$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json) Hash identifier: kmo40Ez3cY+YnFIm874G3DqmDCefgz+pyZS8ipElS0w= Subject key identifier: 55:A4:57:CE:1D:71:C0:60:78:D1:9C:55:43:70:D7:F5:C7:F9:2F:7C Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Certificate serial: 0275 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft Manifest number: 026F Signing time: Sat 23 Nov 2024 01:14:47 +0000 Manifest this update: Sat 23 Nov 2024 01:14:46 +0000 Manifest next update: Sat 30 Nov 2024 01:14:46 +0000 Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: GWrjG2Su98If0aSBkANnPoxZJxfnPUXEZYQg+WeN/LU=) 2: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: ubjd6kbUD8bksNcH7B3eSW+lUAafi7y46OOL0li4jwI=) 3: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: WQFtk3qXnJIT7imtWpujgi7DyXBepTQ3l980J2HR9zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1 Validity Not Before: Nov 23 01:14:46 2024 GMT Not After : Nov 30 01:14:46 2024 GMT Subject: CN=67412c86-375d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:12:8c:9f:2e:a9:4d:48:b6:7b:e7:16:d1: 20:49:0e:a2:39:c5:99:7f:0a:d4:f2:fb:49:d5:ef: 96:b1:93:4a:81:aa:77:28:76:44:79:bb:95:5a:2f: 5d:a7:6d:0e:6e:e3:d7:d4:03:6e:7a:67:66:6f:e5: f5:5c:3b:26:3c:2f:7d:6f:0a:9a:41:25:56:de:0c: 1a:69:4b:3a:c7:f3:81:66:e1:d3:01:30:97:28:e3: fe:01:28:69:b0:db:e6:6d:41:bd:17:58:18:94:da: 3b:45:fe:06:71:f8:1c:92:7a:a9:e8:d4:4a:7d:ea: e3:a3:e0:90:2f:50:e9:ec:73:f9:cc:dd:69:b9:9f: e4:5c:0f:41:d6:dc:77:77:79:14:d4:75:20:80:f3: 84:43:bc:fa:0d:bc:cf:22:72:f6:3c:ef:28:a9:52: 87:d0:88:4a:b6:ae:d9:92:2f:cf:47:27:6b:68:38: db:f8:59:92:28:9b:6f:40:06:90:d0:bd:f0:19:3a: 75:9f:fe:7a:66:bf:96:42:dd:72:f3:40:15:b1:05: 65:28:10:f7:13:f8:f8:3c:8a:38:ea:c8:47:4d:5f: 4b:55:72:e3:b4:18:07:91:a0:39:9d:f1:6e:59:b1: d4:8e:44:1d:85:1f:c0:87:6b:19:9e:b7:59:8c:e2: c0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A4:57:CE:1D:71:C0:60:78:D1:9C:55:43:70:D7:F5:C7:F9:2F:7C X509v3 Authority Key Identifier: keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:02:cc:60:fc:c9:29:01:97:e1:8d:45:98:9e:f0:2b:08:86: 41:7d:10:57:e4:65:37:51:03:9d:a0:73:c0:51:0b:60:30:56: 7d:5c:ef:fc:a3:bf:a4:7c:78:26:b9:ad:7f:e1:31:5c:0d:b7: 74:5a:dd:f6:e2:1e:fd:e7:91:54:86:f0:91:10:52:84:b3:64: 70:0e:5a:70:ee:54:dc:21:d3:ea:d4:63:d2:30:7c:86:da:ab: fc:16:f8:f3:82:90:55:bd:63:f0:31:11:58:c7:3a:03:ad:c8: bb:fa:0f:d2:cf:dc:90:87:07:c0:77:4a:21:59:b9:6e:91:99: 43:7f:e6:0b:38:bc:30:78:1a:18:ad:d0:b5:a6:e9:47:d6:ba: ba:82:05:56:24:4c:66:0d:a3:57:40:19:a4:a9:71:bd:1d:8c: 12:c9:cb:f8:af:04:ff:65:c5:3a:6e:90:a1:5b:ba:f9:87:77: 9d:71:7f:af:d8:4f:7b:5d:87:d8:65:77:c2:09:a2:4d:65:c9: 9f:74:43:1a:70:8b:00:a0:56:29:d1:a4:c9:39:07:f7:99:33: c8:4a:ca:28:60:c7:10:b1:77:0d:24:07:08:a1:7f:0b:33:88: 90:d0:a7:41:07:6f:9a:29:03:4a:63:c5:e5:00:2f:99:aa:95: 85:55:a5:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx QzgxMzJERjEwHhcNMjQxMTIzMDExNDQ2WhcNMjQxMTMwMDExNDQ2WjAYMRYwFAYD VQQDEw02NzQxMmM4Ni0zNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOISjJ8uqU1ItnvnFtEgSQ6iOcWZfwrU8vtJ1e+WsZNKgap3KHZEebuVWi9d p20ObuPX1ANuemdmb+X1XDsmPC99bwqaQSVW3gwaaUs6x/OBZuHTATCXKOP+AShp sNvmbUG9F1gYlNo7Rf4Gcfgcknqp6NRKferjo+CQL1Dp7HP5zN1puZ/kXA9B1tx3 d3kU1HUggPOEQ7z6DbzPInL2PO8oqVKH0IhKtq7Zki/PRydraDjb+FmSKJtvQAaQ 0L3wGTp1n/56Zr+WQt1y80AVsQVlKBD3E/j4PIo46shHTV9LVXLjtBgHkaA5nfFu WbHUjkQdhR/Ah2sZnrdZjOLAVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWkV84d ccBgeNGcVUNw1/XH+S98MB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCAsxg/MkpAZfhjUWYnvArCIZBfRBX5GU3UQOdoHPAUQtgMFZ9XO/8 o7+kfHgmua1/4TFcDbd0Wt324h7955FUhvCREFKEs2RwDlpw7lTcIdPq1GPSMHyG 2qv8FvjzgpBVvWPwMRFYxzoDrci7+g/Sz9yQhwfAd0ohWblukZlDf+YLOLwweBoY rdC1pulH1rq6ggVWJExmDaNXQBmkqXG9HYwSycv4rwT/ZcU6bpChW7r5h3edcX+v 2E97XYfYZXfCCaJNZcmfdEMacIsAoFYp0aTJOQf3mTPISsooYMcQsXcNJAcIoX8L M4iQ0KdBB2+aKQNKY8XlAC+ZqpWFVaVb -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:41 2024 by rpki-client on console-fra.rpki-client.org