$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft File: 9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json) Hash identifier: DtFBG6q6lRe6I40XQmWP2cQnGcC5xGIPX3meSNJYL+4= Subject key identifier: EA:CE:15:E7:7E:61:4B:FE:77:D1:7A:01:40:14:50:C1:4D:9E:55:BD Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 Certificate issuer: /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft Manifest number: DF Signing time: Thu 21 Nov 2024 03:40:03 +0000 Manifest this update: Thu 21 Nov 2024 03:40:03 +0000 Manifest next update: Thu 28 Nov 2024 03:40:03 +0000 Files and hashes: 1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: tEoZqlSOdiwERwqE1WecGflpy1LpnO9O3f68KPVd198=) 2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: hIM8hUCuLsy66X6ZYsJbgYBhw69MQCF4aThPHyxIGMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08 Validity Not Before: Nov 21 03:40:03 2024 GMT Not After : Nov 28 03:40:03 2024 GMT Subject: CN=673eab93-ddec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b1:3b:7b:2b:0e:f8:06:53:44:df:64:72:47: f6:01:5b:c7:ce:79:23:03:49:3f:c3:bc:9d:d7:1c: 0d:8d:e2:1e:8a:1d:14:2c:13:45:34:9e:2c:8d:89: 77:bc:42:3c:30:29:d8:97:b1:f3:64:0f:84:71:ce: c2:91:b6:5b:ae:b1:c6:09:4a:13:2f:66:f6:52:3f: 85:3e:fe:c0:0e:11:49:93:8e:02:00:78:a9:f2:71: 0f:be:65:5e:7a:ed:67:1b:b8:ae:23:4a:85:72:2e: 87:de:dc:2b:05:34:98:7d:27:18:8e:63:23:8b:c2: 90:a9:d3:c6:bb:5e:11:8c:65:cb:23:f1:ae:92:01: eb:da:fc:d8:9c:19:bc:4a:83:e6:3b:7d:78:fe:e6: e9:c0:b2:ae:3f:a2:78:11:fc:24:69:14:09:c6:97: f4:21:85:6f:ba:b7:74:90:3e:c1:b3:1b:d7:c8:2a: 62:9b:1b:aa:42:a8:c1:ff:63:25:34:8f:4e:8b:97: 5a:2c:b3:0a:33:ee:df:46:14:f2:04:b3:a8:f9:a6: 83:7a:57:cb:11:6e:30:8d:56:86:84:64:fe:98:55: ae:1d:8a:21:d8:7c:7f:e9:c4:c5:3a:37:4b:26:d9: fc:63:e8:2e:c6:9c:34:7c:59:91:11:4f:45:b0:86: 0d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CE:15:E7:7E:61:4B:FE:77:D1:7A:01:40:14:50:C1:4D:9E:55:BD X509v3 Authority Key Identifier: keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:0e:5f:ad:4d:d0:bd:09:b9:ac:9c:dd:e1:9b:15:2b:18:be: 1e:b5:c6:81:96:54:dc:4c:b6:fd:d6:38:a5:d7:71:30:1e:4e: 71:d3:ce:6b:e4:41:02:8c:14:3c:7d:0c:6f:8c:5c:59:77:31: 58:2a:f1:74:c1:5b:a7:ba:6a:cf:02:01:ec:d5:55:26:b0:98: 5b:e9:e3:ff:2a:51:b4:4e:c8:f5:46:67:15:a0:87:a8:8d:03: 79:63:5a:a3:80:af:58:2b:43:a3:3e:87:3f:22:45:af:ac:47: 05:18:9a:07:18:24:cf:79:18:4b:02:ca:a9:06:f6:43:2b:72: ed:da:6d:c6:db:1a:e7:f1:a6:3d:46:8a:ae:4c:c1:d5:60:f6: 55:13:0f:94:fb:d6:a2:0b:03:2e:45:25:6c:b8:72:94:06:8c: 25:20:46:a7:cd:f1:5f:5e:5f:0f:8a:b9:2c:d3:6d:0e:75:20: 75:d6:5c:50:08:c2:cc:b8:56:19:2a:eb:31:7e:ce:00:d1:6c: 74:c3:f1:1d:7c:1e:95:8e:c6:8b:04:6c:ad:39:49:1a:4c:f2: b2:10:e2:da:67:be:6a:97:94:83:3c:32:39:61:5e:4b:98:02: 89:db:1c:59:48:24:f5:43:6c:1c:19:32:a3:0c:f3:87:5f:2c: 4f:8f:ff:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5 QTgwQkVBMDgwHhcNMjQxMTIxMDM0MDAzWhcNMjQxMTI4MDM0MDAzWjAYMRYwFAYD VQQDEw02NzNlYWI5My1kZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bE7eysO+AZTRN9kckf2AVvHznkjA0k/w7yd1xwNjeIeih0ULBNFNJ4sjYl3 vEI8MCnYl7HzZA+Ecc7CkbZbrrHGCUoTL2b2Uj+FPv7ADhFJk44CAHip8nEPvmVe eu1nG7iuI0qFci6H3twrBTSYfScYjmMji8KQqdPGu14RjGXLI/GukgHr2vzYnBm8 SoPmO314/ubpwLKuP6J4EfwkaRQJxpf0IYVvurd0kD7BsxvXyCpimxuqQqjB/2Ml NI9Oi5daLLMKM+7fRhTyBLOo+aaDelfLEW4wjVaGhGT+mFWuHYoh2Hx/6cTFOjdL Jtn8Y+guxpw0fFmREU9FsIYNRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrOFed+ YUv+d9F6AUAUUMFNnlW9MB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0 QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5 cXhoclF1VmtGSldhZ0w2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJDl+tTdC9CbmsnN3hmxUrGL4etcaBllTcTLb91jil13EwHk5x085r 5EECjBQ8fQxvjFxZdzFYKvF0wVunumrPAgHs1VUmsJhb6eP/KlG0Tsj1RmcVoIeo jQN5Y1qjgK9YK0OjPoc/IkWvrEcFGJoHGCTPeRhLAsqpBvZDK3Lt2m3G2xrn8aY9 RoquTMHVYPZVEw+U+9aiCwMuRSVsuHKUBowlIEanzfFfXl8Pirks020OdSB11lxQ CMLMuFYZKusxfs4A0Wx0w/EdfB6VjsaLBGytOUkaTPKyEOLaZ75ql5SDPDI5YV5L mAKJ2xxZSCT1Q2wcGTKjDPOHXyxPj/+a -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:23 2024 by rpki-client on console-ams.rpki-client.org