$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft File: 8iRPqPsPyfURGt76wZeZwp88iFs.mft (raw, json) Hash identifier: p76RRG9cbuJaTUO/4ZG2/Zfeo+5Zy0gE6UZsHzNFVjo= Subject key identifier: BF:37:A2:B9:3B:10:91:D2:0E:20:46:BD:68:D1:73:96:76:55:4F:48 Authority key identifier: F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B Certificate issuer: /CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft Manifest number: 0138 Signing time: Sat 23 Nov 2024 02:44:20 +0000 Manifest this update: Sat 23 Nov 2024 02:44:19 +0000 Manifest next update: Sat 30 Nov 2024 02:44:19 +0000 Files and hashes: 1: 8iRPqPsPyfURGt76wZeZwp88iFs.crl (hash: Cjm+i1w4BwwtbNhhb3+ZlmQ9pf76apraj/Ud4TZtNII=) 2: A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa (hash: cIVUE+RHP6rif8Wd67K4ZpYK/J6GHtr54/xW7v8taNg=) 3: A9862EACCC7A11EDA9430E31C4F9AE02.roa (hash: qjCxdHYWEDQFlZr0i7PrJOgRU1neZetEYJ3q0f8InRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Validity Not Before: Nov 23 02:44:19 2024 GMT Not After : Nov 30 02:44:19 2024 GMT Subject: CN=67414183-f833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d1:06:1c:29:74:40:7e:28:de:ae:6d:0c:90: d6:e4:64:b6:f9:a7:1f:aa:7a:99:b2:ac:47:96:31: 7c:ea:43:4c:d7:59:b7:e6:7d:ac:6e:44:81:18:12: 07:b8:0f:1d:62:43:bf:ac:3c:9b:49:ce:7b:99:74: 3b:7f:86:e9:60:50:b9:f6:1e:d2:03:ea:16:e6:99: d2:53:4d:c9:ef:ca:b2:f4:9f:48:03:82:b8:85:81: 64:c8:3d:03:df:56:89:dc:08:fd:8d:80:88:cc:4e: e7:79:1e:a4:9e:eb:df:d6:c6:f1:c7:ae:5a:ff:fc: b5:5c:6d:5d:2e:4b:f4:e3:66:79:86:ff:d4:0a:78: 11:d9:f3:97:76:ac:1d:b8:6d:69:91:f0:62:ad:85: 99:12:25:ab:b8:c1:65:61:e7:fe:28:44:de:8a:e0: 29:28:c6:63:76:b0:10:f2:e4:a8:f2:c2:2d:4a:5d: c0:0d:54:6f:ac:0b:ab:32:20:7b:13:39:50:4e:2f: 1f:7e:d8:b3:3c:8a:f3:aa:56:94:f0:21:24:d8:1f: 39:41:53:8d:e3:b3:03:3c:84:8a:19:e9:2e:3b:ef: 00:98:ed:1e:55:16:38:88:8a:e7:f8:e1:f4:8a:50: ed:ec:d6:e1:8a:cc:0f:10:8e:41:5c:60:0d:07:4f: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:37:A2:B9:3B:10:91:D2:0E:20:46:BD:68:D1:73:96:76:55:4F:48 X509v3 Authority Key Identifier: keyid:F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:25:f6:2e:fc:64:43:23:5f:df:c9:12:56:ba:ea:0f:60:c3: d8:72:37:ca:0c:ae:a6:a8:c9:c3:42:b1:be:45:76:54:da:75: 94:58:9c:d4:6a:38:45:bf:0e:a5:1e:80:21:71:67:79:18:41: 93:63:0a:f7:d3:cc:28:d7:b3:0c:20:ba:18:14:06:7f:68:3a: 92:a8:5c:12:1e:5c:15:17:ff:67:d6:82:7c:34:98:bf:2b:72: 89:a3:e5:42:79:7e:f2:28:b9:82:da:7f:40:40:41:f9:a3:f6: f7:e7:6f:e0:23:de:2a:dc:fe:3a:a2:89:3a:e1:9b:e5:8a:1e: 3a:7f:51:af:89:d8:b0:11:9f:a1:54:d3:2a:07:b8:6d:88:92: a4:89:c8:84:4b:d9:be:51:ae:ef:1e:24:8c:6b:e4:45:b4:8b: 9b:35:35:df:ef:aa:47:d7:e1:7e:bd:a4:ce:bd:f4:38:01:ea: fd:3f:c9:17:3d:b0:04:76:89:75:a9:0e:55:b7:6a:41:5d:bb: 1d:ef:79:87:9c:fb:c9:be:f2:2e:fd:84:84:dc:d6:a0:0a:fc: 8f:f1:c4:c2:14:9e:b8:5c:45:bf:7e:4c:79:f7:27:59:18:a2: 82:19:a6:64:80:2d:a8:6b:5c:78:ca:9a:14:c1:ca:4d:8c:30: 0e:91:17:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDMjAxMTAvBgNVBAUTKEYyMjQ0RkE4RkIwRkM5RjUxMTFBREVGQUMxOTc5OUMy OUYzQzg4NUIwHhcNMjQxMTIzMDI0NDE5WhcNMjQxMTMwMDI0NDE5WjAYMRYwFAYD VQQDEw02NzQxNDE4My1mODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9EGHCl0QH4o3q5tDJDW5GS2+acfqnqZsqxHljF86kNM11m35n2sbkSBGBIH uA8dYkO/rDybSc57mXQ7f4bpYFC59h7SA+oW5pnSU03J78qy9J9IA4K4hYFkyD0D 31aJ3Aj9jYCIzE7neR6knuvf1sbxx65a//y1XG1dLkv042Z5hv/UCngR2fOXdqwd uG1pkfBirYWZEiWruMFlYef+KETeiuApKMZjdrAQ8uSo8sItSl3ADVRvrAurMiB7 EzlQTi8fftizPIrzqlaU8CEk2B85QVON47MDPISKGekuO+8AmO0eVRY4iIrn+OH0 ilDt7NbhiswPEI5BXGANB0+d+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL83ork7 EJHSDiBGvWjRc5Z2VU9IMB8GA1UdIwQYMBaAFPIkT6j7D8n1ERre+sGXmcKfPIhb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEMyMC9BNUE0Q0QxMEND NzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlmVVJHdDc2d1plWndwODhp RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpUlBxUHNQeWZVUkd0NzZ3WmVad3A4OGlGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEMyMC9BNUE0Q0QxMENDNzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlm VVJHdDc2d1plWndwODhpRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwJfYu/GRDI1/fyRJWuuoPYMPYcjfKDK6mqMnDQrG+RXZU2nWUWJzU ajhFvw6lHoAhcWd5GEGTYwr308wo17MMILoYFAZ/aDqSqFwSHlwVF/9n1oJ8NJi/ K3KJo+VCeX7yKLmC2n9AQEH5o/b352/gI94q3P46ook64Zvlih46f1GvidiwEZ+h VNMqB7htiJKkiciES9m+Ua7vHiSMa+RFtIubNTXf76pH1+F+vaTOvfQ4Aer9P8kX PbAEdol1qQ5Vt2pBXbsd73mHnPvJvvIu/YSE3NagCvyP8cTCFJ64XEW/fkx59ydZ GKKCGaZkgC2oa1x4ypoUwcpNjDAOkReA -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org