$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: i+qKvsoya9ZPZUpppe3R6lAdxMF0P3xIgHzQcspOSf4= Subject key identifier: 2D:07:FB:48:37:2C:85:64:CF:93:53:CA:9C:3A:21:70:CB:F9:0C:C3 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 05C9 Signing time: Wed 20 Nov 2024 22:47:42 +0000 Manifest this update: Wed 20 Nov 2024 22:47:41 +0000 Manifest next update: Wed 27 Nov 2024 22:47:41 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: JfiNgQMb6Aem8JtVdJSqvOvt8FLHMkym3HPSzaDO33Q=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: P11sIa+o699M+Jrp/6j9KRqVJetMbcC+wvd26lTDVLs=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: /zbyHciIwndBXlxJhKITEkhA9vsFIRYPFElbWadsiXw=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: 6KG4K+YscUuCOPJskrNXUVs3OZB2ppYjCB4dtTgCAMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Nov 20 22:47:41 2024 GMT Not After : Nov 27 22:47:41 2024 GMT Subject: CN=673e670d-e621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:1d:23:09:c5:8a:f3:ec:c6:3c:d9:b5:90: 2d:c4:76:79:11:dc:94:67:9b:13:fd:7b:8b:62:f6: d0:de:1c:e1:b4:45:73:97:8c:30:32:b4:25:43:69: 3e:10:7a:97:8d:a2:b8:cc:00:db:f9:64:a0:47:90: f6:cb:2f:37:23:e7:90:aa:08:13:60:13:6c:60:93: 5f:4f:24:e4:35:94:10:ba:03:bd:e5:4f:35:08:79: c3:7d:71:af:d2:fa:9e:2b:a8:20:f3:cb:21:a8:7e: dd:87:48:72:87:47:72:06:16:d1:c5:84:7d:95:66: 6f:40:03:6f:41:93:29:a2:39:db:1f:d6:f5:a0:b5: 78:c4:92:40:ed:fb:86:2f:94:ab:d4:89:10:a9:76: 2e:a5:6c:f7:67:e0:bb:c3:c6:08:1e:0b:2e:58:1d: cf:bc:45:8a:c5:10:a5:69:54:6c:12:99:71:bb:db: 67:af:7f:64:07:dd:58:ca:a4:58:69:3a:88:2e:5b: a9:f3:73:18:92:8d:e9:a8:43:df:d6:ea:27:50:70: cb:72:50:aa:15:c9:2f:fa:8a:f0:f0:51:bb:6c:cc: 18:40:dd:51:92:ef:4c:8f:3f:40:01:64:58:8e:77: e2:22:ee:60:4a:a3:91:d5:86:90:64:a7:7f:4a:b9: 94:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:07:FB:48:37:2C:85:64:CF:93:53:CA:9C:3A:21:70:CB:F9:0C:C3 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9d:76:6d:33:18:93:c3:3b:47:59:bb:82:57:70:72:df:d2: 7a:7a:a4:87:e4:f9:19:10:73:bf:72:77:b0:0f:27:61:70:e7: 35:b4:0a:78:63:41:1e:77:dd:db:98:06:13:09:63:a9:da:28: 0e:39:f2:76:84:46:f4:07:7c:52:df:ff:36:28:9e:73:17:df: 60:8f:67:90:19:60:db:bc:90:61:49:fb:4b:e8:99:90:5b:fd: fc:1f:c4:fd:e3:7b:2d:e6:af:29:4a:04:03:6f:99:8a:d5:6f: 63:1a:8a:c9:e7:d9:46:d9:90:ad:9a:21:40:97:3e:56:61:82: 9b:d4:77:af:38:2a:37:1b:ba:cd:0e:86:0f:57:9d:66:42:e7: e5:0d:a5:83:34:1b:0a:46:2e:8b:2b:0b:28:71:ae:c9:fd:0d: bd:61:78:b3:cb:8a:f3:4b:46:b0:4a:bc:75:b5:e7:0a:67:28: 93:70:cb:cf:d2:63:1c:a6:39:1a:1e:14:d7:e6:67:dd:43:f7: 7a:7e:d1:25:ef:b6:a0:4d:0f:7e:ba:4b:f3:22:f8:76:42:cf: 73:c5:07:48:4a:8b:02:45:31:99:0b:28:bd:28:ea:8a:27:4c: 75:25:37:bb:8a:fe:ba:e9:95:ee:78:32:b3:de:82:77:f4:a3: fb:5f:91:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjQxMTIwMjI0NzQxWhcNMjQxMTI3MjI0NzQxWjAYMRYwFAYD VQQDEw02NzNlNjcwZC1lNjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreAdIwnFivPsxjzZtZAtxHZ5EdyUZ5sT/XuLYvbQ3hzhtEVzl4wwMrQlQ2k+ EHqXjaK4zADb+WSgR5D2yy83I+eQqggTYBNsYJNfTyTkNZQQugO95U81CHnDfXGv 0vqeK6gg88shqH7dh0hyh0dyBhbRxYR9lWZvQANvQZMpojnbH9b1oLV4xJJA7fuG L5Sr1IkQqXYupWz3Z+C7w8YIHgsuWB3PvEWKxRClaVRsEplxu9tnr39kB91YyqRY aTqILlup83MYko3pqEPf1uonUHDLclCqFckv+orw8FG7bMwYQN1Rku9Mjz9AAWRY jnfiIu5gSqOR1YaQZKd/SrmUfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0H+0g3 LIVkz5NTypw6IXDL+QzDMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdnXZtMxiTwztHWbuCV3By39J6eqSH5PkZEHO/cnewDydhcOc1tAp4 Y0Eed93bmAYTCWOp2igOOfJ2hEb0B3xS3/82KJ5zF99gj2eQGWDbvJBhSftL6JmQ W/38H8T943st5q8pSgQDb5mK1W9jGorJ59lG2ZCtmiFAlz5WYYKb1HevOCo3G7rN DoYPV51mQuflDaWDNBsKRi6LKwsoca7J/Q29YXizy4rzS0awSrx1tecKZyiTcMvP 0mMcpjkaHhTX5mfdQ/d6ftEl77agTQ9+ukvzIvh2Qs9zxQdISosCRTGZCyi9KOqK J0x1JTe7iv666ZXueDKz3oJ39KP7X5GC -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:19 2024 by rpki-client on console-fra.rpki-client.org