$ rpki-client -vvf rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft File: r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft (raw, json) Hash identifier: /gBYlWfI0bQE7uMfn8hYafW/MrsSE+VQyIWBGeSOF/k= Subject key identifier: 0E:DA:7E:9F:8D:87:A4:29:56:48:A4:65:B5:51:0D:26:D0:42:5B:58 Authority key identifier: AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 Certificate issuer: /CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Certificate serial: 06B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft Manifest number: 06A7 Signing time: Fri 22 Nov 2024 21:46:38 +0000 Manifest this update: Fri 22 Nov 2024 21:46:38 +0000 Manifest next update: Fri 29 Nov 2024 21:46:38 +0000 Files and hashes: 1: r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl (hash: dtWOrdUTFM6/1U49xmEE8F87hrvIq6FKFMFkokFtm0k=) 2: B3878620B15E11EE9521E85BC4F9AE02.roa (hash: le+pL78T/5WOyWn02JNH/JXNPs9vefxlfUt8ab1FKYI=) 3: DF0A2BF4B15E11EE8E75695CC4F9AE02.roa (hash: +hvAkUjJQDkxg4YO4MDeyWdMQFculz4teJUZHUzCNDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194692/serialNumber=AFE5B3CD2DC567AB8A58EB3980D5E5E784290A40 Validity Not Before: Nov 22 21:46:38 2024 GMT Not After : Nov 29 21:46:38 2024 GMT Subject: CN=6740fbbe-644a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:39:d3:7d:d8:cd:9f:b8:46:1c:66:1b:fe: 76:6a:4e:b7:ff:44:c0:5d:8f:0c:8e:7f:03:af:84: f4:d1:3c:2e:c8:2b:74:04:a9:49:8e:34:19:ae:d1: e5:40:e0:16:1e:ca:57:55:f7:15:83:48:36:d9:36: 75:50:57:bb:47:63:12:a3:e3:e7:8f:14:f3:37:19: 81:4f:c9:64:02:a2:82:64:c4:1c:5d:cc:8b:a0:15: 2c:6e:5a:b0:63:12:5c:ca:5c:12:14:72:0d:40:31: 9b:76:44:07:77:96:36:3d:72:e7:76:fc:bf:62:02: 5e:99:f6:49:f1:84:73:d8:4b:32:c3:76:3a:63:13: 60:5a:b4:a4:5c:d3:71:e9:1c:c4:5a:ad:78:79:1d: 19:43:8d:d7:2f:78:30:e3:5c:09:c2:a5:ea:78:3a: c7:64:9d:2d:45:6e:fa:7a:16:3a:da:6d:83:cf:e9: 85:be:0c:a7:f4:20:fb:0c:b1:fc:50:c8:61:46:c1: 31:0a:aa:4f:4d:a3:3c:0d:d9:4e:8f:8b:e4:ef:5a: 4f:6c:1c:9f:c3:16:3f:eb:1f:8d:a1:d8:c9:c8:5e: 77:5b:cb:5b:5e:73:89:ef:fd:97:43:9c:93:fe:e0: 77:49:44:35:42:f4:0f:ec:91:11:13:94:2d:40:20: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DA:7E:9F:8D:87:A4:29:56:48:A4:65:B5:51:0D:26:D0:42:5B:58 X509v3 Authority Key Identifier: keyid:AF:E5:B3:CD:2D:C5:67:AB:8A:58:EB:39:80:D5:E5:E7:84:29:0A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-WzzS3FZ6uKWOs5gNXl54QpCkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194692/885A32FE429411EB90491A34C4F9AE02/r-WzzS3FZ6uKWOs5gNXl54QpCkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:83:e6:2b:fa:74:f9:ea:4d:11:5a:90:45:85:2d:ef:f9:51: 