$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: wwYRKyZsCwAmSv5XYqATOI0b2sHlMXKktPnKBSoDLDM= Subject key identifier: CA:EE:DB:FE:7D:49:76:9A:EF:D9:3F:CA:03:F9:E8:93:A5:9A:FB:35 Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 09E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 09DC Signing time: Fri 22 Nov 2024 19:41:44 +0000 Manifest this update: Fri 22 Nov 2024 19:41:43 +0000 Manifest next update: Fri 29 Nov 2024 19:41:43 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: WMhzWLBFVoyPGuyG3nb7HUyogJYMyQaIe53S1QYY8JY=) 2: 64AFBE3E69BC11EA97D4FE67C4F9AE02.roa (hash: AGi6WLaD/fMCwEuDk+FFNuutFaq5yGhDQV+II3VrbtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2529 (0x9e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Nov 22 19:41:43 2024 GMT Not After : Nov 29 19:41:43 2024 GMT Subject: CN=6740de78-bc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:51:33:09:b9:bd:ef:bc:49:09:7b:e7:4a: 74:dd:c7:53:03:ba:5d:84:22:dd:10:49:ec:f9:38: c4:e9:97:0c:91:a7:b6:d2:c1:f3:ff:95:79:93:a6: d9:e6:dd:5d:76:ec:28:da:4d:fb:31:b3:a6:ef:62: b0:bc:4d:48:79:fb:ae:7a:af:d9:a7:ba:99:09:f3: 67:29:4c:c7:9c:b6:dc:8b:d6:18:c8:7a:bc:e7:e6: 9b:a5:28:52:66:2e:53:d9:2d:23:3a:64:af:58:fd: ce:bc:28:c2:eb:31:7c:fb:10:65:81:61:04:b0:77: a9:d1:2c:3b:6f:f6:e2:03:10:45:1c:69:c7:3d:3c: 71:b6:cb:cb:a7:75:55:a9:5c:1c:cf:6b:ac:fd:5b: 04:85:ef:eb:46:4d:55:65:34:ee:4d:bb:48:dd:71: 73:7c:01:24:60:a1:83:1d:d2:ab:7a:e9:17:68:aa: f7:b6:17:73:15:cd:78:a8:a7:ce:6a:cb:e1:14:0d: 2d:fa:af:4d:c9:90:ec:11:8d:60:3c:6f:ed:e0:75: 45:5b:83:3b:19:88:4f:3f:b1:f3:05:8b:14:37:38: 1c:59:fa:51:5c:07:90:53:ad:26:70:95:8f:0b:0f: dc:5e:fb:d0:16:3d:b9:9e:9e:81:6e:c9:b8:76:de: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EE:DB:FE:7D:49:76:9A:EF:D9:3F:CA:03:F9:E8:93:A5:9A:FB:35 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:6f:11:e6:08:8d:09:e2:96:da:ed:61:6e:b0:ef:8f:e8:ea: cf:91:e2:47:73:46:3d:28:0d:7f:7d:ce:d6:10:21:4a:62:7e: 22:83:60:8c:59:dd:ac:cd:d1:3b:68:6c:c4:3d:07:b7:87:8a: b5:77:1d:ce:4f:da:8d:43:fa:7f:28:96:d5:dd:94:7c:28:0e: 2b:6f:43:2b:d5:3f:f2:d5:42:09:a0:c8:82:44:4a:0b:25:bc: 1d:47:9c:ac:49:ce:03:f8:89:62:0d:84:5e:5d:02:3f:db:7c: 77:be:02:f2:45:94:7f:89:bf:e1:96:e3:80:d9:b3:5f:50:26: ed:87:71:19:d1:f2:bb:aa:00:89:9a:66:de:5f:e3:0d:31:8f: 53:30:a2:69:f7:2f:d4:01:cf:5d:d2:6b:87:32:66:f5:41:5a: 1f:86:ae:df:ce:1e:39:4f:39:6e:0b:58:ea:cb:ec:65:f6:a0: 5e:f8:cc:2c:ea:48:2c:7c:1f:7e:e1:bf:8b:a5:1c:fe:e8:de: a4:8d:71:a4:0b:63:13:ad:14:ee:82:1f:2b:ba:c5:6a:f2:32: bc:17:a4:79:86:8a:55:f6:42:7b:46:64:c9:a0:65:94:9d:c7: 41:18:40:51:ee:e4:4d:40:4b:7c:ba:3f:63:f9:7e:dc:2e:f1: 3e:f7:20:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjQxMTIyMTk0MTQzWhcNMjQxMTI5MTk0MTQzWjAYMRYwFAYD VQQDEw02NzQwZGU3OC1iYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8hRMwm5ve+8SQl750p03cdTA7pdhCLdEEns+TjE6ZcMkae20sHz/5V5k6bZ 5t1dduwo2k37MbOm72KwvE1Iefuueq/Zp7qZCfNnKUzHnLbci9YYyHq85+abpShS Zi5T2S0jOmSvWP3OvCjC6zF8+xBlgWEEsHep0Sw7b/biAxBFHGnHPTxxtsvLp3VV qVwcz2us/VsEhe/rRk1VZTTuTbtI3XFzfAEkYKGDHdKreukXaKr3thdzFc14qKfO asvhFA0t+q9NyZDsEY1gPG/t4HVFW4M7GYhPP7HzBYsUNzgcWfpRXAeQU60mcJWP Cw/cXvvQFj25np6Bbsm4dt6NZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMru2/59 SXaa79k/ygP56JOlmvs1MB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHbxHmCI0J4pba7WFusO+P6OrPkeJHc0Y9KA1/fc7WECFKYn4ig2CM Wd2szdE7aGzEPQe3h4q1dx3OT9qNQ/p/KJbV3ZR8KA4rb0Mr1T/y1UIJoMiCREoL JbwdR5ysSc4D+IliDYReXQI/23x3vgLyRZR/ib/hluOA2bNfUCbth3EZ0fK7qgCJ mmbeX+MNMY9TMKJp9y/UAc9d0muHMmb1QVofhq7fzh45TzluC1jqy+xl9qBe+Mws 6kgsfB9+4b+LpRz+6N6kjXGkC2MTrRTugh8rusVq8jK8F6R5hopV9kJ7RmTJoGWU ncdBGEBR7uRNQEt8uj9j+X7cLvE+9yCZ -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org