$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft File: 9AFXH04P6PgNV80CfNnuFdc4jyQ.mft (raw, json) Hash identifier: XuVw60eYp5n06Krb7B4o0qTyh5S/x78UiIRS1+XwSnE= Subject key identifier: D5:1A:AA:67:8C:1C:0A:DB:3C:E9:F9:B1:21:FE:94:15:D8:FC:97:8F Authority key identifier: F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 Certificate issuer: /CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft Manifest number: 26 Signing time: Sat 23 Nov 2024 05:43:16 +0000 Manifest this update: Sat 23 Nov 2024 05:43:15 +0000 Manifest next update: Sat 30 Nov 2024 05:43:15 +0000 Files and hashes: 1: 9AFXH04P6PgNV80CfNnuFdc4jyQ.crl (hash: b0SEEm7qJXQYX90j+recWYAiw/7hLSM6oGWAfmnxVUQ=) 2: 8D52A23871A611EF8F5B9755C4F9AE02.roa (hash: hF0cvJ5WGf8hjnk2FrHWwiuqbgTh6n818KkJ7xF10xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA54A/serialNumber=F401571F4E0FE8F80D57CD027CD9EE15D7388F24 Validity Not Before: Nov 23 05:43:15 2024 GMT Not After : Nov 30 05:43:15 2024 GMT Subject: CN=67416b74-fc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:83:69:89:4b:98:82:83:25:e4:7d:51:f7: 39:d5:39:12:1a:97:c1:e1:4e:c4:5a:85:f9:d0:3c: d3:b5:8b:b8:f4:e8:34:01:85:79:72:57:eb:86:17: 53:89:e4:ff:95:c2:d5:19:6f:9c:6f:8b:a2:dc:37: f6:99:81:9f:ef:51:09:8a:1a:b4:21:85:3a:df:6c: 5a:58:a6:01:f8:e1:38:a2:af:c5:0d:3c:38:6c:e6: c7:06:26:19:cd:5d:ef:34:05:35:39:17:bb:cf:2d: 70:0e:99:31:ef:1b:8d:4f:d5:4e:ce:0f:ac:0d:6d: 18:94:ef:87:04:51:c8:3e:08:88:f2:a5:3b:a6:77: b6:42:57:c8:34:ab:2e:e7:fb:ba:6c:7b:73:f6:dd: 6e:06:37:0e:11:14:3b:6d:cf:11:1d:bc:8c:22:b2: a8:70:8a:8a:d5:e3:88:be:63:76:5a:76:ce:10:1d: c0:37:d1:a4:73:a7:55:1d:98:0a:af:df:31:c9:92: 22:31:64:94:09:95:31:35:a6:6a:d8:3a:d9:d3:fb: 51:c1:71:09:19:fe:6c:0b:60:f9:96:c5:5e:31:01: f7:8d:7b:7f:e9:d1:7c:8b:c7:b6:24:0d:fa:e2:be: 43:50:e0:46:2c:b8:a4:a6:18:7d:c4:60:9b:3f:3f: b9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1A:AA:67:8C:1C:0A:DB:3C:E9:F9:B1:21:FE:94:15:D8:FC:97:8F X509v3 Authority Key Identifier: keyid:F4:01:57:1F:4E:0F:E8:F8:0D:57:CD:02:7C:D9:EE:15:D7:38:8F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9AFXH04P6PgNV80CfNnuFdc4jyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA54A/BE84A82071A511EF8D805C78C4F9AE02/9AFXH04P6PgNV80CfNnuFdc4jyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e2:b7:2d:d0:32:14:38:e4:54:af:4d:10:33:ff:1c:5e:80: 