$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft File: f5auCiLKk4vV-dmnMor1g2LrIsE.mft (raw, json) Hash identifier: dxcHsLaswMZZhhQrgd7RH8Fr7hfkmXQph0rEZ/Qu0N0= Subject key identifier: BC:7B:C6:B1:15:2D:C6:57:B4:5F:61:DB:8D:34:6F:95:E4:5F:58:6A Authority key identifier: 7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 Certificate issuer: /CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft Manifest number: 09 Signing time: Thu 21 Nov 2024 06:12:58 +0000 Manifest this update: Thu 21 Nov 2024 06:12:58 +0000 Manifest next update: Thu 28 Nov 2024 06:12:58 +0000 Files and hashes: 1: f5auCiLKk4vV-dmnMor1g2LrIsE.crl (hash: fYCaR2ldDdKX9oMcppR8MGUmghlHZkAKAg2OWsesA3w=) 2: 4450DA2C9D0311EF877CD229C4F9AE02.roa (hash: buSMZTKEc3PdwiMwBtG/n0gmpQCMqdjfMf4AjKQfjyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFFBE/serialNumber=7F96AE0A22CA938BD5F9D9A7328AF58362EB22C1 Validity Not Before: Nov 21 06:12:58 2024 GMT Not After : Nov 28 06:12:58 2024 GMT Subject: CN=673ecf6a-e0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:ed:6b:dc:b1:49:78:ac:b8:05:12:4f:60: 4c:3f:b5:c0:93:9b:59:b1:3b:9a:dd:0d:4d:ee:f4: eb:3d:cd:d2:b3:be:6f:b1:54:72:9a:f1:cd:cc:33: 9d:ff:ee:78:44:d3:fa:e4:f5:c5:c4:db:77:dc:cd: da:ad:c6:2a:3d:d8:60:da:c3:4e:b4:5c:40:09:dc: 4f:b8:d1:43:b4:98:38:c4:5e:ba:20:96:5b:cb:6b: 71:3d:0b:25:24:4f:c8:d6:b6:1b:09:a3:fc:28:28: 0d:50:ed:fd:9c:c6:f4:de:62:14:f8:59:87:92:9f: 27:b2:35:b2:09:4b:7d:cf:5a:9e:84:43:70:05:52: c8:04:13:7a:7e:39:9e:58:78:e2:38:b2:5f:3c:3b: 57:93:93:9f:5b:03:c8:6a:a1:62:03:0a:af:2a:4c: 56:c9:b0:88:7d:1b:c3:93:8c:e7:b4:dc:97:ff:c8: c8:c4:e2:be:41:c7:62:4e:e4:2c:a9:a6:28:72:c9: 52:66:3e:f5:29:5b:42:7d:af:05:83:79:09:d8:35: 29:bd:ca:97:a4:bc:70:b9:71:fc:a2:f3:f3:a3:6a: 51:fc:ac:b6:7d:49:a0:ee:cb:9c:f6:95:60:f7:8a: 87:9e:a4:b0:c3:2e:64:b0:76:42:30:43:82:4a:ea: 5f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7B:C6:B1:15:2D:C6:57:B4:5F:61:DB:8D:34:6F:95:E4:5F:58:6A X509v3 Authority Key Identifier: keyid:7F:96:AE:0A:22:CA:93:8B:D5:F9:D9:A7:32:8A:F5:83:62:EB:22:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f5auCiLKk4vV-dmnMor1g2LrIsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFFBE/42159F5A9D0211EF99CC8609C4F9AE02/f5auCiLKk4vV-dmnMor1g2LrIsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:09:31:8e:8a:70:1d:fa:7d:23:90:bc:82:d1:03:17:74:fb: 