$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft File: gg9wML6sbUnxCbqOwlplvyNprS8.mft (raw, json) Hash identifier: xF1JWKbLblplGYEWGhMkV6RPwCSteVTGKVCw9CzTBeg= Subject key identifier: B1:AA:9C:07:55:EC:70:3E:0A:5E:6D:B7:84:55:4D:7F:95:C4:46:1A Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft Manifest number: 0141 Signing time: Wed 27 Nov 2024 02:43:14 +0000 Manifest this update: Wed 27 Nov 2024 02:43:14 +0000 Manifest next update: Wed 04 Dec 2024 02:43:14 +0000 Files and hashes: 1: gg9wML6sbUnxCbqOwlplvyNprS8.crl (hash: /JJv5fGMPH7e1+OIqCpFSezag0T8rYEAXD9w+RELl6M=) 2: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (hash: /+LBjF6lBPLxhQK10OGPQmB3GU8J3/dgM8FRgJhuXxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Dec 2024 02:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Validity Not Before: Nov 27 02:43:14 2024 GMT Not After : Dec 4 02:43:14 2024 GMT Subject: CN=67468742-9f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:34:43:49:5b:44:7c:75:16:4b:97:f5:b1: cb:34:89:47:31:b0:fb:57:7f:da:dd:75:28:1b:c3: 39:2c:07:6c:03:42:0b:29:37:fc:a0:8a:e5:8f:5a: 3e:13:77:f4:9e:80:bf:72:11:8c:f0:cd:29:f6:3f: 4f:cc:e0:56:0c:fc:ad:18:4d:e3:32:0c:bf:3b:b7: 26:06:8c:46:8f:ff:df:15:44:1e:ec:1b:f5:10:0a: 4f:00:56:88:86:f1:79:f0:4c:12:9e:bc:1d:1a:b9: 3d:58:88:1c:51:67:25:22:20:4b:79:ce:57:49:e8: 89:8c:1f:d7:65:99:18:12:d5:60:df:6e:a4:c2:7e: 58:c5:9d:3d:88:27:a2:67:86:91:f8:82:2e:de:a6: b9:c4:70:90:24:63:95:40:b7:f7:19:81:05:96:bc: ed:15:36:c4:dd:37:8a:32:44:f6:f9:14:7a:0b:c1: f2:20:87:c3:cc:3d:b0:c8:c2:b2:05:a0:84:c7:c2: 3e:b0:66:ec:66:eb:9c:00:4b:d3:27:29:b6:b8:cd: ea:95:1e:86:ed:31:40:eb:b7:b6:2c:99:fb:fe:72: b5:bb:20:26:9c:3a:1f:8b:e9:eb:eb:75:b2:47:9d: 2c:3c:56:da:22:ac:41:c3:dc:38:e0:5a:ea:bf:19: d7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AA:9C:07:55:EC:70:3E:0A:5E:6D:B7:84:55:4D:7F:95:C4:46:1A X509v3 Authority Key Identifier: keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ab:4c:e0:90:39:eb:93:11:38:62:af:08:e9:b6:43:7f:01: c4:9e:b6:bc:27:15:7f:98:dc:26:db:40:dd:33:1f:85:b9:02: 0d:e2:0e:e8:ba:4a:f8:0e:50:34:57:23:79:cf:54:a3:0a:53: 4d:85:83:a4:7e:a7:ba:9f:0c:2b:e5:7b:ad:77:d5:54:3b:67: 81:f3:de:86:db:dd:57:f7:13:ca:ba:41:9e:f4:84:e4:cc:31: e4:db:80:96:4b:16:ec:78:82:b7:8e:ed:8b:70:80:5a:8b:b4: 0d:41:6e:5d:6c:e5:c4:52:f3:7e:9b:01:ad:73:02:04:eb:02: 97:70:3b:c0:17:b7:7d:7e:bc:f3:61:19:e5:34:85:0c:39:af: c7:19:53:11:a6:a6:22:02:d3:e8:97:64:62:61:0c:42:5e:4c: 65:d0:c3:ed:4d:84:6c:d6:e5:56:f9:9f:d6:31:7a:3d:8e:46: 70:36:5f:d3:8c:42:f7:be:dd:fa:bf:c1:db:d8:79:69:70:8d: 79:df:e9:b1:42:6a:99:5d:d2:67:ea:ab:99:65:73:f7:85:40: 3a:41:21:c0:84:6f:0a:c8:5e:2f:84:b5:b0:06:20:83:16:7f: 9f:79:39:99:10:3f:29:14:aa:05:10:8b:e4:07:1c:9d:5b:b2: 11:66:7a:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEQUExMTAvBgNVBAUTKDgyMEY3MDMwQkVBQzZENDlGMTA5QkE4RUMyNUE2NUJG MjM2OUFEMkYwHhcNMjQxMTI3MDI0MzE0WhcNMjQxMjA0MDI0MzE0WjAYMRYwFAYD VQQDEw02NzQ2ODc0Mi05ZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdY0Q0lbRHx1FkuX9bHLNIlHMbD7V3/a3XUoG8M5LAdsA0ILKTf8oIrlj1o+ E3f0noC/chGM8M0p9j9PzOBWDPytGE3jMgy/O7cmBoxGj//fFUQe7Bv1EApPAFaI hvF58EwSnrwdGrk9WIgcUWclIiBLec5XSeiJjB/XZZkYEtVg326kwn5YxZ09iCei Z4aR+IIu3qa5xHCQJGOVQLf3GYEFlrztFTbE3TeKMkT2+RR6C8HyIIfDzD2wyMKy BaCEx8I+sGbsZuucAEvTJym2uM3qlR6G7TFA67e2LJn7/nK1uyAmnDofi+nr63Wy R50sPFbaIqxBw9w44FrqvxnXMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGqnAdV 7HA+Cl5tt4RVTX+VxEYaMB8GA1UdIwQYMBaAFIIPcDC+rG1J8Qm6jsJaZb8jaa0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkRBQS83MUVCN0M1QUMx OTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JVbnhDYnFPd2xwbHZ5TnBy UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnOXdNTDZzYlVueENicU93bHBsdnlOcHJTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkRBQS83MUVCN0M1QUMxOTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JV bnhDYnFPd2xwbHZ5TnByUzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQq0zgkDnrkxE4Yq8I6bZDfwHEnra8JxV/mNwm20DdMx+FuQIN4g7o ukr4DlA0VyN5z1SjClNNhYOkfqe6nwwr5Xutd9VUO2eB896G291X9xPKukGe9ITk zDHk24CWSxbseIK3ju2LcIBai7QNQW5dbOXEUvN+mwGtcwIE6wKXcDvAF7d9frzz YRnlNIUMOa/HGVMRpqYiAtPol2RiYQxCXkxl0MPtTYRs1uVW+Z/WMXo9jkZwNl/T jEL3vt36v8Hb2HlpcI153+mxQmqZXdJn6quZZXP3hUA6QSHAhG8KyF4vhLWwBiCD Fn+feTmZED8pFKoFEIvkBxydW7IRZnps -----END CERTIFICATE-----Generated at Wed Nov 27 04:02:57 2024 by rpki-client on console-fra.rpki-client.org