$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft File: C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json) Hash identifier: bS0pMop9uMYPjA+5E+nNlimkEH1fTV7eSnDePzYqpRA= Subject key identifier: 9A:64:25:CE:EE:73:69:EB:5F:00:55:F5:40:00:31:14:4A:84:17:88 Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A Certificate issuer: /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Certificate serial: 04DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft Manifest number: 04D5 Signing time: Fri 22 Nov 2024 23:20:52 +0000 Manifest this update: Fri 22 Nov 2024 23:20:52 +0000 Manifest next update: Fri 29 Nov 2024 23:20:52 +0000 Files and hashes: 1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: kikVjIVs73uDw+5cQhdN8AebxsN0+m630HkVtjRSvnQ=) 2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: +yQIyhf/TyYpDcf0R24C9WjNNq39cWlJNp6OClFEIoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1242 (0x4da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Validity Not Before: Nov 22 23:20:52 2024 GMT Not After : Nov 29 23:20:52 2024 GMT Subject: CN=674111d4-8cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:a9:12:7c:d3:02:74:4d:ce:95:3e:02:a3: 07:a1:2e:7a:06:07:8d:39:80:c3:b5:63:a2:e3:7f: 46:5d:0c:79:ea:f0:79:76:8f:ad:10:93:bf:a6:5d: 8a:50:56:0f:77:fa:03:dc:27:d3:5d:e8:0d:c0:fe: dc:49:8c:c9:16:3b:e1:da:f7:d0:4c:e7:a0:32:42: 11:b7:86:8c:bb:ab:31:eb:21:a8:e7:0c:fa:d3:05: e8:d8:99:84:aa:16:a2:a7:2d:68:c9:6c:09:7a:2c: 22:a1:52:b9:fb:f4:90:2a:4a:2d:44:6c:82:c8:26: dc:7e:95:00:ef:ab:02:4d:5e:20:5b:24:2f:c4:bd: 79:29:f5:6d:a2:d8:3c:dd:7b:8f:f0:2d:2f:80:fd: fd:9d:f1:22:d8:38:5f:bf:8b:70:3a:65:7e:d0:b2: 53:d7:f7:ff:dd:2d:71:31:14:3a:d8:be:cd:c2:ae: 0d:a4:57:5f:07:60:03:3f:dd:c0:61:00:20:08:aa: 74:e0:92:e0:52:da:96:04:68:de:7e:a2:e8:11:03: f2:01:ba:34:db:47:c7:b8:49:67:14:58:4a:d0:08: 9d:76:a9:a9:7b:47:5c:10:90:5d:0b:5e:01:31:94: 3a:77:a0:a7:e4:6b:85:c1:ca:3b:70:fd:a9:1b:88: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:64:25:CE:EE:73:69:EB:5F:00:55:F5:40:00:31:14:4A:84:17:88 X509v3 Authority Key Identifier: keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:f4:b1:74:9b:9a:62:26:c9:80:b2:e4:e2:86:cf:89:06:25: a0:c5:6c:df:26:fb:54:8f:11:87:6c:db:dd:d3:b0:73:da:3d: 29:25:18:f3:23:40:14:e0:26:c7:02:1d:3a:23:df:b7:1d:37: da:47:35:3a:35:02:54:01:79:29:3f:65:a2:82:0c:1f:39:00: f1:bf:e3:fb:e8:31:0b:7d:60:42:27:bb:54:aa:80:a4:c6:38: 09:e2:bb:49:b1:a9:04:ad:42:75:aa:64:b7:87:7a:45:a2:ee: 38:0f:81:29:9e:a6:d2:09:9b:43:59:a5:ee:59:68:ae:a4:1e: 3a:f3:83:12:b1:c7:e0:75:c0:19:8d:23:b8:fa:be:d6:bf:eb: f7:7b:30:e7:04:35:7d:0a:d3:83:2a:2e:58:f0:0c:18:11:d5: e1:b5:32:41:68:97:d9:76:5a:ad:f8:44:b3:6f:e1:50:71:42: de:c4:a5:6f:84:a6:2c:38:73:40:47:89:32:0d:a3:0b:a1:ea: 36:41:ea:0f:75:c5:d6:07:9f:fc:7c:94:5a:46:99:90:1a:e9: 2c:4d:9c:ef:e0:65:48:89:0a:cb:60:7a:a6:19:51:94:78:58: a0:86:18:2b:69:a1:a0:78:0a:5e:e0:f0:df:11:52:19:3e:e2: 05:7e:0c:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDgxMTAvBgNVBAUTKDBCQTFDNTJENjI1QkIxQjlFNDQzMzgyNTBEQTNENjRE ODA2ODdBMEEwHhcNMjQxMTIyMjMyMDUyWhcNMjQxMTI5MjMyMDUyWjAYMRYwFAYD VQQDEw02NzQxMTFkNC04Y2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdSpEnzTAnRNzpU+AqMHoS56BgeNOYDDtWOi439GXQx56vB5do+tEJO/pl2K UFYPd/oD3CfTXegNwP7cSYzJFjvh2vfQTOegMkIRt4aMu6sx6yGo5wz60wXo2JmE qhaipy1oyWwJeiwioVK5+/SQKkotRGyCyCbcfpUA76sCTV4gWyQvxL15KfVtotg8 3XuP8C0vgP39nfEi2Dhfv4twOmV+0LJT1/f/3S1xMRQ62L7Nwq4NpFdfB2ADP93A YQAgCKp04JLgUtqWBGjefqLoEQPyAbo020fHuElnFFhK0Aiddqmpe0dcEJBdC14B MZQ6d6Cn5GuFwco7cP2pG4jozwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpkJc7u c2nrXwBV9UAAMRRKhBeIMB8GA1UdIwQYMBaAFAuhxS1iW7G55EM4JQ2j1k2AaHoK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0OC81MEVGRDg3NkY5 RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNibmtRemdsRGFQV1RZQm9l Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2SEZMV0pic2Jua1F6Z2xEYVBXVFlCb2Vnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0OC81MEVGRDg3NkY5RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNi bmtRemdsRGFQV1RZQm9lZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE9LF0m5piJsmAsuTihs+JBiWgxWzfJvtUjxGHbNvd07Bz2j0pJRjz I0AU4CbHAh06I9+3HTfaRzU6NQJUAXkpP2WiggwfOQDxv+P76DELfWBCJ7tUqoCk xjgJ4rtJsakErUJ1qmS3h3pFou44D4EpnqbSCZtDWaXuWWiupB4684MSscfgdcAZ jSO4+r7Wv+v3ezDnBDV9CtODKi5Y8AwYEdXhtTJBaJfZdlqt+ESzb+FQcULexKVv hKYsOHNAR4kyDaMLoeo2QeoPdcXWB5/8fJRaRpmQGuksTZzv4GVIiQrLYHqmGVGU eFighhgraaGgeApe4PDfEVIZPuIFfgyy -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:33 2024 by rpki-client on console-fra.rpki-client.org