$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft File: hM4p-GFBrPuKdekE8CcjhS3mMzg.mft (raw, json) Hash identifier: QzYUS4ICn/M0+xZ/Q5Rmbxn+7AcxcEqa1rWOwWJSB6A= Subject key identifier: 9E:10:C7:9E:AF:33:BA:2B:C3:F4:14:76:FD:FD:29:B1:58:95:19:67 Authority key identifier: 84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 Certificate issuer: /CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Certificate serial: 09D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft Manifest number: 09C8 Signing time: Fri 22 Nov 2024 19:44:05 +0000 Manifest this update: Fri 22 Nov 2024 19:44:04 +0000 Manifest next update: Fri 29 Nov 2024 19:44:04 +0000 Files and hashes: 1: hM4p-GFBrPuKdekE8CcjhS3mMzg.crl (hash: ibvOrB/2fvxtb9bfVM+Vq9RM9EccDqBB1GiPYU37coA=) 2: 267A24046E7D11EAADB09659C4F9AE02.roa (hash: iuQBORVLtuzDIuncz9VmwS8znnsu9e38o4Zo2zyKz8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2512 (0x9d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114FFB/serialNumber=84CE29F86141ACFB8A75E904F02723852DE63338 Validity Not Before: Nov 22 19:44:04 2024 GMT Not After : Nov 29 19:44:04 2024 GMT Subject: CN=6740df05-67be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:53:2c:3d:c1:7e:31:69:59:60:cd:42:8c: 1f:24:7f:6f:5d:bf:e5:ae:ea:06:5a:e4:55:13:17: af:e7:07:3f:ba:07:66:ec:90:76:b7:75:55:90:0c: 65:98:c4:fb:96:06:3e:5a:93:9a:01:b4:2d:6e:64: 7d:14:ea:c4:af:01:8f:8b:7f:42:3d:f1:16:0b:1f: 09:3a:51:7e:d8:fb:9d:eb:1e:40:d5:4b:d7:57:1b: a6:07:6a:db:c3:c4:c0:8e:ef:cc:8f:f0:bf:b4:1c: 23:57:a3:6f:4a:bf:e5:25:b8:c5:28:8b:ce:49:b7: 0a:47:07:5f:f2:d2:61:2b:bd:a8:3e:1f:df:18:6b: 82:1e:29:a4:d1:3f:4a:de:7f:22:14:7d:52:15:f1: 98:9e:0d:68:d2:3a:91:fd:51:aa:9c:63:84:d1:e4: 20:e2:29:94:25:c7:36:ba:20:71:1a:d5:f9:2d:e6: 4a:1e:3b:74:dc:8e:a7:75:56:49:5f:e5:ad:77:6c: 70:84:09:97:f9:c5:75:35:18:52:63:df:32:4d:96: 7c:36:92:5c:6e:b9:34:4c:b8:2f:0a:b4:30:97:80: dc:19:83:5d:a8:15:19:9c:c4:1a:f6:ea:b3:8f:87: fa:18:a2:da:03:32:24:45:c0:12:0d:97:8b:7d:4b: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:10:C7:9E:AF:33:BA:2B:C3:F4:14:76:FD:FD:29:B1:58:95:19:67 X509v3 Authority Key Identifier: keyid:84:CE:29:F8:61:41:AC:FB:8A:75:E9:04:F0:27:23:85:2D:E6:33:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hM4p-GFBrPuKdekE8CcjhS3mMzg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FFB/6AC1F16A6E7C11EA8B3F0E59C4F9AE02/hM4p-GFBrPuKdekE8CcjhS3mMzg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9f:53:20:91:ee:1a:79:54:44:fb:f5:62:ee:0c:60:6e:7f: 