$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft File: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft (raw, json) Hash identifier: 7t0/7WRzJxnAngC5wgwl4Omg4i0s611Dy9fJkK8Ufag= Subject key identifier: AF:C0:C8:30:6F:9F:53:97:73:36:45:A5:3C:E6:B2:1F:FC:26:AF:5C Authority key identifier: F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 Certificate issuer: /CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft Manifest number: 0F09 Signing time: Fri 22 Nov 2024 17:44:19 +0000 Manifest this update: Fri 22 Nov 2024 17:44:18 +0000 Manifest next update: Fri 29 Nov 2024 17:44:18 +0000 Files and hashes: 1: 9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl (hash: Km1wA3Yga+pFodDMTYSaSRkVwG/WMau/AZgM1ehMHec=) 2: 324967826D8D11EE9883B985C4F9AE02.roa (hash: tVncRVnPr+nSHEeWNP/pEvYFdoB6fcCQNCn7dCwbFNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDD82/serialNumber=F44018181EE5C6240E1394395A5CCC4D2F6231A4 Validity Not Before: Nov 22 17:44:18 2024 GMT Not After : Nov 29 17:44:18 2024 GMT Subject: CN=6740c2f2-3c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:a2:9b:ea:18:af:8c:3a:80:b3:e0:fc:39: 06:6f:a2:93:3e:f5:bc:4b:64:87:8b:43:a9:6f:b0: 91:e1:57:fe:af:a3:67:88:63:1a:91:55:dd:7d:bb: ff:8b:3c:69:c7:5a:2b:42:49:32:6c:ce:49:43:27: 69:d5:29:ef:db:52:1a:39:e2:21:98:e0:36:ef:2b: 8f:e6:7f:9d:41:ca:89:32:04:c6:cd:4e:c5:76:75: b8:d2:35:71:a7:af:77:a5:e3:92:f6:31:77:ce:f5: 8d:08:71:25:65:52:a9:12:f9:6d:36:d3:4e:0f:6a: 27:88:85:58:bc:f9:78:6c:4c:d8:35:15:68:43:cc: 9b:3f:9f:75:52:27:55:e7:88:96:78:ee:10:4d:1e: e1:c1:0b:21:96:b0:bd:94:ca:5f:a5:bc:59:6f:c1: 45:0a:23:5e:d1:fe:1c:94:66:2d:f0:05:9b:48:00: 42:e2:bd:1d:49:95:b0:58:43:f1:d8:13:32:76:84: 15:76:eb:6b:f3:11:c0:a1:89:f9:1c:6c:74:a0:3a: 09:4f:e0:85:e7:11:7a:1d:7a:46:ce:17:25:16:6b: 2c:56:9b:e7:72:21:7d:52:54:53:68:fc:d1:80:0a: 31:91:5f:42:95:eb:79:6d:cd:e0:a2:bd:d2:12:b5: c7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C0:C8:30:6F:9F:53:97:73:36:45:A5:3C:E6:B2:1F:FC:26:AF:5C X509v3 Authority Key Identifier: keyid:F4:40:18:18:1E:E5:C6:24:0E:13:94:39:5A:5C:CC:4D:2F:62:31:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/9EAYGB7lxiQOE5Q5WlzMTS9iMaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:64:d7:b8:4c:0d:16:04:bf:87:dd:57:6c:69:22:15:72:a7: 44:e0:62:d4:b2:62:1c:55:ab:63:b9:13:ed:cf:5f:d3:97:c9: 59:91:2f:00:55:1e:39:d9:aa:b6:74:bf:6f:5b:38:47:dc:3f: 49:c7:d4:5e:4c:c6:eb:f3:11:2e:fb:dc:2d:f0:18:a0:f5:6e: 17:51:cb:c4:5a:b8:56:a3:20:dc:42:31:ea:71:c9:ab:fd:9a: fd:98:24:be:55:ab:0b:60:e9:9d:db:75:4c:14:37:fe:5b:34: 2c:14:32:e2:da:78:e5:15:be:f3:7c:d4:89:79:91:32:31:08: d2:39:34:dc:a7:51:ff:fa:f6:ee:5b:54:c8:7a:20:25:d7:22: c9:08:45:58:06:ca:9c:07:32:03:2a:63:81:4b:ef:b4:c9:f9: a1:f9:36:6b:9b:1c:98:13:b2:75:fd:5c:1f:20:ea:9c:d8:49: 1d:cb:0d:38:28:39:fc:8b:67:e3:75:1f:2f:5b:63:ea:6d:16: db:ae:2d:94:7d:dd:15:85:a2:3e:5b:fe:78:66:84:27:63:ed: 0a:db:bf:a6:8a:73:49:73:b9:0d:75:25:be:0c:55:86:fd:5e: 1a:84:2c:ac:ff:12:7c:75:73:57:45:e1:17:f1:d1:c1:23:fb: b6:9c:00:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREODIxMTAvBgNVBAUTKEY0NDAxODE4MUVFNUM2MjQwRTEzOTQzOTVBNUNDQzRE MkY2MjMxQTQwHhcNMjQxMTIyMTc0NDE4WhcNMjQxMTI5MTc0NDE4WjAYMRYwFAYD VQQDEw02NzQwYzJmMi0zYzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00Sim+oYr4w6gLPg/DkGb6KTPvW8S2SHi0Opb7CR4Vf+r6NniGMakVXdfbv/ izxpx1orQkkybM5JQydp1Snv21IaOeIhmOA27yuP5n+dQcqJMgTGzU7FdnW40jVx p693peOS9jF3zvWNCHElZVKpEvltNtNOD2oniIVYvPl4bEzYNRVoQ8ybP591UidV 54iWeO4QTR7hwQshlrC9lMpfpbxZb8FFCiNe0f4clGYt8AWbSABC4r0dSZWwWEPx 2BMydoQVdutr8xHAoYn5HGx0oDoJT+CF5xF6HXpGzhclFmssVpvnciF9UlRTaPzR gAoxkV9Clet5bc3gor3SErXHSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/AyDBv n1OXczZFpTzmsh/8Jq9cMB8GA1UdIwQYMBaAFPRAGBge5cYkDhOUOVpczE0vYjGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREQ4Mi8xOTdGOUQ5Mjkx RTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhpUU9FNVE1V2x6TVRTOWlN YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlFQVlHQjdseGlRT0U1UTVXbHpNVFM5aU1hUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REQ4Mi8xOTdGOUQ5MjkxRTIxMUU5OTc2ODg5MEVDNEY5QUUwMi85RUFZR0I3bHhp UU9FNVE1V2x6TVRTOWlNYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmZNe4TA0WBL+H3VdsaSIVcqdE4GLUsmIcVatjuRPtz1/Tl8lZkS8A VR452aq2dL9vWzhH3D9Jx9ReTMbr8xEu+9wt8Big9W4XUcvEWrhWoyDcQjHqccmr /Zr9mCS+VasLYOmd23VMFDf+WzQsFDLi2njlFb7zfNSJeZEyMQjSOTTcp1H/+vbu W1TIeiAl1yLJCEVYBsqcBzIDKmOBS++0yfmh+TZrmxyYE7J1/VwfIOqc2Ekdyw04 KDn8i2fjdR8vW2PqbRbbri2Ufd0VhaI+W/54ZoQnY+0K27+minNJc7kNdSW+DFWG /V4ahCys/xJ8dXNXReEX8dHBI/u2nAAA -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org