$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: v1wdAZYnSPhSL+S7UnB5ubFheTKtit3AsGz0JO+Qlfw= Subject key identifier: 94:66:14:35:52:ED:02:2F:53:F1:FA:66:CD:42:5F:1F:11:92:B7:C4 Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 23E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 23C2 Signing time: Fri 22 Nov 2024 15:49:24 +0000 Manifest this update: Fri 22 Nov 2024 15:49:23 +0000 Manifest next update: Fri 29 Nov 2024 15:49:23 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: Q2jXHgaN1sMw3seLO4o/jpySi7I5wblhlU72d5Q4wP8=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: crjIi9A4daWBIMavWgwdrvqfs6rboASaaFeiLlhaj3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9184 (0x23e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: Nov 22 15:49:23 2024 GMT Not After : Nov 29 15:49:23 2024 GMT Subject: CN=6740a804-61d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:a4:32:dd:66:1b:72:b5:c5:c6:69:3d:91: ae:89:21:55:44:8c:4b:46:8d:29:63:a9:38:a4:c8: 61:11:2a:0e:60:1d:f7:a8:0c:d4:aa:65:67:74:07: b0:df:f0:3c:45:7e:b0:bd:4d:63:b4:ff:3e:36:6d: 1b:98:93:ef:e4:d6:01:06:d7:13:95:d8:90:f9:37: d5:ba:6f:76:c6:d2:e9:48:a4:3f:47:f9:3a:8e:53: 3e:43:0b:6a:99:8f:75:0a:82:a3:f7:84:74:cc:84: 68:e0:a9:c6:44:73:fc:96:37:eb:89:8c:bc:33:0a: 98:f0:ac:e7:48:ee:79:17:b9:c3:e9:48:89:58:ae: eb:2f:ad:b8:e1:64:60:29:05:19:40:cf:97:d5:5c: b6:15:17:8b:dc:55:f4:2a:4a:03:4f:4a:0f:d5:c7: f0:99:82:97:0a:29:b6:05:89:69:81:b6:e7:d0:7a: 83:d3:e9:84:9d:be:0a:82:e9:0c:12:cb:83:70:90: 3c:ce:03:fa:d7:f3:70:7a:1a:ea:34:2e:28:11:07: e4:fe:a5:14:b6:f1:49:b5:d1:6a:ef:10:a1:2e:43: 94:09:70:20:12:00:41:7e:ec:30:93:fd:e3:7a:56: 66:be:4d:41:25:dd:e6:0f:0f:60:02:ed:50:c5:5a: 15:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:66:14:35:52:ED:02:2F:53:F1:FA:66:CD:42:5F:1F:11:92:B7:C4 X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:16:d3:86:53:8c:99:cb:fe:12:02:6c:19:fe:6f:c8:d4:58: 33:3f:57:10:f9:ca:27:f8:f7:53:da:49:63:28:9e:75:79:c6: ea:61:17:62:48:51:6a:b0:6a:48:1f:65:b8:93:58:0b:d8:3a: 85:9e:91:0a:1b:4e:cf:dd:4b:42:94:0e:35:9a:54:97:7a:cf: 7c:72:06:32:be:22:83:6c:34:65:a1:be:ac:37:58:98:af:82: 28:36:b8:85:53:f2:2a:1c:f2:64:59:85:0e:10:d6:b4:79:63: e9:0f:15:55:4e:49:0f:aa:e2:20:fd:16:70:7f:1f:1d:34:5d: 45:7f:d8:ba:95:fb:0f:c0:8e:94:c0:d6:43:9e:03:7b:ab:61: e4:1a:24:94:27:14:d9:6d:90:90:34:d9:c9:6f:e8:65:13:fe: 0a:07:df:92:15:d6:ce:96:d1:e1:ea:3f:15:2b:99:f6:5e:e9: 79:56:15:ad:85:be:a6:6d:7d:1a:63:c5:79:68:0c:ff:85:84: 7c:67:bb:a5:71:18:9f:b3:2f:96:a4:00:c9:79:63:0f:12:a4: 1f:b5:72:16:0c:91:4d:f9:93:75:6e:29:ee:8f:39:3b:e4:4e: 88:0a:33:52:1f:a7:2f:f3:7e:dc:53:c7:c3:8f:42:97:57:a5: 7a:54:7c:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjQxMTIyMTU0OTIzWhcNMjQxMTI5MTU0OTIzWjAYMRYwFAYD VQQDEw02NzQwYTgwNC02MWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+GkMt1mG3K1xcZpPZGuiSFVRIxLRo0pY6k4pMhhESoOYB33qAzUqmVndAew 3/A8RX6wvU1jtP8+Nm0bmJPv5NYBBtcTldiQ+TfVum92xtLpSKQ/R/k6jlM+Qwtq mY91CoKj94R0zIRo4KnGRHP8ljfriYy8MwqY8KznSO55F7nD6UiJWK7rL6244WRg KQUZQM+X1Vy2FReL3FX0KkoDT0oP1cfwmYKXCim2BYlpgbbn0HqD0+mEnb4KgukM EsuDcJA8zgP61/NwehrqNC4oEQfk/qUUtvFJtdFq7xChLkOUCXAgEgBBfuwwk/3j elZmvk1BJd3mDw9gAu1QxVoVPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRmFDVS 7QIvU/H6Zs1CXx8RkrfEMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmFtOGU4yZy/4SAmwZ/m/I1FgzP1cQ+con+PdT2kljKJ51ecbqYRdi SFFqsGpIH2W4k1gL2DqFnpEKG07P3UtClA41mlSXes98cgYyviKDbDRlob6sN1iY r4IoNriFU/IqHPJkWYUOENa0eWPpDxVVTkkPquIg/RZwfx8dNF1Ff9i6lfsPwI6U wNZDngN7q2HkGiSUJxTZbZCQNNnJb+hlE/4KB9+SFdbOltHh6j8VK5n2Xul5VhWt hb6mbX0aY8V5aAz/hYR8Z7ulcRifsy+WpADJeWMPEqQftXIWDJFN+ZN1binujzk7 5E6ICjNSH6cv837cU8fDj0KXV6V6VHwK -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:39 2024 by rpki-client on console-fra.rpki-client.org