$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: Kl2kukT3hqw+figsdqK2VXV2ZK7shOGuOAomI+6SKOw= Subject key identifier: DD:8F:19:D8:70:D7:A5:E6:B2:A2:A2:DD:B5:DA:18:C8:73:88:91:2B Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0A19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 09FF Signing time: Fri 22 Nov 2024 19:38:51 +0000 Manifest this update: Fri 22 Nov 2024 19:38:51 +0000 Manifest next update: Fri 29 Nov 2024 19:38:51 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: uUZWj6PaVQDztdgpjbxQkZLeAJ3e/gj2PSMdzJL2DjM=) 2: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: nBUoblotDyN0/Ui1SLb2Vd1fmIjqvsKS8zhy8qSXzhY=) 3: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: GuMyFs8mowkXrX6mHMVeKiU6aeZe3E0B32jb5heztzI=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: lYCr6kAfGaxdZr+eWwEYwFIaASsvVDDBGvokBcs3KLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2585 (0xa19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Nov 22 19:38:51 2024 GMT Not After : Nov 29 19:38:51 2024 GMT Subject: CN=6740ddcb-3e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:b6:ea:8c:ef:bb:55:5d:e2:f5:c8:6c:c2: b2:1a:73:4c:4f:5d:8a:b7:7d:b4:4c:4c:39:56:31: 9e:ed:94:46:7a:28:94:7e:dd:7a:cf:d1:9b:1d:8b: 21:f6:aa:15:22:3c:c1:ff:70:1f:fb:ea:a0:bb:39: 72:90:45:1a:6b:ce:92:3c:c0:87:82:79:f0:13:33: 38:90:8b:76:71:2f:58:c1:f3:8f:90:91:60:2c:8d: 3f:31:1c:41:79:47:16:49:b0:b8:ca:da:14:0f:52: eb:a9:15:27:80:ba:8d:00:64:41:e7:d2:5e:a6:0e: f5:3f:9f:3b:b8:89:b2:47:5e:40:de:59:8e:66:8e: 9a:c3:0a:ce:b9:55:c0:d1:af:ed:d9:43:bb:f0:27: 85:29:5d:9b:c1:e0:8f:95:68:b5:ac:4c:14:4a:03: eb:5a:57:93:89:c6:bb:b7:8d:e7:28:bd:d2:ad:0c: 74:e5:41:2c:f2:75:37:9a:cf:63:21:2c:18:a6:ee: ee:81:03:78:eb:fb:72:cc:cf:83:68:67:1e:31:53: ac:f5:00:96:c2:c9:4b:a3:42:3f:b6:68:d2:80:13: 51:cd:fc:cf:fa:f1:0f:bf:ad:93:29:c7:9f:47:58: 24:c5:ed:d2:dc:f8:97:50:1c:7d:74:fe:78:ec:52: b4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8F:19:D8:70:D7:A5:E6:B2:A2:A2:DD:B5:DA:18:C8:73:88:91:2B X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:99:9e:8c:ce:05:ab:02:4f:53:55:06:32:81:79:d6:57:c7: a8:02:8a:95:3e:c5:a8:49:df:7e:09:cf:dd:db:fe:5c:7d:03: 53:b7:d8:33:cb:95:93:a7:48:91:7e:ec:2e:04:7c:ec:a5:cd: 8b:12:52:d8:90:c8:02:5c:fe:25:d9:2d:6e:0e:ac:3a:0b:2f: 08:c9:07:9d:d0:6b:95:ae:0a:0f:b1:33:a5:73:de:64:78:26: 8c:c5:3d:35:a8:80:ff:ba:31:03:78:74:3d:87:8d:b5:8b:44: ff:67:0d:74:1c:c0:8f:b0:c0:fe:e4:65:a3:e2:7f:4a:8c:e5: 5e:03:8d:cf:1d:91:74:23:3f:4f:e7:95:b5:69:e1:71:28:d1: 7c:e7:27:be:fc:74:46:5a:25:1d:95:5e:86:4a:11:5d:59:52: 68:9b:c2:93:f1:8f:fe:6a:a5:d4:33:f0:33:1e:f7:29:f5:2b: 62:e0:ac:8e:47:a9:4f:c4:15:dc:ee:fa:c4:e8:e2:00:ba:24: 28:d8:ed:fa:d7:bb:25:4d:0f:e4:2d:57:0d:ba:57:28:99:fa: 09:65:d5:e1:8b:39:ce:6b:8a:a7:a8:47:a6:84:dc:6c:01:22: d4:43:dc:54:1a:c5:51:e7:79:7f:4d:b2:2f:9b:f5:02:95:02: 71:49:8f:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjQxMTIyMTkzODUxWhcNMjQxMTI5MTkzODUxWjAYMRYwFAYD VQQDEw02NzQwZGRjYi0zZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpi26ozvu1Vd4vXIbMKyGnNMT12Kt320TEw5VjGe7ZRGeiiUft16z9GbHYsh 9qoVIjzB/3Af++qguzlykEUaa86SPMCHgnnwEzM4kIt2cS9YwfOPkJFgLI0/MRxB eUcWSbC4ytoUD1LrqRUngLqNAGRB59Jepg71P587uImyR15A3lmOZo6awwrOuVXA 0a/t2UO78CeFKV2bweCPlWi1rEwUSgPrWleTica7t43nKL3SrQx05UEs8nU3ms9j ISwYpu7ugQN46/tyzM+DaGceMVOs9QCWwslLo0I/tmjSgBNRzfzP+vEPv62TKcef R1gkxe3S3PiXUBx9dP547FK0gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2PGdhw 16XmsqKi3bXaGMhziJErMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6mZ6MzgWrAk9TVQYygXnWV8eoAoqVPsWoSd9+Cc/d2/5cfQNTt9gz y5WTp0iRfuwuBHzspc2LElLYkMgCXP4l2S1uDqw6Cy8IyQed0GuVrgoPsTOlc95k eCaMxT01qID/ujEDeHQ9h421i0T/Zw10HMCPsMD+5GWj4n9KjOVeA43PHZF0Iz9P 55W1aeFxKNF85ye+/HRGWiUdlV6GShFdWVJom8KT8Y/+aqXUM/AzHvcp9Sti4KyO R6lPxBXc7vrE6OIAuiQo2O3617slTQ/kLVcNulcomfoJZdXhiznOa4qnqEemhNxs ASLUQ9xUGsVR53l/TbIvm/UClQJxSY/u -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org