$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: RlBAbHIGR8uXcXPlifhqF9qBEnQCm6V3E0AmdGuVBpg= Subject key identifier: B9:46:7F:C5:5B:8D:EB:37:72:7D:0A:85:68:EE:23:A1:83:11:1C:1A Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 017B Signing time: Sat 23 Nov 2024 02:03:28 +0000 Manifest this update: Sat 23 Nov 2024 02:03:28 +0000 Manifest next update: Sat 30 Nov 2024 02:03:28 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: o3HInXO7SuwXDozryhL3OQUELKT6q48nfeX8mTCuxAs=) 2: B695C976638F11EDB427BF33C4F9AE02.roa (hash: KAHZon+NZVrzImj+73HPhmHjCJSfdK1Z3Hco2rg+te8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Nov 23 02:03:28 2024 GMT Not After : Nov 30 02:03:28 2024 GMT Subject: CN=674137f0-08f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:1f:6b:ce:5d:67:73:c2:93:ad:8c:69:fe: 81:5c:28:b3:18:42:28:c7:f6:66:47:32:af:22:f7: ec:7a:0b:30:5b:5d:65:b5:14:8b:3b:09:d8:62:22: 46:11:c2:6d:be:42:55:b3:78:7c:b2:07:4b:d0:e5: 4c:1e:f6:08:8b:0e:5e:78:a9:65:5a:f3:42:63:0c: 00:86:3f:0b:a0:cf:9d:d1:3f:42:c0:9e:e9:f7:78: 1a:6d:f0:92:09:2e:08:95:1d:0b:d7:ec:66:67:05: 6c:c7:0f:6a:95:e0:05:9a:9e:70:ca:bb:a8:17:f1: ce:d7:64:d8:07:f8:09:e0:ca:92:95:07:a8:54:f6: fd:00:2d:57:3a:0c:7f:18:ac:c6:de:c1:05:05:95: 4c:b9:78:f1:e6:9b:7f:f3:8e:dd:cb:45:11:22:81: f9:69:a9:42:5c:fb:af:93:37:64:cd:07:11:51:8f: 00:3d:64:8d:39:a3:b0:4b:f6:77:b6:24:1f:b5:bf: 9c:a6:20:b1:d0:ef:4c:3a:78:15:a3:68:c4:02:bc: 3c:63:82:e7:01:df:d3:8e:10:04:ce:97:f0:db:d0: 95:ea:9f:39:14:ee:ef:d7:d1:ff:6d:64:01:1d:99: 2a:06:14:56:b7:ae:5e:94:30:06:40:08:e9:bb:10: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:46:7F:C5:5B:8D:EB:37:72:7D:0A:85:68:EE:23:A1:83:11:1C:1A X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:59:d4:9b:85:bd:ef:82:5c:3c:48:84:02:f0:b3:d5:1f:63: ca:de:08:3a:79:36:c2:65:ad:46:0a:9c:63:af:04:6c:c1:24: 7b:71:ab:1a:2f:56:e2:81:bf:e4:c1:08:de:5c:fd:80:69:e4: ef:5b:59:ad:05:b5:35:5e:a0:36:57:03:92:3f:43:8c:fd:2f: e0:4d:a8:e4:2b:67:f4:98:a6:c6:45:b0:dc:6d:e9:ba:34:8b: 76:08:4e:0b:0f:2d:84:74:fb:2c:76:bd:1a:01:7d:88:bd:c4: af:a0:14:ef:a8:b7:45:ca:0b:f5:8f:64:88:f5:9f:b2:7e:ba: 58:93:19:ca:62:37:9b:ed:92:5f:99:ff:7b:4c:44:52:c5:af: 73:6f:3f:d6:89:b3:9e:d4:1b:9d:cb:39:a1:2f:68:ea:e8:34: 34:e6:e9:c2:3e:43:2a:82:4c:ac:24:7f:93:b7:bc:53:9c:8e: 72:90:31:0e:99:84:94:33:21:68:cc:13:06:bb:57:85:8d:a4: c9:2a:de:88:0f:cb:99:14:a0:44:6d:9b:5f:e1:87:73:80:7b: 09:b7:e7:e1:cc:c3:2c:ab:1c:d1:b5:f3:48:31:08:e7:40:e5: 2d:f5:a5:21:d9:5a:0b:52:e9:fa:3a:ab:3e:21:7b:1b:1c:9f: 37:f2:2b:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjQxMTIzMDIwMzI4WhcNMjQxMTMwMDIwMzI4WjAYMRYwFAYD VQQDEw02NzQxMzdmMC0wOGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvX4fa85dZ3PCk62Maf6BXCizGEIox/ZmRzKvIvfsegswW11ltRSLOwnYYiJG EcJtvkJVs3h8sgdL0OVMHvYIiw5eeKllWvNCYwwAhj8LoM+d0T9CwJ7p93gabfCS CS4IlR0L1+xmZwVsxw9qleAFmp5wyruoF/HO12TYB/gJ4MqSlQeoVPb9AC1XOgx/ GKzG3sEFBZVMuXjx5pt/847dy0URIoH5aalCXPuvkzdkzQcRUY8APWSNOaOwS/Z3 tiQftb+cpiCx0O9MOngVo2jEArw8Y4LnAd/TjhAEzpfw29CV6p85FO7v19H/bWQB HZkqBhRWt65elDAGQAjpuxDCGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlGf8Vb jes3cn0KhWjuI6GDERwaMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbWdSbhb3vglw8SIQC8LPVH2PK3gg6eTbCZa1GCpxjrwRswSR7casa L1bigb/kwQjeXP2AaeTvW1mtBbU1XqA2VwOSP0OM/S/gTajkK2f0mKbGRbDcbem6 NIt2CE4LDy2EdPssdr0aAX2IvcSvoBTvqLdFygv1j2SI9Z+yfrpYkxnKYjeb7ZJf mf97TERSxa9zbz/WibOe1BudyzmhL2jq6DQ05unCPkMqgkysJH+Tt7xTnI5ykDEO mYSUMyFozBMGu1eFjaTJKt6ID8uZFKBEbZtf4YdzgHsJt+fhzMMsqxzRtfNIMQjn QOUt9aUh2VoLUun6Oqs+IXsbHJ838iuV -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:35 2024 by rpki-client on console-ams.rpki-client.org