$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json) Hash identifier: Wqja9Ze4R4gwf0X9K768Gp+f4wxNsv6UdDmJeeQQu0c= Subject key identifier: 7B:9B:56:67:FA:FE:62:07:75:64:DD:99:F4:78:57:6E:D7:95:EF:22 Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft Manifest number: 0A Signing time: Thu 21 Nov 2024 06:11:29 +0000 Manifest this update: Thu 21 Nov 2024 06:11:29 +0000 Manifest next update: Thu 28 Nov 2024 06:11:29 +0000 Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: 8xIWTyVBXagInKaJYiVbEF7BLFWgVdaAqQ5z+OtLKqs=) 2: 82193EA89BF011EF854EC369C4F9AE02.roa (hash: W3+8fJiCbUqY/PRN2LAj9pTAnaLzOUP+jaz/QccT0AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Validity Not Before: Nov 21 06:11:29 2024 GMT Not After : Nov 28 06:11:29 2024 GMT Subject: CN=673ecf11-21ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:48:ce:3e:e3:8a:44:82:87:75:5d:71:9e:41: b1:88:c9:58:2e:e1:09:b6:7a:de:e1:be:ad:45:14: e3:66:55:df:68:5b:7a:62:10:e1:14:ca:7d:dd:15: b9:fa:03:24:ba:0c:91:f3:ad:ce:b1:2e:2b:ae:87: 0d:67:8a:bb:6d:a7:a9:1f:07:72:31:0a:22:fe:9b: ec:c7:01:d2:95:3e:c9:67:d4:6a:88:69:2d:74:cb: a5:ce:af:41:73:89:17:7a:f8:c2:bb:fd:87:91:25: df:08:60:f2:70:30:96:b1:06:09:92:c5:c6:3a:1d: 9d:4a:d1:72:f0:51:dd:db:16:78:b0:c2:33:8d:6f: 69:39:87:52:6e:bb:87:d2:30:6d:42:2d:5d:91:3e: 20:c4:f2:d8:ba:c7:6c:6f:93:d6:9d:84:ac:d9:99: d6:a0:d6:ce:6d:07:95:83:c8:43:56:78:3c:30:20: 5d:36:d5:f5:12:31:ec:50:4a:7b:d0:64:4e:c6:63: 21:db:a6:03:66:b1:87:68:1e:75:f7:78:18:60:47: a9:d9:8b:1e:b3:db:87:63:0f:c3:b2:24:5f:6e:48: d5:2b:b9:54:e2:1d:27:35:70:57:be:2a:95:78:8f: d1:2c:0a:23:b4:48:91:ef:b4:d5:d4:58:a4:e4:64: 00:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9B:56:67:FA:FE:62:07:75:64:DD:99:F4:78:57:6E:D7:95:EF:22 X509v3 Authority Key Identifier: keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:98:d2:ad:a5:e7:5e:0a:42:e2:e7:90:ed:48:95:af:20:fe: b8:55:d3:39:29:86:01:26:0c:3f:8d:72:c6:99:e8:3e:d0:f0: fb:28:fe:8a:4a:cb:66:39:cd:d7:a6:0c:e4:ac:f5:f8:41:89: 5b:ae:5f:f7:8a:b6:fa:ad:e5:c1:4a:33:b6:a8:c6:d1:be:a1: f7:1d:04:73:25:68:ef:91:41:c7:79:3d:3e:85:99:9c:05:aa: 5c:d7:d9:e6:d2:32:6a:d0:81:f8:de:d3:0a:9b:74:25:e5:b3: 27:6e:de:86:0e:7c:83:44:ce:53:57:2f:a1:91:e8:a2:25:ef: 49:4a:45:4e:08:4d:0a:3f:24:68:5e:84:75:05:4c:db:54:7f: f3:7c:74:bd:91:46:86:09:83:d4:79:95:96:e1:47:08:d9:f6: d4:b0:f9:c6:9c:b4:c1:2e:51:bf:8a:e1:5f:7f:f0:13:23:82: 11:06:87:3a:82:ef:aa:7b:d0:80:11:de:e5:8e:0b:b7:75:02: d8:94:b3:3e:6a:a6:18:a7:ab:59:ea:b7:84:37:57:a9:d2:f6: 78:fe:4a:ef:4a:01:36:ab:4b:52:f0:8d:25:cb:13:89:06:8f: 2f:3b:2f:3d:24:dd:de:6a:87:18:19:96:cc:17:29:c6:01:28: ed:4a:04:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDY5QTExMC8GA1UEBRMoRDkwODM5M0M1QkE4MDM1QUY2OEI3RUMwMDk1NThFODEy RUQwOTVFMDAeFw0yNDExMjEwNjExMjlaFw0yNDExMjgwNjExMjlaMBgxFjAUBgNV BAMTDTY3M2VjZjExLTIxZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlSM4+44pEgod1XXGeQbGIyVgu4Qm2et7hvq1FFONmVd9oW3piEOEUyn3dFbn6 AyS6DJHzrc6xLiuuhw1nirttp6kfB3IxCiL+m+zHAdKVPsln1GqIaS10y6XOr0Fz iRd6+MK7/YeRJd8IYPJwMJaxBgmSxcY6HZ1K0XLwUd3bFniwwjONb2k5h1Juu4fS MG1CLV2RPiDE8ti6x2xvk9adhKzZmdag1s5tB5WDyENWeDwwIF021fUSMexQSnvQ ZE7GYyHbpgNmsYdoHnX3eBhgR6nZix6z24djD8OyJF9uSNUruVTiHSc1cFe+KpV4 j9EsCiO0SJHvtNXUWKTkZAC7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUe5tWZ/r+ Ygd1ZN2Z9HhXbteV7yIwHwYDVR0jBBgwFoAU2Qg5PFuoA1r2i37ACVWOgS7QleAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwNjlBLzJFQjYwNzk2OUJG MDExRUY4MUM5MDI2N0M0RjlBRTAyLzJRZzVQRnVvQTFyMmkzN0FDVldPZ1M3UWxl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlFnNVBGdW9BMXIyaTM3QUNWV09nUzdRbGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw NjlBLzJFQjYwNzk2OUJGMDExRUY4MUM5MDI2N0M0RjlBRTAyLzJRZzVQRnVvQTFy MmkzN0FDVldPZ1M3UWxlQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKSY0q2l514KQuLnkO1Ila8g/rhV0zkphgEmDD+NcsaZ6D7Q8Pso/opK y2Y5zdemDOSs9fhBiVuuX/eKtvqt5cFKM7aoxtG+ofcdBHMlaO+RQcd5PT6FmZwF qlzX2ebSMmrQgfje0wqbdCXlsydu3oYOfINEzlNXL6GR6KIl70lKRU4ITQo/JGhe hHUFTNtUf/N8dL2RRoYJg9R5lZbhRwjZ9tSw+cactMEuUb+K4V9/8BMjghEGhzqC 76p70IAR3uWOC7d1AtiUsz5qphinq1nqt4Q3V6nS9nj+Su9KATarS1LwjSXLE4kG jy87Lz0k3d5qhxgZlswXKcYBKO1KBFw= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:16 2024 by rpki-client on console-fra.rpki-client.org