$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft File: G96wwnXJDoG_o6r-IT5OcSHrc0o.mft (raw, json) Hash identifier: LvQABfRSL0aBCqOVNEMommR10zuOzvt/MIX1pSeCmsg= Subject key identifier: 7D:B3:84:17:AB:56:DE:84:2E:9B:DE:DD:96:3C:AC:9E:F5:18:35:39 Authority key identifier: 1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A Certificate issuer: /CN=A9142E1E/serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft Manifest number: 0C Signing time: Wed 23 Oct 2024 06:46:23 +0000 Manifest this update: Wed 23 Oct 2024 06:46:22 +0000 Manifest next update: Wed 30 Oct 2024 06:46:22 +0000 Files and hashes: 1: G96wwnXJDoG_o6r-IT5OcSHrc0o.crl (hash: SKVKND13T/6givOXjv9Ti6NipdNpC6S/91l3By9DnYA=) 2: 31B5D564824311EF9C69B985C4F9AE02.roa (hash: 01z6cFU0jW8f9zVMrWHTT2CF3IVHm4aLS/DIHcV6lWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E/serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A Validity Not Before: Oct 23 06:46:22 2024 GMT Not After : Oct 30 06:46:22 2024 GMT Subject: CN=67189bbf-7614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:f8:24:59:bf:0a:48:d2:64:dc:b8:03:b8: 68:54:be:f6:c0:40:75:2f:c1:c5:d0:18:46:f1:59: 8e:d1:0e:16:dc:b9:5a:8d:5b:4d:32:56:fc:2e:8a: dc:d2:54:9b:9a:d6:07:0e:43:60:56:9f:05:3e:13: da:88:ef:20:64:87:d3:6f:50:d8:92:79:73:50:c9: 9b:37:3a:3e:b6:66:33:ca:1f:3f:b8:b5:07:22:a9: 9f:d0:8e:25:1a:96:15:8c:d3:78:8d:05:82:bc:28: 69:86:c6:48:2b:ac:29:3f:8f:eb:9f:c3:1b:5b:11: 33:fe:68:bf:b3:b8:2b:e1:66:20:64:78:a3:90:b7: 0b:80:6d:73:25:bc:9b:9a:ce:87:c2:13:97:25:85: cb:d3:7b:1d:7f:b3:88:01:5c:e9:7a:a7:1c:7f:b8: ae:fa:b3:1d:ab:39:ff:64:2a:d1:9d:14:d0:f0:aa: 40:06:01:cf:2a:fe:1b:69:73:64:96:ac:ed:ef:05: d7:d5:83:59:10:30:db:40:5f:fd:c2:b5:c3:7a:0f: 54:74:56:6d:14:4b:a0:39:af:5d:bb:93:f9:e9:d2: d1:a7:8e:d4:bd:71:da:54:c3:0e:4f:c0:72:9d:47: 12:d9:ec:95:39:6f:a2:a1:20:15:a2:72:27:2b:d3: 3b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B3:84:17:AB:56:DE:84:2E:9B:DE:DD:96:3C:AC:9E:F5:18:35:39 X509v3 Authority Key Identifier: keyid:1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:3b:49:43:39:20:5e:cc:3d:22:b0:f4:77:85:f3:1e:8a:c7: 78:2f:08:33:90:ae:7f:e1:18:f0:8b:7f:50:60:68:e1:a1:cf: b7:35:3f:6c:8a:a8:c7:e4:be:2d:f4:e2:11:21:09:91:0f:d6: 8f:87:50:da:8d:b4:6b:66:d8:f7:c9:05:8a:19:ce:e9:85:7a: 48:f2:43:1d:15:91:b1:88:bc:e6:ae:33:ed:d1:8f:fc:dc:29: 6b:9f:b9:ec:0b:9a:4e:dd:d6:e9:43:d6:db:aa:98:d0:f6:8c: e1:f8:a4:72:51:4e:6c:42:16:6b:74:ef:1e:f9:eb:74:23:b3: f2:79:ae:22:7f:af:b9:a9:98:f8:2f:3b:ca:97:08:39:fc:62: 99:24:b9:a2:9e:50:aa:17:31:b1:a4:64:b5:97:f0:72:db:70: 9f:28:dc:ca:ea:25:d1:50:36:f0:20:ab:dc:f2:91:66:21:78: 11:84:59:14:c7:e9:43:b7:c7:4e:7b:52:70:9e:61:be:86:4c: 56:7e:7d:20:ba:38:d1:94:10:cc:28:c2:7e:1c:e9:85:47:b8: 9f:60:ea:9b:50:9f:49:02:ef:ac:8c:ec:c5:f5:6f:18:ac:d2: 1b:61:68:6a:3e:e6:05:ef:e1:c4:91:f0:c2:58:0b:c5:8c:65: 37:1a:15:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkUxRTExMC8GA1UEBRMoMUJERUIwQzI3NUM5MEU4MUJGQTNBQUZFMjEzRTRFNzEy MUVCNzM0QTAeFw0yNDEwMjMwNjQ2MjJaFw0yNDEwMzAwNjQ2MjJaMBgxFjAUBgNV BAMTDTY3MTg5YmJmLTc2MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWUfgkWb8KSNJk3LgDuGhUvvbAQHUvwcXQGEbxWY7RDhbcuVqNW00yVvwuitzS VJua1gcOQ2BWnwU+E9qI7yBkh9NvUNiSeXNQyZs3Oj62ZjPKHz+4tQciqZ/QjiUa lhWM03iNBYK8KGmGxkgrrCk/j+ufwxtbETP+aL+zuCvhZiBkeKOQtwuAbXMlvJua zofCE5clhcvTex1/s4gBXOl6pxx/uK76sx2rOf9kKtGdFNDwqkAGAc8q/htpc2SW rO3vBdfVg1kQMNtAX/3CtcN6D1R0Vm0US6A5r127k/np0tGnjtS9cdpUww5PwHKd RxLZ7JU5b6KhIBWicicr0ztfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfbOEF6tW 3oQum97dljysnvUYNTkwHwYDVR0jBBgwFoAUG96wwnXJDoG/o6r+IT5OcSHrc0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRTFFLzEzRDgwNjA4ODI0 MjExRUZBRDNEODE4MUM0RjlBRTAyL0c5Nnd3blhKRG9HX282ci1JVDVPY1NIcmMw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRzk2d3duWEpEb0dfbzZyLUlUNU9jU0hyYzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RTFFLzEzRDgwNjA4ODI0MjExRUZBRDNEODE4MUM0RjlBRTAyL0c5Nnd3blhKRG9H X282ci1JVDVPY1NIcmMwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK07SUM5IF7MPSKw9HeF8x6Kx3gvCDOQrn/hGPCLf1BgaOGhz7c1P2yK qMfkvi304hEhCZEP1o+HUNqNtGtm2PfJBYoZzumFekjyQx0VkbGIvOauM+3Rj/zc KWufuewLmk7d1ulD1tuqmND2jOH4pHJRTmxCFmt07x7563Qjs/J5riJ/r7mpmPgv O8qXCDn8YpkkuaKeUKoXMbGkZLWX8HLbcJ8o3MrqJdFQNvAgq9zykWYheBGEWRTH 6UO3x057UnCeYb6GTFZ+fSC6ONGUEMwown4c6YVHuJ9g6ptQn0kC76yM7MX1bxis 0hthaGo+5gXv4cSR8MJYC8WMZTcaFQw= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:19 2024 by rpki-client on console-fra.rpki-client.org