9f:6e:1f:c2:d8:a8:31:c5:64:94:5a:32:ee:bc:bf:40:e5:4f: bb:05:88:89:6c:8e:fb:fb:81:49:58:06:4d:7a:50:ef:6b:d7: dd:38:aa:47:56:d5:d1:d6:0b:c0:b3:6c:b6:25:06:c3:9e:1c: f9:05:10:55:93:9b:da:e4:f8:78:d4:a4:b3:32:7a:d1:cb:32: f6:e2:92:cc:42:c8:c5:43:5f:bd:86:2c:22:11:bb:b8:1f:0b: 98:ba:a5:9d:f3:83:c6:3b:fa:23:d0:e9:b3:10:db:a9:bd:96: 55:76:69:6c:df:40:48:55:cf:76:b2:c5:54:41:2b:21:c8:45: 71:cd:90:88:5f:4a:25:21:8b:95:20:e8:bf:c9:c8:a0:07:3e: 8a:39:b1:7d:39:76:69:e7:e1:f3:21:25:43:c4:65:0d:a1:66: f5:d7:bd:27:9a:dc:0e:99:ab:8f:3f:1e:64:98:64:28:c7:7d: 16:ee:51:c1:d8:51:ec:7c:29:a3:99:56:b7:e9:f8:40:57:be: 70:ac:7e:8d:71:20:e3:6b:4e:97:3d:19:78:c0:ae:5b:88:05: d7:0a:27:68:e8:52:45:bd:bc:88:10:d4:43:fb:32:c4:e0:dd: bc:9a:f9:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RkZCRTExMC8GA1UEBRMoN0Y5NkFFMEEyMkNBOTM4QkQ1RjlEOUE3MzI4QUY1ODM2 MkVCMjJDMTAeFw0yNDExMjEwNjEyNThaFw0yNDExMjgwNjEyNThaMBgxFjAUBgNV BAMTDTY3M2VjZjZhLWUwZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJjO1r3LFJeKy4BRJPYEw/tcCTm1mxO5rdDU3u9Os9zdKzvm+xVHKa8c3MM53/ 7nhE0/rk9cXE23fczdqtxio92GDaw060XEAJ3E+40UO0mDjEXrogllvLa3E9CyUk T8jWthsJo/woKA1Q7f2cxvTeYhT4WYeSnyeyNbIJS33PWp6EQ3AFUsgEE3p+OZ5Y eOI4sl88O1eTk59bA8hqoWIDCq8qTFbJsIh9G8OTjOe03Jf/yMjE4r5Bx2JO5Cyp pihyyVJmPvUpW0J9rwWDeQnYNSm9ypekvHC5cfyi8/OjalH8rLZ9SaDuy5z2lWD3 ioeepLDDLmSwdkIwQ4JK6l9lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvHvGsRUt xle0X2HbjTRvleRfWGowHwYDVR0jBBgwFoAUf5auCiLKk4vV+dmnMor1g2LrIsEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRkJFLzQyMTU5RjVBOUQw MjExRUY5OUNDODYwOUM0RjlBRTAyL2Y1YXVDaUxLazR2Vi1kbW5Nb3IxZzJMcklz RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZjVhdUNpTEtrNHZWLWRtbk1vcjFnMkxySXNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG RkJFLzQyMTU5RjVBOUQwMjExRUY5OUNDODYwOUM0RjlBRTAyL2Y1YXVDaUxLazR2 Vi1kbW5Nb3IxZzJMcklzRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA0JMY6KcB36fSOQvILRAxd0+59uH8LYqDHFZJRaMu68v0DlT7sFiIls jvv7gUlYBk16UO9r1904qkdW1dHWC8CzbLYlBsOeHPkFEFWTm9rk+HjUpLMyetHL MvbiksxCyMVDX72GLCIRu7gfC5i6pZ3zg8Y7+iPQ6bMQ26m9llV2aWzfQEhVz3ay xVRBKyHIRXHNkIhfSiUhi5Ug6L/JyKAHPoo5sX05dmnn4fMhJUPEZQ2hZvXXvSea 3A6Zq48/HmSYZCjHfRbuUcHYUex8KaOZVrfp+EBXvnCsfo1xIONrTpc9GXjArluI BdcKJ2joUkW9vIgQ1EP7MsTg3bya+TA= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:49 2024 by rpki-client on console-fra.rpki-client.org