$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: cYOxVyMBGsjBLi29n684FSgdaxliIEUt15gMLXOQYPQ= Subject key identifier: DA:8B:73:CE:86:6B:9A:DE:8F:5D:71:EB:54:15:4F:B8:B9:FC:B7:DD Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 10AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 10A7 Signing time: Fri 22 Nov 2024 17:20:17 +0000 Manifest this update: Fri 22 Nov 2024 17:20:16 +0000 Manifest next update: Fri 29 Nov 2024 17:20:16 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: wtCGdvDgjrwgzDx9urh4PIAe9rCFqTtCSHRX5FCL2mM=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: zNlH/Z07Yg4I4x55gc1ucSgdIggd1npatylNfrUQ3Ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4271 (0x10af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: Nov 22 17:20:16 2024 GMT Not After : Nov 29 17:20:16 2024 GMT Subject: CN=6740bd50-1d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:9a:8c:88:82:01:f0:ef:c3:12:7d:89:c6: a3:21:d2:8c:d8:af:b7:2f:52:d8:2b:78:b0:b2:0b: 75:64:35:05:14:48:23:92:82:1f:2f:5d:c5:0d:ef: 30:3e:4c:99:9b:ab:e5:2f:57:09:52:2e:16:31:6e: 98:ae:6e:97:f8:f7:ac:c8:98:dd:d1:f5:0f:35:04: 3e:4e:2f:d9:df:df:b6:af:d5:e2:2d:5b:cf:a8:68: c5:1b:4c:59:78:ed:a2:6f:30:b5:2d:88:ee:e6:d5: 63:81:75:d0:a1:12:1b:76:ea:11:ab:10:f3:2f:ef: 10:51:e1:d5:4c:f2:33:0e:fb:54:7c:72:55:a2:3f: 52:84:a5:59:fe:fd:ec:83:5f:61:20:36:ae:35:2a: 46:a3:9f:bc:d7:e7:62:85:20:0a:12:22:cb:8b:93: c7:ad:c0:8b:68:94:41:f7:2f:9b:eb:68:26:55:9f: a5:bc:45:42:51:2e:6f:69:a0:5a:34:d2:12:21:87: 95:1e:b9:6b:81:7e:77:cd:08:82:08:7a:34:2c:bf: d8:83:7c:a9:97:95:61:05:06:a9:5b:36:5d:67:b1: 6f:ed:fb:f7:c2:3a:51:11:d0:03:09:ad:a4:9e:fb: 13:01:14:1c:95:04:14:b0:22:d9:14:84:2a:78:7d: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8B:73:CE:86:6B:9A:DE:8F:5D:71:EB:54:15:4F:B8:B9:FC:B7:DD X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:89:5d:a8:b3:0c:65:50:1e:6c:a5:3f:5f:3c:4e:d9:63:58: 72:3d:28:1a:f7:0f:5d:19:fe:10:c6:46:c5:77:28:69:e4:33: 5e:1a:46:76:0e:1c:52:51:b3:5b:e0:47:2e:64:f0:62:d4:d7: 05:bc:c0:53:14:6b:27:e1:a8:b7:f9:6f:18:74:01:2a:b5:77: 45:7b:2d:8c:4c:f6:7f:39:78:45:4f:4a:fd:e6:1b:d2:29:8b: 38:9e:ee:df:4e:d3:61:0a:d5:02:c8:6e:33:da:05:5e:c0:a3: b5:3c:ee:f8:5c:c7:51:86:5e:0d:ab:c5:26:26:8b:6a:01:c2: 5a:67:49:48:09:08:63:16:ad:24:a3:ed:a8:d4:8d:5a:0c:bd: a8:fd:be:5a:fe:60:85:0e:be:f5:34:fb:7f:5c:0d:d0:d7:93: 36:c3:c2:a0:bf:49:af:46:ae:33:23:9e:bf:b2:b7:34:03:00: ce:69:7b:fd:11:35:21:72:26:4b:b2:e5:61:bd:74:7f:37:23: 2a:30:e2:5b:fe:f5:9b:b8:53:3f:52:b3:8a:a2:dc:f8:29:08: 78:85:b9:cd:b3:54:09:aa:db:f5:48:80:32:14:e4:d1:09:d3: 39:98:4b:c2:b8:7a:55:3c:0a:b1:b0:cc:53:bd:50:fc:d9:c2: 3e:c3:96:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjQxMTIyMTcyMDE2WhcNMjQxMTI5MTcyMDE2WjAYMRYwFAYD VQQDEw02NzQwYmQ1MC0xZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkqajIiCAfDvwxJ9icajIdKM2K+3L1LYK3iwsgt1ZDUFFEgjkoIfL13FDe8w PkyZm6vlL1cJUi4WMW6Yrm6X+PesyJjd0fUPNQQ+Ti/Z39+2r9XiLVvPqGjFG0xZ eO2ibzC1LYju5tVjgXXQoRIbduoRqxDzL+8QUeHVTPIzDvtUfHJVoj9ShKVZ/v3s g19hIDauNSpGo5+81+dihSAKEiLLi5PHrcCLaJRB9y+b62gmVZ+lvEVCUS5vaaBa NNISIYeVHrlrgX53zQiCCHo0LL/Yg3ypl5VhBQapWzZdZ7Fv7fv3wjpREdADCa2k nvsTARQclQQUsCLZFIQqeH3PZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqLc86G a5rej11x61QVT7i5/LfdMB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjiV2oswxlUB5spT9fPE7ZY1hyPSga9w9dGf4QxkbFdyhp5DNeGkZ2 DhxSUbNb4EcuZPBi1NcFvMBTFGsn4ai3+W8YdAEqtXdFey2MTPZ/OXhFT0r95hvS KYs4nu7fTtNhCtUCyG4z2gVewKO1PO74XMdRhl4Nq8UmJotqAcJaZ0lICQhjFq0k o+2o1I1aDL2o/b5a/mCFDr71NPt/XA3Q15M2w8Kgv0mvRq4zI56/src0AwDOaXv9 ETUhciZLsuVhvXR/NyMqMOJb/vWbuFM/UrOKotz4KQh4hbnNs1QJqtv1SIAyFOTR CdM5mEvCuHpVPAqxsMxTvVD82cI+w5aw -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org