$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: yIJzIr627QvYQje49IiNgg3NhQM1T2ViDc2+p20OUo0= Subject key identifier: EF:77:7A:94:77:D9:55:92:D6:E9:AD:D4:6D:4B:F1:F5:AF:90:78:D8 Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: C9 Signing time: Thu 21 Nov 2024 03:58:19 +0000 Manifest this update: Thu 21 Nov 2024 03:58:19 +0000 Manifest next update: Thu 28 Nov 2024 03:58:19 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: 6KhDKN+bAH8V4BGtxxrJjziBdFT+8f2smY2KAvZLIDc=) 2: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: SshOC3gU6HUaIU7OUJCNAnBTxBahFjxoE/rfFGZssow=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: GCUYfktdJtM3w3x/AngT0svZ6AfcPm8+X/17pTPoOCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: Nov 21 03:58:19 2024 GMT Not After : Nov 28 03:58:19 2024 GMT Subject: CN=673eafdb-7610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:d2:1d:85:68:9e:1b:be:6f:b4:f8:de:55: 23:14:8a:ec:64:c7:fd:05:30:b5:be:9e:20:c6:bc: 66:79:61:55:9c:ad:75:bf:92:d6:2b:90:d4:b0:42: ce:90:96:44:c7:da:68:52:6d:fd:41:64:0c:16:5b: 67:6a:77:44:86:0d:02:cd:75:5d:3a:a3:f4:d3:ee: 39:d5:51:9b:b5:cc:22:fc:06:b1:9a:23:b5:71:cb: e1:f2:70:92:e2:4e:7f:58:cd:4c:d5:97:80:31:22: 8c:03:04:bd:58:b0:2e:b9:3e:34:77:ce:82:7d:92: a2:27:f3:ce:77:e8:53:bf:e2:07:43:ea:fe:37:44: d0:c4:9a:b6:7a:59:94:b2:cd:df:76:9b:9e:71:94: f9:c6:67:e5:89:2c:1a:6f:b1:69:8f:59:17:a4:49: fa:77:0e:25:58:5c:e1:7d:69:94:5a:70:69:fc:0c: 8d:ad:6e:cf:2e:b0:eb:b8:bc:41:a2:e4:cb:49:f4: 31:b7:e2:ff:5b:be:de:96:76:82:4e:a1:9a:85:90: 6a:30:34:60:08:a3:ff:ce:4b:ac:7d:10:a6:46:e4: a8:78:6b:cb:c8:59:fb:e2:ef:8e:0d:ab:20:27:67: f2:c1:70:3c:8f:d2:b6:b8:0f:6e:94:b5:3c:cc:c6: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:77:7A:94:77:D9:55:92:D6:E9:AD:D4:6D:4B:F1:F5:AF:90:78:D8 X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:f7:5c:0f:34:43:76:9a:2b:04:64:74:1e:d7:d3:cf:43:4c: c2:f7:86:8c:e0:cf:4e:0d:e7:80:6c:32:e3:94:27:31:aa:66: c7:5b:ce:08:ef:b7:d7:f7:58:88:46:5d:29:e5:a9:19:93:e7: 91:aa:b7:f3:e6:e4:43:e0:f4:06:1d:f0:9b:6a:59:44:2e:8b: 49:a2:23:88:ea:ae:db:f9:33:28:01:ed:4f:d3:fc:87:04:24: 19:53:a7:2d:8f:4a:c8:07:7d:43:25:24:49:e7:31:d3:e2:1b: ac:8d:21:c5:8c:b2:5d:ca:f9:32:2e:33:16:81:b2:be:b7:a5: 7d:9f:bb:d9:b1:91:74:f2:6d:3f:10:5c:4b:10:1f:11:2e:1d: 88:cc:83:9b:bb:18:9d:cb:87:48:fb:e6:a9:cd:f8:d4:0c:41: fb:c6:99:1c:a2:aa:8d:e2:d7:82:e0:06:ac:27:54:9a:aa:89: 83:2c:ba:f6:12:01:20:05:25:db:5a:9d:b3:bf:e8:d4:7a:24: 28:30:3d:de:19:cd:fa:3e:83:d7:cf:63:59:8f:69:b0:67:b0: 57:72:60:a7:31:7d:e6:aa:44:f6:e1:6a:a8:50:36:44:07:4a: 76:bc:b7:e0:cb:58:5a:33:18:04:17:43:84:66:a0:0d:75:3b: 2b:18:9f:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjQxMTIxMDM1ODE5WhcNMjQxMTI4MDM1ODE5WjAYMRYwFAYD VQQDEw02NzNlYWZkYi03NjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqzSHYVonhu+b7T43lUjFIrsZMf9BTC1vp4gxrxmeWFVnK11v5LWK5DUsELO kJZEx9poUm39QWQMFltnandEhg0CzXVdOqP00+451VGbtcwi/AaxmiO1ccvh8nCS 4k5/WM1M1ZeAMSKMAwS9WLAuuT40d86CfZKiJ/POd+hTv+IHQ+r+N0TQxJq2elmU ss3fdpuecZT5xmfliSwab7Fpj1kXpEn6dw4lWFzhfWmUWnBp/AyNrW7PLrDruLxB ouTLSfQxt+L/W77elnaCTqGahZBqMDRgCKP/zkusfRCmRuSoeGvLyFn74u+ODasg J2fywXA8j9K2uA9ulLU8zMbAdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO93epR3 2VWS1umt1G1L8fWvkHjYMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC91wPNEN2misEZHQe19PPQ0zC94aM4M9ODeeAbDLjlCcxqmbHW84I 77fX91iIRl0p5akZk+eRqrfz5uRD4PQGHfCballELotJoiOI6q7b+TMoAe1P0/yH BCQZU6ctj0rIB31DJSRJ5zHT4husjSHFjLJdyvkyLjMWgbK+t6V9n7vZsZF08m0/ EFxLEB8RLh2IzIObuxidy4dI++apzfjUDEH7xpkcoqqN4teC4AasJ1SaqomDLLr2 EgEgBSXbWp2zv+jUeiQoMD3eGc36PoPXz2NZj2mwZ7BXcmCnMX3mqkT24WqoUDZE B0p2vLfgy1haMxgEF0OEZqANdTsrGJ+1 -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:06 2024 by rpki-client on console-fra.rpki-client.org