$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft File: iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft (raw, json) Hash identifier: WsVGinxGi08vIog663+Bt5ssGBefiCBnP8ALsNqvtu8= Subject key identifier: 67:BA:0B:20:AC:F4:14:16:A1:AD:54:65:6E:A9:BD:DC:83:4E:F4:0C Authority key identifier: 89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 Certificate issuer: /CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft Manifest number: F6 Signing time: Sat 23 Nov 2024 03:23:04 +0000 Manifest this update: Sat 23 Nov 2024 03:23:03 +0000 Manifest next update: Sat 30 Nov 2024 03:23:03 +0000 Files and hashes: 1: iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl (hash: kD1Zls8W2Jv1JugHGsgdeLApgcyA178k2/XuSiIoP6w=) 2: 047E1E9C341C11EE84F4D52CC4F9AE02.roa (hash: wc/nP/I02P9mYhl99EomTi2ak69YgtTLrrtatE7njg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECE62/serialNumber=89027890033D5D623BD4E43986E880F6AB138494 Validity Not Before: Nov 23 03:23:03 2024 GMT Not After : Nov 30 03:23:03 2024 GMT Subject: CN=67414a98-79fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:ca:42:8d:3a:54:c5:cb:46:6d:08:bc:8a: 21:6d:27:37:5f:6d:f1:bb:37:14:b2:11:a6:81:a3: 95:4f:98:ab:e8:48:48:bb:75:6d:4e:8b:a6:85:9f: 5c:1a:a5:69:69:85:27:75:4e:7a:b2:2a:7f:ec:b7: 1e:ac:ba:2c:53:b1:dc:0e:e6:d5:6e:2d:4f:15:19: ba:96:1a:e7:02:a6:94:54:54:03:cb:2e:e5:96:47: 8e:34:ee:af:8b:b2:74:25:4c:04:a1:bf:7e:c2:2e: de:31:ad:cf:18:e1:38:44:36:a4:71:55:2e:93:d7: a7:2a:31:78:65:8c:b4:bd:34:6b:c6:64:2f:88:53: 5a:5b:96:3c:ec:f1:ad:d4:95:87:56:e6:16:3d:de: 0e:56:a6:3f:77:9e:a0:ce:d9:d1:4f:7f:d7:b9:69: 8b:a3:a1:bc:ba:47:5b:8a:85:60:c8:72:70:c7:0a: 5e:21:4d:ed:09:7f:73:b2:41:0e:a4:55:d2:03:89: fb:21:cf:6d:93:40:3a:b8:8c:1a:bf:6f:67:e5:06: 39:71:52:c0:33:24:08:42:3b:10:f0:03:6e:7b:e6: 6c:09:21:ca:49:35:d0:71:31:f8:4a:b1:c1:d9:a6: e6:a2:67:27:f7:52:24:c6:ab:4b:ea:c4:f9:aa:eb: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BA:0B:20:AC:F4:14:16:A1:AD:54:65:6E:A9:BD:DC:83:4E:F4:0C X509v3 Authority Key Identifier: keyid:89:02:78:90:03:3D:5D:62:3B:D4:E4:39:86:E8:80:F6:AB:13:84:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQJ4kAM9XWI71OQ5huiA9qsThJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECE62/21D5CCDE341B11EE9F849028C4F9AE02/iQJ4kAM9XWI71OQ5huiA9qsThJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:83:af:c9:27:61:aa:ec:a0:f9:f8:b7:07:01:7c:c0:e8:6d: 7d:35:fb:ef:90:70:b3:b9:10:38:ee:69:21:e1:06:d7:d2:2a: 82:9e:4e:86:89:53:41:7f:f2:05:3c:34:47:69:3e:ff:c8:1a: f8:f2:3b:53:b3:22:8b:b9:4b:82:70:80:10:1a:39:3b:a1:26: 77:23:65:a5:c8:b9:8a:9e:4d:81:c3:64:a9:07:76:00:b3:f2: d2:fe:b9:bd:ee:5d:27:dc:01:74:69:79:04:89:2c:a9:cd:54: f6:1d:1b:a0:53:e8:09:6d:f7:c0:a6:c6:bf:9a:fc:7c:d2:c1: 58:8e:42:3a:3b:91:94:3b:9e:61:d7:56:a2:63:50:9b:1e:b6: 97:9d:78:02:3c:3a:62:7e:57:73:f5:7b:45:a1:79:c4:2c:7e: d2:2c:b0:a0:59:98:b7:11:2d:0f:42:b1:88:1a:6f:c9:37:31: 23:a0:0c:72:0d:ed:c3:f5:78:4d:59:97:67:f2:2d:82:72:b2: 30:96:84:7d:9f:5a:64:73:cd:91:c6:11:90:20:74:7e:71:36: 4b:1d:54:b1:03:32:cf:d8:61:c2:28:0a:c3:96:ed:87:cd:3c: cd:25:c8:05:51:7a:25:ba:16:c1:2b:ff:6c:b9:61:5f:24:3d: 60:5e:7a:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNFNjIxMTAvBgNVBAUTKDg5MDI3ODkwMDMzRDVENjIzQkQ0RTQzOTg2RTg4MEY2 QUIxMzg0OTQwHhcNMjQxMTIzMDMyMzAzWhcNMjQxMTMwMDMyMzAzWjAYMRYwFAYD VQQDEw02NzQxNGE5OC03OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAHKQo06VMXLRm0IvIohbSc3X23xuzcUshGmgaOVT5ir6EhIu3VtToumhZ9c GqVpaYUndU56sip/7LcerLosU7HcDubVbi1PFRm6lhrnAqaUVFQDyy7llkeONO6v i7J0JUwEob9+wi7eMa3PGOE4RDakcVUuk9enKjF4ZYy0vTRrxmQviFNaW5Y87PGt 1JWHVuYWPd4OVqY/d56gztnRT3/XuWmLo6G8ukdbioVgyHJwxwpeIU3tCX9zskEO pFXSA4n7Ic9tk0A6uIwav29n5QY5cVLAMyQIQjsQ8ANue+ZsCSHKSTXQcTH4SrHB 2abmomcn91IkxqtL6sT5qusbwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGe6CyCs 9BQWoa1UZW6pvdyDTvQMMB8GA1UdIwQYMBaAFIkCeJADPV1iO9TkOYbogParE4SU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0U2Mi8yMUQ1Q0NERTM0 MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhXSTcxT1E1aHVpQTlxc1Ro SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRSjRrQU05WFdJNzFPUTVodWlBOXFzVGhKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0U2Mi8yMUQ1Q0NERTM0MUIxMUVFOUY4NDkwMjhDNEY5QUUwMi9pUUo0a0FNOVhX STcxT1E1aHVpQTlxc1RoSlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNg6/JJ2Gq7KD5+LcHAXzA6G19NfvvkHCzuRA47mkh4QbX0iqCnk6G iVNBf/IFPDRHaT7/yBr48jtTsyKLuUuCcIAQGjk7oSZ3I2WlyLmKnk2Bw2SpB3YA s/LS/rm97l0n3AF0aXkEiSypzVT2HRugU+gJbffApsa/mvx80sFYjkI6O5GUO55h 11aiY1CbHraXnXgCPDpifldz9XtFoXnELH7SLLCgWZi3ES0PQrGIGm/JNzEjoAxy De3D9XhNWZdn8i2CcrIwloR9n1pkc82RxhGQIHR+cTZLHVSxAzLP2GHCKArDlu2H zTzNJcgFUXoluhbBK/9suWFfJD1gXnpV -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org