$ rpki-client -vvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft File: agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft (raw, json) Hash identifier: RZjqAmHEtB24KoZJfQJzs5BYHPYwuNl0NWZyAiNhk6E= Subject key identifier: 32:67:8C:23:FB:BC:2E:BF:89:2F:46:CD:52:8E:3A:2F:5C:52:7B:32 Authority key identifier: 6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67 Certificate issuer: /CN=A9127898/serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867 Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft Manifest number: 05B9 Signing time: Sun 24 Nov 2024 23:11:40 +0000 Manifest this update: Sun 24 Nov 2024 23:11:39 +0000 Manifest next update: Sun 01 Dec 2024 23:11:39 +0000 Files and hashes: 1: agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl (hash: PXhL1zP2ViYOahjmB8X27iTERARhPAqQeqhGZPIJCUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127898/serialNumber=6A08DD0C6A6C4522AA1018C82D68B460E2D9E867 Validity Not Before: Nov 24 23:11:39 2024 GMT Not After : Dec 1 23:11:39 2024 GMT Subject: CN=6743b2ac-7f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:3c:b0:d2:01:14:47:8a:77:dd:e6:1f:61: a8:d1:01:f3:09:2a:d9:b4:67:15:2d:c2:c4:20:f2: d0:e4:0d:47:5c:62:a9:a8:2d:aa:bd:9f:2d:97:57: d7:f0:21:3b:0c:63:07:53:77:db:e8:fb:91:57:84: 2c:21:39:b3:65:f9:f8:43:d3:22:0b:a2:c4:01:4b: a5:d3:a8:ce:d8:73:66:2b:2b:02:44:f3:59:40:4b: c0:ae:24:d7:c0:bd:f1:9c:21:bc:26:bc:85:ff:a5: f1:d8:ce:32:99:cf:29:69:e4:12:e0:d8:b1:9a:c1: 3c:56:b4:5e:fa:8f:e8:9f:50:5f:fc:7c:5e:59:6c: 02:b9:58:65:fb:47:9c:4e:8a:85:6e:5d:56:74:96: ab:15:5e:92:48:50:f4:d7:d9:c1:95:05:3b:ef:ff: ee:4f:1b:9c:4f:b0:0d:11:76:a8:24:d4:af:ea:ac: 42:a2:78:94:42:39:a4:9d:c4:1f:46:ae:a5:3d:75: 45:4b:79:93:dd:a4:5e:02:4e:d4:85:55:56:df:3f: 85:68:7c:4c:07:5f:bb:88:30:f0:29:76:61:a4:64: 09:d6:6f:98:56:cd:12:93:e3:2e:5d:0b:f4:e6:40: d8:14:57:c2:db:a5:a0:b6:24:29:9c:22:97:89:2e: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:67:8C:23:FB:BC:2E:BF:89:2F:46:CD:52:8E:3A:2F:5C:52:7B:32 X509v3 Authority Key Identifier: keyid:6A:08:DD:0C:6A:6C:45:22:AA:10:18:C8:2D:68:B4:60:E2:D9:E8:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agjdDGpsRSKqEBjILWi0YOLZ6Gc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/agjdDGpsRSKqEBjILWi0YOLZ6Gc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:54:00:48:55:cc:74:d6:3a:a8:7c:38:6e:1a:e5:c9:6b:ad: 35:34:0c:2d:e0:e2:e2:05:24:98:ca:df:3d:71:72:67:60:0a: bb:bb:61:93:c1:2f:a8:e9:44:28:7a:02:39:57:2e:f4:cb:9c: 16:cc:9b:96:ca:6b:36:e6:6c:c9:a8:f7:32:99:1e:7d:45:2f: 71:0c:93:d4:b8:27:6b:e8:a3:c5:71:68:1e:88:8c:72:9c:15: e1:3f:db:52:29:80:2e:de:f6:04:fc:cd:e7:84:fb:90:2b:da: d4:0e:ba:71:34:21:38:1f:93:21:d0:7e:f9:59:8b:f9:db:1a: 2c:3a:4e:7a:35:56:33:cf:89:cd:7c:80:9e:60:44:5a:75:cb: 91:06:9c:a0:43:c3:27:d4:86:94:37:4c:a2:08:af:54:da:55: c8:d0:49:0f:0d:0e:44:39:c5:43:22:49:2d:f5:84:ff:f2:78: 68:43:76:37:6a:d9:bc:4b:53:57:9d:8e:aa:13:89:43:b3:27: 15:37:1c:27:e9:bd:ac:5a:c1:b3:a9:96:a0:8d:a6:6c:34:09: 50:07:69:2e:0b:4a:29:83:d4:bb:cd:c7:22:e3:9b:c1:bd:80: ae:bc:a2:b6:45:5e:90:6b:ce:02:d0:d5:8b:b9:24:cc:14:14: 80:2a:d4:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4OTgxMTAvBgNVBAUTKDZBMDhERDBDNkE2QzQ1MjJBQTEwMThDODJENjhCNDYw RTJEOUU4NjcwHhcNMjQxMTI0MjMxMTM5WhcNMjQxMjAxMjMxMTM5WjAYMRYwFAYD VQQDEw02NzQzYjJhYy03ZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeg8sNIBFEeKd93mH2Go0QHzCSrZtGcVLcLEIPLQ5A1HXGKpqC2qvZ8tl1fX 8CE7DGMHU3fb6PuRV4QsITmzZfn4Q9MiC6LEAUul06jO2HNmKysCRPNZQEvAriTX wL3xnCG8JryF/6Xx2M4ymc8paeQS4NixmsE8VrRe+o/on1Bf/HxeWWwCuVhl+0ec ToqFbl1WdJarFV6SSFD019nBlQU77//uTxucT7ANEXaoJNSv6qxConiUQjmkncQf Rq6lPXVFS3mT3aReAk7UhVVW3z+FaHxMB1+7iDDwKXZhpGQJ1m+YVs0Sk+MuXQv0 5kDYFFfC26WgtiQpnCKXiS6fdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJnjCP7 vC6/iS9GzVKOOi9cUnsyMB8GA1UdIwQYMBaAFGoI3QxqbEUiqhAYyC1otGDi2ehn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JTS3FFQmpJTFdpMFlPTFo2 R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FnamRER3BzUlNLcUVCaklMV2kwWU9MWjZHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9hZ2pkREdwc1JT S3FFQmpJTFdpMFlPTFo2R2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqVABIVcx01jqofDhuGuXJa601NAwt4OLiBSSYyt89cXJnYAq7u2GT wS+o6UQoegI5Vy70y5wWzJuWyms25mzJqPcymR59RS9xDJPUuCdr6KPFcWgeiIxy nBXhP9tSKYAu3vYE/M3nhPuQK9rUDrpxNCE4H5Mh0H75WYv52xosOk56NVYzz4nN fICeYERadcuRBpygQ8Mn1IaUN0yiCK9U2lXI0EkPDQ5EOcVDIkkt9YT/8nhoQ3Y3 atm8S1NXnY6qE4lDsycVNxwn6b2sWsGzqZagjaZsNAlQB2kuC0opg9S7zcci45vB vYCuvKK2RV6Qa84C0NWLuSTMFBSAKtQO -----END CERTIFICATE-----Generated at Sun Nov 24 23:58:44 2024 by rpki-client on console-fra.rpki-client.org