$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft File: s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json) Hash identifier: lwPOivVoPNPkm3Rj5M7kgrcZiWiF1YkUwafMCwF6NoE= Subject key identifier: 6E:C2:D2:E7:4C:42:70:FC:94:D7:70:64:FA:0C:35:C1:AA:F5:AA:38 Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB Certificate issuer: /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Certificate serial: 07EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft Manifest number: 194C Signing time: Fri 22 Nov 2024 17:13:39 +0000 Manifest this update: Fri 22 Nov 2024 17:13:39 +0000 Manifest next update: Fri 29 Nov 2024 17:13:39 +0000 Files and hashes: 1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: 9Rbjn5c05LNY49x1PjLdwcD8GgWizgsypshnXKFj3AY=) 2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: k9wHhpt8UiUsBAqNUER2NNEPeQj08b6887cRTKa39g0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB Validity Not Before: Nov 22 17:13:39 2024 GMT Not After : Nov 29 17:13:39 2024 GMT Subject: CN=6740bbc3-11c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:db:5a:31:39:8d:4a:39:df:69:46:c2:7d:19: 4a:c5:c8:d3:7d:f8:da:89:d7:f0:f3:c0:c9:df:a4: 06:36:4a:f7:d6:3a:e4:e4:d5:18:85:dd:92:5b:bf: 72:db:e9:a7:18:74:2a:39:ee:94:03:77:67:d1:91: ef:d5:c0:91:d1:08:d6:0b:7f:25:a0:36:53:a7:18: ff:d5:a4:a9:7f:20:fb:4c:8e:7c:5d:32:e6:7b:62: 79:ee:80:0a:28:f8:99:93:53:2b:01:24:b4:45:9d: 6f:73:37:ac:a8:e6:27:0f:10:2c:52:82:ac:f9:b2: 71:ad:51:73:3c:14:22:da:24:0e:3f:a0:89:13:67: e9:08:a8:74:f5:db:49:28:90:8b:62:12:f1:20:37: e9:81:3b:0b:d6:cf:23:5d:7b:60:ad:13:67:c7:ce: ca:26:55:4d:bb:e2:6c:4c:6f:7b:c2:7b:f3:f9:ed: d4:27:11:38:28:b4:01:be:a4:26:0f:b8:87:7c:fa: 4d:87:22:c8:bf:cf:40:c6:88:31:42:ea:3f:85:61: 28:5f:23:21:2a:22:07:4f:0d:c5:12:b4:0b:22:63: 13:3e:28:ad:b7:7d:f5:15:b1:ad:43:e7:3d:a4:be: 37:4a:22:fd:6b:6d:9a:95:f8:fa:91:b2:57:f6:08: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C2:D2:E7:4C:42:70:FC:94:D7:70:64:FA:0C:35:C1:AA:F5:AA:38 X509v3 Authority Key Identifier: keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:1d:d8:f1:b8:54:e4:ea:28:1b:e0:0b:88:ed:db:4e:44:72: cb:e9:2d:39:7c:54:c2:eb:c0:88:a3:98:da:82:28:05:8e:b7: 5a:3d:2a:83:e0:0c:7a:c5:7a:b5:15:ee:b9:cb:c5:2b:d3:42: 7c:8f:88:ba:81:d1:a3:ad:89:fd:c6:5f:ca:2b:fe:aa:79:d7: 4d:25:d3:28:1e:d6:ce:46:43:95:28:46:f5:62:4b:c3:9b:1d: c3:08:c9:2d:e3:f7:3e:d4:fc:86:aa:4b:c6:e6:57:69:9b:a7: 52:66:9b:38:57:93:b0:3c:91:22:41:69:74:59:76:b4:b3:4c: e5:d0:0b:85:2f:92:ba:16:40:45:97:b0:65:44:20:b3:50:5b: 28:bb:4b:d0:17:ad:6c:c5:4e:b2:80:a6:cd:0f:da:82:73:f5: 59:08:e9:81:ce:90:8e:73:86:c9:0d:cc:c9:87:d7:5a:8b:71: 44:ca:d7:40:d6:f8:ae:e4:9f:23:4a:d4:71:fc:11:4e:fa:ec: f3:1f:36:07:b0:5c:a3:31:64:b5:18:4c:15:fc:03:c1:21:23: fd:7d:d3:4b:18:99:ec:11:24:83:b5:6e:bd:70:44:b1:68:58: 93:c6:a3:cf:3b:6e:af:10:11:c5:8d:a8:11:a7:de:e9:0b:56: d4:99:aa:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky QkRCREI1RUIwHhcNMjQxMTIyMTcxMzM5WhcNMjQxMTI5MTcxMzM5WjAYMRYwFAYD VQQDEw02NzQwYmJjMy0xMWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNtaMTmNSjnfaUbCfRlKxcjTffjaidfw88DJ36QGNkr31jrk5NUYhd2SW79y 2+mnGHQqOe6UA3dn0ZHv1cCR0QjWC38loDZTpxj/1aSpfyD7TI58XTLme2J57oAK KPiZk1MrASS0RZ1vczesqOYnDxAsUoKs+bJxrVFzPBQi2iQOP6CJE2fpCKh09dtJ KJCLYhLxIDfpgTsL1s8jXXtgrRNnx87KJlVNu+JsTG97wnvz+e3UJxE4KLQBvqQm D7iHfPpNhyLIv89AxogxQuo/hWEoXyMhKiIHTw3FErQLImMTPiitt331FbGtQ+c9 pL43SiL9a22alfj6kbJX9ghcKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7C0udM QnD8lNdwZPoMNcGq9ao4MB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0 ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWHdjxuFTk6igb4AuI7dtORHLL6S05fFTC68CIo5jagigFjrdaPSqD 4Ax6xXq1Fe65y8Ur00J8j4i6gdGjrYn9xl/KK/6qeddNJdMoHtbORkOVKEb1YkvD mx3DCMkt4/c+1PyGqkvG5ldpm6dSZps4V5OwPJEiQWl0WXa0s0zl0AuFL5K6FkBF l7BlRCCzUFsou0vQF61sxU6ygKbND9qCc/VZCOmBzpCOc4bJDczJh9dai3FEytdA 1viu5J8jStRx/BFO+uzzHzYHsFyjMWS1GEwV/APBISP9fdNLGJnsESSDtW69cESx aFiTxqPPO26vEBHFjagRp97pC1bUmaqJ -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org