$ rpki-client -vvf rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft File: gaChhLnGJZNg6jO7KDyhtDIbsDU.mft (raw, json) Hash identifier: MX6GkSNDd0D0dOdv5oaUfKVReI+Y96tYRf2AKdxPAnE= Subject key identifier: F3:7F:16:81:FD:D9:91:91:66:4C:F8:D6:B2:16:86:CF:00:F4:93:6F Authority key identifier: 81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 Certificate issuer: /CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft Manifest number: D9 Signing time: Sat 23 Nov 2024 03:42:00 +0000 Manifest this update: Sat 23 Nov 2024 03:41:59 +0000 Manifest next update: Sat 30 Nov 2024 03:41:59 +0000 Files and hashes: 1: gaChhLnGJZNg6jO7KDyhtDIbsDU.crl (hash: ktRA4JwLzlq3tuUJMqxR6uM4sM9mx0I+n3iRTT5si8Q=) 2: F800BA84626111EE82BA5C5DC4F9AE02.roa (hash: 2x3Crg/+rrdrA9YF1ARn2mLp11zGKRatq2w29xREbE8=) 3: 0DAF90D261C011EEAEFEBD43C4F9AE02.roa (hash: wGDmOTIVSrDQKDKCEK7gF/ecDvEsfL3U/Gc/OshH53U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Validity Not Before: Nov 23 03:41:59 2024 GMT Not After : Nov 30 03:41:59 2024 GMT Subject: CN=67414f07-551d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:bf:21:76:c8:84:7b:51:b1:d6:5f:47:71: 23:aa:f7:07:8c:8d:29:21:e1:76:cd:90:a5:ea:67: b4:db:3b:cf:e3:82:23:ca:a3:46:14:d7:46:64:c1: a7:e8:a6:6c:9a:75:e5:2c:df:7b:78:48:60:d4:55: d6:64:64:a2:dc:c0:c4:65:6d:61:e1:3c:e0:43:78: bf:ae:1b:86:32:33:dd:99:1c:ae:e6:01:9e:0e:af: 82:a0:78:a2:d9:86:ff:4f:2e:f0:10:67:29:fa:5e: 04:8d:a2:6c:85:e4:1c:2e:61:50:10:cc:39:49:1d: 70:0b:fe:3f:4a:ef:fb:e2:8f:fc:e8:5f:a3:08:b9: b7:ed:4b:62:f7:59:38:49:9d:b7:32:82:f0:c1:6b: c7:95:02:e8:ca:a5:11:98:b9:96:05:1a:fc:29:6b: c0:ea:42:37:80:3e:da:41:d4:c7:f8:db:75:40:99: e0:5a:a2:43:72:4f:99:f7:06:b4:29:a8:b7:63:54: 0f:1b:36:88:4c:7a:06:9d:00:c2:70:2e:f4:d1:06: 09:17:49:de:1a:7d:9d:ef:a0:94:f5:79:92:6b:ca: 0a:ce:0b:a0:2d:17:8a:46:22:ed:5b:88:e0:ec:c7: 5d:56:21:61:0f:36:65:e4:8c:e2:cb:9b:11:93:6d: 71:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7F:16:81:FD:D9:91:91:66:4C:F8:D6:B2:16:86:CF:00:F4:93:6F X509v3 Authority Key Identifier: keyid:81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:a9:95:e2:ed:f4:c5:c8:a9:a9:ac:4e:43:9e:51:c0:12:62: 53:4b:f4:0d:a9:ed:ce:1e:97:85:02:21:6a:78:3d:fc:77:36: 15:c5:0f:86:a3:7d:8d:43:82:c0:8a:34:d1:e5:d8:d3:d8:72: 5a:a6:b6:63:d8:8e:b0:77:46:86:c6:05:4a:28:dc:0f:7c:ad: d6:7f:a0:a5:bf:e5:e8:61:9f:a5:42:60:42:51:78:32:9b:6f: 93:fe:a4:7a:bd:30:d9:e0:fc:b4:07:0d:bb:bf:67:41:d8:2e: 18:24:bf:53:8f:48:c9:3f:ba:eb:d5:23:7a:ff:96:d8:e3:28: 59:8f:8a:a1:1f:5a:98:6a:53:03:9f:27:11:18:be:38:75:56: 24:c2:5b:06:f5:f0:b2:40:43:17:56:6f:b5:af:6a:e9:5f:ec: b2:f7:ec:c9:b1:d3:be:47:37:af:c9:4d:6d:c3:2c:ee:ba:21: ea:1b:09:83:0c:8b:d0:af:16:ca:9f:80:5c:8f:b3:e5:3d:25: 28:f2:e1:9b:2d:b0:b6:39:89:fa:7c:10:a3:fa:d7:da:36:e7: 70:28:ec:68:d6:d9:40:32:cc:a6:de:36:78:a8:4d:e0:54:6e: ce:3f:c5:1c:be:32:30:fc:29:80:2c:9c:26:55:e0:b4:e7:68: d7:78:a9:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4MTQxMTAvBgNVBAUTKDgxQTBBMTg0QjlDNjI1OTM2MEVBMzNCQjI4M0NBMUI0 MzIxQkIwMzUwHhcNMjQxMTIzMDM0MTU5WhcNMjQxMTMwMDM0MTU5WjAYMRYwFAYD VQQDEw02NzQxNGYwNy01NTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJW/IXbIhHtRsdZfR3EjqvcHjI0pIeF2zZCl6me02zvP44IjyqNGFNdGZMGn 6KZsmnXlLN97eEhg1FXWZGSi3MDEZW1h4TzgQ3i/rhuGMjPdmRyu5gGeDq+CoHii 2Yb/Ty7wEGcp+l4EjaJsheQcLmFQEMw5SR1wC/4/Su/74o/86F+jCLm37Uti91k4 SZ23MoLwwWvHlQLoyqURmLmWBRr8KWvA6kI3gD7aQdTH+Nt1QJngWqJDck+Z9wa0 Kai3Y1QPGzaITHoGnQDCcC700QYJF0neGn2d76CU9XmSa8oKzgugLReKRiLtW4jg 7MddViFhDzZl5Iziy5sRk21x/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPN/FoH9 2ZGRZkz41rIWhs8A9JNvMB8GA1UdIwQYMBaAFIGgoYS5xiWTYOozuyg8obQyG7A1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDgxNC8xMDE2ODkyNjYx QkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0paTmc2ak83S0R5aHRESWJz RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhQ2hoTG5HSlpOZzZqTzdLRHlodERJYnNEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDgxNC8xMDE2ODkyNjYxQkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0pa Tmc2ak83S0R5aHRESWJzRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXqZXi7fTFyKmprE5DnlHAEmJTS/QNqe3OHpeFAiFqeD38dzYVxQ+G o32NQ4LAijTR5djT2HJaprZj2I6wd0aGxgVKKNwPfK3Wf6Clv+XoYZ+lQmBCUXgy m2+T/qR6vTDZ4Py0Bw27v2dB2C4YJL9Tj0jJP7rr1SN6/5bY4yhZj4qhH1qYalMD nycRGL44dVYkwlsG9fCyQEMXVm+1r2rpX+yy9+zJsdO+RzevyU1twyzuuiHqGwmD DIvQrxbKn4Bcj7PlPSUo8uGbLbC2OYn6fBCj+tfaNudwKOxo1tlAMsym3jZ4qE3g VG7OP8UcvjIw/CmALJwmVeC052jXeKnl -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:43 2024 by rpki-client on console-fra.rpki-client.org