$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: H67CXxWQS4btsYDPVw6Bxl9x5YgfpjiAIZ7JDhP2iT4= Subject key identifier: 37:2C:0B:9B:1D:90:54:36:2D:87:57:50:24:90:2E:E2:7A:24:32:A0 Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: 49 Signing time: Sat 23 Nov 2024 05:18:33 +0000 Manifest this update: Sat 23 Nov 2024 05:18:33 +0000 Manifest next update: Sat 30 Nov 2024 05:18:33 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: ODd/GqTBKJdM7wApIquD1KxEGkDynN6TRiksh3xa+6Y=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: K7xoMbrahTaRmzWPIHZWon2Vo6zWB816U+odiAFW2nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Validity Not Before: Nov 23 05:18:33 2024 GMT Not After : Nov 30 05:18:33 2024 GMT Subject: CN=674165a9-e1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:b2:35:9f:69:4c:64:cf:fa:be:26:f0:06: e6:30:a1:ea:db:c1:1d:ca:cf:84:00:77:d8:7e:d7: 79:18:b4:90:89:f5:42:6d:b7:e1:5f:3d:d3:a1:ac: 9e:f2:51:f7:ae:5c:ec:e4:db:9c:84:14:ee:d8:cc: 10:f0:e0:8c:07:d5:f2:d2:cf:e5:92:08:09:c4:8d: d0:8d:84:96:a0:a2:e3:8b:96:ba:2e:69:db:d3:31: 63:92:1c:1c:5a:64:04:ac:4a:5f:47:cb:72:8d:63: 43:f1:77:fb:45:17:ac:f8:c5:9d:47:4a:a1:7e:f6: 88:7f:37:a0:ef:35:ef:6d:c4:03:39:49:84:82:ae: c1:35:2f:66:fb:e7:0b:be:56:4a:0b:41:9b:ca:02: 99:d1:75:d9:84:4c:ee:10:04:4d:a2:43:3e:a2:0b: 7b:fb:c1:42:84:90:2f:da:6a:c5:88:4c:a2:7a:72: 3b:e0:28:6d:bc:ec:6a:d4:9b:4a:5c:41:60:b3:c4: 5f:f5:ed:ad:d7:3c:e2:30:1a:54:fc:fb:4a:85:ee: a0:4e:db:9c:b1:c5:09:b6:23:4c:6f:bc:4d:64:1c: 24:eb:c5:02:d3:fe:e2:0c:08:91:3d:21:91:80:cc: 33:48:ba:ab:70:74:53:4a:b1:36:6d:83:0b:a1:c4: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2C:0B:9B:1D:90:54:36:2D:87:57:50:24:90:2E:E2:7A:24:32:A0 X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d2:9f:aa:5a:3b:75:9f:3d:86:78:bf:58:fe:d9:65:98:3a: 3d:60:5c:53:d8:57:b8:02:4c:ba:52:bf:db:34:ed:b2:34:80: 95:7f:33:d1:06:b9:52:be:5a:5e:e0:18:36:dd:48:3e:f7:41: da:f6:69:85:fc:6c:dc:b9:8d:61:c8:f1:9d:19:ff:66:fb:4b: d3:87:e0:ea:da:30:26:51:72:1f:1a:93:5e:3e:ce:37:ce:b8: 8c:d7:52:31:7a:30:96:ba:4b:ac:26:e9:3e:83:72:84:af:34: 35:77:57:0e:e3:67:9e:49:a9:e5:1a:64:7f:dd:97:c7:7c:e4: d2:7d:e2:76:a8:eb:01:8c:86:2b:7a:12:d6:0f:da:76:aa:5d: 77:9c:88:88:ba:4c:8d:3c:87:2e:52:75:ad:13:d5:76:4a:e7: a4:e7:29:ed:82:a0:21:d0:83:01:d4:cf:92:d4:d4:58:5d:fa: 66:ef:c8:c0:80:00:52:60:0d:21:a5:52:c1:1e:3f:3a:f9:48: 82:24:eb:8b:9b:15:a8:c2:f1:2c:81:74:ab:39:87:36:8c:89: aa:b2:2d:a7:47:0a:60:53:b7:d9:69:4c:2b:e2:34:00:3e:79: ca:8f:8a:51:d6:2d:2f:90:48:14:02:19:31:6b:6e:90:5a:b5: 35:6b:90:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUY0RDExMC8GA1UEBRMoRjExRjU3NkQ2QjBDREIyQUE5MkRDRjlENEU3NzMyNzM2 MEQ1NTc2NzAeFw0yNDExMjMwNTE4MzNaFw0yNDExMzAwNTE4MzNaMBgxFjAUBgNV BAMTDTY3NDE2NWE5LWUxZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj+LI1n2lMZM/6vibwBuYwoerbwR3Kz4QAd9h+13kYtJCJ9UJtt+FfPdOhrJ7y UfeuXOzk25yEFO7YzBDw4IwH1fLSz+WSCAnEjdCNhJagouOLlrouadvTMWOSHBxa ZASsSl9Hy3KNY0Pxd/tFF6z4xZ1HSqF+9oh/N6DvNe9txAM5SYSCrsE1L2b75wu+ VkoLQZvKApnRddmETO4QBE2iQz6iC3v7wUKEkC/aasWITKJ6cjvgKG287GrUm0pc QWCzxF/17a3XPOIwGlT8+0qF7qBO25yxxQm2I0xvvE1kHCTrxQLT/uIMCJE9IZGA zDNIuqtwdFNKsTZtgwuhxKxnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNywLmx2Q VDYth1dQJJAu4nokMqAwHwYDVR0jBBgwFoAU8R9XbWsM2yqpLc+dTncyc2DVV2cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRjREL0ZGNjc4QzcyM0ZE NzExRUY4RkJCNjk1NUM0RjlBRTAyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYy Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFI5WGJXc00yeXFwTGMtZFRuY3ljMkRWVjJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF RjREL0ZGNjc4QzcyM0ZENzExRUY4RkJCNjk1NUM0RjlBRTAyLzhSOVhiV3NNMnlx cExjLWRUbmN5YzJEVlYyYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGzSn6paO3WfPYZ4v1j+2WWYOj1gXFPYV7gCTLpSv9s07bI0gJV/M9EG uVK+Wl7gGDbdSD73Qdr2aYX8bNy5jWHI8Z0Z/2b7S9OH4OraMCZRch8ak14+zjfO uIzXUjF6MJa6S6wm6T6DcoSvNDV3Vw7jZ55JqeUaZH/dl8d85NJ94nao6wGMhit6 EtYP2naqXXeciIi6TI08hy5Sda0T1XZK56TnKe2CoCHQgwHUz5LU1Fhd+mbvyMCA AFJgDSGlUsEePzr5SIIk64ubFajC8SyBdKs5hzaMiaqyLadHCmBTt9lpTCviNAA+ ecqPilHWLS+QSBQCGTFrbpBatTVrkPY= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org