$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft File: T9EeLMzVFBlTCsBKFCWPEahXfq0.mft (raw, json) Hash identifier: 3J45zZ4in2eS0Y3+2Pv5plyyWG9pmyijEv6izc73AYA= Subject key identifier: 8D:C1:03:A5:7C:08:26:C8:34:61:58:A2:17:EF:BE:C2:89:7C:67:F3 Authority key identifier: 4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD Certificate issuer: /CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft Manifest number: 38 Signing time: Sun 03 Nov 2024 05:26:12 +0000 Manifest this update: Sun 03 Nov 2024 05:26:12 +0000 Manifest next update: Sun 10 Nov 2024 05:26:12 +0000 Files and hashes: 1: T9EeLMzVFBlTCsBKFCWPEahXfq0.crl (hash: 5ryOGWfb88uzrbm/LQDpaK8USVLQfK4068Afoc03+6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65/serialNumber=4FD11E2CCCD51419530AC04A14258F11A8577EAD Validity Not Before: Nov 3 05:26:12 2024 GMT Not After : Nov 10 05:26:12 2024 GMT Subject: CN=67270974-3a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:f1:55:58:de:8c:33:71:a8:af:da:19:5d: ae:b6:30:06:7d:60:54:8c:d1:a9:b3:ca:38:7e:7b: 3d:91:cd:85:bc:aa:c6:31:25:52:74:91:35:fb:89: 56:00:53:d4:f0:55:33:d8:e5:fa:cb:1c:8a:27:36: a3:33:55:a5:7d:b9:66:59:dd:ed:cd:ac:18:ac:fb: 25:4d:85:ac:ed:d9:04:89:35:e6:a4:a9:33:2f:23: 76:21:11:dc:39:f3:42:2f:bc:80:ee:68:c6:b4:08: 18:08:ce:9e:68:a9:f1:29:b5:12:ed:1e:a9:bf:3e: 9c:b7:de:e7:66:d1:87:58:46:a8:25:13:00:19:4a: 17:3a:cb:ca:c2:1c:9e:25:31:93:3c:da:77:65:f2: d9:87:c6:95:fd:af:08:61:00:2c:bf:47:62:f1:8c: 49:b0:3f:5c:23:e1:d9:cd:35:1d:74:9e:7d:08:e1: 3e:6a:16:55:f4:53:1a:a5:13:e1:84:2c:74:8c:a1: a5:c6:be:4b:53:a7:50:26:f5:2c:87:a4:3b:76:3e: ac:6a:34:a8:8f:73:1c:10:4c:66:94:18:58:5a:ed: cb:4e:3d:0c:e1:63:39:ff:e1:61:b7:a1:a6:81:ae: 32:53:a7:db:de:ca:42:84:f2:24:ac:87:c2:47:21: 74:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C1:03:A5:7C:08:26:C8:34:61:58:A2:17:EF:BE:C2:89:7C:67:F3 X509v3 Authority Key Identifier: keyid:4F:D1:1E:2C:CC:D5:14:19:53:0A:C0:4A:14:25:8F:11:A8:57:7E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9EeLMzVFBlTCsBKFCWPEahXfq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/09850B8245B711EFA59E1332C4F9AE02/T9EeLMzVFBlTCsBKFCWPEahXfq0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:81:48:55:cc:0a:0c:eb:0a:b7:f1:88:82:2d:8e:f2:5f:0f: f2:6a:dd:5e:e4:41:3e:cb:a0:dd:e5:46:aa:93:0c:40:cf:1d: 