$ rpki-client -vvf rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft File: p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft (raw, json) Hash identifier: JrD17e/Qu5FAItN9D/ocJRmYsiIAr/vka3F3lYZ/L+0= Subject key identifier: 57:A7:1C:42:F5:E0:3E:BA:D0:4F:9C:C2:08:5B:19:18:8C:28:0E:6E Authority key identifier: A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 Certificate issuer: /CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft Manifest number: 06AB Signing time: Fri 22 Nov 2024 21:45:07 +0000 Manifest this update: Fri 22 Nov 2024 21:45:07 +0000 Manifest next update: Fri 29 Nov 2024 21:45:07 +0000 Files and hashes: 1: p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl (hash: Zscn+o+J0/PMTixRPS8l33/D0IXpI/wzokvgl+tBS30=) 2: F2A90B8C3ECD11EBADC7D32AC4F9AE02.roa (hash: 6ikPRivM9dyX+oWH7lTRKsL9Xko5L5LgnDcsklfd0Jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132933/serialNumber=A7FE128656822F2621A4A0FF956342780798C4F0 Validity Not Before: Nov 22 21:45:07 2024 GMT Not After : Nov 29 21:45:07 2024 GMT Subject: CN=6740fb63-4e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:78:6b:59:fe:5b:c7:1e:bb:dc:62:02:bb: ee:1f:58:48:c8:4a:6a:04:70:6a:f8:bd:32:9c:aa: e3:61:c0:46:d1:a5:94:cf:21:30:fe:23:49:28:cf: 0a:28:4c:4c:4e:fb:f5:b6:e4:a1:4c:d3:a2:3a:82: ef:e1:33:72:13:51:24:71:31:fa:51:32:fc:bf:1f: 59:6e:b7:b9:ac:e8:8e:2d:4e:18:c9:32:fe:1f:6c: 67:25:0d:a4:84:46:a3:3c:91:97:98:57:f0:19:b4: 0f:f5:01:fd:b5:74:1e:71:e0:f0:6e:d3:58:83:ba: 4f:3e:82:18:b9:f4:89:0d:82:a8:af:bd:10:70:5d: 62:b7:63:0a:a1:81:cc:5d:36:99:a1:ae:4f:51:b2: 0b:45:3c:07:49:f8:11:12:9b:c3:e8:0b:c4:d5:f2: 68:4d:7f:ed:94:61:d8:a4:2e:2f:1c:bc:06:c3:20: 93:b4:67:8d:bd:43:27:ab:0d:34:30:f2:18:2e:8e: 98:6b:bd:10:32:04:53:dd:3e:3d:96:a2:c6:16:b0: 61:54:91:0c:88:ed:a6:36:4f:57:48:cd:06:2c:a7: a2:89:cf:90:51:71:86:f7:1b:7a:dd:b3:69:10:4b: 11:ec:78:b5:df:63:d3:24:61:c5:16:e7:60:0b:3a: 85:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A7:1C:42:F5:E0:3E:BA:D0:4F:9C:C2:08:5B:19:18:8C:28:0E:6E X509v3 Authority Key Identifier: keyid:A7:FE:12:86:56:82:2F:26:21:A4:A0:FF:95:63:42:78:07:98:C4:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_4ShlaCLyYhpKD_lWNCeAeYxPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132933/F912F69A3EC811EBACF4721FC4F9AE02/p_4ShlaCLyYhpKD_lWNCeAeYxPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a4:01:c4:a1:6d:ee:44:3e:3f:9e:7c:b8:89:73:61:78:58: 4c:c3:e4:b6:b4:9c:c1:8d:73:25:ed:a5:61:40:81:59:8b:a9: 3f:5f:2e:03:43:fc:bc:3c:0d:32:aa:1e:1d:79:d4:5f:37:6a: 95:46:ac:e8:20:18:43:27:22:61:2a:0d:04:38:6c:0c:8a:eb: ba:f0:49:98:87:44:b9:9f:39:35:a9:4b:85:f2:cd:39:64:e7: da:c3:67:aa:c4:07:31:f4:32:04:0b:7d:42:fb:b0:2d:07:c5: 43:85:35:14:49:6f:13:3f:c4:5f:7d:3c:26:a2:e3:16:08:05: e3:64:98:bc:0f:a4:9a:5a:d4:3d:bf:8d:0e:00:c8:39:f3:f5: b9:11:39:f9:a7:a3:b1:d6:8e:b1:6d:7a:28:70:b3:57:16:69: fb:cb:13:5a:84:5d:6f:f1:ed:d8:1d:01:b6:eb:18:d2:67:ca: a8:e4:3e:dd:b4:5e:91:45:96:a9:54:0f:f5:fb:48:12:5e:6b: ae:16:cc:3b:e3:21:af:2b:6f:30:03:22:55:71:ad:ca:9f:60: c5:9c:c3:00:be:77:06:bc:55:62:3a:ad:e3:bd:9e:84:43:db: b7:0a:44:ee:f7:a0:a2:ba:51:57:86:82:8a:14:f0:2f:f3:59: ea:81:a4:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI5MzMxMTAvBgNVBAUTKEE3RkUxMjg2NTY4MjJGMjYyMUE0QTBGRjk1NjM0Mjc4 MDc5OEM0RjAwHhcNMjQxMTIyMjE0NTA3WhcNMjQxMTI5MjE0NTA3WjAYMRYwFAYD VQQDEw02NzQwZmI2My00ZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLF4a1n+W8ceu9xiArvuH1hIyEpqBHBq+L0ynKrjYcBG0aWUzyEw/iNJKM8K KExMTvv1tuShTNOiOoLv4TNyE1EkcTH6UTL8vx9Zbre5rOiOLU4YyTL+H2xnJQ2k hEajPJGXmFfwGbQP9QH9tXQeceDwbtNYg7pPPoIYufSJDYKor70QcF1it2MKoYHM XTaZoa5PUbILRTwHSfgREpvD6AvE1fJoTX/tlGHYpC4vHLwGwyCTtGeNvUMnqw00 MPIYLo6Ya70QMgRT3T49lqLGFrBhVJEMiO2mNk9XSM0GLKeiic+QUXGG9xt63bNp EEsR7Hi132PTJGHFFudgCzqFbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFenHEL1 4D660E+cwghbGRiMKA5uMB8GA1UdIwQYMBaAFKf+EoZWgi8mIaSg/5VjQngHmMTw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjkzMy9GOTEyRjY5QTNF QzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5WWhwS0RfbFdOQ2VBZVl4 UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfNFNobGFDTHlZaHBLRF9sV05DZUFlWXhQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjkzMy9GOTEyRjY5QTNFQzgxMUVCQUNGNDcyMUZDNEY5QUUwMi9wXzRTaGxhQ0x5 WWhwS0RfbFdOQ2VBZVl4UEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAspAHEoW3uRD4/nny4iXNheFhMw+S2tJzBjXMl7aVhQIFZi6k/Xy4D Q/y8PA0yqh4dedRfN2qVRqzoIBhDJyJhKg0EOGwMiuu68EmYh0S5nzk1qUuF8s05 ZOfaw2eqxAcx9DIEC31C+7AtB8VDhTUUSW8TP8RffTwmouMWCAXjZJi8D6SaWtQ9 v40OAMg58/W5ETn5p6Ox1o6xbXoocLNXFmn7yxNahF1v8e3YHQG26xjSZ8qo5D7d tF6RRZapVA/1+0gSXmuuFsw74yGvK28wAyJVca3Kn2DFnMMAvncGvFViOq3jvZ6E Q9u3CkTu96CiulFXhoKKFPAv81nqgaRo -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org