$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft File: ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json) Hash identifier: huuKWkMaiWPZvPch7DhXK6r1dE76JGU9akNE6Yn9Md4= Subject key identifier: B7:F8:83:C6:EE:22:C8:B7:CD:F8:92:E6:59:D8:91:A5:8C:DF:50:B4 Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 0EEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft Manifest number: 0EDE Signing time: Fri 22 Nov 2024 17:38:48 +0000 Manifest this update: Fri 22 Nov 2024 17:38:47 +0000 Manifest next update: Fri 29 Nov 2024 17:38:47 +0000 Files and hashes: 1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: BvhN260tVws3hXyrqtdb5PoRxcmLwsmFl+k7Ynw7Aow=) 2: D193920E709411E99F95933EC4F9AE02.roa (hash: 0Os8j4kYKwSeqmj5yGoBBZfTw2aGD2KOY509iiv178E=) 3: 76E5D6AE727411EFAD2ACD27C4F9AE02.roa (hash: seqCKD6Db6uHjZMFtslvwJ+ELyFHvSU96+t1eEuQ2I0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3818 (0xeea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: Nov 22 17:38:47 2024 GMT Not After : Nov 29 17:38:47 2024 GMT Subject: CN=6740c1a7-3d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:e8:7d:cf:0a:78:c0:18:7f:05:52:4e:a5: 2b:ec:93:1a:b4:aa:75:12:53:48:e6:09:7e:82:1e: 45:da:8b:30:8a:1e:98:04:05:57:37:a6:4b:1c:7d: 79:2d:87:7c:8b:e7:d5:1e:d5:38:be:37:1a:11:91: 6f:58:42:7a:5c:7c:18:f4:06:54:a0:37:3d:9e:27: 3c:78:d3:3b:31:d3:d9:09:ee:8c:11:2a:01:75:0a: 5d:b8:13:2b:55:d9:9e:bc:85:24:a6:bd:0a:a0:48: f3:ab:f3:99:32:37:26:df:f5:95:50:60:2b:f6:bb: e6:94:95:3d:0f:0d:69:8a:c0:f4:1a:e1:7c:7c:a1: f5:94:31:6d:e6:18:0f:31:25:45:0f:f6:d2:19:52: 10:11:bd:cf:fc:d1:6d:58:2d:ca:1a:7a:ea:5e:98: dc:8d:ea:1e:dd:20:45:c4:44:b4:7f:69:8f:ef:77: f2:57:f7:2f:7e:11:8a:be:d2:45:64:25:ee:61:f3: fe:2c:69:fb:e1:3b:35:10:76:28:10:24:36:e8:28: d0:55:3c:a8:79:39:62:93:ae:03:24:7e:3c:e0:1f: e2:ce:a9:63:c7:00:4d:b1:6a:dd:ef:3e:f1:28:c7: f9:57:e4:be:7b:29:83:d6:22:1a:3d:1a:26:82:13: 4d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F8:83:C6:EE:22:C8:B7:CD:F8:92:E6:59:D8:91:A5:8C:DF:50:B4 X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a8:9e:13:85:22:0f:09:47:4e:84:e0:0a:22:72:d2:85:2c: 36:0a:69:23:20:3a:6c:24:5d:0d:a6:db:24:b2:b2:bf:65:26: 47:be:27:c2:e6:a0:18:47:d2:07:55:1c:cc:03:95:8b:0c:9d: af:09:ae:13:66:2e:c8:81:f5:57:e8:a7:b2:f7:f8:2c:3b:6b: a4:53:0b:c1:ca:63:b0:ec:79:6d:29:88:fa:4d:f6:30:d5:f2: a4:4d:24:4c:0b:97:1a:64:fd:1e:aa:f1:d3:a7:45:91:90:f7: e8:43:09:1f:e9:df:b0:df:5f:a1:89:8d:04:10:ed:0d:e3:d9: 79:37:5d:2f:cd:ff:51:31:9f:cd:b6:c2:2a:b4:c7:d5:c8:9f: c5:fc:ff:c1:a3:63:05:9c:64:a0:77:17:01:e6:a7:fa:76:4e: 77:4a:02:1f:3b:c8:91:7d:b7:e9:0c:1c:bc:e8:91:20:85:0c: d5:ba:2a:0e:8f:4b:0c:24:f6:96:88:4b:32:ce:58:f0:e4:a0: ac:21:32:a3:87:07:33:63:e0:1a:7c:c8:4c:89:95:87:22:eb: bc:53:98:d4:1d:e8:7f:47:76:d8:2f:d8:a7:7c:be:e0:4a:73: 4b:eb:45:a6:05:cf:bf:2b:61:76:4a:00:70:cf:7f:f8:4d:eb: e6:46:99:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjQxMTIyMTczODQ3WhcNMjQxMTI5MTczODQ3WjAYMRYwFAYD VQQDEw02NzQwYzFhNy0zZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Mvofc8KeMAYfwVSTqUr7JMatKp1ElNI5gl+gh5F2oswih6YBAVXN6ZLHH15 LYd8i+fVHtU4vjcaEZFvWEJ6XHwY9AZUoDc9nic8eNM7MdPZCe6MESoBdQpduBMr VdmevIUkpr0KoEjzq/OZMjcm3/WVUGAr9rvmlJU9Dw1pisD0GuF8fKH1lDFt5hgP MSVFD/bSGVIQEb3P/NFtWC3KGnrqXpjcjeoe3SBFxES0f2mP73fyV/cvfhGKvtJF ZCXuYfP+LGn74Ts1EHYoECQ26CjQVTyoeTlik64DJH484B/izqljxwBNsWrd7z7x KMf5V+S+eymD1iIaPRomghNN5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLf4g8bu Isi3zfiS5lnYkaWM31C0MB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJERi9FNzBFMEE5ODcwOTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThH Z1paTmhZLVJST0JTdTRpWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiqJ4ThSIPCUdOhOAKInLShSw2CmkjIDpsJF0NptsksrK/ZSZHvifC 5qAYR9IHVRzMA5WLDJ2vCa4TZi7IgfVX6Key9/gsO2ukUwvBymOw7HltKYj6TfYw 1fKkTSRMC5caZP0eqvHTp0WRkPfoQwkf6d+w31+hiY0EEO0N49l5N10vzf9RMZ/N tsIqtMfVyJ/F/P/Bo2MFnGSgdxcB5qf6dk53SgIfO8iRfbfpDBy86JEghQzVuioO j0sMJPaWiEsyzljw5KCsITKjhwczY+AafMhMiZWHIuu8U5jUHeh/R3bYL9infL7g SnNL60WmBc+/K2F2SgBwz3/4TevmRplc -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org