$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft File: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json) Hash identifier: yRnjF9BlDxHwvEeedkdCdVyMAiBrsqnOBjT/rdyAJvg= Subject key identifier: 99:A6:96:7E:3B:F9:9F:CF:05:80:EA:DD:70:35:A6:8D:E9:DF:91:3B Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft Manifest number: 02C3 Signing time: Sat 23 Nov 2024 00:59:52 +0000 Manifest this update: Sat 23 Nov 2024 00:59:52 +0000 Manifest next update: Sat 30 Nov 2024 00:59:52 +0000 Files and hashes: 1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: gvGqFTKrunjsWc8pR8fJMMuhbMjvYAz9iqWOzSfHtl8=) 2: 148BC3E8833B11EEA71E1715C4F9AE02.roa (hash: 1o3ksyli1ZEbtFwVgIIX+J8xMbJMLDqAM0N6HCXHRdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Validity Not Before: Nov 23 00:59:52 2024 GMT Not After : Nov 30 00:59:52 2024 GMT Subject: CN=67412908-9777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:0e:a6:3f:1e:7e:0b:c1:b9:fd:6c:5b:f4: 73:e0:90:d0:a9:8e:91:05:9d:3d:c4:24:4f:a6:d0: cf:c4:63:82:c6:32:b2:82:e0:15:f8:81:c4:b6:0e: 76:08:08:6e:07:1a:19:35:41:5e:4e:be:67:16:0c: e5:5f:8a:9d:f8:2a:e0:64:86:8c:c5:cf:05:7f:ce: e8:f4:49:8d:72:23:e2:a8:22:46:bc:26:c2:92:00: 86:50:5c:0b:a2:8d:04:94:b7:f9:3f:2a:88:b4:89: be:a4:9c:bf:41:6e:79:7a:af:aa:09:13:56:1f:d3: b6:f6:3b:18:17:fe:98:65:69:8e:09:f1:92:91:25: 96:19:f0:80:62:99:66:1f:9a:45:09:66:37:29:7c: 13:d9:be:5b:91:89:e7:7b:86:dd:28:8a:60:84:3e: b0:9d:25:81:37:a4:82:bc:9a:af:36:96:f1:3a:b6: a0:e4:62:57:cf:85:99:a0:1b:71:19:f1:48:33:5e: a4:51:4e:7c:a9:1e:06:21:d6:9b:ca:81:fb:c5:98: 1f:48:b2:27:76:12:48:4d:ad:43:6c:ce:b2:b1:52: 3f:06:bd:d2:66:f3:27:c6:ef:f7:6e:fc:54:95:4b: 6e:9a:e1:67:cf:0c:fe:c1:1d:b6:69:04:38:fd:ae: d2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A6:96:7E:3B:F9:9F:CF:05:80:EA:DD:70:35:A6:8D:E9:DF:91:3B X509v3 Authority Key Identifier: keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:67:55:b9:60:02:43:1f:e0:46:5d:80:4a:ca:25:69:48:e2: 15:f3:5b:c6:46:c7:60:27:17:3f:54:10:28:b7:16:ae:4f:9f: 4a:d8:67:be:07:29:7e:0e:77:1f:26:4e:5c:6c:1c:96:8c:8a: 0c:a9:3d:c9:7c:58:81:66:7c:f4:05:b0:51:15:76:97:c5:11: 07:8b:9a:50:6d:8a:7c:16:94:be:0b:84:de:c4:09:b4:24:11: 99:b1:4d:34:6f:9f:56:07:a9:60:ed:be:44:ef:ae:65:95:8c: 6d:85:7f:53:fb:6b:a3:f5:28:9f:61:99:12:a9:da:5c:74:f5: f8:6b:85:14:a8:c2:65:83:c0:f5:bf:a5:29:07:22:17:46:7f: 11:d1:fb:c4:e2:95:f8:32:4a:87:9a:80:2d:76:c4:0c:0b:15: 26:a8:0d:04:41:37:57:57:c2:64:4b:80:34:9a:db:de:78:7c: 23:fc:30:88:94:51:ac:5a:80:1e:96:8b:d8:fa:10:53:da:13: fb:9d:e1:ea:6e:8e:fe:85:b0:fa:59:5f:bc:3d:b3:54:c7:9f: 4f:f0:7e:a1:29:60:99:3f:1d:dc:f4:2e:f1:07:0c:54:00:38: 49:27:e9:65:24:de:e0:08:7f:99:23:be:d7:cf:c8:13:e4:a5: 09:d1:09:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCMDcxMTAvBgNVBAUTKEY0RkZGRTYwRTdENjNCRTRGMTgxOUJCQTg0Q0Q1QjIw NDc0QzkxQzYwHhcNMjQxMTIzMDA1OTUyWhcNMjQxMTMwMDA1OTUyWjAYMRYwFAYD VQQDEw02NzQxMjkwOC05Nzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1cOpj8efgvBuf1sW/Rz4JDQqY6RBZ09xCRPptDPxGOCxjKyguAV+IHEtg52 CAhuBxoZNUFeTr5nFgzlX4qd+CrgZIaMxc8Ff87o9EmNciPiqCJGvCbCkgCGUFwL oo0ElLf5PyqItIm+pJy/QW55eq+qCRNWH9O29jsYF/6YZWmOCfGSkSWWGfCAYplm H5pFCWY3KXwT2b5bkYnne4bdKIpghD6wnSWBN6SCvJqvNpbxOrag5GJXz4WZoBtx GfFIM16kUU58qR4GIdabyoH7xZgfSLIndhJITa1DbM6ysVI/Br3SZvMnxu/3bvxU lUtumuFnzwz+wR22aQQ4/a7S1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmmln47 +Z/PBYDq3XA1po3p35E7MB8GA1UdIwQYMBaAFPT//mDn1jvk8YGbuoTNWyBHTJHG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUIwNy83MkE0OEE3NkND RTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08tVHhnWnU2aE0xYklFZE1r Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQXy1ZT2ZXTy1UeGdadTZoTTFiSUVkTWtjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUIwNy83MkE0OEE3NkNDRTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08t VHhnWnU2aE0xYklFZE1rY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbZ1W5YAJDH+BGXYBKyiVpSOIV81vGRsdgJxc/VBAotxauT59K2Ge+ Byl+DncfJk5cbByWjIoMqT3JfFiBZnz0BbBRFXaXxREHi5pQbYp8FpS+C4TexAm0 JBGZsU00b59WB6lg7b5E765llYxthX9T+2uj9SifYZkSqdpcdPX4a4UUqMJlg8D1 v6UpByIXRn8R0fvE4pX4MkqHmoAtdsQMCxUmqA0EQTdXV8JkS4A0mtveeHwj/DCI lFGsWoAelovY+hBT2hP7neHqbo7+hbD6WV+8PbNUx59P8H6hKWCZPx3c9C7xBwxU ADhJJ+llJN7gCH+ZI77Xz8gT5KUJ0Qm6 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:43 2024 by rpki-client on console-fra.rpki-client.org