$ rpki-client -vvf rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft File: f99iGPoBXQoAdKhEJFGAaij53fU.mft (raw, json) Hash identifier: Zpek+rLmoHZuRSNtsI9qWEpkabS5hO7cYj5/qPNz3ik= Subject key identifier: 8A:11:63:4B:E2:23:6E:64:2E:00:A3:B6:92:5B:60:4A:25:D6:B7:A3 Authority key identifier: 7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5 Certificate issuer: /CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5 Certificate serial: 074A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft Manifest number: 0744 Signing time: Fri 22 Nov 2024 21:08:28 +0000 Manifest this update: Fri 22 Nov 2024 21:08:28 +0000 Manifest next update: Fri 29 Nov 2024 21:08:28 +0000 Files and hashes: 1: f99iGPoBXQoAdKhEJFGAaij53fU.crl (hash: zYQ5wQU3sTu15XtC+QTrh16Ex42aGW1VJFDXjqht140=) 2: 7FAEDE3A03B411EBBB548A5EC4F9AE02.roa (hash: er27YVYfgU7Qa2FTXbj/lK9/OoJ5L5A1uOvFRL1zqKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173060/serialNumber=7FDF6218FA015D0A0074A8442451806A28F9DDF5 Validity Not Before: Nov 22 21:08:28 2024 GMT Not After : Nov 29 21:08:28 2024 GMT Subject: CN=6740f2cc-9299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:d5:c5:be:f1:d9:a1:13:25:4a:40:fd:ff: dd:1a:bd:3d:d5:81:20:a6:ed:1b:e4:ca:08:af:c2: 27:05:ea:2c:24:ef:17:f8:89:f1:0a:c2:3c:55:fd: 56:41:3a:11:fd:40:dd:70:40:60:f2:cc:d6:78:c5: c1:fd:75:5e:7d:37:64:8b:51:97:14:44:58:c2:ec: 35:96:fb:82:08:be:1a:35:2b:13:13:af:e1:3b:18: 53:15:7b:29:e0:0a:06:ff:0d:61:e6:18:94:4a:b0: f8:79:c1:a1:2d:7f:72:9d:3d:14:2b:5b:91:a4:25: 35:f4:42:7c:ef:d7:75:99:08:d7:5d:91:79:2c:72: cc:0e:71:36:cb:26:05:16:6f:68:4b:35:3c:e7:47: 7d:fb:88:9b:3b:5a:de:33:58:49:62:8c:94:d6:d8: ba:dd:89:ad:1e:8c:4b:31:d5:a1:d8:c8:00:3f:63: dd:fb:82:89:78:2e:df:88:43:92:56:e1:cc:76:9a: 2b:b5:31:5a:f2:38:c8:a1:f7:c1:95:9f:a5:f4:6b: 2e:da:2f:a5:70:f4:b0:53:d3:6b:ec:da:d7:f8:4f: 52:63:2c:1b:81:9e:82:10:bd:2d:1e:7c:ee:00:fd: 02:ff:bd:f1:5d:f9:a5:32:c3:8e:d1:b9:57:e7:46: 71:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:11:63:4B:E2:23:6E:64:2E:00:A3:B6:92:5B:60:4A:25:D6:B7:A3 X509v3 Authority Key Identifier: keyid:7F:DF:62:18:FA:01:5D:0A:00:74:A8:44:24:51:80:6A:28:F9:DD:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f99iGPoBXQoAdKhEJFGAaij53fU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173060/A72586B003B111EB843A7756C4F9AE02/f99iGPoBXQoAdKhEJFGAaij53fU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:af:07:7f:e9:43:de:3e:78:4c:c8:5a:8e:83:7a:de:b3:3f: 