$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft File: hF2I4KIVFF82fZMEvz9xrujrTC0.mft (raw, json) Hash identifier: hGXyn+M2mxodSh/gMZzN5t9gt8cqPrNJfpptfzlYveA= Subject key identifier: C8:D0:EE:49:80:EF:A4:C4:90:01:D1:59:3F:F6:FB:E1:08:03:D1:1C Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft Manifest number: 3D Signing time: Wed 23 Oct 2024 06:10:19 +0000 Manifest this update: Wed 23 Oct 2024 06:10:18 +0000 Manifest next update: Wed 30 Oct 2024 06:10:18 +0000 Files and hashes: 1: hF2I4KIVFF82fZMEvz9xrujrTC0.crl (hash: g07kk5HqlLcsyneg676OV/onWKlQYxXY3Hi18FSiRbk=) 2: CB6840EE3BAC11EF9C334410C4F9AE02.roa (hash: q+bs+pmU+B7fJo6iymx9EUit+9N40A02etOl0mkXvRg=) 3: 2042987C6C4411EF9B263275C4F9AE02.roa (hash: bKtFSMRmBEl0oKGrwWVZYxuAEvHDipNsFv7Plkp3FeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Validity Not Before: Oct 23 06:10:18 2024 GMT Not After : Oct 30 06:10:18 2024 GMT Subject: CN=6718934a-d055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d2:c1:c3:56:ba:73:d1:ab:db:f4:56:61:ab: 78:e2:98:fc:2f:ca:f9:ff:b3:a6:5c:df:34:3b:1b: 23:ac:0d:dd:8d:2d:a8:f8:30:2a:ad:52:4e:54:d4: a1:ea:31:03:e6:5c:0b:ab:20:58:ff:04:b1:86:36: ee:0f:12:19:5b:58:ac:c1:b2:3f:cc:91:a7:6b:8f: 66:07:18:90:01:63:82:ee:4c:96:4d:54:6b:ba:29: d0:d4:f4:8f:2a:c4:59:25:58:6a:42:4c:d8:ae:87: 1b:89:58:80:da:ba:40:29:03:30:8e:df:92:19:04: 9d:8b:ef:68:f2:cc:f6:d7:06:de:09:7e:ec:72:96: 96:34:71:35:dd:7d:02:9c:84:28:14:54:31:63:a3: d7:fe:f0:5c:8e:38:f1:d6:de:ed:74:ef:1d:78:1a: 21:13:21:b2:af:ca:16:41:26:23:76:76:67:c0:4c: c7:7d:f2:03:1d:0e:4a:12:ba:8c:d1:27:79:7f:ca: 01:35:03:be:04:02:d8:7d:49:2e:9c:5e:53:e8:03: 29:62:6c:c1:ed:1c:29:10:e8:4e:5f:ba:ff:c5:e3: a0:e5:4a:d8:91:ee:bf:32:fd:6d:37:59:a0:bc:6a: cb:68:6b:ef:fd:da:f9:22:44:5f:f6:01:5f:ae:85: 51:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D0:EE:49:80:EF:A4:C4:90:01:D1:59:3F:F6:FB:E1:08:03:D1:1C X509v3 Authority Key Identifier: keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e5:67:da:44:d6:33:8c:c4:df:8e:bf:b5:a2:a5:3a:e1:b1: 73:05:5f:9e:32:92:25:51:d8:9f:41:83:dc:63:ed:4e:95:ec: 33:db:c8:5c:43:f6:67:76:86:1e:41:fa:35:ca:05:62:0b:98: 1c:44:e5:91:a9:a1:62:d0:16:d7:fe:13:87:c4:30:3a:56:c4: 4f:d3:0a:1b:13:e5:4f:88:1f:fa:b0:41:37:40:2f:ad:93:44: 2d:83:18:44:ab:51:a8:8c:3d:65:33:32:6f:65:35:8a:c5:fa: af:53:c2:bf:0c:63:de:79:8c:8f:83:ca:bb:a0:4b:04:4f:dc: 64:d3:6d:e9:11:85:98:ef:4a:a6:b0:a3:d5:8f:96:81:7c:22: 2d:c7:be:17:36:c3:8d:1c:6f:d2:36:b4:eb:1f:7e:dd:d3:c1: a3:fa:91:d9:2d:f2:16:6d:80:cc:8d:a4:82:13:3a:c1:e5:c6: 18:b0:55:b6:3c:a6:1e:a8:7e:ba:0e:b3:53:95:e8:5b:1b:ca: e3:2f:93:c6:e9:56:de:2d:c2:28:6f:9d:da:f5:a6:d1:e3:85: f8:e6:77:26:b3:06:be:d9:aa:e3:fe:bf:40:f1:df:74:8d:97: 1c:9f:df:b1:1d:b7:b1:30:aa:c5:f5:fe:b0:5b:ee:14:86:43: 46:53:91:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NEFFMjExMC8GA1UEBRMoODQ1RDg4RTBBMjE1MTQ1RjM2N0Q5MzA0QkYzRjcxQUVF OEVCNEMyRDAeFw0yNDEwMjMwNjEwMThaFw0yNDEwMzAwNjEwMThaMBgxFjAUBgNV BAMTDTY3MTg5MzRhLWQwNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ0sHDVrpz0avb9FZhq3jimPwvyvn/s6Zc3zQ7GyOsDd2NLaj4MCqtUk5U1KHq MQPmXAurIFj/BLGGNu4PEhlbWKzBsj/Mkadrj2YHGJABY4LuTJZNVGu6KdDU9I8q xFklWGpCTNiuhxuJWIDaukApAzCO35IZBJ2L72jyzPbXBt4JfuxylpY0cTXdfQKc hCgUVDFjo9f+8FyOOPHW3u107x14GiETIbKvyhZBJiN2dmfATMd98gMdDkoSuozR J3l/ygE1A74EAth9SS6cXlPoAylibMHtHCkQ6E5fuv/F46DlStiR7r8y/W03WaC8 astoa+/92vkiRF/2AV+uhVHvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyNDuSYDv pMSQAdFZP/b74QgD0RwwHwYDVR0jBBgwFoAUhF2I4KIVFF82fZMEvz9xrujrTC0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0QUUyLzI2QTZGNDRDM0JB QzExRUY5RDdFQTg3MUM0RjlBRTAyL2hGMkk0S0lWRkY4MmZaTUV2ejl4cnVqclRD MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaEYySTRLSVZGRjgyZlpNRXZ6OXhydWpyVEMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk0 QUUyLzI2QTZGNDRDM0JBQzExRUY5RDdFQTg3MUM0RjlBRTAyL2hGMkk0S0lWRkY4 MmZaTUV2ejl4cnVqclRDMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF3lZ9pE1jOMxN+Ov7WipTrhsXMFX54ykiVR2J9Bg9xj7U6V7DPbyFxD 9md2hh5B+jXKBWILmBxE5ZGpoWLQFtf+E4fEMDpWxE/TChsT5U+IH/qwQTdAL62T RC2DGESrUaiMPWUzMm9lNYrF+q9Twr8MY955jI+DyrugSwRP3GTTbekRhZjvSqaw o9WPloF8Ii3Hvhc2w40cb9I2tOsfft3TwaP6kdkt8hZtgMyNpIITOsHlxhiwVbY8 ph6ofroOs1OV6FsbyuMvk8bpVt4twihvndr1ptHjhfjmdyazBr7ZquP+v0Dx33SN lxyf37Edt7EwqsX1/rBb7hSGQ0ZTkd8= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:22 2024 by rpki-client on console-fra.rpki-client.org