8c:1b:14:07:7a:75:06:1f:bd:9c:af:a3:9a:52:9c:ab:2e:5a: 85:e1:42:76:71:8f:fb:a2:40:bd:de:a2:21:d4:d9:d6:05:4f: 6e:6f:f9:8f:0a:f9:d0:62:d6:c0:9e:56:45:05:81:5a:6c:15: 8b:e6:90:a6:6a:e3:9f:0f:6a:c1:27:73:68:b5:31:92:a4:2c: d7:96:2f:38:8c:f4:20:dc:ee:8e:d0:17:e7:7c:02:98:f4:37: de:46:4d:38:f7:ab:47:4a:41:92:bd:9c:63:89:e0:75:9d:91: 41:37:50:74:72:e8:fa:72:35:f4:86:c4:38:b0:69:8e:d6:5a: ee:09:7f:59:48:aa:bc:9d:2c:03:61:8f:b6:d5:94:4f:92:dc: 15:73:72:64:96:6d:de:62:87:be:3b:4e:0b:67:18:08:f5:56: 9b:fe:7a:ef:f6:00:43:57:90:0e:a5:17:1d:7b:e4:a0:80:12: 11:d1:8b:fb:2c:2c:4a:54:91:9c:6e:d4:c4:a9:5d:bd:9c:2d: 98:a7:d6:f0:d6:00:81:c3:85:c6:9a:e6:ec:cc:7b:b0:2e:f9: 96:79:25:9e:56:de:04:03:f7:ee:1f:e9:c3:b8:27:e1:cc:5c: e9:f5:ec:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGRkIxMTAvBgNVBAUTKDg0Q0UyOUY4NjE0MUFDRkI4QTc1RTkwNEYwMjcyMzg1 MkRFNjMzMzgwHhcNMjQxMTIyMTk0NDA0WhcNMjQxMTI5MTk0NDA0WjAYMRYwFAYD VQQDEw02NzQwZGYwNS02N2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwVTLD3BfjFpWWDNQowfJH9vXb/lruoGWuRVExev5wc/ugdm7JB2t3VVkAxl mMT7lgY+WpOaAbQtbmR9FOrErwGPi39CPfEWCx8JOlF+2Pud6x5A1UvXVxumB2rb w8TAju/Mj/C/tBwjV6NvSr/lJbjFKIvOSbcKRwdf8tJhK72oPh/fGGuCHimk0T9K 3n8iFH1SFfGYng1o0jqR/VGqnGOE0eQg4imUJcc2uiBxGtX5LeZKHjt03I6ndVZJ X+Wtd2xwhAmX+cV1NRhSY98yTZZ8NpJcbrk0TLgvCrQwl4DcGYNdqBUZnMQa9uqz j4f6GKLaAzIkRcASDZeLfUsL+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4Qx56v M7orw/QUdv39KbFYlRlnMB8GA1UdIwQYMBaAFITOKfhhQaz7inXpBPAnI4Ut5jM4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEZGQi82QUMxRjE2QTZF N0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQdUtkZWtFOENjamhTM21N emcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hNNHAtR0ZCclB1S2Rla0U4Q2NqaFMzbU16Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEZGQi82QUMxRjE2QTZFN0MxMUVBOEIzRjBFNTlDNEY5QUUwMi9oTTRwLUdGQnJQ dUtkZWtFOENjamhTM21NemcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANn1Mgke4aeVRE+/Vi7gxgbn+MGxQHenUGH72cr6OaUpyrLlqF4UJ2 cY/7okC93qIh1NnWBU9ub/mPCvnQYtbAnlZFBYFabBWL5pCmauOfD2rBJ3NotTGS pCzXli84jPQg3O6O0BfnfAKY9DfeRk0496tHSkGSvZxjieB1nZFBN1B0cuj6cjX0 hsQ4sGmO1lruCX9ZSKq8nSwDYY+21ZRPktwVc3Jklm3eYoe+O04LZxgI9Vab/nrv 9gBDV5AOpRcde+SggBIR0Yv7LCxKVJGcbtTEqV29nC2Yp9bw1gCBw4XGmubszHuw LvmWeSWeVt4EA/fuH+nDuCfhzFzp9ewy -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org