$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json) Hash identifier: fQ0k1oIP9wzj7Nslqm5NNwWexe7e85f7Mw7D9mYK2fE= Subject key identifier: FB:03:B5:E4:1B:AA:BF:3F:D4:BC:D0:9C:19:A1:A7:10:C7:42:27:AB Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Certificate serial: 0BD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft Manifest number: 0BCF Signing time: Fri 22 Nov 2024 18:33:43 +0000 Manifest this update: Fri 22 Nov 2024 18:33:43 +0000 Manifest next update: Fri 29 Nov 2024 18:33:43 +0000 Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: xUYondePAoCQOAprhjNLrIC8DVvb8e6Rl75bpwjk6CU=) 2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: ReXGjvFy+TWrsr7RgwOcoe4seJnPX23TJX01LZAfVPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3033 (0xbd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Validity Not Before: Nov 22 18:33:43 2024 GMT Not After : Nov 29 18:33:43 2024 GMT Subject: CN=6740ce87-e0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:1d:1c:72:8a:9f:e0:91:6f:81:78:ab:15: 0f:63:5a:b7:82:7c:89:66:3d:fa:c4:1a:70:c3:ab: 2e:0d:97:85:dc:3e:82:86:1c:97:96:28:35:e5:66: 19:6d:8d:eb:2d:be:eb:ad:38:11:fc:16:32:be:83: c3:63:88:96:52:01:9e:2a:c5:f5:5e:ad:3c:2c:4a: 59:bf:2e:4a:44:3a:6a:a5:46:4e:5a:86:46:7f:02: 9c:32:af:cf:56:8e:9f:c7:7e:83:80:fb:1c:8e:4b: 62:c6:da:20:ce:e2:de:47:1d:5b:41:25:78:d7:b7: c2:c3:f0:67:f1:f3:1f:3b:77:4e:00:82:67:65:03: 0c:4c:84:d5:40:6d:08:c5:7c:f5:30:2f:c7:f3:e4: 89:61:a3:e1:b4:52:95:0c:e9:ff:51:00:de:95:74: 79:47:ef:f1:f8:ea:47:ab:bd:b5:a9:77:01:85:9c: 53:42:13:37:bb:8a:ce:cc:78:c7:bd:45:9e:7a:82: 10:51:29:07:30:ab:a2:2f:5d:ee:1f:c8:65:67:b8: 65:54:9c:40:9b:c5:98:d4:43:dd:34:9c:e0:25:8b: 11:fa:ac:d1:b8:8a:5a:c8:ce:b9:86:48:c9:13:bf: c0:3e:cb:58:e2:fb:15:52:e7:1a:1e:c2:f6:f5:a1: 39:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:03:B5:E4:1B:AA:BF:3F:D4:BC:D0:9C:19:A1:A7:10:C7:42:27:AB X509v3 Authority Key Identifier: keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e4:0e:ac:b7:63:7e:18:1f:c6:15:9d:f2:3e:5b:c6:27:0c: c6:83:66:fe:18:26:6f:bd:8b:0d:f3:41:ca:b2:0a:e2:20:42: f7:ce:fe:ac:6f:e6:0a:94:2b:76:04:92:7c:75:eb:db:10:c9: d8:a8:bd:58:14:42:5d:d0:5f:7e:c5:35:57:87:56:dc:00:e8: 11:79:fe:32:47:51:ab:27:37:14:22:41:d7:4f:94:5d:c1:30: e1:17:fb:ad:75:8f:bb:be:e0:8b:2a:94:91:20:a3:da:4e:ba: 7b:14:ca:cf:89:28:73:24:58:0d:bd:1b:2c:b1:fa:d0:6d:b0: 61:ad:c2:30:5b:78:96:d6:e1:1c:8e:44:be:9f:38:12:4c:18: 9d:47:73:37:a0:47:87:e5:73:96:85:0c:45:ac:0e:4c:c6:d5: 8b:a1:c4:eb:75:b2:8b:58:47:e7:05:e2:53:8b:2c:bc:00:40: 01:c4:d2:f5:dc:4f:ad:ec:1a:1d:23:10:f8:a5:5c:6c:47:fd: 5a:32:90:36:f6:b2:eb:a4:0d:22:4c:95:15:eb:f0:30:44:ef: 1b:59:c2:c1:b4:64:4b:9c:60:a2:79:3c:0d:ed:f9:38:ca:e0: d6:3b:20:b7:e2:00:c9:f4:29:da:00:35:0c:07:c7:f5:99:40: cc:4c:e5:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx NzA3ODIwNzQwHhcNMjQxMTIyMTgzMzQzWhcNMjQxMTI5MTgzMzQzWjAYMRYwFAYD VQQDEw02NzQwY2U4Ny1lMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwokdHHKKn+CRb4F4qxUPY1q3gnyJZj36xBpww6suDZeF3D6ChhyXlig15WYZ bY3rLb7rrTgR/BYyvoPDY4iWUgGeKsX1Xq08LEpZvy5KRDpqpUZOWoZGfwKcMq/P Vo6fx36DgPscjktixtogzuLeRx1bQSV417fCw/Bn8fMfO3dOAIJnZQMMTITVQG0I xXz1MC/H8+SJYaPhtFKVDOn/UQDelXR5R+/x+OpHq721qXcBhZxTQhM3u4rOzHjH vUWeeoIQUSkHMKuiL13uH8hlZ7hlVJxAm8WY1EPdNJzgJYsR+qzRuIpayM65hkjJ E7/APstY4vsVUucaHsL29aE5KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsDteQb qr8/1LzQnBmhpxDHQierMB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5 RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzA0OS9BREFDNTI4MjA5RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lY NFZnNUFxanZudVVYQjRJSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI5A6st2N+GB/GFZ3yPlvGJwzGg2b+GCZvvYsN80HKsgriIEL3zv6s b+YKlCt2BJJ8devbEMnYqL1YFEJd0F9+xTVXh1bcAOgRef4yR1GrJzcUIkHXT5Rd wTDhF/utdY+7vuCLKpSRIKPaTrp7FMrPiShzJFgNvRsssfrQbbBhrcIwW3iW1uEc jkS+nzgSTBidR3M3oEeH5XOWhQxFrA5MxtWLocTrdbKLWEfnBeJTiyy8AEABxNL1 3E+t7BodIxD4pVxsR/1aMpA29rLrpA0iTJUV6/AwRO8bWcLBtGRLnGCieTwN7fk4 yuDWOyC34gDJ9CnaADUMB8f1mUDMTOWX -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:58 2024 by rpki-client on console-fra.rpki-client.org