$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: tOqhUCS79rm7QpklMibmGZdNE71npV1MvZO+JfBVKT4= Subject key identifier: 2E:70:53:5C:E5:5E:9D:72:F2:8D:39:D2:CB:B6:5A:3B:1F:ED:DA:EF Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 084E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 084D Signing time: Fri 22 Nov 2024 20:26:15 +0000 Manifest this update: Fri 22 Nov 2024 20:26:15 +0000 Manifest next update: Fri 29 Nov 2024 20:26:15 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: XThRc/pkBO67us4ZocVL5ecdb3nKL2XD3O7RxM7ZWXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2126 (0x84e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: Nov 22 20:26:15 2024 GMT Not After : Nov 29 20:26:15 2024 GMT Subject: CN=6740e8e7-2adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8d:7c:c9:03:7d:23:5f:f4:c0:1c:9c:b4:f1: 53:89:23:29:11:90:81:a1:78:c5:11:3d:25:cb:1b: 9e:ae:31:49:ec:61:23:3f:df:8d:3b:03:b5:35:c5: 5a:31:cf:78:89:e3:17:17:dc:91:7b:1b:9d:78:84: d8:e1:98:72:c6:43:5d:6d:2f:eb:e0:53:29:39:1e: f4:77:13:82:5a:c4:d7:da:b0:c1:61:9e:5d:8e:01: a5:d6:68:c8:7f:05:54:8e:e5:c4:fb:a6:3d:47:c1: d9:a2:5c:af:b8:40:e2:48:99:ab:c4:9a:1d:ae:04: c2:20:e5:a2:47:f0:92:06:06:ab:96:c4:35:90:e1: a8:d3:ff:a8:9f:b4:5b:da:e9:14:c5:05:83:24:f4: df:65:e3:9f:6c:79:74:df:be:5a:00:8d:c1:3b:1c: e8:59:a4:41:bc:75:de:a9:dc:55:ef:fa:23:d4:62: bd:f4:94:c0:4f:06:8b:2e:37:2d:5f:42:2d:0c:52: 33:29:cd:63:a6:c4:bf:6d:3c:c9:75:6f:39:9c:80: 84:72:60:7c:ca:53:0f:73:17:43:f1:b7:1e:76:f3: 73:93:c8:92:72:2c:c8:a3:27:76:3a:e7:6f:56:94: 46:17:ec:a1:6f:6c:64:1f:c0:d2:bc:76:b3:88:1f: e6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:70:53:5C:E5:5E:9D:72:F2:8D:39:D2:CB:B6:5A:3B:1F:ED:DA:EF X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cf:5c:ed:35:48:75:b4:84:79:2a:ae:9d:c7:37:2b:08:fc: 93:49:dc:84:b7:ff:14:03:b3:ba:68:37:3b:c6:34:a0:0e:6b: e9:86:58:36:7c:57:05:f3:6e:1c:c0:5b:0d:cb:d9:92:a0:2e: cd:66:e7:23:e2:bc:0e:f6:a2:fa:c1:82:fa:ed:56:2a:88:1d: 7a:3e:9a:ad:08:cc:77:60:96:d5:eb:b2:24:1c:c3:10:78:3e: 2f:71:01:23:f9:22:c0:8c:75:b9:21:fa:96:83:39:89:11:ea: db:a9:f9:c1:30:ac:ba:76:f2:d8:16:d6:ae:45:02:d9:62:6e: ef:2e:cc:ce:d2:7b:93:ae:43:35:06:83:9b:3b:9f:c4:ce:2d: 64:1d:ed:bb:3a:a0:88:4e:d2:53:b6:ef:67:03:83:b3:98:a4: 0d:07:ee:62:c6:54:3e:3e:b4:c0:d4:48:b3:84:bf:2b:6b:e4: 3c:cb:4f:ab:91:b1:ff:16:af:4e:ca:d9:2f:9e:73:93:5e:81: d2:fb:70:2c:d7:8b:ec:b1:2e:0b:5b:ea:5b:a3:3d:15:e1:0b: 3f:c1:01:28:e0:6e:15:c7:f7:4b:f3:f3:77:73:23:33:78:d3: f6:d9:0f:97:42:c8:25:2b:8a:3d:7d:d8:2b:81:0b:07:36:a0: ca:59:db:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjQxMTIyMjAyNjE1WhcNMjQxMTI5MjAyNjE1WjAYMRYwFAYD VQQDEw02NzQwZThlNy0yYWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnY18yQN9I1/0wByctPFTiSMpEZCBoXjFET0lyxuerjFJ7GEjP9+NOwO1NcVa Mc94ieMXF9yRexudeITY4ZhyxkNdbS/r4FMpOR70dxOCWsTX2rDBYZ5djgGl1mjI fwVUjuXE+6Y9R8HZolyvuEDiSJmrxJodrgTCIOWiR/CSBgarlsQ1kOGo0/+on7Rb 2ukUxQWDJPTfZeOfbHl0375aAI3BOxzoWaRBvHXeqdxV7/oj1GK99JTATwaLLjct X0ItDFIzKc1jpsS/bTzJdW85nICEcmB8ylMPcxdD8bcedvNzk8iScizIoyd2Oudv VpRGF+yhb2xkH8DSvHaziB/mZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5wU1zl Xp1y8o050su2Wjsf7drvMB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfz1ztNUh1tIR5Kq6dxzcrCPyTSdyEt/8UA7O6aDc7xjSgDmvphlg2 fFcF824cwFsNy9mSoC7NZucj4rwO9qL6wYL67VYqiB16PpqtCMx3YJbV67IkHMMQ eD4vcQEj+SLAjHW5IfqWgzmJEerbqfnBMKy6dvLYFtauRQLZYm7vLszO0nuTrkM1 BoObO5/Ezi1kHe27OqCITtJTtu9nA4OzmKQNB+5ixlQ+PrTA1EizhL8ra+Q8y0+r kbH/Fq9OytkvnnOTXoHS+3As14vssS4LW+pboz0V4Qs/wQEo4G4Vx/dL8/N3cyMz eNP22Q+XQsglK4o9fdgrgQsHNqDKWdtl -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org