$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json) Hash identifier: A8uMCf4v43NF6jECiacv+dIZNbcRT57aY8CYypMtVrs= Subject key identifier: EE:A1:61:CF:56:AB:44:1D:CD:FE:A8:19:63:61:BC:9F:0E:31:6B:EE Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Certificate serial: 0737 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft Manifest number: 0731 Signing time: Wed 20 Nov 2024 21:12:33 +0000 Manifest this update: Wed 20 Nov 2024 21:12:32 +0000 Manifest next update: Wed 27 Nov 2024 21:12:32 +0000 Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: JdDo1BL4I5UXOuhdIUWGhbeseLDPZp/2P36ZyWYfeUw=) 2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: TvcOHSsYCyXpnMLRDhy2fSmnr1T+wVns1s4NPPpAH1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1847 (0x737) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1 Validity Not Before: Nov 20 21:12:32 2024 GMT Not After : Nov 27 21:12:32 2024 GMT Subject: CN=673e50c1-8621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:f5:72:8d:17:ef:dc:c5:bf:03:0e:be:09: 72:e4:77:6c:be:48:e8:b6:95:b9:31:20:3e:61:95: 43:68:61:da:71:14:1b:c2:c4:5a:ad:0a:2f:1a:10: 1e:83:d7:95:30:ae:eb:5b:de:a5:74:82:9b:a2:f3: 24:cd:aa:8a:bf:4f:96:b9:78:fa:48:58:3b:5c:e8: 00:f2:e9:2e:d3:73:f3:a0:03:20:b2:2b:27:cf:38: 64:18:99:6a:0b:7f:73:8a:b8:5e:9c:68:19:c4:b5: fb:9a:fa:23:60:4c:b8:fc:e7:52:75:d2:96:57:c1: 19:a5:f6:c1:bc:f9:98:42:ff:b1:f1:76:17:f2:a0: 62:ae:2f:6f:3e:92:51:1a:a4:69:7d:52:37:b2:3a: 10:99:23:bc:78:b2:d0:7f:9b:7c:74:cc:6b:6d:2a: f0:d5:81:9b:53:e1:51:0d:66:d2:4d:48:bf:5a:08: 84:a5:fe:61:07:b2:4b:d0:1c:05:16:6b:b1:6e:13: 46:eb:56:3c:27:b8:11:50:e1:42:37:54:ad:e8:ac: 3e:3e:2a:45:1c:3b:71:70:e7:63:7f:72:64:5c:f4: 69:5e:e1:e4:61:f4:76:2e:14:91:3a:6c:83:e2:ad: e7:40:39:17:11:d1:75:fe:05:1a:56:66:b7:f1:64: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A1:61:CF:56:AB:44:1D:CD:FE:A8:19:63:61:BC:9F:0E:31:6B:EE X509v3 Authority Key Identifier: keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:e5:78:93:20:af:82:c7:71:16:84:d8:fe:b6:81:c4:c0:e5: 6f:eb:4f:20:5f:bb:0f:e9:2f:df:6d:66:e9:8c:c3:39:13:1c: 3b:61:1b:98:ff:4b:59:cf:f9:43:0c:98:7c:a4:a8:24:d9:94: a3:21:7a:19:17:04:b3:99:37:cc:37:37:92:39:28:5c:5c:32: f1:35:a2:f8:4e:07:d8:f9:81:5c:cc:f7:ba:66:cc:a9:82:70: 48:fb:c3:8e:c6:7d:6b:61:0a:2e:51:a1:ba:c3:b7:cf:05:2c: 85:b8:d2:38:cd:e6:d9:90:68:3c:ce:7d:82:ad:a3:e9:e9:7a: c2:34:47:f2:52:0f:97:fd:5b:f7:d0:75:69:f5:ff:51:96:86: 31:20:51:25:63:ef:23:da:ff:f5:0e:ee:ae:0a:44:b1:45:75: d2:3e:5b:b3:c8:69:7b:08:ed:55:5a:ff:32:6e:c5:35:78:e5: ce:16:b3:80:b3:55:55:f6:da:a1:ae:a1:58:c1:75:1f:19:8a: a4:c2:2d:3b:bf:19:f5:14:87:27:51:08:1f:38:3c:d7:b0:c8: 52:c4:00:0d:74:7c:d4:5b:ad:7e:cd:f6:84:f3:c8:64:65:f1: 07:94:53:cb:f5:a2:09:a3:ec:e7:04:49:8b:12:b2:ad:9c:7b: a8:1a:9e:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNERDkxMTAvBgNVBAUTKEY1Rjg0OUM0NDUzNzBDOEI4MzgxMTM5QjMyNzA5ODRD MEExMEZBQjEwHhcNMjQxMTIwMjExMjMyWhcNMjQxMTI3MjExMjMyWjAYMRYwFAYD VQQDEw02NzNlNTBjMS04NjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVz1co0X79zFvwMOvgly5HdsvkjotpW5MSA+YZVDaGHacRQbwsRarQovGhAe g9eVMK7rW96ldIKbovMkzaqKv0+WuXj6SFg7XOgA8uku03PzoAMgsisnzzhkGJlq C39zirhenGgZxLX7mvojYEy4/OdSddKWV8EZpfbBvPmYQv+x8XYX8qBiri9vPpJR GqRpfVI3sjoQmSO8eLLQf5t8dMxrbSrw1YGbU+FRDWbSTUi/WgiEpf5hB7JL0BwF FmuxbhNG61Y8J7gRUOFCN1St6Kw+PipFHDtxcOdjf3JkXPRpXuHkYfR2LhSROmyD 4q3nQDkXEdF1/gUaVma38WQbYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6hYc9W q0Qdzf6oGWNhvJ8OMWvuMB8GA1UdIwQYMBaAFPX4ScRFNwyLg4ETmzJwmEwKEPqx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0REOS83QzkyQjhFMjA5 REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJdURnUk9iTW5DWVRBb1Et ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmaEp4RVUzREl1RGdST2JNbkNZVEFvUS1yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0REOS83QzkyQjhFMjA5REMxMUVCQUY0NzlEMUNDNEY5QUUwMi85ZmhKeEVVM0RJ dURnUk9iTW5DWVRBb1EtckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY5XiTIK+Cx3EWhNj+toHEwOVv608gX7sP6S/fbWbpjMM5Exw7YRuY /0tZz/lDDJh8pKgk2ZSjIXoZFwSzmTfMNzeSOShcXDLxNaL4TgfY+YFczPe6Zsyp gnBI+8OOxn1rYQouUaG6w7fPBSyFuNI4zebZkGg8zn2CraPp6XrCNEfyUg+X/Vv3 0HVp9f9RloYxIFElY+8j2v/1Du6uCkSxRXXSPluzyGl7CO1VWv8ybsU1eOXOFrOA s1VV9tqhrqFYwXUfGYqkwi07vxn1FIcnUQgfODzXsMhSxAANdHzUW61+zfaE88hk ZfEHlFPL9aIJo+znBEmLErKtnHuoGp7W -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:36 2024 by rpki-client on console-fra.rpki-client.org