$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json) Hash identifier: xhqv2Ono2RTk+uUR5PJLRkpwKN/Sj0Y2iAaZQe1f5oI= Subject key identifier: F2:35:2D:0D:DE:A9:E6:09:CC:C0:39:B0:8F:FD:97:18:B7:0C:88:1A Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Certificate serial: 0946 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft Manifest number: 0939 Signing time: Fri 22 Nov 2024 20:02:43 +0000 Manifest this update: Fri 22 Nov 2024 20:02:42 +0000 Manifest next update: Fri 29 Nov 2024 20:02:42 +0000 Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: 8NC8uzpoqyEqIcgttMROaPIATUfZbHIuz3ipdpsd03Y=) 2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: ucsG3JUlQ5ojNwMw0vdbiiFMM62lab8Xx2ffPDkDaVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2374 (0x946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Validity Not Before: Nov 22 20:02:42 2024 GMT Not After : Nov 29 20:02:42 2024 GMT Subject: CN=6740e363-87a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:52:28:90:5b:99:7b:fc:c2:42:71:0f:da: f5:7a:0d:84:83:ab:ca:e6:fe:8b:53:18:bd:a4:ea: 78:1f:72:23:8b:bf:2d:37:30:42:4a:ee:b1:69:cc: f9:5f:b6:48:d9:63:7f:a0:78:9b:4a:81:eb:ed:8e: b2:5b:1d:cb:04:2d:ac:b2:33:a8:e7:7e:4d:9f:20: fe:6b:f1:c3:01:e6:8c:de:e8:3b:d0:3d:35:b2:3a: ca:4c:d6:6d:22:d7:5e:88:e1:c4:b6:6c:7d:86:4a: e6:76:e6:5e:8e:ef:e8:9a:28:5f:26:88:79:13:05: 77:d6:ec:ef:ad:16:30:37:5c:9c:b3:d1:3a:7a:7e: db:99:90:2a:14:71:24:14:23:96:ea:0f:dc:ba:50: 0e:a0:8c:ff:03:44:28:7e:1e:ce:67:74:33:44:f3: c2:8d:70:ce:72:41:2f:91:b4:be:74:52:4b:8d:fe: 23:2d:40:98:8b:67:79:e4:11:76:91:30:07:47:a2: dc:0b:4a:45:a8:9c:dd:b3:6d:a4:7c:11:68:6e:82: b7:9c:57:eb:cc:8f:a5:6c:d6:77:f6:85:51:a6:97: 11:b8:99:49:12:bd:94:df:5c:7a:fa:20:11:45:7f: 2b:6f:85:dc:45:8f:41:1e:06:ce:a1:f1:5b:2f:6e: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:35:2D:0D:DE:A9:E6:09:CC:C0:39:B0:8F:FD:97:18:B7:0C:88:1A X509v3 Authority Key Identifier: keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f0:c6:54:01:e4:83:87:4e:47:6d:4d:09:f5:c4:31:1a:22: 32:8e:c2:2d:92:36:ae:f2:35:19:04:43:9e:52:0c:4b:76:62: 94:d1:c0:37:0a:da:08:16:28:68:aa:2e:3e:65:39:c2:0c:f5: 9e:68:2f:bd:6b:47:99:5b:aa:de:ef:d3:1d:63:4b:76:36:08: c3:0b:ee:33:d2:de:5b:9e:5c:62:a7:17:33:54:df:c8:e6:8b: d9:cf:51:2e:c1:ab:13:d8:d8:3c:4d:9a:bb:e7:e8:73:b8:92: d5:8a:19:e2:46:52:07:e1:8c:eb:25:47:83:9b:ed:e1:a4:58: db:4e:31:12:4b:43:f1:98:b6:5e:8a:3c:0c:89:22:ee:b9:e9: 10:a3:5e:c1:ce:a4:1d:48:01:7d:fe:b4:d9:de:d3:41:d2:ea: 31:f9:df:8a:ef:6c:44:66:6d:48:72:cf:75:b3:c9:5e:8a:c1: a2:1a:5a:cd:89:62:96:9b:7b:d6:72:3e:28:2a:4b:4e:8c:2d: e3:b6:44:7a:31:18:12:29:12:73:b7:e2:69:b2:9c:30:80:78: 30:7f:02:4d:8e:4a:b9:53:52:87:92:66:41:fc:8c:7c:5d:83: 72:8b:c6:4a:e9:d6:70:d7:e4:aa:4c:6d:31:cb:58:0f:1d:ef: a2:fc:5a:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlEQ0IxMTAvBgNVBAUTKDA3QTYwN0RDQTkzMzMyMUZGNzhGRUM2OENEN0E0QzE0 OTU0MzdBNUYwHhcNMjQxMTIyMjAwMjQyWhcNMjQxMTI5MjAwMjQyWjAYMRYwFAYD VQQDEw02NzQwZTM2My04N2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyANSKJBbmXv8wkJxD9r1eg2Eg6vK5v6LUxi9pOp4H3Iji78tNzBCSu6xacz5 X7ZI2WN/oHibSoHr7Y6yWx3LBC2ssjOo535NnyD+a/HDAeaM3ug70D01sjrKTNZt ItdeiOHEtmx9hkrmduZeju/omihfJoh5EwV31uzvrRYwN1ycs9E6en7bmZAqFHEk FCOW6g/culAOoIz/A0Qofh7OZ3QzRPPCjXDOckEvkbS+dFJLjf4jLUCYi2d55BF2 kTAHR6LcC0pFqJzds22kfBFoboK3nFfrzI+lbNZ39oVRppcRuJlJEr2U31x6+iAR RX8rb4XcRY9BHgbOofFbL272EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPI1LQ3e qeYJzMA5sI/9lxi3DIgaMB8GA1UdIwQYMBaAFAemB9ypMzIf94/saM16TBSVQ3pf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOURDQi83QzlFQzlCQThD NEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1oXzNqLXhvelhwTUZKVkRl bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2WUgzS2t6TWhfM2oteG96WHBNRkpWRGVsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OURDQi83QzlFQzlCQThDNEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1o XzNqLXhvelhwTUZKVkRlbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR8MZUAeSDh05HbU0J9cQxGiIyjsItkjau8jUZBEOeUgxLdmKU0cA3 CtoIFihoqi4+ZTnCDPWeaC+9a0eZW6re79MdY0t2NgjDC+4z0t5bnlxipxczVN/I 5ovZz1EuwasT2Ng8TZq75+hzuJLVihniRlIH4YzrJUeDm+3hpFjbTjESS0PxmLZe ijwMiSLuuekQo17BzqQdSAF9/rTZ3tNB0uox+d+K72xEZm1Ics91s8leisGiGlrN iWKWm3vWcj4oKktOjC3jtkR6MRgSKRJzt+JpspwwgHgwfwJNjkq5U1KHkmZB/Ix8 XYNyi8ZK6dZw1+SqTG0xy1gPHe+i/Frr -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org