$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft File: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json) Hash identifier: nRT6J9NqBzZsLWSvGdF15AMQYL3qFLGPjNQCHvanEpI= Subject key identifier: D2:0B:38:C7:E1:6D:8D:13:48:C0:87:CF:3C:FC:61:1C:A1:91:3A:E2 Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft Manifest number: 04A6 Signing time: Wed 20 Nov 2024 23:29:44 +0000 Manifest this update: Wed 20 Nov 2024 23:29:44 +0000 Manifest next update: Wed 27 Nov 2024 23:29:44 +0000 Files and hashes: 1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: NfdnaaSqlKUp0+p91q579gxryVtwN6Se71KdG1uY40Y=) 2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: K4jESE87qttWdzH55euloSsk0IBNZb6PG/YPIPEToao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Validity Not Before: Nov 20 23:29:44 2024 GMT Not After : Nov 27 23:29:44 2024 GMT Subject: CN=673e70e8-3308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5b:01:67:2c:aa:be:09:61:ba:18:bb:0d:0c: a6:1b:a9:30:b7:7b:f7:9e:45:cc:e9:c4:e4:aa:b4: 7c:86:4d:55:2a:20:2d:f8:06:fe:83:4b:db:64:b0: eb:68:69:a5:25:c8:d4:14:d8:d7:24:80:51:a3:a8: 69:52:9b:43:32:91:39:9a:47:8c:31:67:ac:7a:b8: 46:ef:c3:1b:95:bf:5e:ef:d1:5c:bc:f7:4b:e2:3d: 61:f3:13:a0:26:f6:f3:2d:e7:92:62:99:80:39:e3: bd:59:0f:1b:66:68:fd:02:83:06:3c:4a:62:6b:b9: 44:12:2a:fb:7b:2c:7e:b8:d7:91:70:22:87:5e:42: 75:82:5f:63:18:93:d5:63:a2:ee:2e:6f:4e:1c:ef: a6:08:b9:bc:1e:99:06:dd:7e:2d:2e:08:35:a9:ed: 79:b3:ca:47:1a:09:29:60:af:4a:d0:7a:c2:5e:94: 83:36:72:b9:ad:75:c5:e4:30:ee:06:0d:d3:c4:31: 28:90:29:a0:d0:f9:3b:2b:ef:88:3f:1d:dc:6c:4a: 88:c6:48:68:92:79:4d:27:05:9d:60:0d:d4:c1:5b: 86:f5:c1:ed:22:0e:e9:8c:25:cb:d4:d9:0e:d7:88: 3c:dd:4a:85:c4:b0:fe:1f:e9:4a:3a:a3:73:38:0c: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0B:38:C7:E1:6D:8D:13:48:C0:87:CF:3C:FC:61:1C:A1:91:3A:E2 X509v3 Authority Key Identifier: keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:60:12:80:6f:f6:d9:60:d0:c8:c5:56:34:4b:9a:26:25:b4: 29:3f:78:ad:8d:23:ef:67:8b:8f:4b:a9:d0:1a:60:9e:be:33: 2e:0c:c0:ad:8f:b7:ec:38:60:a9:e2:b1:f8:4b:1a:1f:cf:77: 47:59:dd:ac:23:6c:6c:f8:37:3f:82:46:96:0c:a9:b8:8b:67: 62:2f:46:64:ee:5d:a2:f8:ce:de:68:30:02:8d:34:a8:da:a6: 3c:3a:47:85:b5:b0:2c:88:c1:8c:ba:89:4e:e4:54:b5:17:a7: f3:ba:be:07:6d:88:0d:7d:6d:dc:6e:d8:cb:1e:58:d0:71:15: b6:e5:68:c0:37:f5:1e:51:50:9c:56:f7:8f:47:fe:8b:b0:0a: 17:be:09:ad:9c:c7:05:17:92:f6:6f:40:c8:6c:67:e7:92:7a: 52:31:62:32:5d:e4:b3:56:59:00:e5:b3:fa:9c:21:3d:14:80: 65:42:c1:8f:22:c3:75:28:b1:23:25:f2:ac:1c:79:80:6e:f3: 12:45:1b:d2:f2:cf:9b:68:97:13:4e:9f:52:5e:94:2e:5e:e4: ab:64:a6:d0:59:06:80:0c:ce:0f:ab:8c:c3:75:84:e1:d8:46: 3c:0c:7a:52:ff:99:1f:41:72:1f:05:78:b2:da:90:5f:01:ba: c5:9e:f9:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5 RDBBMTdBNEQwHhcNMjQxMTIwMjMyOTQ0WhcNMjQxMTI3MjMyOTQ0WjAYMRYwFAYD VQQDEw02NzNlNzBlOC0zMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3VsBZyyqvglhuhi7DQymG6kwt3v3nkXM6cTkqrR8hk1VKiAt+Ab+g0vbZLDr aGmlJcjUFNjXJIBRo6hpUptDMpE5mkeMMWeserhG78Mblb9e79FcvPdL4j1h8xOg JvbzLeeSYpmAOeO9WQ8bZmj9AoMGPEpia7lEEir7eyx+uNeRcCKHXkJ1gl9jGJPV Y6LuLm9OHO+mCLm8HpkG3X4tLgg1qe15s8pHGgkpYK9K0HrCXpSDNnK5rXXF5DDu Bg3TxDEokCmg0Pk7K++IPx3cbEqIxkhoknlNJwWdYA3UwVuG9cHtIg7pjCXL1NkO 14g83UqFxLD+H+lKOqNzOAzKfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNILOMfh bY0TSMCHzzz8YRyhkTriMB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJCQS84NTY1MTdDMDBCQ0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpU ZDJIVGlZRmRQSjZkQ2hlazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtYBKAb/bZYNDIxVY0S5omJbQpP3itjSPvZ4uPS6nQGmCevjMuDMCt j7fsOGCp4rH4Sxofz3dHWd2sI2xs+Dc/gkaWDKm4i2diL0Zk7l2i+M7eaDACjTSo 2qY8OkeFtbAsiMGMuolO5FS1F6fzur4HbYgNfW3cbtjLHljQcRW25WjAN/UeUVCc VvePR/6LsAoXvgmtnMcFF5L2b0DIbGfnknpSMWIyXeSzVlkA5bP6nCE9FIBlQsGP IsN1KLEjJfKsHHmAbvMSRRvS8s+baJcTTp9SXpQuXuSrZKbQWQaADM4Pq4zDdYTh 2EY8DHpS/5kfQXIfBXiy2pBfAbrFnvkg -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:22 2024 by rpki-client on console-fra.rpki-client.org