$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: 77L+KyNWSr6ItP+KF3i7JE+VmnlgoDTv1EljGk3+6VY= Subject key identifier: E0:C1:B2:8E:08:76:F9:A2:FF:5F:FE:99:89:84:DC:AC:D4:FB:58:E7 Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 07CA Signing time: Fri 22 Nov 2024 20:42:18 +0000 Manifest this update: Fri 22 Nov 2024 20:42:17 +0000 Manifest next update: Fri 29 Nov 2024 20:42:17 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: ARTY4AyQKi8qlNuNlXiwIz4PYBbxWdB9Y4W62vHfCzM=) 2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: 1ZtFopmCCVD7KT2BdPii78KMDgCQkvnDuz2kc/+aBJQ=) 3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: MZpYMM5PdgtRobc7R6HBOp1eIjkKqyVaBTyVHYLZE2s=) 4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 7a4dwjZZzngXpkNrbzfKEtz8LMWqMhBZgDALtZ87eNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: Nov 22 20:42:17 2024 GMT Not After : Nov 29 20:42:17 2024 GMT Subject: CN=6740ecaa-ac3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:3c:16:97:4a:2a:a2:0e:4a:9b:9b:64:26: 7f:37:ea:49:c3:6f:87:3f:9e:89:06:46:0c:fe:c2: e8:ef:f5:9b:3e:48:1f:d4:82:02:b7:79:44:c0:ca: bb:cf:48:ef:c3:04:5a:38:63:ff:f7:74:a2:8c:ee: e4:be:c7:90:15:30:c3:70:62:d0:36:e4:5f:f4:cd: 64:d3:3e:69:4f:85:00:4f:5f:bc:44:b6:2b:be:e8: f5:56:01:5f:3c:7b:59:97:99:48:7e:05:bd:0b:f5: f6:a2:15:e3:39:49:5e:6b:53:5f:79:80:02:d8:4e: a5:b3:0a:a7:e1:b4:a4:d7:35:1a:82:e4:f7:dd:81: 4b:e0:63:e3:f4:33:e1:1a:41:38:c3:09:8d:c0:fe: 6f:51:78:59:a4:f9:5b:21:4b:21:1c:89:00:57:ce: 65:28:85:e2:b5:62:c2:86:f6:08:e1:0d:39:03:14: 08:75:1b:94:4e:53:f2:09:bc:6a:e3:98:f6:f6:a7: 02:f7:ae:40:dd:09:6d:4d:08:9d:95:17:c2:10:f7: 07:0a:79:b2:5a:96:e8:7c:d5:b1:80:5a:48:90:54: 12:b0:cb:f9:eb:e0:e0:47:20:07:4f:48:18:ba:5a: fd:b9:05:fc:50:c0:8e:9e:fd:a3:30:b5:54:37:22: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C1:B2:8E:08:76:F9:A2:FF:5F:FE:99:89:84:DC:AC:D4:FB:58:E7 X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:19:93:47:c2:cd:1c:25:73:d0:1b:0f:bb:73:a4:12:a1:34: f3:69:d8:86:d3:15:e2:f1:05:27:ce:c8:d7:2a:83:09:17:33: d5:50:21:46:66:5c:d8:76:44:3f:ff:48:e8:fd:df:06:30:19: 63:9e:30:11:24:e3:7b:82:42:ad:4a:c2:2e:b4:f1:7d:43:87: 89:16:61:14:2c:74:20:16:59:26:b8:00:4d:d1:4d:a9:b0:f3: f9:20:3e:5e:98:f9:ce:99:7e:86:c6:8c:af:b9:08:4c:07:ed: 34:46:fa:ee:4d:55:8f:15:d8:03:74:0d:ea:99:48:d6:32:bf: 0c:94:75:a1:53:10:0c:e1:04:10:28:f0:c8:ab:10:5f:9b:54: 31:67:a0:44:f3:17:1c:18:2f:91:2c:e5:36:f7:72:35:23:39: 1a:35:9a:93:78:ea:0a:e0:8a:3d:1f:cd:3d:23:5d:c1:22:3f: 70:cd:00:e8:e6:1b:0b:13:ad:2f:05:ed:57:e4:6f:1f:44:c7: f4:2b:9c:7b:0f:1b:e5:e7:69:d1:0e:cb:46:e8:2e:e1:0d:90: af:74:77:36:c1:7c:ca:c5:f5:2e:57:db:a7:26:70:9f:6a:9e: 13:41:cc:b7:0f:f6:1c:dc:59:b7:e2:46:b5:b9:0e:8d:97:01: 2a:24:98:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjQxMTIyMjA0MjE3WhcNMjQxMTI5MjA0MjE3WjAYMRYwFAYD VQQDEw02NzQwZWNhYS1hYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/A8FpdKKqIOSpubZCZ/N+pJw2+HP56JBkYM/sLo7/WbPkgf1IICt3lEwMq7 z0jvwwRaOGP/93SijO7kvseQFTDDcGLQNuRf9M1k0z5pT4UAT1+8RLYrvuj1VgFf PHtZl5lIfgW9C/X2ohXjOUlea1NfeYAC2E6lswqn4bSk1zUaguT33YFL4GPj9DPh GkE4wwmNwP5vUXhZpPlbIUshHIkAV85lKIXitWLChvYI4Q05AxQIdRuUTlPyCbxq 45j29qcC965A3QltTQidlRfCEPcHCnmyWpbofNWxgFpIkFQSsMv56+DgRyAHT0gY ulr9uQX8UMCOnv2jMLVUNyIyTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODBso4I dvmi/1/+mYmE3KzU+1jnMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUGZNHws0cJXPQGw+7c6QSoTTzadiG0xXi8QUnzsjXKoMJFzPVUCFG ZlzYdkQ//0jo/d8GMBljnjARJON7gkKtSsIutPF9Q4eJFmEULHQgFlkmuABN0U2p sPP5ID5emPnOmX6GxoyvuQhMB+00RvruTVWPFdgDdA3qmUjWMr8MlHWhUxAM4QQQ KPDIqxBfm1QxZ6BE8xccGC+RLOU293I1IzkaNZqTeOoK4Io9H809I13BIj9wzQDo 5hsLE60vBe1X5G8fRMf0K5x7Dxvl52nRDstG6C7hDZCvdHc2wXzKxfUuV9unJnCf ap4TQcy3D/Yc3Fm34ka1uQ6NlwEqJJgS -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org