$ rpki-client -vvf rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft File: PShwiOOGgqTkudgoRQszZr3q1d0.mft (raw, json) Hash identifier: e+JWzQ4XEZJ4lcGxsZKsxiPI8Q0WydWOwUhzpwy4sgA= Subject key identifier: 35:6D:CF:A9:DE:F2:C4:1D:C1:F0:3C:78:11:0B:6F:04:B3:C7:94:56 Authority key identifier: 3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD Certificate issuer: /CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD Certificate serial: 0BB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft Manifest number: 0BAA Signing time: Fri 22 Nov 2024 18:42:29 +0000 Manifest this update: Fri 22 Nov 2024 18:42:28 +0000 Manifest next update: Fri 29 Nov 2024 18:42:28 +0000 Files and hashes: 1: PShwiOOGgqTkudgoRQszZr3q1d0.crl (hash: dtdXc0ebtGuCmX6u/01pPgf2U0CZ8MOGxTWlI8ZmK4U=) 2: 7716938A416211EB9B0F3C54C4F9AE02.roa (hash: hCaAEWq2eMhrSimlnmRSol9Ew4VVk2u8ZIHdiArRPpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3001 (0xbb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F02EA/serialNumber=3D287088E38682A4E4B9D828450B3366BDEAD5DD Validity Not Before: Nov 22 18:42:28 2024 GMT Not After : Nov 29 18:42:28 2024 GMT Subject: CN=6740d094-ba59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:32:c6:22:57:b6:4e:6e:08:af:ea:a0:63: 29:e0:a8:c7:8c:0d:ce:50:d1:aa:00:67:fe:d5:bc: 48:5f:2c:0f:fb:62:0c:9d:c0:d9:f1:77:cc:b8:04: 50:44:d0:29:cb:95:cc:33:d6:dd:ab:19:2e:93:25: 1a:46:d9:27:c3:22:e4:aa:93:d1:7e:10:a8:51:87: 83:a4:35:9a:f3:5d:76:d6:ca:39:b8:9d:2c:43:86: bd:91:57:67:5d:65:dd:9b:cf:ad:92:c9:1f:a5:98: 5b:34:88:a6:6e:0d:ed:b6:d6:7b:1c:3f:28:85:db: 0f:4f:c5:85:92:62:fc:42:f9:46:00:51:98:7c:47: 8b:2f:86:58:4b:49:b0:32:df:b3:3e:e5:fa:2a:df: e4:1c:2b:29:69:8b:69:8f:21:ea:87:37:b9:8f:2e: 93:73:9b:ae:b8:0b:44:2f:1d:30:37:d1:a1:dd:70: a6:0a:93:8a:ef:5c:29:92:9f:e0:4e:af:00:20:2b: 24:f0:c3:9a:8f:4a:12:d1:c8:76:76:bf:10:4f:64: 0f:1e:ba:52:2e:6f:20:3e:8e:ff:7a:e8:d5:26:b5: 32:a6:c1:74:17:3f:f8:78:5b:dd:4c:67:37:32:b6: b4:0c:d4:48:58:57:d3:81:56:d5:1b:72:2c:40:e6: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6D:CF:A9:DE:F2:C4:1D:C1:F0:3C:78:11:0B:6F:04:B3:C7:94:56 X509v3 Authority Key Identifier: keyid:3D:28:70:88:E3:86:82:A4:E4:B9:D8:28:45:0B:33:66:BD:EA:D5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PShwiOOGgqTkudgoRQszZr3q1d0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F02EA/DB15CDE011DB11EA95F2B059C4F9AE02/PShwiOOGgqTkudgoRQszZr3q1d0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2e:b1:f2:84:5a:3e:3b:d9:18:78:d0:43:a7:c0:af:a0:83: 