$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json) Hash identifier: DCqq39cY0Xf3zG13gb0yKyVCskBxLRMGZyFRPlycVII= Subject key identifier: 5B:AE:5B:E0:0B:42:A9:1D:6F:6A:7C:3D:C5:A0:93:3B:2A:07:EA:29 Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft Manifest number: 84 Signing time: Sat 23 Nov 2024 04:36:16 +0000 Manifest this update: Sat 23 Nov 2024 04:36:15 +0000 Manifest next update: Sat 30 Nov 2024 04:36:15 +0000 Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: BD/UFFQgbWU1l4F2LHE5aJ/MLAZ4Cktk8Nn8OK60J2U=) 2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: EUS1TcmCLEChYsSUsTW2xirwCeaCm7aIPgo/Dh+GRoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Validity Not Before: Nov 23 04:36:15 2024 GMT Not After : Nov 30 04:36:15 2024 GMT Subject: CN=67415bbf-02e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:c4:e1:83:97:de:4a:cb:69:76:ad:28:4a: 24:f3:71:d2:ec:f6:56:27:fd:4c:9d:95:3a:a7:10: 8b:09:67:b1:7a:c3:21:50:06:ca:82:24:5e:ad:67: 59:16:74:58:8a:b4:3e:db:21:b8:50:e8:8e:84:96: 4a:94:1e:5f:98:03:7e:c7:67:79:9c:cf:e7:a3:55: f4:b7:c0:a2:95:f9:c6:7a:e0:36:fa:39:e6:58:fc: 5b:be:03:6d:95:29:f6:fc:6b:29:8b:e8:b1:10:8a: 5b:c4:01:dd:79:c2:b6:bf:f8:6c:a4:69:cf:98:ca: 1d:5c:73:d9:be:9b:9c:55:bc:2b:56:f8:77:0c:45: 5c:40:e9:7b:c5:f5:a6:5b:1e:a5:52:c0:40:f3:e1: 01:e7:58:70:f0:84:7e:d0:e1:4f:b2:3a:39:41:d1: 95:11:eb:bb:f0:3f:ba:e7:7c:92:69:cc:c4:79:a9: 7a:9d:99:6b:2a:86:e7:98:02:f5:22:f2:9b:a5:aa: a6:97:f1:94:f2:14:da:c1:09:df:5e:87:70:b0:b7: 5a:64:dc:b9:90:db:55:d2:bc:b4:1f:93:62:a5:7c: 05:f1:3a:8d:a5:95:85:ce:27:53:50:49:e9:cb:a8: 54:39:79:5d:20:63:dc:0f:7c:20:5a:ab:7e:37:5c: 34:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AE:5B:E0:0B:42:A9:1D:6F:6A:7C:3D:C5:A0:93:3B:2A:07:EA:29 X509v3 Authority Key Identifier: keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a2:99:63:db:bd:c7:cc:33:4e:60:cf:87:9e:dd:25:6d:0e: 1b:5d:1d:78:84:29:b2:12:ea:9b:8f:ec:29:ef:b6:7b:bb:e3: 86:01:2b:0d:11:b5:84:60:15:96:2b:d7:3d:b3:03:c3:67:53: 39:66:05:3e:b0:74:2b:04:08:4e:2d:df:06:46:51:a4:5a:5b: bb:34:ae:89:e2:e1:34:9b:32:19:12:81:84:a7:1a:2e:6e:48: bc:14:c2:25:08:38:29:05:95:6b:4e:5e:76:9c:20:6a:4c:59: b4:95:57:58:2d:6d:f3:c1:06:4a:ba:ea:4d:e3:36:4d:69:65: aa:54:6c:24:0f:57:19:e2:9d:58:0b:a8:e8:0b:32:28:6a:52: 4e:04:20:7d:94:60:5d:9b:dc:aa:49:c3:ca:9d:56:97:a4:14: 49:b5:39:d5:aa:dd:21:17:c3:fb:5b:98:39:17:0c:52:44:1d: 88:3a:bd:ed:99:4b:7d:0f:9f:f9:8e:b4:d3:d2:a2:fe:4b:fd: 31:9e:ab:3f:88:75:e1:ac:21:94:ec:2c:e8:33:c3:28:39:f4: e4:5e:bf:c9:e9:95:4a:3f:82:62:1a:b1:86:59:1e:dc:83:bf: 69:b1:0b:38:c0:ac:ae:94:90:12:00:78:ac:41:25:6f:78:f1: 98:ae:15:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwNDExMTAvBgNVBAUTKDdEMjdGREM3MEZDRDE4QjZERDVCMDQyNjk1QUZERDhD MTczNUMxMzAwHhcNMjQxMTIzMDQzNjE1WhcNMjQxMTMwMDQzNjE1WjAYMRYwFAYD VQQDEw02NzQxNWJiZi0wMmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFfE4YOX3krLaXatKEok83HS7PZWJ/1MnZU6pxCLCWexesMhUAbKgiRerWdZ FnRYirQ+2yG4UOiOhJZKlB5fmAN+x2d5nM/no1X0t8CilfnGeuA2+jnmWPxbvgNt lSn2/Gspi+ixEIpbxAHdecK2v/hspGnPmModXHPZvpucVbwrVvh3DEVcQOl7xfWm Wx6lUsBA8+EB51hw8IR+0OFPsjo5QdGVEeu78D+653ySaczEeal6nZlrKobnmAL1 IvKbpaqml/GU8hTawQnfXodwsLdaZNy5kNtV0ry0H5NipXwF8TqNpZWFzidTUEnp y6hUOXldIGPcD3wgWqt+N1w0iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuuW+AL Qqkdb2p8PcWgkzsqB+opMB8GA1UdIwQYMBaAFH0n/ccPzRi23VsEJpWv3YwXNcEw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjA0MS8yRTcyRTBBRURD MzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdMYmRXd1FtbGFfZGpCYzF3 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjA0MS8yRTcyRTBBRURDMzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdM YmRXd1FtbGFfZGpCYzF3VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9oplj273HzDNOYM+Hnt0lbQ4bXR14hCmyEuqbj+wp77Z7u+OGASsN EbWEYBWWK9c9swPDZ1M5ZgU+sHQrBAhOLd8GRlGkWlu7NK6J4uE0mzIZEoGEpxou bki8FMIlCDgpBZVrTl52nCBqTFm0lVdYLW3zwQZKuupN4zZNaWWqVGwkD1cZ4p1Y C6joCzIoalJOBCB9lGBdm9yqScPKnVaXpBRJtTnVqt0hF8P7W5g5FwxSRB2IOr3t mUt9D5/5jrTT0qL+S/0xnqs/iHXhrCGU7CzoM8MoOfTkXr/J6ZVKP4JiGrGGWR7c g79psQs4wKyulJASAHisQSVvePGYrhXk -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:22 2024 by rpki-client on console-fra.rpki-client.org