$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft File: b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft (raw, json) Hash identifier: Ws4s4Y+05ONyeoqKPlaE6hR9xFTq45b/BqrUvY3nKpU= Subject key identifier: C9:26:58:57:E4:D9:B7:9A:DD:A0:40:EE:92:0B:24:7B:4F:FC:22:66 Authority key identifier: 6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64 Certificate issuer: /CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft Manifest number: 2F Signing time: Sat 23 Nov 2024 05:37:36 +0000 Manifest this update: Sat 23 Nov 2024 05:37:35 +0000 Manifest next update: Sat 30 Nov 2024 05:37:35 +0000 Files and hashes: 1: b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl (hash: em93bazEoeqiDF32M3SXXF6dpukCR9DFEKw529WWFJY=) 2: 3866993C6A6711EF929E6773C4F9AE02.roa (hash: hKAcM7PRtQuRPjx0tWfk/T7bUGTXZ0S7TBNS8XkVkg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CCA/serialNumber=6FD5B7431E7150ED650F7F27A3DCF8C5CEAC7764 Validity Not Before: Nov 23 05:37:35 2024 GMT Not After : Nov 30 05:37:35 2024 GMT Subject: CN=67416a20-64df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:65:94:11:4f:03:75:fd:8f:89:4e:62:a9: 33:06:4e:75:69:4b:82:ea:03:86:dd:c8:5f:f0:99: 2f:0a:ef:eb:3b:3c:35:e5:9a:9e:8a:53:f2:3d:4a: 8e:1e:49:b4:71:d9:e8:02:70:a5:2c:79:25:a9:41: 80:d9:d8:61:6b:a4:4b:6f:a3:22:ab:7e:3d:7a:d7: c9:a8:74:49:9b:cb:35:c1:dc:66:19:21:7c:d2:64: 9f:3d:a9:a3:8b:65:ed:a5:f1:87:c0:08:0a:76:25: e2:ce:ca:1e:ac:c8:7e:2b:e3:68:a1:3a:95:c0:08: ba:44:94:9b:80:86:77:19:45:be:84:b9:0f:1f:bd: 97:a9:4a:bc:84:a3:48:2f:49:d8:ce:45:15:90:ed: 6d:93:0e:c5:25:af:cd:63:7a:ae:39:f1:1a:de:cc: be:6b:0f:de:ce:16:f0:23:b6:9e:a7:cb:1a:30:4b: 3f:7e:84:f3:c6:ba:9b:82:c3:f5:6f:f7:07:9d:a0: b6:d3:d4:3d:7e:37:81:cb:bf:dd:5c:30:a7:d5:93: d2:ae:16:1b:f5:9d:74:63:d4:53:74:8d:ee:37:87: 73:3a:9b:32:bd:5c:35:22:ab:85:53:9c:e3:11:c5: 5e:d9:e2:ed:dd:ed:09:74:1e:40:82:d5:28:96:25: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:26:58:57:E4:D9:B7:9A:DD:A0:40:EE:92:0B:24:7B:4F:FC:22:66 X509v3 Authority Key Identifier: keyid:6F:D5:B7:43:1E:71:50:ED:65:0F:7F:27:A3:DC:F8:C5:CE:AC:77:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9W3Qx5xUO1lD38no9z4xc6sd2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CCA/1CA9B824654D11EFB44B7B58C4F9AE02/b9W3Qx5xUO1lD38no9z4xc6sd2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a1:4d:9c:f4:71:ad:21:15:f7:35:f4:93:e3:d3:c5:d1:8a: 