$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft File: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json) Hash identifier: qyXmqBkZT479kbv/HfmxqmlQ/Q8klPv4IsunZnozgsg= Subject key identifier: 9B:89:6A:B3:E6:CE:79:E0:6A:07:ED:6C:E6:FD:92:EC:37:75:08:B5 Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft Manifest number: C0 Signing time: Sat 23 Nov 2024 04:00:25 +0000 Manifest this update: Sat 23 Nov 2024 04:00:24 +0000 Manifest next update: Sat 30 Nov 2024 04:00:24 +0000 Files and hashes: 1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: OlcWHtdB2wjx3lBH9zNdmyoaeWur/nbclVq7mKiMpDQ=) 2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: 1La2YjR8695Kv+ENKHdPNPLlVQUHdNzlGYNxYnnCBUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Validity Not Before: Nov 23 04:00:24 2024 GMT Not After : Nov 30 04:00:24 2024 GMT Subject: CN=67415358-0937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:ab:4e:50:0b:21:13:f9:73:c7:90:b7:73: aa:25:84:ce:58:9d:ca:13:e6:c3:19:e1:c7:e2:9f: 4a:b4:79:b1:e7:79:b7:14:45:de:c7:64:62:b1:9b: f9:d9:69:13:6d:2f:3a:bb:8c:e5:0e:2b:2a:ba:39: 2f:bf:ab:22:11:cd:35:f7:dc:9a:af:be:bb:50:28: ac:2a:90:d6:cc:6a:c5:4c:a6:93:fa:c5:37:41:01: 93:d0:43:f4:0a:2d:cc:40:5b:9d:4b:b9:70:f6:7e: 66:89:f5:8c:52:68:71:ed:19:87:86:4c:74:28:f0: 5e:fd:70:9c:a2:c9:85:41:39:ba:34:50:4c:a2:d9: e6:e2:b9:64:f7:e5:fc:be:01:26:b9:d9:57:52:2b: e6:35:91:e4:ef:09:a8:e7:64:f0:98:d4:71:b4:c9: 3e:29:28:cb:d6:b0:ab:2f:b5:8b:01:1d:14:4e:47: 50:2a:81:15:a8:11:5d:79:7a:a0:7e:8e:be:8e:95: 65:a1:69:be:67:7d:39:a1:0b:3e:36:7b:cd:6f:1c: b2:d4:50:51:b0:a1:35:99:3b:57:16:80:ec:14:a3: 36:01:ac:5e:c2:84:85:e3:06:39:89:1e:a4:e1:83: 21:09:73:2f:79:75:a3:5b:16:f9:b1:44:2b:bf:e1: 0a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:89:6A:B3:E6:CE:79:E0:6A:07:ED:6C:E6:FD:92:EC:37:75:08:B5 X509v3 Authority Key Identifier: keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d0:b9:a4:41:dd:d9:22:76:f4:59:a6:89:61:b2:e1:8d:43: 36:31:32:e9:7f:3b:f6:91:08:9e:32:e0:e6:5b:ef:f9:74:f6: cc:c1:f9:70:7d:e3:49:8e:b8:27:88:1e:71:ce:52:84:ca:18: 97:5e:e1:3d:06:1d:76:b9:a0:7e:76:f3:46:ed:35:f0:ea:4a: 79:ee:36:37:3a:bf:44:a1:1d:3e:c1:e3:71:93:f2:40:e6:11: 9c:90:a2:bd:c8:7d:f5:46:68:ac:ea:ea:d7:29:40:01:01:01: 60:15:4a:5e:90:de:58:ba:7e:4c:d3:e8:21:69:5a:75:e1:33: 36:52:60:f8:d4:28:0f:2f:fe:93:40:b6:11:ad:f5:95:81:ca: eb:74:7e:9f:d9:60:ca:c4:bf:af:2f:55:d9:8c:4c:b5:8e:f5: c7:56:d4:4d:14:4a:6d:12:76:da:b2:44:2f:92:1a:30:c6:bd: 45:04:d7:ce:d8:b6:35:77:95:e0:38:b5:2f:e6:79:f6:b7:3f: f4:91:b1:33:b0:70:cf:1f:a7:48:76:ec:04:2c:28:ca:da:ff: fc:d2:a1:33:ea:28:4f:8a:49:78:84:66:43:a3:c0:78:4f:70: 9f:62:12:7e:78:7f:88:54:2b:b4:de:73:c2:61:7f:f9:98:d8: cf:9a:8a:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGMjQxMTAvBgNVBAUTKDk0QzQxRjFBQTYwRUQ2NTBFMEZEN0E3QThEMjM3QTJE NDZCMUIxRjgwHhcNMjQxMTIzMDQwMDI0WhcNMjQxMTMwMDQwMDI0WjAYMRYwFAYD VQQDEw02NzQxNTM1OC0wOTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbirTlALIRP5c8eQt3OqJYTOWJ3KE+bDGeHH4p9KtHmx53m3FEXex2RisZv5 2WkTbS86u4zlDisqujkvv6siEc0199yar767UCisKpDWzGrFTKaT+sU3QQGT0EP0 Ci3MQFudS7lw9n5mifWMUmhx7RmHhkx0KPBe/XCcosmFQTm6NFBMotnm4rlk9+X8 vgEmudlXUivmNZHk7wmo52TwmNRxtMk+KSjL1rCrL7WLAR0UTkdQKoEVqBFdeXqg fo6+jpVloWm+Z305oQs+NnvNbxyy1FBRsKE1mTtXFoDsFKM2AaxewoSF4wY5iR6k 4YMhCXMveXWjWxb5sUQrv+EKMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuJarPm znngagftbOb9kuw3dQi1MB8GA1UdIwQYMBaAFJTEHxqmDtZQ4P16eo0jei1GsbH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEYyNC82RkQ3RUJGMDg5 RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFsRGdfWHA2alNONkxVYXhz ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUWZHcVlPMWxEZ19YcDZqU042TFVheHNmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEYyNC82RkQ3RUJGMDg5RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFs RGdfWHA2alNONkxVYXhzZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj0LmkQd3ZInb0WaaJYbLhjUM2MTLpfzv2kQieMuDmW+/5dPbMwflw feNJjrgniB5xzlKEyhiXXuE9Bh12uaB+dvNG7TXw6kp57jY3Or9EoR0+weNxk/JA 5hGckKK9yH31Rmis6urXKUABAQFgFUpekN5Yun5M0+ghaVp14TM2UmD41CgPL/6T QLYRrfWVgcrrdH6f2WDKxL+vL1XZjEy1jvXHVtRNFEptEnbaskQvkhowxr1FBNfO 2LY1d5XgOLUv5nn2tz/0kbEzsHDPH6dIduwELCjK2v/80qEz6ihPikl4hGZDo8B4 T3CfYhJ+eH+IVCu03nPCYX/5mNjPmor5 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org