$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: uEezwPamslmIMI1BX4UivNpdon1IisNMfdAglpkuYRw= Subject key identifier: 5B:79:97:C6:3D:85:67:EE:FC:5E:8B:2D:2F:62:BF:61:4D:C3:40:56 Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1D25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1D0D Signing time: Fri 22 Nov 2024 16:09:55 +0000 Manifest this update: Fri 22 Nov 2024 16:09:54 +0000 Manifest next update: Fri 29 Nov 2024 16:09:54 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: MS5aHOsXJKzIk79PnGbEVloSM5LwL5DwC5O4DA7vgMM=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: NAFJJXNP6W1IL/8p5XX1DsTHhpW+KT2jLZylfntYa8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7461 (0x1d25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: Nov 22 16:09:54 2024 GMT Not After : Nov 29 16:09:54 2024 GMT Subject: CN=6740acd3-73ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:28:f1:dd:cd:8b:bb:7f:ed:05:41:d4:33:ea: a1:3f:c7:d8:10:dc:5f:c0:36:a1:7c:e7:27:95:76: 0a:a3:71:20:1c:56:b6:10:c2:de:b5:29:16:b7:d8: 64:27:f5:1e:ff:62:91:78:d8:7e:12:d0:92:68:73: 4c:96:c0:f3:c9:c2:30:7d:00:39:81:a4:9b:43:c2: 61:22:37:5b:cc:b3:0a:35:63:b7:9b:29:74:f4:2f: f1:38:f5:62:a7:8d:da:24:c4:2d:39:23:99:ad:42: c6:1d:40:84:c0:06:70:c7:76:0a:57:c6:55:41:31: 46:19:a2:ca:1a:31:b9:e2:c9:19:56:d7:b9:58:7f: 72:f1:81:cc:b9:64:5c:bc:37:f0:ab:d1:c2:0b:d0: 49:9d:1f:a9:c0:54:fb:78:3f:eb:8a:7d:62:d3:23: fd:66:e7:c2:d0:ea:71:71:e1:a8:9b:2a:58:06:47: aa:85:d0:26:ed:08:d4:5b:82:c0:fa:09:73:4e:0f: 60:1a:78:a4:6c:c8:c3:d9:09:01:80:47:93:98:70: 39:4f:37:80:37:4d:74:b7:d1:fb:ac:39:36:6a:76: b6:07:2d:db:a1:97:8b:32:f8:78:05:7e:df:62:ba: 35:a5:80:66:86:0d:b0:c8:28:26:c9:9e:00:0e:43: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:79:97:C6:3D:85:67:EE:FC:5E:8B:2D:2F:62:BF:61:4D:C3:40:56 X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:8d:03:45:f1:ab:dc:8a:a8:87:67:3c:47:07:8c:f7:d2:4b: 40:b7:f6:51:ca:6e:42:1b:8f:d0:63:5e:41:04:e9:3d:ab:b3: 69:51:fc:c5:81:d9:74:94:10:24:b7:ec:a3:e5:9b:1d:59:43: 97:d7:de:51:cd:66:03:c9:cf:90:96:d6:b1:68:1d:c7:d5:22: 59:49:32:92:2f:be:5f:c8:41:63:d6:8f:ad:2b:da:73:38:21: ca:1b:1f:cc:4a:2d:b9:2b:c5:b2:b6:cd:79:cb:90:ca:fd:3b: 2c:c4:60:7c:e4:e4:ef:1f:24:f6:e0:bc:f2:23:f8:13:22:a1: 81:b0:07:19:71:c4:74:c9:d3:30:23:d4:14:36:f4:1f:0d:7e: 39:24:22:84:a6:38:a6:0e:54:d8:7b:99:4e:f8:de:4e:a5:11: 7a:8e:8a:b5:95:7a:11:b9:2a:f0:f0:f8:21:5f:66:93:a1:86: 93:54:22:07:ad:33:eb:5f:64:bc:45:0d:38:ea:96:8d:f3:df: f0:c9:bd:99:67:ef:75:6e:11:68:c6:af:20:12:a4:f4:35:69: 9b:44:18:1c:8e:01:4e:53:59:12:a0:df:6b:3c:a9:f3:4d:3a: af:4d:8e:ab:a7:02:35:ac:50:be:f5:94:ba:6e:54:02:97:4f: fc:79:2a:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjQxMTIyMTYwOTU0WhcNMjQxMTI5MTYwOTU0WjAYMRYwFAYD VQQDEw02NzQwYWNkMy03M2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Sjx3c2Lu3/tBUHUM+qhP8fYENxfwDahfOcnlXYKo3EgHFa2EMLetSkWt9hk J/Ue/2KReNh+EtCSaHNMlsDzycIwfQA5gaSbQ8JhIjdbzLMKNWO3myl09C/xOPVi p43aJMQtOSOZrULGHUCEwAZwx3YKV8ZVQTFGGaLKGjG54skZVte5WH9y8YHMuWRc vDfwq9HCC9BJnR+pwFT7eD/rin1i0yP9ZufC0OpxceGomypYBkeqhdAm7QjUW4LA +glzTg9gGnikbMjD2QkBgEeTmHA5TzeAN010t9H7rDk2ana2By3boZeLMvh4BX7f Yro1pYBmhg2wyCgmyZ4ADkOSAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt5l8Y9 hWfu/F6LLS9iv2FNw0BWMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxjQNF8avciqiHZzxHB4z30ktAt/ZRym5CG4/QY15BBOk9q7NpUfzF gdl0lBAkt+yj5ZsdWUOX195RzWYDyc+QltaxaB3H1SJZSTKSL75fyEFj1o+tK9pz OCHKGx/MSi25K8Wyts15y5DK/TssxGB85OTvHyT24LzyI/gTIqGBsAcZccR0ydMw I9QUNvQfDX45JCKEpjimDlTYe5lO+N5OpRF6joq1lXoRuSrw8PghX2aToYaTVCIH rTPrX2S8RQ046paN89/wyb2ZZ+91bhFoxq8gEqT0NWmbRBgcjgFOU1kSoN9rPKnz TTqvTY6rpwI1rFC+9ZS6blQCl0/8eSqI -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org