$ rpki-client -vvf rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft File: FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft (raw, json) Hash identifier: zjnptFH1RDFzWiXqxAl9HQ2xYhA0a3zU0LbzjjSxOLs= Subject key identifier: ED:07:4A:5F:E9:99:F0:9D:B3:D2:E8:3E:FD:7A:54:1F:64:D5:4C:6A Authority key identifier: 16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E Certificate issuer: /CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft Manifest number: E8 Signing time: Sat 23 Nov 2024 03:30:10 +0000 Manifest this update: Sat 23 Nov 2024 03:30:09 +0000 Manifest next update: Sat 30 Nov 2024 03:30:09 +0000 Files and hashes: 1: FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl (hash: CV7rsrr19HAXSkKNrAKsCQq4IP+PQdIiZtICOHsBDAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197FBD/serialNumber=16023849B9C64D56DEDCAE9B12863D073188AC2E Validity Not Before: Nov 23 03:30:09 2024 GMT Not After : Nov 30 03:30:09 2024 GMT Subject: CN=67414c41-7dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:82:3f:f4:ed:4d:82:d7:09:ba:6d:90:11: 9f:f7:b3:0a:95:89:a0:8f:c4:03:06:1b:a6:fe:94: 62:02:09:a5:21:20:48:57:3e:52:36:2d:c8:ae:b8: 40:a7:b1:57:00:57:eb:f7:44:23:95:41:90:42:a4: a3:92:18:42:10:34:5c:fc:7c:23:93:88:23:c2:72: 1f:7b:30:8e:e3:d1:b1:9d:95:eb:ec:53:8c:22:32: e4:16:16:ae:9b:e1:e5:c0:7e:eb:cb:54:2a:45:c8: 54:c3:d2:fe:0b:51:dc:7d:93:d6:dc:16:1f:93:01: fe:4c:02:5a:3c:b0:d0:33:79:6f:63:a7:8c:58:24: 7a:80:c1:25:08:1a:0b:01:b8:9a:8b:f8:a1:88:af: 18:c8:5b:8a:dd:32:d1:06:8e:e1:fc:b4:ad:ec:72: 51:c3:e6:b1:03:5c:fd:d6:aa:4b:f3:d4:15:df:66: 5e:9c:d5:31:47:95:82:83:9e:9c:37:ab:e7:41:2c: 62:5a:9a:46:1c:7d:a9:73:b1:30:b1:03:b5:03:33: 04:99:1c:3d:3e:4d:c7:58:dc:50:d1:a5:64:fc:fd: 0f:5e:53:10:79:90:db:75:b0:ec:01:b9:7d:da:01: 7a:b8:1e:2f:23:1e:30:96:8c:e0:ea:9f:78:d4:62: 9c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:07:4A:5F:E9:99:F0:9D:B3:D2:E8:3E:FD:7A:54:1F:64:D5:4C:6A X509v3 Authority Key Identifier: keyid:16:02:38:49:B9:C6:4D:56:DE:DC:AE:9B:12:86:3D:07:31:88:AC:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgI4SbnGTVbe3K6bEoY9BzGIrC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197FBD/7FFF457446EA11EEA6EDEA63C4F9AE02/FgI4SbnGTVbe3K6bEoY9BzGIrC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b5:55:79:1c:f4:72:1d:01:e9:70:48:a3:db:3d:82:fd:51: 32:ac:e8:60:f1:0e:bd:cc:54:20:b3:a9:3d:f6:75:90:33:81: 80:b2:a3:f8:0a:8a:d2:0b:0d:e2:9b:bb:45:96:de:2a:84:ce: 9a:7a:2f:87:c6:e5:39:c3:e2:85:14:e0:c8:b3:e3:52:43:01: 45:91:cc:71:c0:26:4d:b8:b9:7f:89:05:7f:a4:2e:d0:f0:34: 08:52:db:33:6f:e4:5e:40:8d:c0:44:39:1d:c7:34:c6:e4:c9: 84:d0:39:8e:bc:ad:17:45:b2:64:43:e4:0c:3a:bf:c1:b2:8c: a6:66:18:ab:4a:5f:99:c8:2b:f5:b4:c4:ab:d9:23:fa:62:1d: 5a:49:24:89:14:d7:ad:e0:70:7d:04:28:37:7b:59:a7:5a:6f: 1a:6a:ca:9d:a0:9d:f6:39:27:3b:41:1a:ff:a8:10:f5:f5:57: f5:e9:9f:7d:fa:17:80:72:df:bc:3b:8a:32:0f:f6:73:36:43: 9d:39:49:f7:86:ff:bf:6c:2e:25:d7:02:c4:de:6f:97:34:b5: 09:32:d4:0a:f3:5d:4d:bf:16:28:fd:13:25:5d:05:31:0b:a1: bd:05:71:bd:b8:9b:47:ad:f6:4f:d8:bc:41:d6:7f:b2:be:4f: b7:84:dc:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdGQkQxMTAvBgNVBAUTKDE2MDIzODQ5QjlDNjRENTZERURDQUU5QjEyODYzRDA3 MzE4OEFDMkUwHhcNMjQxMTIzMDMzMDA5WhcNMjQxMTMwMDMzMDA5WjAYMRYwFAYD VQQDEw02NzQxNGM0MS03ZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhCCP/TtTYLXCbptkBGf97MKlYmgj8QDBhum/pRiAgmlISBIVz5SNi3IrrhA p7FXAFfr90QjlUGQQqSjkhhCEDRc/Hwjk4gjwnIfezCO49GxnZXr7FOMIjLkFhau m+HlwH7ry1QqRchUw9L+C1HcfZPW3BYfkwH+TAJaPLDQM3lvY6eMWCR6gMElCBoL Abiai/ihiK8YyFuK3TLRBo7h/LSt7HJRw+axA1z91qpL89QV32ZenNUxR5WCg56c N6vnQSxiWppGHH2pc7EwsQO1AzMEmRw9Pk3HWNxQ0aVk/P0PXlMQeZDbdbDsAbl9 2gF6uB4vIx4wlozg6p941GKcMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0HSl/p mfCds9LoPv16VB9k1UxqMB8GA1UdIwQYMBaAFBYCOEm5xk1W3tyumxKGPQcxiKwu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0ZCRC83RkZGNDU3NDQ2 RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RWYmUzSzZiRW9ZOUJ6R0ly QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnSTRTYm5HVFZiZTNLNmJFb1k5QnpHSXJDNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0ZCRC83RkZGNDU3NDQ2RUExMUVFQTZFREVBNjNDNEY5QUUwMi9GZ0k0U2JuR1RW YmUzSzZiRW9ZOUJ6R0lyQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYtVV5HPRyHQHpcEij2z2C/VEyrOhg8Q69zFQgs6k99nWQM4GAsqP4 CorSCw3im7tFlt4qhM6aei+HxuU5w+KFFODIs+NSQwFFkcxxwCZNuLl/iQV/pC7Q 8DQIUtszb+ReQI3ARDkdxzTG5MmE0DmOvK0XRbJkQ+QMOr/BsoymZhirSl+ZyCv1 tMSr2SP6Yh1aSSSJFNet4HB9BCg3e1mnWm8aasqdoJ32OSc7QRr/qBD19Vf16Z99 +heAct+8O4oyD/ZzNkOdOUn3hv+/bC4l1wLE3m+XNLUJMtQK811NvxYo/RMlXQUx C6G9BXG9uJtHrfZP2LxB1n+yvk+3hNya -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:16 2024 by rpki-client on console-ams.rpki-client.org