3f:5c:70:0b:6a:77:4c:95:b4:bf:9d:dd:0f:b9:17:64:29:e2: d7:90:f4:b1:44:13:0d:68:d9:3a:64:b2:f8:5d:4f:5e:19:94: 15:cc:a7:02:1e:56:d0:46:4d:93:7c:e9:46:53:2b:11:b0:eb: f3:32:b7:d7:1e:1b:ec:80:f3:9b:a7:f8:32:68:ec:31:48:e6: e0:55:85:28:fb:22:a4:00:f5:3f:97:6d:61:f5:d5:93:7c:08: 0d:1d:dc:80:5e:77:d3:18:fd:37:5f:fc:70:12:f1:2d:40:68: 07:1b:e6:34:22:84:d4:79:37:35:cb:ba:98:07:e9:45:83:82: 89:43:9f:50:13:c3:5a:12:32:c4:4d:87:d0:39:95:2d:d2:64: f2:5c:61:70:84:6d:7c:60:90:81:96:ea:54:8a:c0:4f:1c:ba: 99:13:93:70:29:3e:26:3d:2a:e2:1c:b0:e0:4a:d8:42:95:87: 9f:73:8f:9b:1a:d3:0d:5e:7f:b7:03:5f:15:b9:7e:d7:7f:ed: 1d:9d:cb:9e:6d:68:ed:c4:73:4f:4b:f4:99:ba:f0:a7:32:37: f1:48:67:c7:0b:8f:31:8c:5b:05:24:0d:6f:d0:e6:e4:30:94: 31:a8:22:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMwNjAxMTAvBgNVBAUTKDdGREY2MjE4RkEwMTVEMEEwMDc0QTg0NDI0NTE4MDZB MjhGOURERjUwHhcNMjQxMTIyMjEwODI4WhcNMjQxMTI5MjEwODI4WjAYMRYwFAYD VQQDEw02NzQwZjJjYy05Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzTVxb7x2aETJUpA/f/dGr091YEgpu0b5MoIr8InBeosJO8X+InxCsI8Vf1W QToR/UDdcEBg8szWeMXB/XVefTdki1GXFERYwuw1lvuCCL4aNSsTE6/hOxhTFXsp 4AoG/w1h5hiUSrD4ecGhLX9ynT0UK1uRpCU19EJ879d1mQjXXZF5LHLMDnE2yyYF Fm9oSzU850d9+4ibO1reM1hJYoyU1ti63YmtHoxLMdWh2MgAP2Pd+4KJeC7fiEOS VuHMdportTFa8jjIoffBlZ+l9Gsu2i+lcPSwU9Nr7NrX+E9SYywbgZ6CEL0tHnzu AP0C/73xXfmlMsOO0blX50ZxaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoRY0vi I25kLgCjtpJbYEol1rejMB8GA1UdIwQYMBaAFH/fYhj6AV0KAHSoRCRRgGoo+d31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzA2MC9BNzI1ODZCMDAz QjExMUVCODQzQTc3NTZDNEY5QUUwMi9mOTlpR1BvQlhRb0FkS2hFSkZHQWFpajUz ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5OWlHUG9CWFFvQWRLaEVKRkdBYWlqNTNmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzA2MC9BNzI1ODZCMDAzQjExMUVCODQzQTc3NTZDNEY5QUUwMi9mOTlpR1BvQlhR b0FkS2hFSkZHQWFpajUzZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvrwd/6UPePnhMyFqOg3resz8/XHALandMlbS/nd0PuRdkKeLXkPSx RBMNaNk6ZLL4XU9eGZQVzKcCHlbQRk2TfOlGUysRsOvzMrfXHhvsgPObp/gyaOwx SObgVYUo+yKkAPU/l21h9dWTfAgNHdyAXnfTGP03X/xwEvEtQGgHG+Y0IoTUeTc1 y7qYB+lFg4KJQ59QE8NaEjLETYfQOZUt0mTyXGFwhG18YJCBlupUisBPHLqZE5Nw KT4mPSriHLDgSthClYefc4+bGtMNXn+3A18VuX7Xf+0dncuebWjtxHNPS/SZuvCn MjfxSGfHC48xjFsFJA1v0ObkMJQxqCK3 -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:09 2024 by rpki-client on console-fra.rpki-client.org