$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft File: wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json) Hash identifier: jDoC0j00vII6Wk4RWmQ7ybTcRiuYZGmgXQ7yBkthTg0= Subject key identifier: BB:67:74:FF:ED:A7:7F:48:44:0D:8E:DC:32:5E:D0:31:EE:C5:31:ED Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C Certificate issuer: /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft Manifest number: D9 Signing time: Sat 23 Nov 2024 03:39:05 +0000 Manifest this update: Sat 23 Nov 2024 03:39:04 +0000 Manifest next update: Sat 30 Nov 2024 03:39:04 +0000 Files and hashes: 1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: vUl3K3ckmp9vFsFkz57heWP1HVU/q5ODpaO/Rkr/Qho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Validity Not Before: Nov 23 03:39:04 2024 GMT Not After : Nov 30 03:39:04 2024 GMT Subject: CN=67414e59-13c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:ec:d8:09:97:7a:dd:07:6a:cd:fe:46:1c: 40:11:8e:7d:a6:0a:6f:1d:fb:70:50:e8:c3:56:55: 84:91:01:b8:3b:97:d3:54:32:e9:6b:b8:c6:a7:d1: e4:81:01:8e:d7:31:bc:f3:8d:54:98:62:d8:7e:45: 0e:82:b6:15:af:70:26:eb:07:10:5c:57:23:9a:d2: 3e:9c:bd:62:56:63:70:76:d9:81:3a:74:af:25:16: ab:db:69:ea:12:7c:83:1b:9d:f6:a3:af:92:00:82: 36:72:1a:12:be:38:f9:e0:b4:78:f4:62:08:8a:2d: 41:6e:1b:ea:67:be:83:2a:36:7a:c2:4d:13:15:07: 87:b1:6e:35:b8:47:f7:5d:6b:13:6d:92:59:5c:2a: 41:69:0e:41:ae:7c:50:13:45:74:ab:4b:61:40:80: 9a:64:ac:96:cd:ef:3b:79:0a:d7:9c:25:da:63:0f: cf:ca:2c:05:c5:f5:34:a4:81:35:4b:19:ac:aa:bd: 04:2a:e3:02:3c:96:42:d2:60:54:cd:c7:28:cc:3d: 17:54:65:d5:7d:2f:c5:3c:cd:a3:12:89:9c:c1:36: 5d:34:50:dc:f4:42:82:1e:24:c1:14:a7:60:98:fe: 5a:52:df:3d:42:eb:52:c0:0c:87:72:f5:a9:e5:ec: 52:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:67:74:FF:ED:A7:7F:48:44:0D:8E:DC:32:5E:D0:31:EE:C5:31:ED X509v3 Authority Key Identifier: keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:40:1b:e4:08:54:ae:2b:03:3c:f2:a5:e4:d2:ee:8e:f4:64: 65:69:6b:8d:79:d4:88:ad:14:40:ec:0f:a5:9b:e1:31:34:6c: 48:0f:95:82:54:11:49:23:ea:67:83:fb:b4:f7:66:a2:7b:3f: 2a:34:42:d9:fa:2c:36:62:52:cb:f9:59:61:57:97:1b:e0:57: c8:07:1f:82:8d:ac:e3:d2:5c:f1:52:32:ab:21:11:8a:d8:b5: 53:3a:92:40:b4:0f:a6:fe:2f:84:3c:6f:22:eb:c8:fa:df:76: 0c:0f:bf:08:dc:bf:fb:c3:3a:0a:55:1e:16:fc:2a:5c:9d:62: 56:21:8b:e0:14:72:29:b9:0c:62:27:38:d3:d7:b7:7c:e9:8d: 07:be:02:cd:4b:fe:64:fd:95:35:26:59:99:25:01:64:e2:5e: e0:a3:a0:d3:e6:04:95:78:66:59:c8:25:8f:7e:3c:b5:b5:c7: 78:18:cc:38:24:0f:67:6e:9b:70:0d:77:6e:f7:fc:1a:4f:41: c7:89:44:c2:74:45:df:45:37:09:ed:35:dd:12:67:f2:8b:17: 23:00:47:65:9f:5e:e2:b1:15:47:53:48:5e:13:32:6f:56:bc: 6c:93:dc:c4:70:8d:2d:94:d5:8b:20:e4:dd:c2:09:ab:29:d6: ad:72:53:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKEMwMEYwNUFFMEZBOUI2ODBBOTFCNTZGMEQzMjFDNTE4 OEMxRTcxMkMwHhcNMjQxMTIzMDMzOTA0WhcNMjQxMTMwMDMzOTA0WjAYMRYwFAYD VQQDEw02NzQxNGU1OS0xM2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbrs2AmXet0Has3+RhxAEY59pgpvHftwUOjDVlWEkQG4O5fTVDLpa7jGp9Hk gQGO1zG8841UmGLYfkUOgrYVr3Am6wcQXFcjmtI+nL1iVmNwdtmBOnSvJRar22nq EnyDG532o6+SAII2choSvjj54LR49GIIii1BbhvqZ76DKjZ6wk0TFQeHsW41uEf3 XWsTbZJZXCpBaQ5BrnxQE0V0q0thQICaZKyWze87eQrXnCXaYw/PyiwFxfU0pIE1 Sxmsqr0EKuMCPJZC0mBUzccozD0XVGXVfS/FPM2jEomcwTZdNFDc9EKCHiTBFKdg mP5aUt89QutSwAyHcvWp5exS1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtndP/t p39IRA2O3DJe0DHuxTHtMB8GA1UdIwQYMBaAFMAPBa4PqbaAqRtW8NMhxRiMHnEs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yRjJCM0YyMDVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRvQ3BHMWJ3MHlIRkdJd2Vj U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dBOEZyZy1wdG9DcEcxYncweUhGR0l3ZWNTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yRjJCM0YyMDVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRv Q3BHMWJ3MHlIRkdJd2VjU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJQBvkCFSuKwM88qXk0u6O9GRlaWuNedSIrRRA7A+lm+ExNGxID5WC VBFJI+png/u092aiez8qNELZ+iw2YlLL+VlhV5cb4FfIBx+Cjazj0lzxUjKrIRGK 2LVTOpJAtA+m/i+EPG8i68j633YMD78I3L/7wzoKVR4W/CpcnWJWIYvgFHIpuQxi JzjT17d86Y0HvgLNS/5k/ZU1JlmZJQFk4l7go6DT5gSVeGZZyCWPfjy1tcd4GMw4 JA9nbptwDXdu9/waT0HHiUTCdEXfRTcJ7TXdEmfyixcjAEdln17isRVHU0heEzJv Vrxsk9zEcI0tlNWLIOTdwgmrKdatclNz -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:48 2024 by rpki-client on console-fra.rpki-client.org