11:76:53:01:0e:24:13:9c:08:9e:8e:db:5f:6d:d0:94:1e:15: 5f:d8:04:2e:2b:a7:b3:6b:b2:ae:62:38:d4:41:c9:ca:30:6b: 82:db:9d:20:74:33:0e:16:bf:90:67:cf:bc:4e:4d:b2:50:f0: 46:3d:67:c8:6c:f9:aa:d6:34:04:4f:8c:67:57:c6:a7:36:34: a4:85:ec:29:67:cd:a5:98:28:9c:d1:40:a8:31:9d:62:a4:44: d3:de:2b:60:ea:02:ee:be:ef:ae:42:bc:5c:5b:f1:9e:30:fc: 9c:e5:cd:1e:e9:78:80:8c:26:22:f7:8d:a9:e0:31:17:b6:f8: de:2a:93:91:1a:eb:a6:6f:c6:d9:23:64:a9:b9:b9:c1:a6:e3: 5c:a6:27:57:8a:22:02:ba:43:61:1f:76:14:13:58:06:a5:85: b4:62:0a:1f:d7:7c:04:a2:21:38:71:39:44:a3:dc:bc:99:1d: bc:04:b4:6f:96:9b:da:a8:16:a6:90:ec:0e:cb:7a:02:87:0c: b5:3d:41:47:a0:fe:8d:39:5e:2c:c7:5f:d4:79:ee:fa:d7:7d: 3c:bf:b1:c3:ae:9a:1d:07:f0:a9:06:a2:cf:d6:22:31:75:b3: 4d:24:e1:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0NDQTExMC8GA1UEBRMoNkZENUI3NDMxRTcxNTBFRDY1MEY3RjI3QTNEQ0Y4QzVD RUFDNzc2NDAeFw0yNDExMjMwNTM3MzVaFw0yNDExMzAwNTM3MzVaMBgxFjAUBgNV BAMTDTY3NDE2YTIwLTY0ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0+mWUEU8Ddf2PiU5iqTMGTnVpS4LqA4bdyF/wmS8K7+s7PDXlmp6KU/I9So4e SbRx2egCcKUseSWpQYDZ2GFrpEtvoyKrfj1618modEmbyzXB3GYZIXzSZJ89qaOL Ze2l8YfACAp2JeLOyh6syH4r42ihOpXACLpElJuAhncZRb6EuQ8fvZepSryEo0gv SdjORRWQ7W2TDsUlr81jeq458RrezL5rD97OFvAjtp6nyxowSz9+hPPGupuCw/Vv 9wedoLbT1D1+N4HLv91cMKfVk9KuFhv1nXRj1FN0je43h3M6mzK9XDUiq4VTnOMR xV7Z4u3d7Ql0HkCC1SiWJYDPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUySZYV+TZ t5rdoEDukgske0/8ImYwHwYDVR0jBBgwFoAUb9W3Qx5xUO1lD38no9z4xc6sd2Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczQ0NBLzFDQTlCODI0NjU0 RDExRUZCNDRCN0I1OEM0RjlBRTAyL2I5VzNReDV4VU8xbEQzOG5vOXo0eGM2c2Qy US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjlXM1F4NXhVTzFsRDM4bm85ejR4YzZzZDJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz Q0NBLzFDQTlCODI0NjU0RDExRUZCNDRCN0I1OEM0RjlBRTAyL2I5VzNReDV4VU8x bEQzOG5vOXo0eGM2c2QyUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB6hTZz0ca0hFfc19JPj08XRihF2UwEOJBOcCJ6O219t0JQeFV/YBC4r p7Nrsq5iONRBycowa4LbnSB0Mw4Wv5Bnz7xOTbJQ8EY9Z8hs+arWNARPjGdXxqc2 NKSF7ClnzaWYKJzRQKgxnWKkRNPeK2DqAu6+765CvFxb8Z4w/JzlzR7peICMJiL3 jangMRe2+N4qk5Ea66ZvxtkjZKm5ucGm41ymJ1eKIgK6Q2EfdhQTWAalhbRiCh/X fASiIThxOUSj3LyZHbwEtG+Wm9qoFqaQ7A7LegKHDLU9QUeg/o05XizHX9R57vrX fTy/scOumh0H8KkGos/WIjF1s00k4XM= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org