82:08:6f:65:41:40:e6:22:1b:43:82:76:2b:fe:00:d0:d5:d6: 91:06:61:62:17:0e:30:9d:79:b3:d6:37:2e:0b:d3:85:fa:b0: 87:70:cd:8c:c7:d0:8a:c4:96:96:ee:85:a8:dd:f2:81:4e:29: 18:18:4c:18:f3:9b:52:b3:0b:d7:72:23:02:d6:54:f2:bb:fc: b8:3f:96:f9:3c:c9:3c:cd:21:6d:36:8e:80:86:8a:e7:29:ab: ad:51:aa:f8:51:6b:bc:ac:84:f3:7b:86:f4:c4:fa:17:23:11: 75:a8:04:89:c4:2d:cf:10:cb:35:5f:b1:df:e2:9f:f5:ea:15: 85:e3:5c:cd:cd:ca:92:21:53:06:22:b4:6b:f1:3b:f5:24:da: ac:ae:87:bf:dd:50:e6:93:7d:a4:e6:5d:52:87:df:80:c5:3d: 14:6b:cc:f9:05:7a:3b:27:cf:02:17:9b:3c:70:d1:6e:9d:31: 6d:35:0d:34:41:00:22:4c:2d:12:9d:bd:1e:06:a8:e9:fb:eb: 5f:c2:f5:aa:4a:35:87:91:f3:a8:09:31:a9:da:cb:20:66:fc: 31:bc:90:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MkI2NTExMC8GA1UEBRMoNEZEMTFFMkNDQ0Q1MTQxOTUzMEFDMDRBMTQyNThGMTFB ODU3N0VBRDAeFw0yNDExMDMwNTI2MTJaFw0yNDExMTAwNTI2MTJaMBgxFjAUBgNV BAMTDTY3MjcwOTc0LTNhODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2W/FVWN6MM3Gor9oZXa62MAZ9YFSM0amzyjh+ez2RzYW8qsYxJVJ0kTX7iVYA U9TwVTPY5frLHIonNqMzVaV9uWZZ3e3NrBis+yVNhazt2QSJNeakqTMvI3YhEdw5 80IvvIDuaMa0CBgIzp5oqfEptRLtHqm/Ppy33udm0YdYRqglEwAZShc6y8rCHJ4l MZM82ndl8tmHxpX9rwhhACy/R2LxjEmwP1wj4dnNNR10nn0I4T5qFlX0UxqlE+GE LHSMoaXGvktTp1Am9SyHpDt2PqxqNKiPcxwQTGaUGFha7ctOPQzhYzn/4WG3oaaB rjJTp9veykKE8iSsh8JHIXSTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjcEDpXwI Jsg0YViiF+++wol8Z/MwHwYDVR0jBBgwFoAUT9EeLMzVFBlTCsBKFCWPEahXfq0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyQjY1LzA5ODUwQjgyNDVC NzExRUZBNTlFMTMzMkM0RjlBRTAyL1Q5RWVMTXpWRkJsVENzQktGQ1dQRWFoWGZx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVDlFZUxNelZGQmxUQ3NCS0ZDV1BFYWhYZnEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy QjY1LzA5ODUwQjgyNDVCNzExRUZBNTlFMTMzMkM0RjlBRTAyL1Q5RWVMTXpWRkJs VENzQktGQ1dQRWFoWGZxMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADGBSFXMCgzrCrfxiIItjvJfD/Jq3V7kQT7LoN3lRqqTDEDPHYIIb2VB QOYiG0OCdiv+ANDV1pEGYWIXDjCdebPWNy4L04X6sIdwzYzH0IrElpbuhajd8oFO KRgYTBjzm1KzC9dyIwLWVPK7/Lg/lvk8yTzNIW02joCGiucpq61RqvhRa7yshPN7 hvTE+hcjEXWoBInELc8QyzVfsd/in/XqFYXjXM3NypIhUwYitGvxO/Uk2qyuh7/d UOaTfaTmXVKH34DFPRRrzPkFejsnzwIXmzxw0W6dMW01DTRBACJMLRKdvR4GqOn7 61/C9apKNYeR86gJManayyBm/DG8kIk= -----END CERTIFICATE-----Generated at Sun Nov 3 06:59:43 2024 by rpki-client on console-ams.rpki-client.org