$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json) Hash identifier: Z2oGoTdp+cp2/QujOur0HR3N5Ak9krPwrK3td/i5Kx8= Subject key identifier: CB:28:78:CB:04:32:0B:DD:F9:1C:6B:55:BF:E0:03:42:3B:60:0A:1E Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft Manifest number: 81 Signing time: Thu 21 Nov 2024 04:47:44 +0000 Manifest this update: Thu 21 Nov 2024 04:47:44 +0000 Manifest next update: Thu 28 Nov 2024 04:47:44 +0000 Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: gLmgsegfPQy1z7+B9LX6SBjH5WQxnUHME3zgQpIuCXY=) 2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: h90BBjk+wVdlnYl+Atga4udJJhr99T+PLr3O9ucXhDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Validity Not Before: Nov 21 04:47:44 2024 GMT Not After : Nov 28 04:47:44 2024 GMT Subject: CN=673ebb70-d021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:da:6f:0d:a0:5f:e3:5c:84:dc:97:06:c7: 30:c2:d4:3e:03:e2:8a:3b:55:d7:25:25:20:9a:34: a6:3b:b5:e6:4c:93:73:10:aa:f0:8c:89:6a:14:b8: 66:db:d3:49:4c:ec:f7:96:2c:cc:08:bc:37:3b:92: 45:45:c4:2d:26:33:5f:6c:2e:f8:73:c8:ec:22:f4: 03:df:42:e8:a7:79:fc:e3:d7:6c:77:29:0c:7c:75: ea:29:2a:1e:1b:a8:35:74:2a:c2:0d:df:54:d4:c1: 07:c8:83:3d:5f:53:4a:fc:b5:47:2a:cf:28:a5:3a: 5c:ff:43:d5:df:a2:74:d9:12:2f:8f:72:b7:55:57: 5d:61:d2:be:56:0e:3f:c1:42:ef:06:d0:2d:a1:94: e9:03:1e:93:8b:53:05:62:a8:5d:0b:c1:cc:63:5a: a5:6f:81:41:c7:4e:b9:31:a1:04:ce:e1:dc:5b:e7: e9:2e:9e:ee:04:dd:2f:16:b4:71:a7:6a:46:33:97: 85:ed:ab:06:74:fa:0a:a9:08:58:62:9f:d6:ab:1c: 1f:b5:b6:cc:76:fa:81:48:46:90:68:cd:33:c4:bd: d6:d0:8f:7b:80:4d:3f:04:cb:b5:45:02:8b:6f:36: eb:78:13:07:53:f4:d9:44:76:4f:9f:89:82:92:c4: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:28:78:CB:04:32:0B:DD:F9:1C:6B:55:BF:E0:03:42:3B:60:0A:1E X509v3 Authority Key Identifier: keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:1b:bd:4f:54:cd:9e:81:99:98:07:e6:af:6e:5d:68:9d:49: 36:61:2f:b0:cd:d8:3c:53:b7:25:77:46:e5:b5:1c:95:30:2f: 7c:83:61:bb:c6:03:ae:26:98:65:54:9c:94:c9:9d:28:45:0d: 27:fd:7a:b7:9a:bd:92:c8:ec:c2:03:c3:51:a1:8b:7c:48:af: 65:ff:44:72:08:54:19:5a:ba:a9:85:5a:fa:f8:c6:f4:f5:56: 4f:f7:5c:e2:32:6e:83:1b:2d:17:92:19:f6:85:c1:47:e1:1b: 79:65:f0:84:55:03:6f:b8:74:9a:63:cb:6c:5b:2e:0d:8a:ca: ee:2b:04:6f:db:c2:4c:04:f5:27:19:f1:11:3b:0d:1e:87:12: cc:f2:70:06:ea:8f:dd:6b:f1:a3:1a:87:a4:7a:ed:f2:ff:61: fb:36:2d:9d:ba:8f:b7:94:f0:b7:47:82:f2:df:28:33:5f:12: 10:8c:7a:b5:9b:64:2f:4c:5f:63:6d:27:10:12:2c:aa:c7:59: de:26:89:83:5b:c7:44:af:04:66:2a:6f:54:6d:11:17:de:13: 70:54:16:b3:37:f2:19:05:4d:a8:aa:a4:ad:a4:73:f4:7f:ea: 26:93:19:ee:b6:3d:c2:43:fa:9c:bc:86:d7:90:ec:e7:ac:5b: 52:af:7d:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2QjMxMTAvBgNVBAUTKDBCREFCNjA4NjE3RjNDMzE4M0M0NzBGNEU2MTlCMjc5 NUY3NUMzODkwHhcNMjQxMTIxMDQ0NzQ0WhcNMjQxMTI4MDQ0NzQ0WjAYMRYwFAYD VQQDEw02NzNlYmI3MC1kMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXfabw2gX+NchNyXBscwwtQ+A+KKO1XXJSUgmjSmO7XmTJNzEKrwjIlqFLhm 29NJTOz3lizMCLw3O5JFRcQtJjNfbC74c8jsIvQD30Lop3n849dsdykMfHXqKSoe G6g1dCrCDd9U1MEHyIM9X1NK/LVHKs8opTpc/0PV36J02RIvj3K3VVddYdK+Vg4/ wULvBtAtoZTpAx6Ti1MFYqhdC8HMY1qlb4FBx065MaEEzuHcW+fpLp7uBN0vFrRx p2pGM5eF7asGdPoKqQhYYp/WqxwftbbMdvqBSEaQaM0zxL3W0I97gE0/BMu1RQKL bzbreBMHU/TZRHZPn4mCksQX1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsoeMsE Mgvd+RxrVb/gA0I7YAoeMB8GA1UdIwQYMBaAFAvatghhfzwxg8Rw9OYZsnlfdcOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DNTU0MjNBQUU2 OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BER0R4SEQwNWhteWVWOTF3 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M5cTJDR0ZfUERHRHhIRDA1aG15ZVY5MXc0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZCMy9DNTU0MjNBQUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BE R0R4SEQwNWhteWVWOTF3NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnG71PVM2egZmYB+avbl1onUk2YS+wzdg8U7cld0bltRyVMC98g2G7 xgOuJphlVJyUyZ0oRQ0n/Xq3mr2SyOzCA8NRoYt8SK9l/0RyCFQZWrqphVr6+Mb0 9VZP91ziMm6DGy0Xkhn2hcFH4Rt5ZfCEVQNvuHSaY8tsWy4NisruKwRv28JMBPUn GfEROw0ehxLM8nAG6o/da/GjGoekeu3y/2H7Ni2duo+3lPC3R4Ly3ygzXxIQjHq1 m2QvTF9jbScQEiyqx1neJomDW8dErwRmKm9UbREX3hNwVBazN/IZBU2oqqStpHP0 f+omkxnutj3CQ/qcvIbXkOznrFtSr31U -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:13 2024 by rpki-client on console-fra.rpki-client.org