$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft File: Ed9s5Nq5aE7fbPXgPf3shvFc174.mft (raw, json) Hash identifier: czqanZLILr17woJ1MY3g/gdBFH3JenvwYGi6027zSnU= Subject key identifier: A0:C3:17:57:A0:A0:BE:58:01:38:61:F4:55:B1:9D:11:E8:C7:01:44 Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Certificate serial: 0A7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft Manifest number: 0A77 Signing time: Fri 22 Nov 2024 19:23:22 +0000 Manifest this update: Fri 22 Nov 2024 19:23:22 +0000 Manifest next update: Fri 29 Nov 2024 19:23:22 +0000 Files and hashes: 1: Ed9s5Nq5aE7fbPXgPf3shvFc174.crl (hash: lU+It1/+0jAK25qUt0LqRPOX5+L9lazDRsJIbVk5ADI=) 2: C66770F24B9111EA9A72503CC4F9AE02.roa (hash: xL/igmGv/tHvkJn5yKoATONH6AHHS5dqWF72gorDIBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE Validity Not Before: Nov 22 19:23:22 2024 GMT Not After : Nov 29 19:23:22 2024 GMT Subject: CN=6740da2a-5150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9f:30:66:b0:02:d1:e4:f0:43:50:db:98:2a: 89:30:45:ac:10:e8:32:e3:ad:44:d7:01:4d:09:36: 96:03:25:7d:5e:5b:dc:76:42:1f:3b:da:45:b9:3a: 6e:0f:86:45:af:d0:9b:fb:ff:e1:f7:26:33:33:1d: 28:44:d3:bb:d1:c9:3c:4c:a8:72:af:61:21:74:e1: 3c:28:2a:e1:82:65:b6:14:54:61:df:0c:d3:69:85: 2b:df:01:88:2f:9a:20:d7:6e:6f:04:92:27:1f:51: 87:18:d9:62:28:e8:d2:03:3e:6b:40:04:cf:7f:f3: 04:d9:90:e1:6d:3a:a5:e9:1a:b5:4c:ef:84:f7:f2: a4:d4:fe:60:32:c5:d1:be:e2:d6:ac:cd:4a:19:80: 19:7f:70:2c:f6:08:ca:68:a8:38:83:f0:ef:e3:7c: 01:3e:fe:f6:2b:13:9f:15:17:6d:f8:1d:f4:8a:ba: aa:7b:8e:96:26:75:0d:5b:f9:b2:e0:8a:f9:9f:80: e8:e8:36:49:84:db:49:79:98:df:6f:02:42:d0:17: 1f:b6:b2:f5:02:22:a8:09:00:b4:79:ab:8c:c3:63: 4c:72:bf:37:0f:3a:82:22:fd:5e:e5:a3:99:99:6c: e1:f5:a6:6a:ce:19:30:62:ad:ca:28:62:3c:cf:68: 25:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C3:17:57:A0:A0:BE:58:01:38:61:F4:55:B1:9D:11:E8:C7:01:44 X509v3 Authority Key Identifier: keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:60:da:f1:23:47:38:93:79:fc:26:0d:4b:72:94:f6:f5:ff: 00:ca:ac:84:40:64:7d:0e:d5:cb:30:85:68:29:c0:e0:7d:6a: 43:19:be:86:6b:c9:14:e4:f0:64:2c:2d:2e:3f:32:cf:17:75: 20:dd:e9:86:bc:60:eb:0f:fb:5e:29:cb:97:07:b2:88:a3:36: 07:a5:cd:3d:31:45:89:1c:da:d4:58:13:60:41:4a:eb:97:f5: 2a:73:52:92:7e:7c:95:97:64:6b:2e:c0:54:57:00:5b:f0:31: 60:e1:cd:e8:f2:0f:ff:34:48:8b:a3:c3:3d:25:bc:ef:a9:1b: 3b:b9:fa:33:4f:24:50:5a:e5:c9:3e:36:f2:99:1a:ef:68:01: 85:10:12:10:e1:74:a2:a8:3b:65:c4:37:7e:5e:41:0a:cf:5e: 49:03:da:96:16:f5:bf:d5:99:10:29:28:48:22:99:77:ed:b0: 62:63:c4:22:22:4b:c6:60:e9:fc:7a:e2:15:a7:b0:14:0e:93: dd:2e:bb:6b:a1:3d:a1:2f:fb:8d:d3:75:09:82:86:3e:7e:aa: 62:08:34:30:b3:c1:20:00:ea:82:3c:bd:28:1b:91:95:cf:85: 8e:bb:5b:d5:3c:7c:31:30:59:60:94:ed:1d:26:80:11:8f:15: c7:11:70:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVERUUxMTAvBgNVBAUTKDExREY2Q0U0REFCOTY4NEVERjZDRjVFMDNERkRFQzg2 RjE1Q0Q3QkUwHhcNMjQxMTIyMTkyMzIyWhcNMjQxMTI5MTkyMzIyWjAYMRYwFAYD VQQDEw02NzQwZGEyYS01MTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA158wZrAC0eTwQ1DbmCqJMEWsEOgy461E1wFNCTaWAyV9XlvcdkIfO9pFuTpu D4ZFr9Cb+//h9yYzMx0oRNO70ck8TKhyr2EhdOE8KCrhgmW2FFRh3wzTaYUr3wGI L5og125vBJInH1GHGNliKOjSAz5rQATPf/ME2ZDhbTql6Rq1TO+E9/Kk1P5gMsXR vuLWrM1KGYAZf3As9gjKaKg4g/Dv43wBPv72KxOfFRdt+B30irqqe46WJnUNW/my 4Ir5n4Do6DZJhNtJeZjfbwJC0BcftrL1AiKoCQC0eauMw2NMcr83DzqCIv1e5aOZ mWzh9aZqzhkwYq3KKGI8z2glywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDDF1eg oL5YAThh9FWxnRHoxwFEMB8GA1UdIwQYMBaAFBHfbOTauWhO32z14D397IbxXNe+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURFRS9BREQ2NUUyODRC OTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFFN2ZiUFhnUGYzc2h2RmMx NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkOXM1TnE1YUU3ZmJQWGdQZjNzaHZGYzE3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURFRS9BREQ2NUUyODRCOTAxMUVBOTVCRUE2MzlDNEY5QUUwMi9FZDlzNU5xNWFF N2ZiUFhnUGYzc2h2RmMxNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKYNrxI0c4k3n8Jg1LcpT29f8AyqyEQGR9DtXLMIVoKcDgfWpDGb6G a8kU5PBkLC0uPzLPF3Ug3emGvGDrD/teKcuXB7KIozYHpc09MUWJHNrUWBNgQUrr l/Uqc1KSfnyVl2RrLsBUVwBb8DFg4c3o8g//NEiLo8M9JbzvqRs7ufozTyRQWuXJ PjbymRrvaAGFEBIQ4XSiqDtlxDd+XkEKz15JA9qWFvW/1ZkQKShIIpl37bBiY8Qi IkvGYOn8euIVp7AUDpPdLrtroT2hL/uN03UJgoY+fqpiCDQws8EgAOqCPL0oG5GV z4WOu1vVPHwxMFlglO0dJoARjxXHEXAv -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org