$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json) Hash identifier: uIkTpO/Kr0v+CCCJvgZ3al+97Ccy4zl1q7MKNHyh/cY= Subject key identifier: 65:07:82:56:8E:DA:FB:AD:20:98:4B:CE:CA:26:D1:B8:1F:A1:52:B7 Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Certificate serial: 0B60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft Manifest number: 0B56 Signing time: Fri 22 Nov 2024 18:55:37 +0000 Manifest this update: Fri 22 Nov 2024 18:55:36 +0000 Manifest next update: Fri 29 Nov 2024 18:55:36 +0000 Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: LPyDJ21ofb1IJv8Hhk1MIt+BgfmktErmSCia+bZmxSY=) 2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: Ck1WD7p4avD14kYk6acsE6Oxjn8NFvEZZQEZtK+VTmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2912 (0xb60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Validity Not Before: Nov 22 18:55:36 2024 GMT Not After : Nov 29 18:55:36 2024 GMT Subject: CN=6740d3a9-f5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:76:98:61:bb:51:00:fd:81:8b:6a:a5:82:7a: 71:74:01:8f:58:82:d2:cf:e5:45:93:8d:46:26:a3: 18:19:39:4c:49:14:e5:5b:db:30:40:b2:72:67:a6: 86:51:2f:a9:d1:d4:a4:83:4c:ee:dc:4a:7d:86:f0: 79:8c:be:af:b0:13:3f:81:9c:60:fc:5b:da:fe:65: db:dc:71:bd:96:6c:09:70:9a:9f:b8:bc:74:b3:d2: 50:49:c1:25:4b:60:67:a6:11:13:36:b8:60:13:d2: 04:82:01:f8:ba:b7:0b:ad:f1:f0:f2:25:98:92:90: b9:d5:9e:42:2f:09:d6:52:20:72:63:aa:7a:2b:87: 20:26:56:f3:b8:70:33:36:f3:99:5a:c6:83:0b:7a: 05:6c:d1:8b:b8:fa:dd:70:bf:e3:5c:1e:f3:59:77: 00:d2:d2:1b:9f:b0:61:73:b4:a4:75:bc:a5:ba:a6: 43:18:4b:8a:15:b4:d1:f4:cf:54:c2:59:41:ca:a6: 06:1a:ef:af:d0:ea:79:12:2b:54:62:1a:e7:86:dd: b1:6d:c4:01:2a:36:6d:55:d5:02:08:a7:8f:90:3f: 9e:a4:b8:88:e1:53:ff:16:84:1f:f5:b1:02:72:a5: c0:ca:7f:f9:c0:39:47:2c:83:cb:83:4c:b3:6d:3a: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:07:82:56:8E:DA:FB:AD:20:98:4B:CE:CA:26:D1:B8:1F:A1:52:B7 X509v3 Authority Key Identifier: keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:9d:3b:df:ac:65:14:98:a2:41:c6:5d:0d:9f:73:f0:57:bb: e0:95:44:70:5d:42:a8:a2:c2:20:7d:b5:92:95:66:62:b9:6e: 4e:41:87:26:da:ae:dc:78:c8:a9:52:7d:21:67:9d:b1:2c:17: a2:99:1a:9f:89:0c:e4:74:84:ab:2d:c7:90:19:35:63:69:f8: 18:b0:64:24:04:6c:c0:48:b1:53:75:7b:cc:2d:c7:d9:4b:c2: 43:21:e3:91:3d:9e:52:e7:44:f3:65:b6:21:2e:39:5b:95:e9: 28:43:e6:14:32:84:c0:c6:e8:8c:cb:43:04:90:2e:e1:e6:c6: 1a:12:d7:00:89:c5:57:77:01:9e:a1:4f:8d:de:e0:e8:3b:4e: 6b:09:14:7e:ac:c2:f7:0d:2a:76:8c:10:09:74:a8:29:6a:59: af:91:98:07:63:85:59:72:b2:7e:94:25:37:be:32:2a:0f:a2: fc:16:15:22:3f:2c:4a:5b:e6:55:02:f5:14:e1:bd:14:bb:f1: 6c:4d:59:cf:a2:56:89:b0:6d:e0:a8:b5:ea:56:cd:1f:c6:f8: f8:78:e5:bd:92:4e:98:fb:ce:e9:30:7f:14:83:a3:9c:95:ae: 2f:89:68:15:5d:84:53:61:93:00:76:3c:97:48:40:f7:ec:d5: d3:17:20:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx OENENjhFMzEwHhcNMjQxMTIyMTg1NTM2WhcNMjQxMTI5MTg1NTM2WjAYMRYwFAYD VQQDEw02NzQwZDNhOS1mNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53aYYbtRAP2Bi2qlgnpxdAGPWILSz+VFk41GJqMYGTlMSRTlW9swQLJyZ6aG US+p0dSkg0zu3Ep9hvB5jL6vsBM/gZxg/Fva/mXb3HG9lmwJcJqfuLx0s9JQScEl S2BnphETNrhgE9IEggH4urcLrfHw8iWYkpC51Z5CLwnWUiByY6p6K4cgJlbzuHAz NvOZWsaDC3oFbNGLuPrdcL/jXB7zWXcA0tIbn7Bhc7SkdbyluqZDGEuKFbTR9M9U wllByqYGGu+v0Op5EitUYhrnht2xbcQBKjZtVdUCCKePkD+epLiI4VP/FoQf9bEC cqXAyn/5wDlHLIPLg0yzbTqRWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUHglaO 2vutIJhLzsom0bgfoVK3MB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI QnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCanTvfrGUUmKJBxl0Nn3PwV7vglURwXUKoosIgfbWSlWZiuW5OQYcm 2q7ceMipUn0hZ52xLBeimRqfiQzkdISrLceQGTVjafgYsGQkBGzASLFTdXvMLcfZ S8JDIeORPZ5S50TzZbYhLjlblekoQ+YUMoTAxuiMy0MEkC7h5sYaEtcAicVXdwGe oU+N3uDoO05rCRR+rML3DSp2jBAJdKgpalmvkZgHY4VZcrJ+lCU3vjIqD6L8FhUi PyxKW+ZVAvUU4b0Uu/FsTVnPolaJsG3gqLXqVs0fxvj4eOW9kk6Y+87pMH8Ug6Oc la4viWgVXYRTYZMAdjyXSED37NXTFyC7 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org