$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft File: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft (raw, json) Hash identifier: ZxjU/pEMHkBGGsJlG3RRH5uPzidFsUUHfuf0PYLBbco= Subject key identifier: B4:5A:DE:D5:0F:F6:89:79:98:AC:33:51:3F:C4:B4:62:CB:15:4B:3A Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA Certificate issuer: /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA Certificate serial: 0735 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft Manifest number: 0730 Signing time: Fri 22 Nov 2024 21:13:49 +0000 Manifest this update: Fri 22 Nov 2024 21:13:49 +0000 Manifest next update: Fri 29 Nov 2024 21:13:49 +0000 Files and hashes: 1: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl (hash: EukFTFLxJbymdXf7w6VkgwyOba0x5yZeOOQu2mcYQ6I=) 2: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (hash: lQuYTmzbWqVTipV5dBAW6RtYN+NeD8PEIlyhiPdwE1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1845 (0x735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA Validity Not Before: Nov 22 21:13:49 2024 GMT Not After : Nov 29 21:13:49 2024 GMT Subject: CN=6740f40d-bc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:14:83:ef:b5:a6:ec:30:f3:e6:74:bc:bb: 63:28:5f:9f:31:86:e9:9f:f1:b8:3e:d5:f8:b7:e7: 54:6a:50:3e:9e:4e:69:d0:34:c1:0b:64:24:aa:10: 4c:74:79:e6:b6:3c:22:6c:1a:91:da:1b:db:ab:fa: 7a:60:50:58:21:e6:46:5a:ae:9b:10:95:68:ff:9a: 3c:15:cc:3e:8f:16:1a:21:d5:e5:6e:80:ca:1c:49: 39:93:1f:24:c3:82:e8:f3:93:c0:fb:d7:66:5a:d8: 71:d0:34:38:ce:fc:0b:38:75:e3:ab:a4:df:20:1f: e9:0a:65:52:da:1f:60:8f:31:f8:49:4a:91:eb:c3: a7:67:38:0b:f4:ff:de:f1:c7:e3:8a:84:22:43:5c: d5:f4:3a:db:d3:3d:89:37:96:f3:c5:d7:85:af:48: 63:33:8f:0a:cb:7c:90:8f:db:4e:52:e2:6b:fb:d2: 6e:59:5c:16:eb:92:50:44:12:8c:8d:32:79:b6:0d: 0f:7e:62:bd:21:67:05:34:5a:be:22:c4:0e:84:b2: b3:e6:2d:43:94:70:c0:26:9b:72:50:eb:d2:6f:d4: fb:eb:f6:4e:fc:48:f6:48:98:af:81:11:87:47:ca: 2f:21:89:57:b1:e2:c1:3a:f4:0e:cb:72:70:5d:1f: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5A:DE:D5:0F:F6:89:79:98:AC:33:51:3F:C4:B4:62:CB:15:4B:3A X509v3 Authority Key Identifier: keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:96:4d:bb:99:52:87:10:fc:56:af:72:d3:f7:e2:48:54:fe: fc:14:71:9a:cc:81:41:cb:49:6f:0f:9a:b8:fe:4f:35:67:76: 71:0b:e0:d8:d2:a6:e6:49:60:f2:46:48:57:cc:f6:73:9f:ab: 33:09:47:b5:34:ca:bc:d4:d1:55:cd:7c:f2:bb:fe:1f:c1:b9: 8c:1d:b1:ad:4c:7d:10:1c:ac:c3:4e:c6:e0:b9:76:01:d0:8e: 16:ba:8f:e0:1f:d0:3d:c6:53:97:ee:30:b5:07:fe:1b:96:3f: 3e:df:4e:97:54:0f:bf:3e:7d:3d:f5:0c:2e:27:87:1a:89:62: 8d:c6:3e:98:18:3a:9b:13:41:a2:3d:d6:4a:7c:59:66:f0:30: 56:4b:e3:aa:8f:40:02:1f:46:35:e2:34:57:6c:4c:15:17:7b: 2a:de:66:40:3a:97:c9:30:f6:47:06:9a:9f:7e:94:2c:b5:43: f6:95:bb:5c:f2:4d:12:47:ea:39:37:cb:ee:db:1c:53:c5:3a: 84:b3:a0:1a:05:12:bd:55:1f:2c:50:09:05:28:3c:0b:20:c6: 03:24:c8:eb:ce:39:20:d2:64:7b:24:60:7e:7a:1f:c2:4f:61: a8:09:3a:76:7c:f7:22:42:2b:29:2f:be:a7:1f:1b:e6:46:6f: d2:ca:8f:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk2ODAxMTAvBgNVBAUTKEI3NTkwOTJBNjkxOEY0NUVBQ0QwRENGREY5NzFEMEQz RkE1MDIxQUEwHhcNMjQxMTIyMjExMzQ5WhcNMjQxMTI5MjExMzQ5WjAYMRYwFAYD VQQDEw02NzQwZjQwZC1iYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/AUg++1puww8+Z0vLtjKF+fMYbpn/G4PtX4t+dUalA+nk5p0DTBC2QkqhBM dHnmtjwibBqR2hvbq/p6YFBYIeZGWq6bEJVo/5o8Fcw+jxYaIdXlboDKHEk5kx8k w4Lo85PA+9dmWthx0DQ4zvwLOHXjq6TfIB/pCmVS2h9gjzH4SUqR68OnZzgL9P/e 8cfjioQiQ1zV9Drb0z2JN5bzxdeFr0hjM48Ky3yQj9tOUuJr+9JuWVwW65JQRBKM jTJ5tg0PfmK9IWcFNFq+IsQOhLKz5i1DlHDAJptyUOvSb9T76/ZO/Ej2SJivgRGH R8ovIYlXseLBOvQOy3JwXR99CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRa3tUP 9ol5mKwzUT/EtGLLFUs6MB8GA1UdIwQYMBaAFLdZCSppGPRerNDc/flx0NP6UCGq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTY4MC83NEY3QkJGQzBC QTExMUVCQjkzMjEyMUJDNEY5QUUwMi90MWtKS21rWTlGNnMwTno5LVhIUTBfcFFJ YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Qxa0pLbWtZOUY2czBOejktWEhRMF9wUUlhby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTY4MC83NEY3QkJGQzBCQTExMUVCQjkzMjEyMUJDNEY5QUUwMi90MWtKS21rWTlG NnMwTno5LVhIUTBfcFFJYW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAlk27mVKHEPxWr3LT9+JIVP78FHGazIFBy0lvD5q4/k81Z3ZxC+DY 0qbmSWDyRkhXzPZzn6szCUe1NMq81NFVzXzyu/4fwbmMHbGtTH0QHKzDTsbguXYB 0I4Wuo/gH9A9xlOX7jC1B/4blj8+306XVA+/Pn099QwuJ4caiWKNxj6YGDqbE0Gi PdZKfFlm8DBWS+Oqj0ACH0Y14jRXbEwVF3sq3mZAOpfJMPZHBpqffpQstUP2lbtc 8k0SR+o5N8vu2xxTxTqEs6AaBRK9VR8sUAkFKDwLIMYDJMjrzjkg0mR7JGB+eh/C T2GoCTp2fPciQispL76nHxvmRm/Syo/9 -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:07 2024 by rpki-client on console-fra.rpki-client.org