$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft File: h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json) Hash identifier: +ziRl62S/6ZM937/mNX0ZVScqVZmEGs6Y6+ggtRR90M= Subject key identifier: 80:A3:D2:B4:87:6C:DC:1F:15:EB:32:07:85:B2:F0:73:55:BC:58:F7 Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 Certificate issuer: /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft Manifest number: 09 Signing time: Wed 23 Oct 2024 06:48:22 +0000 Manifest this update: Wed 23 Oct 2024 06:48:22 +0000 Manifest next update: Wed 30 Oct 2024 06:48:22 +0000 Files and hashes: 1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: L7/U5akWlFkNRUSNcUPpEQkuCLOq25ZV+pLZFP9Ic1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003 Validity Not Before: Oct 23 06:48:22 2024 GMT Not After : Oct 30 06:48:22 2024 GMT Subject: CN=67189c36-9ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:90:6f:91:31:52:f1:9d:56:97:64:71:b2:a8: b8:a1:92:17:88:b4:0a:1f:db:00:49:97:3a:b6:6c: aa:a8:d9:36:dc:fe:85:69:ed:aa:29:bc:78:c1:18: 3b:8f:f1:e6:92:ec:fe:2d:80:72:25:b6:8a:c5:64: f6:6c:25:3a:4a:86:93:0b:55:c7:d8:00:54:66:2a: c2:56:ab:e3:1a:ef:6c:e6:99:48:f9:63:ba:09:55: ef:b3:a3:92:c0:a6:a4:1a:34:f4:45:4e:ce:8c:81: 1a:ba:80:57:cc:de:5e:d9:ef:25:23:e7:80:ba:09: a2:07:8f:67:78:eb:5c:f6:f7:fe:18:e6:7c:4a:9a: 76:c4:b6:2e:3f:3e:50:d3:d9:4d:78:da:2b:69:e5: de:2b:a7:3a:53:c2:b8:41:cc:21:09:64:72:8b:7a: 87:6e:a6:4d:ed:be:21:68:ff:b3:e0:ff:f7:38:6f: 0a:6d:c3:0c:3b:74:1f:98:dd:b5:be:0f:e8:f0:2c: 61:99:8f:c1:36:59:2a:0d:4b:33:84:62:1a:d7:99: 69:0f:68:5f:bf:2a:7e:9e:79:bd:38:d8:df:0b:f0: 02:1f:b1:16:6e:eb:23:4a:1e:b8:15:c8:9f:d4:31: c0:de:08:69:f9:c2:5a:80:2c:b3:fd:e6:f6:b5:1d: c7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A3:D2:B4:87:6C:DC:1F:15:EB:32:07:85:B2:F0:73:55:BC:58:F7 X509v3 Authority Key Identifier: keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:2b:fb:1f:52:18:da:72:a5:6d:e8:26:91:82:18:94:16:be: f9:0e:22:d2:17:aa:dc:ea:b9:ec:af:81:cc:2b:69:df:47:6e: 21:b7:22:26:31:b3:a9:b7:0e:92:f8:49:3d:c1:ca:2f:ce:e0: 7c:d4:8d:e9:d1:71:ca:18:17:68:dd:54:bd:85:e4:16:18:e6: 4e:33:0e:9d:fe:27:ce:b3:79:13:04:5a:18:71:94:e8:d5:2c: 93:c4:8e:0b:c5:b7:b8:a8:e7:e0:be:d6:e0:a5:8f:f9:a0:15: d1:1c:ee:4c:d1:56:f0:2b:92:58:81:2f:10:66:fc:00:b5:1e: bf:ba:6d:15:a2:d8:9f:77:26:2f:99:85:f7:ba:11:79:1f:6d: 53:71:96:90:d2:00:46:83:4f:c9:ec:15:cb:e0:4c:10:f8:ce: 69:b8:ff:ee:f3:5f:96:50:2a:32:05:ec:2b:3d:02:01:a8:6b: cf:5c:4b:8c:26:e9:d6:e3:50:ed:99:90:23:d7:37:e8:c5:eb: 4f:f8:9e:3c:51:35:15:d6:30:2f:6f:5a:35:f5:80:99:00:9c: c9:11:b5:d6:73:05:2d:46:82:b9:d1:8d:7a:31:7f:d6:8a:06: 17:00:a7:a4:ee:94:3e:1b:45:9f:fb:2c:63:2a:ca:6c:59:ea: 74:da:fe:4f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTRGNzExMC8GA1UEBRMoODc5MkRFMzk5Q0Y2MzE5M0REQzI5RDMwRkJGMEE1ODFF MDI0RjAwMzAeFw0yNDEwMjMwNjQ4MjJaFw0yNDEwMzAwNjQ4MjJaMBgxFjAUBgNV BAMTDTY3MTg5YzM2LTlhYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCukG+RMVLxnVaXZHGyqLihkheItAof2wBJlzq2bKqo2Tbc/oVp7aopvHjBGDuP 8eaS7P4tgHIltorFZPZsJTpKhpMLVcfYAFRmKsJWq+Ma72zmmUj5Y7oJVe+zo5LA pqQaNPRFTs6MgRq6gFfM3l7Z7yUj54C6CaIHj2d461z29/4Y5nxKmnbEti4/PlDT 2U142itp5d4rpzpTwrhBzCEJZHKLeodupk3tviFo/7Pg//c4bwptwww7dB+Y3bW+ D+jwLGGZj8E2WSoNSzOEYhrXmWkPaF+/Kn6eeb042N8L8AIfsRZu6yNKHrgVyJ/U McDeCGn5wlqALLP95va1HccnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgKPStIds 3B8V6zIHhbLwc1W8WPcwHwYDVR0jBBgwFoAUh5LeOZz2MZPdwp0w+/ClgeAk8AMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBNEY3L0EzREQ2QjlBODVG QzExRUZCQzIxMEY1RUM0RjlBRTAyL2g1TGVPWnoyTVpQZHdwMHctX0NsZ2VBazhB TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDVMZU9aejJNWlBkd3Awdy1fQ2xnZUFrOEFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB NEY3L0EzREQ2QjlBODVGQzExRUZCQzIxMEY1RUM0RjlBRTAyL2g1TGVPWnoyTVpQ ZHdwMHctX0NsZ2VBazhBTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGUr+x9SGNpypW3oJpGCGJQWvvkOItIXqtzqueyvgcwrad9HbiG3IiYx s6m3DpL4ST3Byi/O4HzUjenRccoYF2jdVL2F5BYY5k4zDp3+J86zeRMEWhhxlOjV LJPEjgvFt7io5+C+1uClj/mgFdEc7kzRVvArkliBLxBm/AC1Hr+6bRWi2J93Ji+Z hfe6EXkfbVNxlpDSAEaDT8nsFcvgTBD4zmm4/+7zX5ZQKjIF7Cs9AgGoa89cS4wm 6dbjUO2ZkCPXN+jF60/4njxRNRXWMC9vWjX1gJkAnMkRtdZzBS1GgrnRjXoxf9aK BhcAp6TulD4bRZ/7LGMqymxZ6nTa/k8= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:18 2024 by rpki-client on console-fra.rpki-client.org