49:67:79:b8:52:55:71:89:d5:47:f7:39:0d:21:86:1c:b1:ec: 76:e9:7d:6b:25:e5:66:02:82:41:5e:4f:e6:49:0b:c2:b2:d7: f7:4d:7e:3f:0e:1c:5d:c8:ba:04:ae:c5:1b:dc:1e:93:06:84: a6:81:93:61:72:ab:84:f1:4b:dc:81:71:cc:a2:f1:b9:cb:9b: 6b:e2:12:26:ad:23:ee:e3:94:0b:bc:84:5e:79:b7:9b:6b:45: f1:56:0e:2e:87:5e:bc:87:f0:3d:d0:78:57:f9:03:51:4d:5c: eb:24:47:a4:d8:b6:1a:62:f5:90:ae:cd:a7:f5:29:bf:b6:70: af:30:e4:d5:2c:67:11:da:26:65:9e:b6:6e:51:f6:3a:0f:8e: 44:ce:4b:5f:f8:09:a2:b4:5f:b5:8c:81:32:c2:1c:ad:78:8a: ed:7a:9f:43:5d:ff:df:4f:59:2c:d4:b5:3f:b9:0f:ac:14:aa: c6:98:49:98:e9:08:41:3b:bd:bb:63:3c:a1:4c:db:0f:88:02: e6:f6:a3:2c:d0:98:76:25:ed:4a:97:c6:48:e5:63:16:45:7e: 63:48:1e:f4:5a:c8:0c:60:24:16:68:63:88:84:6e:0c:a6:d4: 6b:b2:8e:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAyRUExMTAvBgNVBAUTKDNEMjg3MDg4RTM4NjgyQTRFNEI5RDgyODQ1MEIzMzY2 QkRFQUQ1REQwHhcNMjQxMTIyMTg0MjI4WhcNMjQxMTI5MTg0MjI4WjAYMRYwFAYD VQQDEw02NzQwZDA5NC1iYTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IgyxiJXtk5uCK/qoGMp4KjHjA3OUNGqAGf+1bxIXywP+2IMncDZ8XfMuARQ RNApy5XMM9bdqxkukyUaRtknwyLkqpPRfhCoUYeDpDWa81121so5uJ0sQ4a9kVdn XWXdm8+tkskfpZhbNIimbg3tttZ7HD8ohdsPT8WFkmL8QvlGAFGYfEeLL4ZYS0mw Mt+zPuX6Kt/kHCspaYtpjyHqhze5jy6Tc5uuuAtELx0wN9Gh3XCmCpOK71wpkp/g Tq8AICsk8MOaj0oS0ch2dr8QT2QPHrpSLm8gPo7/eujVJrUypsF0Fz/4eFvdTGc3 Mra0DNRIWFfTgVbVG3IsQObbXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVtz6ne 8sQdwfA8eBELbwSzx5RWMB8GA1UdIwQYMBaAFD0ocIjjhoKk5LnYKEULM2a96tXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDJFQS9EQjE1Q0RFMDEx REIxMUVBOTVGMkIwNTlDNEY5QUUwMi9QU2h3aU9PR2dxVGt1ZGdvUlFzelpyM3Ex ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTaHdpT09HZ3FUa3VkZ29SUXN6WnIzcTFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDJFQS9EQjE1Q0RFMDExREIxMUVBOTVGMkIwNTlDNEY5QUUwMi9QU2h3aU9PR2dx VGt1ZGdvUlFzelpyM3ExZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtLrHyhFo+O9kYeNBDp8CvoINJZ3m4UlVxidVH9zkNIYYcsex26X1r JeVmAoJBXk/mSQvCstf3TX4/DhxdyLoErsUb3B6TBoSmgZNhcquE8UvcgXHMovG5 y5tr4hImrSPu45QLvIReebeba0XxVg4uh168h/A90HhX+QNRTVzrJEek2LYaYvWQ rs2n9Sm/tnCvMOTVLGcR2iZlnrZuUfY6D45Ezktf+AmitF+1jIEywhyteIrtep9D Xf/fT1ks1LU/uQ+sFKrGmEmY6QhBO727YzyhTNsPiALm9qMs0Jh2Je1Kl8ZI5WMW RX5jSB70WsgMYCQWaGOIhG4MptRrso4E -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org