$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: nVCws6TkZsKxyQnxtGXErnNPpkouL8Rvw+Z5vjLpW3E= Subject key identifier: 78:41:9B:38:69:A8:73:D9:4C:F0:B7:E4:FB:F1:2B:B1:85:EB:2B:88 Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 11DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 1962 Signing time: Fri 22 Nov 2024 17:10:30 +0000 Manifest this update: Fri 22 Nov 2024 17:10:29 +0000 Manifest next update: Fri 29 Nov 2024 17:10:29 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: y5kWZRRKEwWkejeogp+TEyuCAS0ow7zMkgezI0CzzAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4573 (0x11dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: Nov 22 17:10:29 2024 GMT Not After : Nov 29 17:10:29 2024 GMT Subject: CN=6740bb06-75c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:f9:2b:d2:6b:02:c8:b5:8d:7b:34:13:84: 73:2e:24:41:42:cd:79:a4:b4:30:25:bf:c4:84:4d: d4:30:53:5e:d4:29:ca:e7:ca:43:2a:61:47:03:6f: 38:4e:48:43:d8:b2:76:d4:a7:e8:be:ec:b3:0c:ea: 43:24:90:74:68:e1:46:ca:f2:08:ab:8a:7c:bb:be: 8f:33:29:de:6a:45:b2:16:cd:a4:cc:37:c5:90:ac: 56:0c:69:bb:bb:12:48:6c:4c:c8:69:0f:53:97:ba: f2:58:81:5c:ca:ca:1a:7d:7b:dc:93:75:50:89:e7: ac:56:c9:7f:9c:ec:79:74:e8:62:8f:32:87:b1:38: 66:a1:40:37:83:dd:4c:eb:4f:bd:3d:a6:3f:c1:9c: 70:ac:12:4f:34:cb:da:0a:e7:aa:68:43:4b:11:3c: bd:1f:6a:21:5a:e4:32:f6:cc:9e:88:70:77:7c:44: a9:9c:7e:2a:93:5b:4c:61:b0:95:d1:47:7c:d8:f4: 9f:88:df:ba:1f:c7:54:ee:e9:17:32:1a:cb:ba:b5: f4:75:cc:d9:9c:37:fc:5e:bd:54:e1:68:98:49:ca: 36:9d:52:e2:11:37:c8:4f:18:6d:14:52:e2:e2:04: 27:8a:8e:19:30:51:32:00:8e:7a:8b:a9:83:04:4f: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:41:9B:38:69:A8:73:D9:4C:F0:B7:E4:FB:F1:2B:B1:85:EB:2B:88 X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:0b:58:61:8b:8a:ff:7b:e6:52:12:a6:6a:b4:2a:e2:79:33: c5:83:53:63:75:ba:98:b9:c5:8c:3a:d9:58:fd:d8:90:59:ac: 52:f6:24:df:18:18:31:67:4e:8e:3a:f8:fc:f8:26:fb:3e:dc: 25:09:49:56:9a:7e:81:93:5c:1f:d8:30:44:0f:3f:90:da:7c: a7:ee:1d:24:15:b6:68:a8:1f:a6:b1:3f:4d:fb:0c:01:0d:72: 07:b7:65:78:b2:c4:d0:b0:9b:e1:f1:14:71:98:fc:48:cf:25: 7e:7e:cd:31:28:99:4c:37:c2:c3:53:93:e8:f4:88:29:04:1f: 70:89:1f:7b:c7:33:58:de:b9:29:9c:4d:c7:3b:98:07:b3:41: 7d:eb:b6:5e:0b:e9:f9:a2:0f:d6:fc:ed:c9:f8:02:af:c9:32: 30:5f:0a:bb:35:a8:f2:69:2e:24:be:b0:57:25:30:5c:6e:d6: 86:b0:5b:51:2b:61:76:27:3d:6f:1e:dd:51:0d:af:3e:e4:91: 31:1c:be:6e:48:10:d8:d4:68:80:eb:4a:fd:5c:a4:3d:0e:9c: e6:08:d9:2c:9d:f4:25:f0:87:84:e6:11:a5:9c:8c:6d:ac:0d: 81:e4:bc:42:92:6c:3b:b1:a3:93:35:c1:2a:a2:be:f5:45:4b: 43:b7:65:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjQxMTIyMTcxMDI5WhcNMjQxMTI5MTcxMDI5WjAYMRYwFAYD VQQDEw02NzQwYmIwNi03NWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqf5K9JrAsi1jXs0E4RzLiRBQs15pLQwJb/EhE3UMFNe1CnK58pDKmFHA284 TkhD2LJ21KfovuyzDOpDJJB0aOFGyvIIq4p8u76PMyneakWyFs2kzDfFkKxWDGm7 uxJIbEzIaQ9Tl7ryWIFcysoafXvck3VQieesVsl/nOx5dOhijzKHsThmoUA3g91M 60+9PaY/wZxwrBJPNMvaCueqaENLETy9H2ohWuQy9syeiHB3fESpnH4qk1tMYbCV 0Ud82PSfiN+6H8dU7ukXMhrLurX0dczZnDf8Xr1U4WiYSco2nVLiETfITxhtFFLi 4gQnio4ZMFEyAI56i6mDBE9ZTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhBmzhp qHPZTPC35PvxK7GF6yuIMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzC1hhi4r/e+ZSEqZqtCrieTPFg1NjdbqYucWMOtlY/diQWaxS9iTf GBgxZ06OOvj8+Cb7PtwlCUlWmn6Bk1wf2DBEDz+Q2nyn7h0kFbZoqB+msT9N+wwB DXIHt2V4ssTQsJvh8RRxmPxIzyV+fs0xKJlMN8LDU5Po9IgpBB9wiR97xzNY3rkp nE3HO5gHs0F967ZeC+n5og/W/O3J+AKvyTIwXwq7NajyaS4kvrBXJTBcbtaGsFtR K2F2Jz1vHt1RDa8+5JExHL5uSBDY1GiA60r9XKQ9DpzmCNksnfQl8IeE5hGlnIxt rA2B5LxCkmw7saOTNcEqor71RUtDt2Vy -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:47 2024 by rpki-client on console-fra.rpki-client.org