$ rpki-client -vvf rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft File: dbcfVG9Hsh7j6pqGURRsHsXslaY.mft (raw, json) Hash identifier: n5lSLsdgZu9I6UbjpiY2J2al4sqO0ccFVT8cle4fC1A= Subject key identifier: E8:5C:34:34:E4:A3:5D:9C:C5:33:D1:F4:CD:95:5D:9F:CF:BE:62:EB Authority key identifier: 75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6 Certificate issuer: /CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft Manifest number: 26 Signing time: Sun 15 Sep 2024 10:13:40 +0000 Manifest this update: Sun 15 Sep 2024 10:13:39 +0000 Manifest next update: Sun 22 Sep 2024 10:13:39 +0000 Files and hashes: 1: dbcfVG9Hsh7j6pqGURRsHsXslaY.crl (hash: rNH8ggPLSBJzqlXQ+d7mxjmL4YaOZq1azrFtMd5BY6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Sep 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919AD11/serialNumber=75B71F546F47B21EE3EA9A8651146C1EC5EC95A6 Validity Not Before: Sep 15 10:13:39 2024 GMT Not After : Sep 22 10:13:39 2024 GMT Subject: CN=66e6b353-871d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:0a:13:69:2a:92:6b:4e:8e:39:7d:20:d2: 3c:b6:23:58:2f:1c:a4:1e:08:e8:0b:b0:00:62:9f: 4b:bc:d2:8d:1b:d8:3e:85:ba:f6:56:e7:9d:ef:d4: 63:a9:3f:4f:89:56:1d:b2:48:8e:92:e3:0a:76:53: 5f:7e:88:00:c5:69:02:54:d0:09:4f:a2:de:3c:c4: 86:19:73:60:57:71:a0:a0:18:a1:41:3a:32:84:7e: e6:b7:f4:3b:58:45:f3:d7:31:85:cc:aa:1e:6c:86: 32:47:9a:da:82:09:44:05:9b:1b:17:db:ba:35:46: 4d:a3:d5:9c:3c:d6:69:21:a5:48:a7:74:68:a9:72: c1:e9:39:42:4b:18:b5:ff:fc:b0:9a:91:13:f0:f4: 8d:c5:5c:f0:ec:86:08:f2:5d:69:2d:2e:db:c8:4c: aa:7d:a0:d9:82:98:d9:8f:be:39:5a:f0:be:5b:74: c2:53:44:0f:a0:cc:eb:cc:94:4e:0f:52:31:0b:af: 36:a7:f7:e2:17:e2:c5:6a:b5:46:b1:67:35:c0:7f: 23:ef:dc:f5:55:54:e0:c9:e8:e9:81:7f:63:dd:b1: c4:a7:a3:9f:6d:53:d7:f7:f1:9f:a8:74:f3:78:7e: bd:9e:7b:15:63:a6:95:89:5b:d2:c3:a8:c9:53:75: 23:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5C:34:34:E4:A3:5D:9C:C5:33:D1:F4:CD:95:5D:9F:CF:BE:62:EB X509v3 Authority Key Identifier: keyid:75:B7:1F:54:6F:47:B2:1E:E3:EA:9A:86:51:14:6C:1E:C5:EC:95:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dbcfVG9Hsh7j6pqGURRsHsXslaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AD11/04D472043A8A11EF9817B26AC4F9AE02/dbcfVG9Hsh7j6pqGURRsHsXslaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d4:cf:e6:c2:8d:15:4d:f4:72:60:29:29:ea:e5:cb:1d:1f: 