$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json) Hash identifier: DLbSSSSK6hUy3uXwM4sYj5bhpJDzpil3wJBX9ZTMfcA= Subject key identifier: E7:EC:B0:C8:69:EB:BA:9F:CF:8B:2B:78:96:1C:8A:B4:53:63:B8:6D Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Certificate serial: 0A2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft Manifest number: 09A7 Signing time: Sun 24 Nov 2024 19:48:54 +0000 Manifest this update: Sun 24 Nov 2024 19:48:53 +0000 Manifest next update: Sun 01 Dec 2024 19:48:53 +0000 Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: Zr18wal5ZdnCSRjAdLjEJN7lQobQ/TbSqcYk4UiBOjY=) 2: 690F19C87A0111ECA0BAAA6AC4F9AE02.roa (hash: eOflK2NC8wnqQQDOtn92wjxpOTzjNZbiaBcaMy1lgAg=) 3: C09E796C50EB11EB86E24A3DC4F9AE02.roa (hash: IKZDGcPoz2ZTyjAKxTlyXJlRj+UtVtLciBcR7qZTioA=) 4: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: uJygWd52jCSDDQwzNFdfFy56jnQ/FexCJi3lv3fNL2E=) 5: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: SiyXp8s8/hAXjY68zK9BtwMRoILRvuLxj/zVeKFswVk=) 6: ED4952AAEA5F11EE914FC26AC4F9AE02.roa (hash: 3bRK2TgTgn4a7te6MV4Dn7KMIu+vBrlckUhRy7mg7+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2603 (0xa2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F Validity Not Before: Nov 24 19:48:53 2024 GMT Not After : Dec 1 19:48:53 2024 GMT Subject: CN=67438325-f49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:b0:d4:e1:db:9f:f7:8a:46:e6:c6:98:1e: 9b:f1:f8:34:2c:22:fe:eb:23:b3:3a:88:d1:0f:d0: 79:fb:37:15:96:f5:9f:02:63:bb:d1:ea:4e:e0:72: 11:63:1c:cb:ed:b0:db:d3:e8:93:9a:1b:8f:f3:83: aa:c1:9c:c5:86:a9:1a:4a:0a:16:81:79:a2:1e:1b: 6b:54:31:db:bf:fe:42:0d:8e:85:b1:fe:33:6c:97: 04:8b:e0:e8:4c:e5:8d:d8:01:63:5a:02:83:5f:7a: 8d:e5:09:9d:7a:9a:6d:f2:03:6a:6c:00:8c:26:ea: 0a:42:cc:25:64:a4:29:4a:f1:88:1d:7d:63:3d:21: fd:a8:73:95:e7:80:65:c9:71:83:f0:94:91:da:28: 5f:ac:0e:5b:b9:e7:57:59:44:57:77:b0:7e:7c:9d: 07:2f:37:07:3c:21:ec:11:5c:5c:5d:01:69:87:96: 4d:e4:61:2c:02:57:07:8d:23:28:16:a6:02:bd:fb: 79:6c:15:34:4b:c0:a3:39:70:d5:27:08:7c:a7:12: 18:fa:e5:50:62:27:2a:f7:90:b3:49:07:32:d9:04: 67:b8:5f:34:db:b3:3c:08:9e:15:35:49:6f:66:e6: b1:f0:56:e4:50:cd:09:2a:4d:24:82:7e:fe:bd:2f: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EC:B0:C8:69:EB:BA:9F:CF:8B:2B:78:96:1C:8A:B4:53:63:B8:6D X509v3 Authority Key Identifier: keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:f4:fe:f1:3d:99:8a:2a:a5:b9:7d:b2:0b:c2:a0:0b:ac:40: 2f:20:72:89:a7:bc:d8:9d:f6:36:1d:9b:b2:cf:93:d4:26:97: bf:c2:f6:ee:4f:ff:28:77:5e:23:75:f0:c4:7c:00:d3:b2:84: 54:55:b5:84:19:98:89:74:06:ec:0a:34:24:14:2a:0a:14:ee: a2:96:09:f0:91:c0:43:cc:63:c7:11:41:2d:3f:44:7a:d9:3c: 75:aa:33:94:23:19:5a:83:fb:1d:87:14:51:95:eb:d6:b1:00: b9:87:02:5f:a0:0d:b8:d7:5c:b2:6a:b9:00:20:c8:0a:2d:03: c7:44:89:95:b1:24:54:10:45:40:d6:70:29:8a:9b:15:7d:f1: e8:1e:f0:21:c9:ef:8d:e3:fd:94:d5:7d:a1:e7:aa:07:7e:9f: bd:7d:8c:b4:2a:fe:d6:a9:1b:f8:3d:66:f7:9f:f6:83:07:e5: 8d:1e:c2:88:60:a8:0c:4b:9e:96:ed:b5:f4:aa:96:8e:38:39: c6:bd:5e:3a:0e:eb:cc:c9:0d:9f:7e:8e:4c:0c:ee:2b:00:65: ed:99:15:3e:b0:48:a7:e5:db:9e:3b:50:ba:d9:80:f1:e8:19: 3c:86:f9:5e:72:dd:93:dd:5a:6d:4c:85:9e:ae:14:28:10:fa: 14:d3:e4:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4 RThDRUI3NUYwHhcNMjQxMTI0MTk0ODUzWhcNMjQxMjAxMTk0ODUzWjAYMRYwFAYD VQQDEw02NzQzODMyNS1mNDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xOw1OHbn/eKRubGmB6b8fg0LCL+6yOzOojRD9B5+zcVlvWfAmO70epO4HIR YxzL7bDb0+iTmhuP84OqwZzFhqkaSgoWgXmiHhtrVDHbv/5CDY6Fsf4zbJcEi+Do TOWN2AFjWgKDX3qN5Qmdeppt8gNqbACMJuoKQswlZKQpSvGIHX1jPSH9qHOV54Bl yXGD8JSR2ihfrA5buedXWURXd7B+fJ0HLzcHPCHsEVxcXQFph5ZN5GEsAlcHjSMo FqYCvft5bBU0S8CjOXDVJwh8pxIY+uVQYicq95CzSQcy2QRnuF8027M8CJ4VNUlv Zuax8FbkUM0JKk0kgn7+vS/i/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfssMhp 67qfz4sreJYcirRTY7htMB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4 MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90 MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkIxRS84OTM2Q0MwNDg4MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5 ZHUtTk5iZ2hMNE9Pak90MTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT9P7xPZmKKqW5fbILwqALrEAvIHKJp7zYnfY2HZuyz5PUJpe/wvbu T/8od14jdfDEfADTsoRUVbWEGZiJdAbsCjQkFCoKFO6ilgnwkcBDzGPHEUEtP0R6 2Tx1qjOUIxlag/sdhxRRlevWsQC5hwJfoA2411yyarkAIMgKLQPHRImVsSRUEEVA 1nApipsVffHoHvAhye+N4/2U1X2h56oHfp+9fYy0Kv7WqRv4PWb3n/aDB+WNHsKI YKgMS56W7bX0qpaOODnGvV46DuvMyQ2ffo5MDO4rAGXtmRU+sEin5dueO1C62YDx 6Bk8hvlect2T3VptTIWerhQoEPoU0+Sl -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:10 2024 by rpki-client on console-fra.rpki-client.org