$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json) Hash identifier: Fo67yTcybG9r9cpjrY80IDj0GgntZQVYARi9s8Ko5R0= Subject key identifier: 8C:EF:54:0B:E7:45:2A:61:EC:54:6D:6D:D9:14:6E:75:D3:F3:36:D7 Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft Manifest number: 0D Signing time: Wed 23 Oct 2024 06:44:57 +0000 Manifest this update: Wed 23 Oct 2024 06:44:56 +0000 Manifest next update: Wed 30 Oct 2024 06:44:56 +0000 Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: st9a1DC2dUI2nl2Co3EFZBdiHZ9AaJPxbqoP09ayTiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B Validity Not Before: Oct 23 06:44:56 2024 GMT Not After : Oct 30 06:44:56 2024 GMT Subject: CN=67189b69-0272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:b0:2c:31:fd:e5:37:cd:aa:62:de:53:02: 60:d3:8a:21:8b:cf:46:af:ba:85:63:09:17:55:16: ed:5d:02:f0:24:5b:64:93:d1:20:e2:49:4a:56:b5: 1d:27:51:a4:1c:74:40:ff:e1:06:7d:e7:44:24:42: 11:2a:56:e8:7d:f0:a2:82:55:42:f6:2c:ec:a2:ee: 86:91:f5:49:c7:ec:60:b9:6a:6f:99:91:18:99:53: e7:5f:51:cd:ed:e6:a6:4c:44:86:2f:98:c3:15:7d: 35:2c:e3:d5:48:19:24:f2:c0:bb:56:1e:57:32:21: ca:7d:d0:85:ff:c2:c7:f4:87:13:d7:70:64:27:3a: 1e:ca:c1:5f:f4:47:f4:06:a4:d9:3f:8a:9b:d6:0c: 77:b5:12:23:62:33:a4:a3:1e:03:74:ab:03:00:70: 43:a7:37:86:38:a3:78:af:e7:b3:01:d0:92:ba:79: ed:60:6b:64:b8:d4:ff:48:61:e8:c3:ae:6d:14:3d: 2a:40:53:1d:07:b5:b3:58:27:35:b1:62:80:94:50: 87:40:22:5b:fc:f6:49:a1:b7:02:db:c2:58:05:f6: 95:03:6e:2c:b1:33:c2:fe:18:2e:cc:c5:7e:6e:11: 19:cf:a5:03:cd:a4:b8:3a:f8:00:76:4d:9e:09:2e: 5b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EF:54:0B:E7:45:2A:61:EC:54:6D:6D:D9:14:6E:75:D3:F3:36:D7 X509v3 Authority Key Identifier: keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:b4:1d:bb:7a:b3:f4:a3:a8:84:1b:57:41:01:58:1a:e8:81: d6:11:24:92:e4:d4:c1:df:57:47:6a:aa:7f:10:6a:54:40:10: 45:33:70:82:5b:68:25:46:8a:17:6a:51:bf:13:01:00:a0:23: 30:ce:99:6b:aa:ce:5e:90:54:41:c3:bf:c3:0a:10:19:2f:22: b3:01:19:4b:ea:5a:ac:1f:fd:66:35:a7:32:7a:2a:08:1f:a0: 1d:33:fa:c8:e0:b3:b3:9a:2a:23:67:c9:9f:b8:6d:35:84:64: 87:df:e8:5a:f3:44:ee:a3:86:ed:f0:51:2e:74:14:6d:77:22: 60:74:f1:ae:b3:6e:76:90:e2:c5:63:6d:75:36:b8:f0:29:f0: 39:4d:cb:c2:fc:45:2d:a0:ea:35:8e:d7:ed:44:6c:4e:14:be: fe:62:70:d3:99:cc:41:88:51:4c:31:a6:53:e0:30:76:99:f4: f7:39:27:00:a1:af:92:92:af:b7:e3:ae:a9:10:3a:56:42:e7: 40:52:6b:a5:32:5c:fe:fe:03:1b:b0:dc:cc:45:8f:b9:fd:7a: b9:f7:3a:8f:e3:b0:a2:e3:6b:5b:75:f7:5f:64:e8:32:8b:ae: 8b:73:06:c6:51:a6:a0:ed:a2:e7:22:8f:a9:b4:40:87:dd:9b: 42:bc:e9:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NUQ0RTExMC8GA1UEBRMoRjdDNEY1QzcyOEQwQzA0NzZDNTMyRUFDMThDMjkyN0Mx RDVCODMzQjAeFw0yNDEwMjMwNjQ0NTZaFw0yNDEwMzAwNjQ0NTZaMBgxFjAUBgNV BAMTDTY3MTg5YjY5LTAyNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/GrAsMf3lN82qYt5TAmDTiiGLz0avuoVjCRdVFu1dAvAkW2ST0SDiSUpWtR0n UaQcdED/4QZ950QkQhEqVuh98KKCVUL2LOyi7oaR9UnH7GC5am+ZkRiZU+dfUc3t 5qZMRIYvmMMVfTUs49VIGSTywLtWHlcyIcp90IX/wsf0hxPXcGQnOh7KwV/0R/QG pNk/ipvWDHe1EiNiM6SjHgN0qwMAcEOnN4Y4o3iv57MB0JK6ee1ga2S41P9IYejD rm0UPSpAUx0HtbNYJzWxYoCUUIdAIlv89kmhtwLbwlgF9pUDbiyxM8L+GC7MxX5u ERnPpQPNpLg6+AB2TZ4JLlvNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjO9UC+dF KmHsVG1t2RRuddPzNtcwHwYDVR0jBBgwFoAU98T1xyjQwEdsUy6sGMKSfB1bgzsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1RDRFLzVCODQ0MjAyN0ZG MjExRUY5MEUxNEY2MEM0RjlBRTAyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOThUMXh5alF3RWRzVXk2c0dNS1NmQjFiZ3pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 RDRFLzVCODQ0MjAyN0ZGMjExRUY5MEUxNEY2MEM0RjlBRTAyLzk4VDF4eWpRd0Vk c1V5NnNHTUtTZkIxYmd6cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFG0Hbt6s/SjqIQbV0EBWBrogdYRJJLk1MHfV0dqqn8QalRAEEUzcIJb aCVGihdqUb8TAQCgIzDOmWuqzl6QVEHDv8MKEBkvIrMBGUvqWqwf/WY1pzJ6Kggf oB0z+sjgs7OaKiNnyZ+4bTWEZIff6FrzRO6jhu3wUS50FG13ImB08a6zbnaQ4sVj bXU2uPAp8DlNy8L8RS2g6jWO1+1EbE4Uvv5icNOZzEGIUUwxplPgMHaZ9Pc5JwCh r5KSr7fjrqkQOlZC50BSa6UyXP7+Axuw3MxFj7n9ern3Oo/jsKLja1t1919k6DKL rotzBsZRpqDtoucij6m0QIfdm0K86ds= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:22 2024 by rpki-client on console-fra.rpki-client.org