$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: cTZSFwr0HUCmkzV5gjc3MqEh55ZgDeX5E7H6ThH203M= Subject key identifier: BF:C8:2F:7D:0B:24:8F:F5:34:66:72:44:12:BA:E3:B5:CE:3B:C0:E4 Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: 5A Signing time: Sat 23 Nov 2024 05:04:25 +0000 Manifest this update: Sat 23 Nov 2024 05:04:24 +0000 Manifest next update: Sat 30 Nov 2024 05:04:24 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: HqHtA0EAPO5IWvVMeLgBnv/Nc1RfG92wgT6diLGi59g=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: aCxLNGUfAZ6CNYlr7962E8YpM0oFXazWi/2qqzUqx5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: Nov 23 05:04:24 2024 GMT Not After : Nov 30 05:04:24 2024 GMT Subject: CN=67416258-8ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8d:8a:62:95:c8:dd:92:f4:51:3f:2a:88:c3: c8:f2:ab:35:b2:f6:ef:f6:c5:e9:6c:ba:cc:72:ca: 9d:e0:c3:84:10:37:04:8f:f7:d4:1e:46:04:d4:59: 46:da:44:d1:48:02:f6:c6:0c:93:4c:0e:a9:69:ed: fa:a3:1f:0b:ab:96:9a:de:81:0f:e9:8c:30:43:27: 7d:10:f8:77:1c:99:c4:32:2c:da:e6:a0:26:3e:e8: 16:0c:71:45:e9:b2:9b:d9:2b:91:28:78:9c:47:df: 44:6a:bc:b1:17:dc:d6:97:16:60:c6:66:e3:18:c5: 79:27:df:a8:a7:a6:cb:ce:97:5c:a3:49:ed:a1:be: 1b:c0:94:98:71:d0:fa:13:be:17:58:03:cc:4d:65: 67:94:b8:81:61:4e:bf:b1:4d:56:12:f5:1a:cf:53: fe:28:91:f1:21:97:1a:a9:bd:e3:e2:31:ea:95:a3: a0:2e:28:49:b8:3e:1a:f3:6b:c7:be:5e:54:34:a7: 24:a8:0c:ed:15:08:21:14:ab:f0:9c:6f:71:e2:5f: cf:ec:9a:fe:9a:ed:85:22:14:db:23:8d:79:2c:3c: 17:68:98:f6:50:db:47:c4:c2:82:12:f5:9b:54:d9: 65:05:81:14:d0:82:9b:9b:b2:e5:78:d4:2f:ac:a9: a9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C8:2F:7D:0B:24:8F:F5:34:66:72:44:12:BA:E3:B5:CE:3B:C0:E4 X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:e4:9d:1c:83:81:43:2f:a9:b7:c7:cb:64:b0:4f:67:09:9f: 8f:f9:ac:2d:c5:17:53:f5:23:6c:c6:7b:5e:35:6e:54:90:cc: c9:89:46:04:3f:42:30:6c:1c:5b:23:f5:a9:f5:12:eb:07:e2: 5d:55:c0:c0:89:e5:b1:85:ec:e3:e1:5f:54:78:8b:5f:73:54: 5f:5f:34:e5:20:11:97:d2:fd:24:bd:68:22:43:c2:a8:4f:79: 13:e9:69:64:26:b6:b8:c1:5e:76:2c:00:cf:7c:2c:c7:13:48: 4a:bb:1e:4e:d3:67:97:c8:e6:a5:1b:81:09:46:a8:ca:bf:b2: 20:96:19:4e:62:d6:d4:87:d5:46:ab:e7:70:e4:59:57:39:43: eb:73:43:69:cb:24:3f:f5:1f:d8:e3:a4:ea:fc:d2:b4:9e:ad: c9:b8:e9:b8:4b:84:34:40:f4:47:74:69:2f:77:08:47:67:d9: 60:54:52:74:b2:54:7e:2b:af:26:29:9e:55:a0:23:d9:db:e9: 00:f5:f9:8a:e2:ff:b0:fa:d7:26:5e:ff:69:8f:93:e5:3a:ef: 57:ed:02:46:5c:20:52:c1:0c:57:32:3e:db:25:4e:2d:4d:97: 4d:c4:e0:a1:c8:81:58:6e:e4:ba:a9:69:8a:0c:51:c8:e2:76: 8a:a9:fb:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTdBOTExMC8GA1UEBRMoRjdGMDYzNjkzOTlEOTkzNUY1RkI1OUZENTg1NzE1NDFB NTgxQ0M2MzAeFw0yNDExMjMwNTA0MjRaFw0yNDExMzAwNTA0MjRaMBgxFjAUBgNV BAMTDTY3NDE2MjU4LThlYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDojYpilcjdkvRRPyqIw8jyqzWy9u/2xelsusxyyp3gw4QQNwSP99QeRgTUWUba RNFIAvbGDJNMDqlp7fqjHwurlpregQ/pjDBDJ30Q+HccmcQyLNrmoCY+6BYMcUXp spvZK5EoeJxH30RqvLEX3NaXFmDGZuMYxXkn36inpsvOl1yjSe2hvhvAlJhx0PoT vhdYA8xNZWeUuIFhTr+xTVYS9RrPU/4okfEhlxqpvePiMeqVo6AuKEm4Phrza8e+ XlQ0pySoDO0VCCEUq/Ccb3HiX8/smv6a7YUiFNsjjXksPBdomPZQ20fEwoIS9ZtU 2WUFgRTQgpubsuV41C+sqakrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv8gvfQsk j/U0ZnJEErrjtc47wOQwHwYDVR0jBBgwFoAU9/BjaTmdmTX1+1n9WFcVQaWBzGMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1N0E5Lzg2MjQ2MzQ4MUZG MzExRUZBM0ZCMkM4MUM0RjlBRTAyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpH TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOV9CamFUbWRtVFgxLTFuOVdGY1ZRYVdCekdNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 N0E5Lzg2MjQ2MzQ4MUZGMzExRUZBM0ZCMkM4MUM0RjlBRTAyLzlfQmphVG1kbVRY MS0xbjlXRmNWUWFXQnpHTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIHknRyDgUMvqbfHy2SwT2cJn4/5rC3FF1P1I2zGe141blSQzMmJRgQ/ QjBsHFsj9an1EusH4l1VwMCJ5bGF7OPhX1R4i19zVF9fNOUgEZfS/SS9aCJDwqhP eRPpaWQmtrjBXnYsAM98LMcTSEq7Hk7TZ5fI5qUbgQlGqMq/siCWGU5i1tSH1Uar 53DkWVc5Q+tzQ2nLJD/1H9jjpOr80rSercm46bhLhDRA9Ed0aS93CEdn2WBUUnSy VH4rryYpnlWgI9nb6QD1+Yri/7D61yZe/2mPk+U671ftAkZcIFLBDFcyPtslTi1N l03E4KHIgVhu5LqpaYoMUcjidoqp+8w= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org