06:ca:44:be:e9:48:94:a2:ab:4b:c5:0b:0f:bf:21:fd:00:4b: 00:15:08:5b:ca:5e:30:5b:95:40:61:7f:28:74:0a:59:54:aa: 00:b8:f6:81:d4:8c:c0:fa:d1:7d:f0:e3:21:3e:5e:d2:6a:4e: 82:36:3f:48:f0:bc:f5:cc:8f:37:cd:44:fb:75:2c:49:a4:f5: ae:05:a1:21:00:5d:a7:18:c8:9d:58:0e:ab:2d:97:a2:8e:fa: 15:7b:80:0f:04:28:fc:11:4f:44:e0:59:53:8c:b8:6d:fa:4a: 9d:96:02:2e:f5:44:19:aa:28:d0:35:f5:c3:4d:72:39:ff:a6: bf:1e:04:61:20:b3:da:f9:37:15:6f:75:0e:26:10:79:20:cb: cb:8e:61:69:0b:c0:3c:26:1c:04:d9:ca:3b:ce:49:c1:c0:d5: 89:a4:7d:b5:07:66:1b:12:f1:b1:8c:52:fb:ba:c7:fa:a8:70: 22:bf:0f:d8:1b:0f:d5:a2:de:53:6d:3f:13:93:b9:8b:ad:62: 47:9e:40:ea:fb:93:03:83:ee:9e:da:db:39:af:5e:2e:99:6d: d5:30:3e:1e:1a:8f:d4:2d:18:f8:b5:42:00:6f:82:56:b3:a4: 77:23:b1:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 QUQxMTExMC8GA1UEBRMoNzVCNzFGNTQ2RjQ3QjIxRUUzRUE5QTg2NTExNDZDMUVD NUVDOTVBNjAeFw0yNDA5MTUxMDEzMzlaFw0yNDA5MjIxMDEzMzlaMBgxFjAUBgNV BAMTDTY2ZTZiMzUzLTg3MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChigoTaSqSa06OOX0g0jy2I1gvHKQeCOgLsABin0u80o0b2D6FuvZW553v1GOp P0+JVh2ySI6S4wp2U19+iADFaQJU0AlPot48xIYZc2BXcaCgGKFBOjKEfua39DtY RfPXMYXMqh5shjJHmtqCCUQFmxsX27o1Rk2j1Zw81mkhpUindGipcsHpOUJLGLX/ /LCakRPw9I3FXPDshgjyXWktLtvITKp9oNmCmNmPvjla8L5bdMJTRA+gzOvMlE4P UjELrzan9+IX4sVqtUaxZzXAfyPv3PVVVODJ6OmBf2PdscSno59tU9f38Z+odPN4 fr2eexVjppWJW9LDqMlTdSOtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6Fw0NOSj XZzFM9H0zZVdn8++YuswHwYDVR0jBBgwFoAUdbcfVG9Hsh7j6pqGURRsHsXslaYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBRDExLzA0RDQ3MjA0M0E4 QTExRUY5ODE3QjI2QUM0RjlBRTAyL2RiY2ZWRzlIc2g3ajZwcUdVUlJzSHNYc2xh WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGJjZlZHOUhzaDdqNnBxR1VSUnNIc1hzbGFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlB RDExLzA0RDQ3MjA0M0E4QTExRUY5ODE3QjI2QUM0RjlBRTAyL2RiY2ZWRzlIc2g3 ajZwcUdVUlJzSHNYc2xhWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACfUz+bCjRVN9HJgKSnq5csdHwbKRL7pSJSiq0vFCw+/If0ASwAVCFvK XjBblUBhfyh0CllUqgC49oHUjMD60X3w4yE+XtJqToI2P0jwvPXMjzfNRPt1LEmk 9a4FoSEAXacYyJ1YDqstl6KO+hV7gA8EKPwRT0TgWVOMuG36Sp2WAi71RBmqKNA1 9cNNcjn/pr8eBGEgs9r5NxVvdQ4mEHkgy8uOYWkLwDwmHATZyjvOScHA1YmkfbUH ZhsS8bGMUvu6x/qocCK/D9gbD9Wi3lNtPxOTuYutYkeeQOr7kwOD7p7a2zmvXi6Z bdUwPh4aj9QtGPi1QgBvglazpHcjsVc= -----END CERTIFICATE-----Generated at Sun Sep 15 13:42:43 2024 by rpki-client on console-fra.rpki-client.org