$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft File: T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json) Hash identifier: tKj+dIzJwjb2mu/09+79afRyIBDY1857LBbAq7HHOew= Subject key identifier: FA:87:7F:FA:31:E5:ED:9B:DC:75:87:07:F2:76:E8:77:E6:7C:CB:24 Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C Certificate issuer: /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft Manifest number: 13 Signing time: Thu 21 Nov 2024 06:06:48 +0000 Manifest this update: Thu 21 Nov 2024 06:06:48 +0000 Manifest next update: Thu 28 Nov 2024 06:06:48 +0000 Files and hashes: 1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: V1MtJGmHwYLvVcxaBlsHzHx44QvmFLwZ6WY0tVx5g0g=) 2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: 5QE8zDybdgUA94Tpp6+guNsFhK7KXTxJ0yxg/2zsqZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Validity Not Before: Nov 21 06:06:48 2024 GMT Not After : Nov 28 06:06:48 2024 GMT Subject: CN=673ecdf8-5f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:21:40:70:2f:c2:9e:4d:14:9b:5d:5d:be: fc:65:ad:4f:03:1e:73:4d:4f:16:34:2f:65:9d:4b: b9:3d:f5:0c:75:15:64:85:f3:1e:f2:63:49:f1:b0: 11:68:65:96:2e:82:fb:77:73:79:9f:1d:ae:1f:be: 28:2c:7c:e5:1f:86:eb:c4:62:12:73:cd:bc:56:55: a8:14:24:56:26:14:6c:0a:31:a0:55:e8:4c:2c:2d: e4:cb:52:71:98:5b:1a:84:d9:25:91:9e:30:7a:60: bc:65:72:24:77:8c:e4:3e:45:34:3b:74:7e:3f:c5: 4b:16:7c:ca:c3:1a:90:b1:b0:1c:67:6b:cc:53:1b: 1d:7c:c3:3b:50:58:36:db:65:4b:31:d8:44:35:7a: 34:65:f9:d7:37:c9:2a:be:06:8f:02:97:ef:17:0d: 43:1f:fc:d7:82:09:ae:ba:57:72:da:2f:b2:22:7a: e2:c9:3e:a8:63:6c:62:cd:bc:4e:13:fd:71:10:42: 1f:3b:fe:35:79:81:ce:de:7a:2c:66:e4:44:4f:ac: 15:18:90:3c:ee:fe:5c:12:2b:d1:41:4c:a2:5a:a2: 19:5c:70:bb:85:2a:be:67:de:e6:45:e4:92:63:c2: 41:f3:4f:17:bf:21:c8:43:4c:3a:f0:4d:36:48:b8: ec:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:87:7F:FA:31:E5:ED:9B:DC:75:87:07:F2:76:E8:77:E6:7C:CB:24 X509v3 Authority Key Identifier: keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:71:97:dc:fe:55:52:e3:b2:8d:cb:36:69:6e:6c:99:84:69: a7:32:49:5f:af:34:d7:5c:eb:bb:99:62:3e:be:63:18:79:5a: 63:fb:c3:39:97:32:32:52:8b:c0:b5:9d:7e:d5:4a:cd:ea:91: 3c:3e:93:7d:ac:ef:13:73:45:91:5d:79:36:9b:24:a7:07:1f: 57:5e:77:dd:9b:db:6d:ee:fc:38:45:66:60:e6:ec:76:6b:a1: 99:04:a4:1c:88:54:d0:2f:ac:e5:a4:f0:3a:30:09:a5:4f:6f: f1:2f:8e:03:2d:4e:18:a7:85:df:89:e9:04:72:88:f1:66:39: 48:d1:1e:99:37:d0:32:01:61:c4:62:95:9c:53:77:20:33:8f: 8c:2d:c6:f3:fa:93:e8:56:7d:ed:e0:94:70:64:11:b2:f7:91: 56:3b:2c:4b:73:7f:36:26:89:b3:bc:f0:0f:17:76:a5:66:f2: 18:1a:df:f3:89:64:cf:5d:b7:0c:40:c8:14:d2:ad:76:f8:4a: be:21:7e:78:25:fc:f4:00:11:3b:ce:71:25:45:8d:1c:ca:16: 02:be:9e:2b:1a:d9:3b:26:de:24:2b:78:62:f1:ab:27:53:c0: c2:6c:c0:12:ff:24:3a:27:2f:37:bf:db:7b:f6:26:97:86:25: dd:07:68:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDgxODExMC8GA1UEBRMoNEY0NUZBNjlEOUU1RjU1MDg0RERDOTIyODk1Mjc2QTY0 MDIzOUMxQzAeFw0yNDExMjEwNjA2NDhaFw0yNDExMjgwNjA2NDhaMBgxFjAUBgNV BAMTDTY3M2VjZGY4LTVmOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjLCFAcC/Cnk0Um11dvvxlrU8DHnNNTxY0L2WdS7k99Qx1FWSF8x7yY0nxsBFo ZZYugvt3c3mfHa4fvigsfOUfhuvEYhJzzbxWVagUJFYmFGwKMaBV6EwsLeTLUnGY WxqE2SWRnjB6YLxlciR3jOQ+RTQ7dH4/xUsWfMrDGpCxsBxna8xTGx18wztQWDbb ZUsx2EQ1ejRl+dc3ySq+Bo8Cl+8XDUMf/NeCCa66V3LaL7IieuLJPqhjbGLNvE4T /XEQQh87/jV5gc7eeixm5ERPrBUYkDzu/lwSK9FBTKJaohlccLuFKr5n3uZF5JJj wkHzTxe/IchDTDrwTTZIuOxjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+od/+jHl 7ZvcdYcH8nbod+Z8yyQwHwYDVR0jBBgwFoAUT0X6adnl9VCE3ckiiVJ2pkAjnBww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODE4Lzc1M0MzMDE4OTA5 RDExRUY5NzE3RjY1MEM0RjlBRTAyL1QwWDZhZG5sOVZDRTNja2lpVkoycGtBam5C dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVDBYNmFkbmw5VkNFM2NraWlWSjJwa0FqbkJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw ODE4Lzc1M0MzMDE4OTA5RDExRUY5NzE3RjY1MEM0RjlBRTAyL1QwWDZhZG5sOVZD RTNja2lpVkoycGtBam5Cdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE5xl9z+VVLjso3LNmlubJmEaacySV+vNNdc67uZYj6+Yxh5WmP7wzmX MjJSi8C1nX7VSs3qkTw+k32s7xNzRZFdeTabJKcHH1ded92b223u/DhFZmDm7HZr oZkEpByIVNAvrOWk8DowCaVPb/EvjgMtThinhd+J6QRyiPFmOUjRHpk30DIBYcRi lZxTdyAzj4wtxvP6k+hWfe3glHBkEbL3kVY7LEtzfzYmibO88A8XdqVm8hga3/OJ ZM9dtwxAyBTSrXb4Sr4hfngl/PQAETvOcSVFjRzKFgK+nisa2Tsm3iQreGLxqydT wMJswBL/JDonLze/23v2JpeGJd0HaCM= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:46 2024 by rpki-client on console-fra.rpki-client.org