fa:1d:84:cc:41:66:61:6a:aa:48:6d: 5b:26:a7:9e:37:a7:ed:04:90:b5:b8:f4:57:ee:af:7b:98:ec: 49:5c:23:4b:db:9f:1e:80:4c:6b:87:b5:dd:ca:de:e1:40:72: ed:40:ed:a1:8d:ab:30:81:40:1c:07:62:32:ff:e6:73:c8:f1: 28:9a:99:cb:b5:09:0f:74:d8:f0:fb:d2:fc:f4:ce:cf:2b:67: 16:99:04:0b:79:d9:e1:42:16:5d:ff:49:97:e9:9e:87:b3:2f: 73:44:ca:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjQxMTIzMDMzNTQwWhcNMjQxMTMwMDMzNTQwWjAYMRYwFAYD VQQDEw02NzQxNGQ4ZC0zNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIYF23n54sRMRR4GbZfTAYTUSpy0v1896kWQ3bb22doeg44UaLgoxxGbwhf0 q34DRzGRm2TNA4TMwqrUJR/EcrMEXIstqbY6HwoHkUMRcxb5615Nu/rXI5FOErbq KelQF/RTaDy6v1EUqmJDnoAbzlbEw/Iol7hbTwOVkW01Ln/O0p3E43iNHc/RWz8f J2XLvZ1+6VmzNloj9ScqwSVoHZ7UgbYnQU/kbdEkvkpGFchJUEoJZMGXCVIDH2RM PBNkycgY3ySGlBxxR+Mgu7QXNSSF69DJBQo0FjcspKV9ahywWlGKPiFko1npqZQG 7nCpN0dewUyMWy/Qej6g/px9dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1G/53F cD8FqpSoriy4O7C2a23cMB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkU0RS9EQjAzRjY1QTUyQzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1 OE1ZRjRPQnZ5S1JzVkUxdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH+BiVH0+uM6vQwhlNsIUbQUSCUCFED5V0QZnM6DoZc+DwDk+xxBVY oaSzZf+zQLLiKSrKfuF8oUbLpKnGbwyzxo2nYyvJxLw+cZHWt5QiiF5oe9M+XgEH 3R+fpeqXtHr3fiCiBGpEi1bPAAmndXuld1KMbIQVcejySGz8SVK/mNveGIbWKACY 6Xq4ztmN1bLUIGsFJIJG+h2EzEFmYWqqSG1bJqeeN6ftBJC1uPRX7q97mOxJXCNL 258egExrh7Xdyt7hQHLtQO2hjaswgUAcB2Iy/+ZzyPEompnLtQkPdNjw+9L89M7P K2cWmQQLednhQhZd/0mX6Z6Hsy9zRMoj -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:57 2024 by rpki-client on console-fra.rpki-client.org