36:2a:2c:84:4f:ac:18:f7:03:f0:5e:8f:aa:35:ec:2c:95:c2: b6:fc:92:1d:53:a7:97:c9:43:b6:ba:c1:58:18:49:ce:44:23: b7:69:d1:f6:9d:6d:33:ce:f3:6f:4e:8c:f5:81:f4:80:0c:1a: 13:ff:fb:b3:7a:77:e4:54:0d:c3:15:a5:d1:59:65:fb:a6:43: 9d:0d:d2:12:72:9f:55:d7:a5:f3:5b:6f:90:ef:61:a6:bc:2b: 75:f2:bb:e8:bb:e0:83:68:be:3a:46:3d:0e:b9:fc:21:a1:a5: b6:31:b1:b8:93:95:f6:76:c5:bc:9a:9a:2a:c0:a5:6f:a2:c6: a7:96:34:e9:9d:aa:cb:e9:92:90:b5:99:27:e0:1c:84:f6:7f: c8:20:c3:88:98:db:af:80:70:0d:c9:e7:1f:f1:9e:c2:48:98: 78:75:15:fe:5e:ba:95:3c:10:a6:ea:30:ee:4b:a7:b7:3b:a1: cf:9b:12:a0:14:36:0d:40:e9:8a:c4:5c:63:a2:10:ef:ab:85: 98:41:4c:01:e2:0a:df:24:37:d1:3b:e9:e2:4a:3b:59:c6:e5: 95:50:51:2b:16:91:e6:15:de:6a:f3:20:47:7e:f0:ac:7b:12: 4e:26:80:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ2OTIxMTAvBgNVBAUTKEFGRTVCM0NEMkRDNTY3QUI4QTU4RUIzOTgwRDVFNUU3 ODQyOTBBNDAwHhcNMjQxMTIyMjE0NjM4WhcNMjQxMTI5MjE0NjM4WjAYMRYwFAYD VQQDEw02NzQwZmJiZS02NDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwao5033YzZ+4RhxmG/52ak63/0TAXY8Mjn8Dr4T00TwuyCt0BKlJjjQZrtHl QOAWHspXVfcVg0g22TZ1UFe7R2MSo+PnjxTzNxmBT8lkAqKCZMQcXcyLoBUsblqw YxJcylwSFHINQDGbdkQHd5Y2PXLndvy/YgJemfZJ8YRz2Esyw3Y6YxNgWrSkXNNx 6RzEWq14eR0ZQ43XL3gw41wJwqXqeDrHZJ0tRW76ehY62m2Dz+mFvgyn9CD7DLH8 UMhhRsExCqpPTaM8DdlOj4vk71pPbByfwxY/6x+NodjJyF53W8tbXnOJ7/2XQ5yT /uB3SUQ1QvQP7JERE5QtQCDT3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7afp+N h6QpVkikZbVRDSbQQltYMB8GA1UdIwQYMBaAFK/ls80txWeriljrOYDV5eeEKQpA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDY5Mi84ODVBMzJGRTQy OTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2dUtXT3M1Z05YbDU0UXBD a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItV3p6UzNGWjZ1S1dPczVnTlhsNTRRcENrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDY5Mi84ODVBMzJGRTQyOTQxMUVCOTA0OTFBMzRDNEY5QUUwMi9yLVd6elMzRlo2 dUtXT3M1Z05YbDU0UXBDa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGg+Yr+nT56k0RWpBFhS3v+VE2KiyET6wY9wPwXo+qNewslcK2/JId U6eXyUO2usFYGEnORCO3adH2nW0zzvNvToz1gfSADBoT//uzenfkVA3DFaXRWWX7 pkOdDdIScp9V16XzW2+Q72GmvCt18rvou+CDaL46Rj0OufwhoaW2MbG4k5X2dsW8 mpoqwKVvosanljTpnarL6ZKQtZkn4ByE9n/IIMOImNuvgHANyecf8Z7CSJh4dRX+ XrqVPBCm6jDuS6e3O6HPmxKgFDYNQOmKxFxjohDvq4WYQUwB4grfJDfRO+niSjtZ xuWVUFErFpHmFd5q8yBHfvCsexJOJoBn -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org