$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft File: NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json) Hash identifier: ULANTRGCRq3wj/qN0+PR70umLJqHA713DZWXjrjEZGk= Subject key identifier: F3:20:CC:56:F8:FD:28:A4:70:7A:A7:1C:41:B8:B0:1E:9D:13:9B:3D Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Certificate serial: 06AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft Manifest number: 06A4 Signing time: Fri 22 Nov 2024 21:47:02 +0000 Manifest this update: Fri 22 Nov 2024 21:47:02 +0000 Manifest next update: Fri 29 Nov 2024 21:47:02 +0000 Files and hashes: 1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: XeeGGNuZDOr9BsI0bP1qkRZx6jxZ2eLZ389YSXL5w/I=) 2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: bd6xDrsI8VNBf0/b6lDTgdvsxuTBwH6yXjfUiwvhRpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1708 (0x6ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0 Validity Not Before: Nov 22 21:47:02 2024 GMT Not After : Nov 29 21:47:02 2024 GMT Subject: CN=6740fbd6-2ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0e:f7:e8:20:a5:5e:26:e6:7c:fb:3e:0f:81: 2a:95:b7:a1:cf:c6:7c:6e:e3:fb:8f:d0:0e:af:45: 19:2e:57:b5:b9:fb:39:e3:f4:0b:8c:0c:3b:de:48: d2:dc:0c:db:dd:fb:77:02:61:25:14:88:c3:f1:e6: 42:38:76:3b:b8:0a:65:bb:d7:18:9b:7f:05:97:3c: a1:08:15:a9:5f:1d:63:50:74:d0:db:67:72:cf:05: 58:73:a5:72:ed:be:d3:df:a5:9d:52:76:8a:9e:fd: 58:6d:a9:b1:8a:b2:e8:6d:c2:38:48:ce:47:34:0e: 6d:0b:a3:52:d7:ed:4d:86:e7:e3:8d:00:f2:83:ba: 08:16:d1:34:06:d0:95:85:2e:64:ac:66:30:00:39: 3f:61:42:87:0d:01:3b:67:d0:83:8d:a1:00:a7:8a: 2f:0f:d2:6a:9c:32:a8:c9:58:8c:f9:c1:92:ee:1e: 3b:04:0c:1b:7b:1f:d7:be:2e:93:18:ed:db:ce:ab: 90:73:6e:f8:9d:ac:20:1a:ca:6b:58:c4:e3:90:60: 42:7d:e1:8e:ca:b6:76:c9:b1:44:22:c3:08:57:c2: 50:7a:f3:fd:80:e4:9f:5c:1a:4f:62:c4:c4:69:ae: 3c:35:5d:93:cb:fc:89:72:15:27:98:01:59:b8:dc: 77:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:20:CC:56:F8:FD:28:A4:70:7A:A7:1C:41:B8:B0:1E:9D:13:9B:3D X509v3 Authority Key Identifier: keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:4f:71:af:45:de:22:75:c0:35:b0:62:8b:c4:38:80:5c:fc: 0a:37:18:eb:3b:1e:68:82:4f:9a:70:1c:6b:5d:b7:60:57:73: 23:9f:d0:a4:fb:27:cf:77:7e:c2:b6:c5:31:aa:61:1e:af:11: e2:03:01:5c:d6:52:07:39:15:5f:73:9e:95:bd:25:e8:82:7b: eb:40:bc:1e:cb:a9:c6:46:22:0a:fc:26:78:81:fa:25:fb:98: 95:fb:69:8a:90:cd:ba:75:e9:da:d8:d4:a3:77:26:17:5f:3c: e8:24:84:4a:9c:fa:ba:a1:65:38:e5:af:ba:95:09:10:e4:b6: 06:cb:fa:61:5c:bf:d9:85:a9:47:27:ca:92:d1:ce:35:34:a1: f3:f1:2d:18:86:8a:4f:2f:f1:ce:26:d0:85:4e:7a:83:1c:88: 8d:a0:a0:ec:06:de:e4:d8:32:c2:4c:c8:62:b2:f7:0f:0a:9f: 4e:06:29:b7:3c:e5:95:4b:d8:33:13:2e:d5:fe:f9:3c:a8:42: 3b:1f:c5:26:74:8d:de:00:76:56:3b:5c:c5:5c:cd:a2:3c:7e: c7:5c:38:49:ee:a2:ce:5f:2c:9c:56:41:27:4f:1c:87:cf:64: 37:bd:f6:fd:bb:97:2c:87:28:9e:bf:68:03:e6:ec:a5:ff:9d: 3e:01:67:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg0NzgxMTAvBgNVBAUTKDM0RThDNjYyQUE5RENENTE5NTBERjVGQUM0MDVBQ0Yx NkM4RDMwQTAwHhcNMjQxMTIyMjE0NzAyWhcNMjQxMTI5MjE0NzAyWjAYMRYwFAYD VQQDEw02NzQwZmJkNi0yY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7g736CClXibmfPs+D4Eqlbehz8Z8buP7j9AOr0UZLle1ufs54/QLjAw73kjS 3Azb3ft3AmElFIjD8eZCOHY7uAplu9cYm38FlzyhCBWpXx1jUHTQ22dyzwVYc6Vy 7b7T36WdUnaKnv1YbamxirLobcI4SM5HNA5tC6NS1+1NhufjjQDyg7oIFtE0BtCV hS5krGYwADk/YUKHDQE7Z9CDjaEAp4ovD9JqnDKoyViM+cGS7h47BAwbex/Xvi6T GO3bzquQc274nawgGsprWMTjkGBCfeGOyrZ2ybFEIsMIV8JQevP9gOSfXBpPYsTE aa48NV2Ty/yJchUnmAFZuNx3QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMgzFb4 /SikcHqnHEG4sB6dE5s9MB8GA1UdIwQYMBaAFDToxmKqnc1RlQ31+sQFrPFsjTCg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODQ3OC82QjhBRDg0RTQz MzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpWR1ZEZlg2eEFXczhXeU5N S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05PakdZcXFkelZHVkRmWDZ4QVdzOFd5Tk1LQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODQ3OC82QjhBRDg0RTQzMzAxMUVCQTZFMDIyMUVDNEY5QUUwMi9OT2pHWXFxZHpW R1ZEZlg2eEFXczhXeU5NS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3T3GvRd4idcA1sGKLxDiAXPwKNxjrOx5ogk+acBxrXbdgV3Mjn9Ck +yfPd37CtsUxqmEerxHiAwFc1lIHORVfc56VvSXognvrQLwey6nGRiIK/CZ4gfol +5iV+2mKkM26dena2NSjdyYXXzzoJIRKnPq6oWU45a+6lQkQ5LYGy/phXL/ZhalH J8qS0c41NKHz8S0YhopPL/HOJtCFTnqDHIiNoKDsBt7k2DLCTMhisvcPCp9OBim3 POWVS9gzEy7V/vk8qEI7H8UmdI3eAHZWO1zFXM2iPH7HXDhJ7qLOXyycVkEnTxyH z2Q3vfb9u5cshyiev2gD5uyl/50+AWey -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org