$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft File: eI-02WtgHbphbd3JnP5GXWDDjyE.mft (raw, json) Hash identifier: TrTyBCIxSxZjA2JuCdMR9snXve0qOalDxrFDlfhR3ws= Subject key identifier: B1:61:58:69:47:3F:E5:44:2F:EB:FC:32:22:59:4B:47:5D:17:72:D3 Authority key identifier: 78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21 Certificate issuer: /CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft Manifest number: 04BE Signing time: Sat 23 Nov 2024 00:09:27 +0000 Manifest this update: Sat 23 Nov 2024 00:09:26 +0000 Manifest next update: Sat 30 Nov 2024 00:09:26 +0000 Files and hashes: 1: eI-02WtgHbphbd3JnP5GXWDDjyE.crl (hash: FYoEUx5TdKCgglcAgeOTg2QoIiRmQi1PqakPoDk+Hdk=) 2: 960BB902A6F111EF9E720A74C4F9AE02.roa (hash: JGNqu80Q4bQ4N4fKYYstAS8XMwoDYz9gJMT0zxatq+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21 Validity Not Before: Nov 23 00:09:26 2024 GMT Not After : Nov 30 00:09:26 2024 GMT Subject: CN=67411d37-cc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:d0:51:d0:35:d0:bd:52:db:f1:f7:cb:86: 26:8e:a5:3f:7d:db:d7:05:24:68:98:82:36:fb:6c: bf:13:ce:99:ff:6b:95:b4:c1:ff:81:67:5f:56:63: e5:46:7e:db:43:2a:87:62:18:0d:72:0c:b5:0b:69: e4:9e:12:a8:9e:6f:ad:f3:ec:b1:f4:a6:3d:ed:20: 96:b2:a5:19:e6:96:ba:90:f2:89:4b:62:19:cb:40: f1:ff:55:bd:93:12:27:41:4a:0f:1e:20:91:a4:27: 3c:fb:90:8a:47:aa:71:f4:74:f2:30:e6:55:6e:19: ae:78:3b:ff:32:85:a3:61:76:6b:6f:e6:2c:2c:68: 3b:51:00:2e:28:51:70:67:d9:d9:a7:50:31:c8:da: fe:88:42:da:5e:55:71:e5:91:e3:54:7d:1d:9f:5b: 0a:3f:51:d6:10:e9:9e:ec:5f:52:fb:10:1e:41:4c: 91:ba:74:c2:22:46:39:5f:54:17:02:c5:ef:af:45: dd:25:80:57:1f:01:1f:de:7f:0c:e7:0c:67:f5:be: 89:50:8b:54:75:8a:3b:04:d7:78:25:42:2e:d8:8e: c4:4b:3b:0f:67:74:ea:a0:3d:26:3b:3b:8c:36:13: ad:af:cb:52:16:81:79:da:fe:14:49:a1:19:8f:5c: be:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:61:58:69:47:3F:E5:44:2F:EB:FC:32:22:59:4B:47:5D:17:72:D3 X509v3 Authority Key Identifier: keyid:78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:bd:45:05:e8:3e:d4:8b:6e:37:cd:12:7c:52:cc:43:86:3c: 9b:72:7e:3b:a9:cf:29:13:15:a7:18:48:ce:13:f4:97:13:fe: f0:43:f4:b6:5c:28:b7:c2:cd:2f:ba:18:72:eb:02:19:3c:3a: bf:01:47:e3:ab:5e:b1:aa:a7:7b:4e:fc:ff:5f:7f:bf:b4:aa: 2f:04:8e:e2:72:01:94:88:22:3b:23:15:c5:11:94:9f:99:43: 88:de:77:46:42:5b:7d:95:51:63:9e:de:0d:0e:35:a1:4d:7c: ea:b0:c6:87:57:0b:3d:46:96:96:64:de:bc:9b:b1:df:2a:83: a2:3d:aa:3f:ce:10:2d:28:64:fe:68:67:c3:91:cb:94:d9:7b: 2b:a0:59:a8:e6:c6:32:36:56:1e:87:9f:4c:fb:62:17:b0:99: bf:10:03:de:19:fb:4c:cc:b2:d9:2e:d0:97:7b:db:18:e8:72: 47:bb:d2:d3:3b:eb:7c:38:f7:ce:fd:da:7b:c9:ed:fa:ef:f3: 25:a5:e3:0b:41:ef:8c:f2:57:5c:79:c8:48:78:b8:a7:6b:47: ce:4d:ce:44:31:61:7a:46:0e:96:20:10:e9:bd:1e:71:09:9f: 88:5c:84:70:77:c4:c2:42:44:f0:2b:88:d4:24:7a:ea:56:c0: 2d:b8:a6:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTM2MzExMC8GA1UEBRMoNzg4RkI0RDk2QjYwMURCQTYxNkREREM5OUNGRTQ2NUQ2 MEMzOEYyMTAeFw0yNDExMjMwMDA5MjZaFw0yNDExMzAwMDA5MjZaMBgxFjAUBgNV BAMTDTY3NDExZDM3LWNjODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCn3dBR0DXQvVLb8ffLhiaOpT9929cFJGiYgjb7bL8Tzpn/a5W0wf+BZ19WY+VG fttDKodiGA1yDLULaeSeEqieb63z7LH0pj3tIJaypRnmlrqQ8olLYhnLQPH/Vb2T EidBSg8eIJGkJzz7kIpHqnH0dPIw5lVuGa54O/8yhaNhdmtv5iwsaDtRAC4oUXBn 2dmnUDHI2v6IQtpeVXHlkeNUfR2fWwo/UdYQ6Z7sX1L7EB5BTJG6dMIiRjlfVBcC xe+vRd0lgFcfAR/efwznDGf1volQi1R1ijsE13glQi7YjsRLOw9ndOqgPSY7O4w2 E62vy1IWgXna/hRJoRmPXL4nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsWFYaUc/ 5UQv6/wyIllLR10XctMwHwYDVR0jBBgwFoAUeI+02WtgHbphbd3JnP5GXWDDjyEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MzYzLzMxRUFERkE0NUNC QTExRUM4QUExM0UyNEM0RjlBRTAyL2VJLTAyV3RnSGJwaGJkM0puUDVHWFdERGp5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUktMDJXdGdIYnBoYmQzSm5QNUdYV0REanlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 MzYzLzMxRUFERkE0NUNCQTExRUM4QUExM0UyNEM0RjlBRTAyL2VJLTAyV3RnSGJw aGJkM0puUDVHWFdERGp5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJu9RQXoPtSLbjfNEnxSzEOGPJtyfjupzykTFacYSM4T9JcT/vBD9LZc KLfCzS+6GHLrAhk8Or8BR+OrXrGqp3tO/P9ff7+0qi8EjuJyAZSIIjsjFcURlJ+Z Q4jed0ZCW32VUWOe3g0ONaFNfOqwxodXCz1GlpZk3rybsd8qg6I9qj/OEC0oZP5o Z8ORy5TZeyugWajmxjI2Vh6Hn0z7Yhewmb8QA94Z+0zMstku0Jd72xjocke70tM7 63w498792nvJ7frv8yWl4wtB74zyV1x5yEh4uKdrR85NzkQxYXpGDpYgEOm9HnEJ n4hchHB3xMJCRPAriNQkeupWwC24pnA= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org