$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json) Hash identifier: BQmqP3TDpn8L0z0UArpahyz41v5n3QB9A2RvATBoW9I= Subject key identifier: 1E:22:36:B1:4F:AB:09:96:96:B0:16:DD:EB:9B:40:E0:F0:B0:A4:72 Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft Manifest number: DA Signing time: Thu 21 Nov 2024 03:44:07 +0000 Manifest this update: Thu 21 Nov 2024 03:44:07 +0000 Manifest next update: Thu 28 Nov 2024 03:44:07 +0000 Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: su+umAOTyhMJnJ77JAiwpr5c2uxrEsv3cULk3PHj63k=) 2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: icEjBAvtyS7bBSn0NXrfM0VKf/GFl7OVPnJ58XOd/T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Validity Not Before: Nov 21 03:44:07 2024 GMT Not After : Nov 28 03:44:07 2024 GMT Subject: CN=673eac87-890b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:84:79:ff:8d:e3:56:c1:05:89:c1:d0:89: 4c:8d:09:85:c3:1a:6c:59:6a:bd:b3:c5:db:51:9f: fc:09:88:33:40:60:31:0a:e1:54:a7:86:87:79:e1: ef:dc:bb:e4:0b:92:3a:b9:d9:3a:c3:54:b1:ff:94: 2d:f6:16:f7:a8:61:1e:99:b6:dd:78:26:59:f9:a3: eb:bb:0e:9c:11:bd:af:fc:c0:73:d7:b7:bb:70:84: de:20:96:c8:5d:7c:3e:e4:7a:59:21:8d:07:1a:94: 92:d6:38:f9:b6:05:14:23:4a:59:a4:a7:de:c4:3f: 3f:1c:89:9e:05:2c:50:ec:21:92:ea:56:49:52:eb: 54:b4:47:a5:4d:8c:70:e4:40:14:7f:4b:e5:f7:2a: 62:74:0d:d0:34:a9:6a:51:58:1c:b6:5b:f7:08:44: e8:5f:70:9c:03:53:e3:c2:4e:80:bd:da:86:93:bf: 19:cf:31:e9:12:0c:36:ba:8a:6f:08:84:9a:41:b5: d8:b3:7a:e0:cd:91:be:0e:a9:b7:0a:96:4c:5b:6b: 20:00:28:f3:23:bc:23:e9:87:c3:8b:89:aa:e3:99: a9:a8:c1:86:df:06:f0:f3:ae:eb:a5:00:48:46:a8: 64:46:0a:9d:5e:61:33:d0:05:ef:72:a9:d4:8e:4e: ec:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:22:36:B1:4F:AB:09:96:96:B0:16:DD:EB:9B:40:E0:F0:B0:A4:72 X509v3 Authority Key Identifier: keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1e:78:d1:62:72:b2:81:7f:56:d2:42:92:16:68:e2:ab:05: 8a:63:cd:5b:d9:ab:d1:8d:24:9d:16:99:19:37:01:a5:e7:e3: fd:d4:ce:ab:6d:80:55:6a:e2:9d:c7:36:91:ca:fb:ae:96:bd: b5:6f:df:55:9e:84:b9:59:92:a8:eb:e5:0f:ff:b0:cc:e3:ea: 9d:7f:82:94:86:8c:3b:10:63:7e:46:98:66:fd:74:2d:28:ec: 4b:d8:fa:48:a1:69:51:22:27:ac:90:ae:55:04:7c:e6:7a:e6: 4a:97:66:56:d3:09:3b:ce:de:68:91:33:bd:56:91:26:3f:ea: 2b:0b:b9:ff:26:d7:f5:3a:88:a6:b7:08:2f:28:83:d0:16:b1: ef:43:81:6e:23:2d:38:6b:71:a8:ea:3f:86:09:10:a8:8b:b6: cf:11:6d:4b:c1:59:f1:e5:fb:50:8f:0b:91:fb:5e:68:3e:e5: 62:33:f0:cb:75:38:0b:02:02:7e:c6:1c:a6:d1:ed:91:f8:31: a5:9b:16:35:f7:7b:f7:c6:32:0e:32:f8:22:86:1d:2f:e7:70: ad:82:2e:5a:bb:05:d5:46:24:1e:c5:de:5d:c2:da:09:76:b2: c2:15:ce:d2:73:e0:a3:7d:2f:d1:c0:0d:96:a9:1a:59:34:e2: 82:75:9d:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQjQxMTAvBgNVBAUTKEI3Qzk3OTVGRkY3RjY5Q0YzM0I3NjUxQzZCOTkyNkE3 MzBEOTc1OUMwHhcNMjQxMTIxMDM0NDA3WhcNMjQxMTI4MDM0NDA3WjAYMRYwFAYD VQQDEw02NzNlYWM4Ny04OTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+WEef+N41bBBYnB0IlMjQmFwxpsWWq9s8XbUZ/8CYgzQGAxCuFUp4aHeeHv 3LvkC5I6udk6w1Sx/5Qt9hb3qGEembbdeCZZ+aPruw6cEb2v/MBz17e7cITeIJbI XXw+5HpZIY0HGpSS1jj5tgUUI0pZpKfexD8/HImeBSxQ7CGS6lZJUutUtEelTYxw 5EAUf0vl9ypidA3QNKlqUVgctlv3CEToX3CcA1Pjwk6AvdqGk78ZzzHpEgw2uopv CISaQbXYs3rgzZG+Dqm3CpZMW2sgACjzI7wj6YfDi4mq45mpqMGG3wbw867rpQBI RqhkRgqdXmEz0AXvcqnUjk7sxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4iNrFP qwmWlrAW3eubQODwsKRyMB8GA1UdIwQYMBaAFLfJeV//f2nPM7dlHGuZJqcw2XWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCNC8zQzA5QjNGQTVD RTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2FjOHp0MlVjYTVrbXB6RFpk WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4bDVYXzlfYWM4enQyVWNhNWttcHpEWmRady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCNC8zQzA5QjNGQTVDRTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2Fj OHp0MlVjYTVrbXB6RFpkWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSHnjRYnKygX9W0kKSFmjiqwWKY81b2avRjSSdFpkZNwGl5+P91M6r bYBVauKdxzaRyvuulr21b99VnoS5WZKo6+UP/7DM4+qdf4KUhow7EGN+Rphm/XQt KOxL2PpIoWlRIieskK5VBHzmeuZKl2ZW0wk7zt5okTO9VpEmP+orC7n/Jtf1Ooim twgvKIPQFrHvQ4FuIy04a3Go6j+GCRCoi7bPEW1LwVnx5ftQjwuR+15oPuViM/DL dTgLAgJ+xhym0e2R+DGlmxY193v3xjIOMvgihh0v53Ctgi5auwXVRiQexd5dwtoJ drLCFc7Sc+CjfS/RwA2WqRpZNOKCdZ3c -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:55 2024 by rpki-client on console-fra.rpki-client.org