$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: IsD2cWKtZD2ROt5Kw+UAQInMg99DbB+7DEZ3AH/C8rw= Subject key identifier: 7B:99:03:CE:94:B2:0D:CA:A2:59:00:D2:D2:3E:DC:E3:FB:EE:DF:EA Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 015F Signing time: Sat 23 Nov 2024 02:26:18 +0000 Manifest this update: Sat 23 Nov 2024 02:26:18 +0000 Manifest next update: Sat 30 Nov 2024 02:26:18 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: Qp9iQe1iso8VgQXUuc93yI5QcuTVByb5YXaP3FRO4t4=) 2: 14BB63805EC111EEBE63A109C4F9AE02.roa (hash: wrwNDqhTULnAoV3dT8oiFzEJGsEpucdP0ccKDc/iXNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: Nov 23 02:26:18 2024 GMT Not After : Nov 30 02:26:18 2024 GMT Subject: CN=67413d4a-380b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4b:c4:6b:36:49:f1:0b:03:1d:2f:86:79:4e: 45:8c:32:42:d7:28:d5:25:41:13:22:2c:1b:41:30: 2a:e1:8f:e4:a7:0f:17:6f:a8:26:55:53:9c:8b:b7: 50:d1:27:1c:77:64:80:eb:0c:37:c7:25:9a:9c:59: 5a:94:14:57:48:b0:78:68:f1:24:d7:08:64:22:5a: f1:dd:9a:8c:90:09:5a:29:3c:5c:7f:9c:14:f8:61: 60:6e:2f:00:e3:34:0b:c3:45:53:51:b8:d2:58:be: 76:7d:ed:d4:63:23:b9:d6:ca:38:5b:0d:4d:b6:4f: 58:b3:ba:60:83:f1:32:62:e1:51:2a:99:0a:26:99: 43:c4:18:15:a9:90:ca:a0:3f:29:9a:b3:e1:4c:34: b9:24:86:43:c4:d1:d9:c4:b0:08:98:0e:cb:f8:da: c5:f4:ab:fc:53:cc:ea:83:a1:29:56:75:ea:e4:9e: 45:76:18:36:2b:a0:1b:ca:83:6a:86:63:6b:48:de: 70:9e:bb:d6:78:70:9d:a3:c5:c9:5b:5f:63:f0:03: 80:a9:3a:8a:d6:c0:07:79:45:48:b3:98:11:7b:20: 8e:c5:93:89:a9:ba:65:07:d0:f8:64:1e:1e:31:fe: 97:ec:83:cb:a0:34:21:99:b2:b8:65:16:92:1d:35: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:99:03:CE:94:B2:0D:CA:A2:59:00:D2:D2:3E:DC:E3:FB:EE:DF:EA X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:89:ae:81:72:36:8e:f8:05:3a:81:f0:b0:9c:56:0f:a2:50: b2:4c:67:a8:26:a1:18:23:cf:92:de:0e:40:4b:92:82:9e:23: 71:0a:47:db:b5:a6:f4:a4:0e:cb:34:b1:07:83:c2:12:6e:f1: 29:06:01:bd:7b:e6:4b:d2:f7:e4:60:fb:55:92:ff:ab:82:37: a4:55:df:25:45:10:b4:90:fe:2b:84:f1:24:17:87:5c:48:ed: 00:02:20:9e:4d:be:2a:36:80:1e:04:92:ff:3b:0d:e1:91:8b: 95:f3:c7:b0:bb:97:8c:8f:4a:07:d0:b0:bd:c8:11:5f:5c:40: c1:26:d8:ca:a5:4e:32:c1:3b:95:0c:c1:e9:e6:35:17:9d:80: c4:a1:42:94:46:2f:d6:41:f7:c2:50:7c:b4:2f:ff:47:67:d6: a8:d4:d8:92:44:ae:2a:7e:0f:10:f2:c6:ff:ca:1b:84:64:0d: 7b:1a:4f:e3:9b:43:f5:4a:88:71:3a:cd:d9:ba:74:26:60:cd: ec:93:c4:e6:56:c3:1d:3f:58:64:e5:bb:2b:f4:79:24:2a:2e: 0b:80:8e:87:b5:a2:5e:dc:b2:c2:ec:71:d1:e7:18:45:22:06: eb:45:ec:20:e2:82:fc:f8:b7:91:8e:44:ff:4e:91:ae:80:7d: c8:f7:44:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjQxMTIzMDIyNjE4WhcNMjQxMTMwMDIyNjE4WjAYMRYwFAYD VQQDEw02NzQxM2Q0YS0zODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0vEazZJ8QsDHS+GeU5FjDJC1yjVJUETIiwbQTAq4Y/kpw8Xb6gmVVOci7dQ 0Sccd2SA6ww3xyWanFlalBRXSLB4aPEk1whkIlrx3ZqMkAlaKTxcf5wU+GFgbi8A 4zQLw0VTUbjSWL52fe3UYyO51so4Ww1Ntk9Ys7pgg/EyYuFRKpkKJplDxBgVqZDK oD8pmrPhTDS5JIZDxNHZxLAImA7L+NrF9Kv8U8zqg6EpVnXq5J5Fdhg2K6AbyoNq hmNrSN5wnrvWeHCdo8XJW19j8AOAqTqK1sAHeUVIs5gReyCOxZOJqbplB9D4ZB4e Mf6X7IPLoDQhmbK4ZRaSHTUVOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuZA86U sg3KolkA0tI+3OP77t/qMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ia6BcjaO+AU6gfCwnFYPolCyTGeoJqEYI8+S3g5AS5KCniNxCkfb tab0pA7LNLEHg8ISbvEpBgG9e+ZL0vfkYPtVkv+rgjekVd8lRRC0kP4rhPEkF4dc SO0AAiCeTb4qNoAeBJL/Ow3hkYuV88ewu5eMj0oH0LC9yBFfXEDBJtjKpU4ywTuV DMHp5jUXnYDEoUKURi/WQffCUHy0L/9HZ9ao1NiSRK4qfg8Q8sb/yhuEZA17Gk/j m0P1SohxOs3ZunQmYM3sk8TmVsMdP1hk5bsr9HkkKi4LgI6HtaJe3LLC7HHR5xhF IgbrRewg4oL8+LeRjkT/TpGugH3I90Rz -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org