03:81:8a:00:82:2b:5c:de:78:e6:67:6e:fa:8f:9f:57:be:eb: b5:40:5a:4d:9d:18:6d:17:de:5b:5a:99:70:38:71:0e:ae:ef: b5:d5:40:52:ae:04:80:dc:49:9c:11:0b:71:47:5d:62:a0:99: 03:c6:79:ac:2a:53:e8:bb:19:7e:fa:27:42:20:89:7b:93:09: bc:d7:4a:d8:1a:47:04:40:02:5f:4e:c4:ca:40:c5:51:f6:38: 78:d2:be:27:0e:2f:57:34:df:30:8e:d8:f9:b8:07:36:ae:c0: a6:a0:b7:db:b8:48:ec:08:b1:49:51:63:33:05:3d:95:ca:39: 4d:22:ac:e2:3b:27:40:7c:f6:79:8b:cf:19:0c:87:bc:e2:3f: fe:65:0f:98:0b:e1:ae:85:27:47:9a:4c:5c:63:09:bf:cd:ec: 54:b3:fb:50:fa:09:d8:b1:87:02:15:cd:b9:ac:ae:fa:4a:ed: 21:3b:8c:ca:98:93:03:ed:69:f2:b3:bc:da:bf:f6:09:2f:0c: 2c:7b:f7:e7:82:7b:ee:2e:b3:a7:14:3a:f8:31:ae:0e:30:c0: 88:92:ec:80:d7:fd:ea:07:37:bf:d4:d2:52:9d:29:1f:05:82: 50:05:03:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTU0QTExMC8GA1UEBRMoRjQwMTU3MUY0RTBGRThGODBENTdDRDAyN0NEOUVFMTVE NzM4OEYyNDAeFw0yNDExMjMwNTQzMTVaFw0yNDExMzAwNTQzMTVaMBgxFjAUBgNV BAMTDTY3NDE2Yjc0LWZjMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmk4NpiUuYgoMl5H1R9znVORIal8HhTsRahfnQPNO1i7j06DQBhXlyV+uGF1OJ 5P+VwtUZb5xvi6LcN/aZgZ/vUQmKGrQhhTrfbFpYpgH44Tiir8UNPDhs5scGJhnN Xe80BTU5F7vPLXAOmTHvG41P1U7OD6wNbRiU74cEUcg+CIjypTumd7ZCV8g0qy7n +7pse3P23W4GNw4RFDttzxEdvIwisqhwiorV44i+Y3Zads4QHcA30aRzp1UdmAqv 3zHJkiIxZJQJlTE1pmrYOtnT+1HBcQkZ/mwLYPmWxV4xAfeNe3/p0XyLx7YkDfri vkNQ4EYsuKSmGH3EYJs/P7mhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1RqqZ4wc Cts86fmxIf6UFdj8l48wHwYDVR0jBBgwFoAU9AFXH04P6PgNV80CfNnuFdc4jyQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNTRBL0JFODRBODIwNzFB NTExRUY4RDgwNUM3OEM0RjlBRTAyLzlBRlhIMDRQNlBnTlY4MENmTm51RmRjNGp5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOUFGWEgwNFA2UGdOVjgwQ2ZObnVGZGM0anlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB NTRBL0JFODRBODIwNzFBNTExRUY4RDgwNUM3OEM0RjlBRTAyLzlBRlhIMDRQNlBn TlY4MENmTm51RmRjNGp5US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEHity3QMhQ45FSvTRAz/xxegAOBigCCK1zeeOZnbvqPn1e+67VAWk2d GG0X3ltamXA4cQ6u77XVQFKuBIDcSZwRC3FHXWKgmQPGeawqU+i7GX76J0IgiXuT CbzXStgaRwRAAl9OxMpAxVH2OHjSvicOL1c03zCO2Pm4BzauwKagt9u4SOwIsUlR YzMFPZXKOU0irOI7J0B89nmLzxkMh7ziP/5lD5gL4a6FJ0eaTFxjCb/N7FSz+1D6 CdixhwIVzbmsrvpK7SE7jMqYkwPtafKzvNq/9gkvDCx79+eCe+4us6cUOvgxrg4w wIiS7IDX/eoHN7/U0lKdKR8FglAFA5Y= -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:31 2024 by rpki-client on console-fra.rpki-client.org