$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft File: 09Fa7ppPiuXCgRCKfS062B1Oec0.mft (raw, json) Hash identifier: pDQaYlMzgZh/ZDHDNBqF4aJOdkq2avwNMZM7miQ2C44= Subject key identifier: 32:F2:12:3E:E9:58:80:79:A4:E8:E3:73:FF:55:12:5D:B7:58:4F:0A Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 078A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft Manifest number: 076E Signing time: Sun 24 Nov 2024 20:51:45 +0000 Manifest this update: Sun 24 Nov 2024 20:51:44 +0000 Manifest next update: Sun 01 Dec 2024 20:51:44 +0000 Files and hashes: 1: 09Fa7ppPiuXCgRCKfS062B1Oec0.crl (hash: abrfnhalCKD4TESyuS4l/ozdcziKv7MurWmrrw2Vmbc=) 2: 29BC840E002711EB8FA6A142C4F9AE02.roa (hash: MbMEXJnRsea2u+4UtlV0ffg+vDbiEA0IiKSsdKuSk8E=) 3: 1070E6CA9A8311EF8BE0F826C4F9AE02.roa (hash: I3ync4/mnvw4tJOKX+v5QT07u6K1gvVElMMhxOLbfwg=) 4: 38BE1074FC0F11EA8DEF4D28C4F9AE02.roa (hash: CsBmjpW+8oGI2m5YbOFqukot5JJX3fg6ehvukUaOQps=) 5: 3AA556009A8411EFB791ED77C4F9AE02.roa (hash: cYIYWrM/S+5cEjBXEPAijQ5WuatkrmUBOwtdqx7L4Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1930 (0x78a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Nov 24 20:51:44 2024 GMT Not After : Dec 1 20:51:44 2024 GMT Subject: CN=674391e1-3305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:c6:b2:05:f1:84:04:af:64:09:e4:2b:3e: a6:59:6b:46:aa:e9:ee:bb:d2:8b:ca:ad:34:a7:af: 8c:8d:93:3a:a3:c9:13:61:dc:f8:3e:14:31:3e:97: e4:84:cf:0e:a2:4d:e5:cb:74:82:6c:eb:85:aa:de: 8d:58:6a:65:37:2c:ad:03:02:bd:35:9f:fd:f0:9a: 11:23:d1:53:0c:a1:08:34:8a:74:2a:0d:b6:c7:b7: 40:e6:d1:87:d4:c7:ea:eb:e6:be:f6:a9:29:7e:12: 2c:2d:01:ea:cf:ca:e1:72:2c:59:54:7a:84:24:a7: b6:52:f6:85:fc:00:c1:0f:a9:0b:d1:a8:94:63:d5: 8b:3b:7e:34:9c:09:a9:98:08:9e:21:d8:81:c7:95: ca:82:54:f1:6a:05:3d:48:a0:5a:b6:56:a2:92:0a: 7b:16:ff:3b:de:71:b6:55:7b:a8:d4:96:b2:9b:5a: ab:f0:d4:b0:51:45:a4:8f:64:e1:87:70:13:83:b8: 8b:8c:23:f3:5b:2e:3b:ef:db:d2:08:ea:6a:7a:fb: 90:82:01:82:ea:3a:43:b1:3d:42:e9:5d:e8:dd:9f: 75:38:5c:76:bc:8d:60:e6:ed:a5:85:51:40:1d:d6: c0:ba:bc:08:96:a6:e5:4f:27:aa:e4:54:ce:81:26: 8b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F2:12:3E:E9:58:80:79:A4:E8:E3:73:FF:55:12:5D:B7:58:4F:0A X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:0e:7c:07:44:33:7b:29:41:16:67:c1:86:3c:44:62:b9:79: bb:8b:b6:1c:70:2d:09:da:b1:0c:7d:2d:40:cf:4b:2f:76:fc: 86:b2:ac:1e:d2:a6:91:8d:19:c6:83:77:c9:8c:c2:ed:7b:99: 47:6f:10:14:f4:f8:21:ae:ce:d9:cf:5f:85:84:cb:22:b5:8c: 7a:9e:09:4c:f2:78:c8:b0:19:c6:6a:be:02:59:52:db:f1:31: 17:15:10:af:4e:e5:93:38:ef:b5:ef:6a:3c:98:1a:5d:5e:c2: f9:52:11:89:6d:80:9c:e2:c0:3c:03:9d:1c:43:28:e6:93:10: 66:bb:fd:b2:b4:93:16:12:33:e3:41:37:9c:5a:df:fa:e2:59: 6d:53:ea:ea:1c:36:25:f1:95:ed:ec:86:f1:4d:99:e0:7f:51: 09:69:5a:0c:fd:a7:69:25:e5:f7:ce:ed:e0:d7:6e:ed:83:65: ec:91:81:7f:a7:da:bc:04:7e:29:79:ab:d6:1f:12:a9:52:ed: 73:45:cb:ed:1e:f5:a4:b0:84:71:e2:54:b2:8d:2f:73:c6:60: 19:f8:3c:d1:c4:0c:3b:c2:8a:48:ef:fa:d2:fc:3d:b6:be:c4: 53:f0:14:92:01:32:3b:cd:d9:cc:7c:0d:80:d6:5b:21:91:57: 7c:1b:e0:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjQxMTI0MjA1MTQ0WhcNMjQxMjAxMjA1MTQ0WjAYMRYwFAYD VQQDEw02NzQzOTFlMS0zMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jHGsgXxhASvZAnkKz6mWWtGqunuu9KLyq00p6+MjZM6o8kTYdz4PhQxPpfk hM8Ook3ly3SCbOuFqt6NWGplNyytAwK9NZ/98JoRI9FTDKEINIp0Kg22x7dA5tGH 1Mfq6+a+9qkpfhIsLQHqz8rhcixZVHqEJKe2UvaF/ADBD6kL0aiUY9WLO340nAmp mAieIdiBx5XKglTxagU9SKBatlaikgp7Fv873nG2VXuo1Jaym1qr8NSwUUWkj2Th h3ATg7iLjCPzWy4779vSCOpqevuQggGC6jpDsT1C6V3o3Z91OFx2vI1g5u2lhVFA HdbAurwIlqblTyeq5FTOgSaLEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLyEj7p WIB5pOjjc/9VEl23WE8KMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTdDMi80RTQyNkRFOEZCRUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1 WENnUkNLZlMwNjJCMU9lYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhDnwHRDN7KUEWZ8GGPERiuXm7i7YccC0J2rEMfS1Az0svdvyGsqwe 0qaRjRnGg3fJjMLte5lHbxAU9Pghrs7Zz1+FhMsitYx6nglM8njIsBnGar4CWVLb 8TEXFRCvTuWTOO+172o8mBpdXsL5UhGJbYCc4sA8A50cQyjmkxBmu/2ytJMWEjPj QTecWt/64lltU+rqHDYl8ZXt7IbxTZngf1EJaVoM/adpJeX3zu3g127tg2XskYF/ p9q8BH4peavWHxKpUu1zRcvtHvWksIRx4lSyjS9zxmAZ+DzRxAw7wopI7/rS/D22 vsRT8BSSATI7zdnMfA2A1lshkVd8G+CC -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:01 2024 by rpki-client on console-ams.rpki-client.org