$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: +QuEoFeFRKcZi9dwZshqVwdjCoi7oLoPE39F4OpjzG8= Subject key identifier: 9B:D2:D6:74:27:02:6E:AE:4B:36:0E:2B:3B:5F:C3:F1:5D:03:08:37 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 0766 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 075C Signing time: Fri 22 Nov 2024 21:04:01 +0000 Manifest this update: Fri 22 Nov 2024 21:04:00 +0000 Manifest next update: Fri 29 Nov 2024 21:04:00 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: 3gf2noxN4p76fMMrv/amWoq91RypP9rKyQLDtPC+Sio=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: ipH52NvI6j7Qm3VJ3UEcq9yvGVo2LC48K1opbVhCFvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1894 (0x766) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: Nov 22 21:04:00 2024 GMT Not After : Nov 29 21:04:00 2024 GMT Subject: CN=6740f1c1-e2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:53:3d:4d:e3:68:a3:d9:bd:67:d9:de:a0:45: be:0e:a8:2e:90:0b:e7:1c:e9:93:9d:04:35:f4:3f: f1:51:51:f4:4e:f9:37:1b:77:7b:37:78:5e:45:af: 57:47:57:fd:af:5a:ff:6b:9a:a0:c8:ca:5d:4a:93: bd:1e:86:39:84:8f:25:94:61:8e:14:21:1f:55:d1: 78:e1:8b:bc:2d:b1:8c:70:c3:06:c8:30:12:44:27: d9:31:72:24:f6:6f:d4:2b:ae:d3:ad:b7:35:f4:44: fa:ff:d3:06:56:63:fb:a8:34:79:10:60:b0:43:34: 87:de:3e:de:b0:d2:17:5b:b0:79:6e:4f:9a:bb:9a: 9d:90:80:59:49:ca:89:9f:02:61:af:ca:72:c9:4f: b1:91:99:0c:11:87:5d:3a:67:01:f6:44:c8:50:47: eb:2f:1e:89:39:03:e0:9d:2e:c8:93:d0:34:db:45: a1:2f:cf:b1:b8:26:72:cd:a4:02:1b:00:ea:30:dd: 85:9a:55:e9:b8:46:2d:69:4f:23:ae:41:95:76:10: ba:e1:83:ec:b0:50:51:92:2f:8b:8e:94:86:b8:b9: 6b:6a:d5:1b:16:13:d5:34:cd:50:b4:61:59:08:9b: c8:e0:89:93:33:a8:fe:02:14:79:b3:4d:e0:f7:d7: 3e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D2:D6:74:27:02:6E:AE:4B:36:0E:2B:3B:5F:C3:F1:5D:03:08:37 X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:b2:4e:01:1e:59:3d:72:66:d0:6a:e4:56:3c:70:56:5a:6a: b6:0d:02:5b:84:50:09:64:31:65:16:7b:67:3c:68:64:e3:f7: 83:bf:30:70:da:ed:b6:b4:7d:6d:50:d9:67:d6:0f:e0:cb:71: fd:33:94:74:3b:a6:33:4c:a3:32:e4:05:67:d6:ad:61:47:93: 6b:94:c0:f1:13:9a:dc:90:9d:90:97:03:cf:ce:a9:80:86:60: 69:38:4c:c3:57:f5:8a:a5:89:31:9c:ec:d9:dc:45:38:6f:a0: 94:b4:8e:fb:5b:d7:50:47:43:5d:8e:0b:77:1d:93:7c:0c:c1: af:d3:80:cb:44:8d:0b:99:20:47:9a:06:f5:c3:6f:91:38:2b: 3e:cc:78:ae:2a:60:3f:bf:ec:23:16:f2:82:c8:a0:c2:66:62: 96:4c:ae:30:4f:95:7b:ec:7f:78:9c:f7:38:bd:c7:e2:5b:98: 7b:98:2f:df:5e:70:d2:83:04:50:50:68:3a:36:61:2f:db:5e: 52:52:e5:b0:a0:38:3f:f6:f2:ce:c9:ec:bd:e0:ca:ee:13:64: e0:01:f3:c5:a6:62:a8:d1:81:e4:00:9b:16:4d:82:c6:a3:c5: 56:e7:10:6a:c3:58:2f:b6:52:ca:32:6b:63:8d:96:71:6f:f8: 85:00:03:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjQxMTIyMjEwNDAwWhcNMjQxMTI5MjEwNDAwWjAYMRYwFAYD VQQDEw02NzQwZjFjMS1lMmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1M9TeNoo9m9Z9neoEW+DqgukAvnHOmTnQQ19D/xUVH0Tvk3G3d7N3heRa9X R1f9r1r/a5qgyMpdSpO9HoY5hI8llGGOFCEfVdF44Yu8LbGMcMMGyDASRCfZMXIk 9m/UK67Trbc19ET6/9MGVmP7qDR5EGCwQzSH3j7esNIXW7B5bk+au5qdkIBZScqJ nwJhr8pyyU+xkZkMEYddOmcB9kTIUEfrLx6JOQPgnS7Ik9A020WhL8+xuCZyzaQC GwDqMN2FmlXpuEYtaU8jrkGVdhC64YPssFBRki+LjpSGuLlratUbFhPVNM1QtGFZ CJvI4ImTM6j+AhR5s03g99c+QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvS1nQn Am6uSzYOKztfw/FdAwg3MB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClsk4BHlk9cmbQauRWPHBWWmq2DQJbhFAJZDFlFntnPGhk4/eDvzBw 2u22tH1tUNln1g/gy3H9M5R0O6YzTKMy5AVn1q1hR5NrlMDxE5rckJ2QlwPPzqmA hmBpOEzDV/WKpYkxnOzZ3EU4b6CUtI77W9dQR0Ndjgt3HZN8DMGv04DLRI0LmSBH mgb1w2+ROCs+zHiuKmA/v+wjFvKCyKDCZmKWTK4wT5V77H94nPc4vcfiW5h7mC/f XnDSgwRQUGg6NmEv215SUuWwoDg/9vLOyey94MruE2TgAfPFpmKo0YHkAJsWTYLG o8VW5xBqw1gvtlLKMmtjjZZxb/iFAAPV -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org