$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft File: Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft (raw, json) Hash identifier: 1STB5LhuX9TNMYi3zoL+vJdQqXeKLCVzOWCI2W4Ww+Q= Subject key identifier: 59:1B:CB:8F:CA:FF:44:A1:D5:69:84:C3:C9:FD:34:35:E2:F1:82:37 Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft Manifest number: E9 Signing time: Sat 23 Nov 2024 03:32:13 +0000 Manifest this update: Sat 23 Nov 2024 03:32:13 +0000 Manifest next update: Sat 30 Nov 2024 03:32:13 +0000 Files and hashes: 1: Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl (hash: HxZtUNIUtby3o6kjrcwnKrFjAhVtjzVgQO7fZU5zsbo=) 2: 4D7FE224E87B11EEAF04B71AC4F9AE02.roa (hash: DTVzyVlIC4Xnn8MhWolDkQ/ai3Ox2+GFKwtJI1Lej3g=) 3: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (hash: LMuqBxcXA6omeZYWuSKDoznB0WMuX1/EBiBUPiUz0aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A Validity Not Before: Nov 23 03:32:13 2024 GMT Not After : Nov 30 03:32:13 2024 GMT Subject: CN=67414cbd-68f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8d:0c:8c:d7:dd:d7:91:3b:46:cc:5d:ff:5c: fc:6d:ab:f1:5b:95:8f:ed:8a:ff:e4:8d:e1:b1:ba: 03:59:31:0f:2f:78:e6:42:79:e9:b1:eb:b3:b3:af: 06:0a:7b:92:2e:0e:dd:cc:81:36:c5:0f:94:5b:53: 6e:b3:bc:e4:0e:36:c4:f9:6f:3c:fc:b4:02:04:f5: 32:74:d4:5b:14:29:07:8b:39:c9:8b:5b:58:5c:76: c7:3b:4d:0c:1a:84:03:0f:26:61:5a:b2:b5:cc:01: 2c:1b:89:ba:a8:dc:78:54:7e:7a:cc:7c:99:5a:22: fd:50:58:fa:62:b6:1b:2a:ed:16:e5:bd:1d:26:0a: 8e:37:db:95:37:1a:0c:a4:86:10:cb:fb:86:4d:8c: 66:d1:54:fd:30:2f:7d:42:8b:58:49:2b:29:b7:6c: 12:75:30:27:ec:f2:31:36:5c:46:45:71:99:07:90: 1b:10:67:a7:c7:42:a8:ca:62:15:42:11:ee:bd:ac: 20:4f:72:d1:42:7a:b6:44:fb:73:20:4d:ff:73:c2: 36:e6:cd:64:14:45:77:cc:69:7d:c6:b0:13:e4:34: 9f:c4:4e:4a:94:d1:58:e5:ef:77:59:f4:ca:21:01: 5d:45:41:58:00:e6:cb:9b:82:97:34:92:69:28:16: 1e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1B:CB:8F:CA:FF:44:A1:D5:69:84:C3:C9:FD:34:35:E2:F1:82:37 X509v3 Authority Key Identifier: keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:1f:5b:ec:9f:3f:cc:60:2c:97:09:97:30:01:4d:c3:4a:4d: b0:b7:94:94:ab:e4:30:c1:ca:fb:10:aa:51:8c:11:ab:f4:95: db:f4:fc:75:bd:15:ca:40:14:45:de:f6:0b:10:2d:dc:7b:23: fc:c2:26:e2:e5:0f:e5:39:70:d7:a5:50:61:5b:5e:38:e7:bf: a4:ba:05:0a:f0:aa:df:81:a4:9f:6d:b7:68:62:95:18:47:de: e8:30:f7:97:cc:7f:23:79:a0:54:5e:19:ef:0b:29:de:01:eb: 47:88:cc:64:25:82:92:36:5e:d5:ca:51:bb:8c:8c:02:73:94: d5:1d:0f:c2:2d:f3:da:94:9f:1e:11:8c:4f:02:8e:18:30:a3: 84:d9:f9:8f:f1:28:2e:ee:ba:a2:57:0a:29:3c:84:b1:ee:7a: a2:cc:1f:fb:09:2e:58:5e:43:84:a3:a6:0f:8c:df:bd:05:24: 6d:da:65:86:7e:28:99:23:b4:db:8b:af:e2:16:13:f5:55:de: 50:97:32:f6:c3:83:d4:64:c0:f5:42:d3:31:1d:ac:7f:d2:6c: 33:2b:bd:7e:37:80:b5:aa:f6:cc:66:f1:fc:72:3c:f7:54:e4: 30:59:05:f0:a8:d8:96:da:f0:4e:3f:d6:76:3d:79:0a:1e:41: e4:e3:c0:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE5OTUxMTAvBgNVBAUTKDIyOUUwNjRBQ0Y0MzJGNjREQUE3MDE3QTY2QkU4QjYx QTk2QjE4NUEwHhcNMjQxMTIzMDMzMjEzWhcNMjQxMTMwMDMzMjEzWjAYMRYwFAYD VQQDEw02NzQxNGNiZC02OGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9I0MjNfd15E7Rsxd/1z8bavxW5WP7Yr/5I3hsboDWTEPL3jmQnnpseuzs68G CnuSLg7dzIE2xQ+UW1Nus7zkDjbE+W88/LQCBPUydNRbFCkHiznJi1tYXHbHO00M GoQDDyZhWrK1zAEsG4m6qNx4VH56zHyZWiL9UFj6YrYbKu0W5b0dJgqON9uVNxoM pIYQy/uGTYxm0VT9MC99QotYSSspt2wSdTAn7PIxNlxGRXGZB5AbEGenx0KoymIV QhHuvawgT3LRQnq2RPtzIE3/c8I25s1kFEV3zGl9xrAT5DSfxE5KlNFY5e93WfTK IQFdRUFYAObLm4KXNJJpKBYe6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkby4/K /0Sh1WmEw8n9NDXi8YI3MB8GA1UdIwQYMBaAFCKeBkrPQy9k2qcBema+i2Gpaxha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTk5NS85RTM2QkZBNDRD MTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwyVGFwd0Y2WnI2TFlhbHJH Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lwNEdTczlETDJUYXB3RjZacjZMWWFsckdGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTk5NS85RTM2QkZBNDRDMTcxMUVFQUFCRjAzMkJDNEY5QUUwMi9JcDRHU3M5REwy VGFwd0Y2WnI2TFlhbHJHRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJH1vsnz/MYCyXCZcwAU3DSk2wt5SUq+Qwwcr7EKpRjBGr9JXb9Px1 vRXKQBRF3vYLEC3ceyP8wibi5Q/lOXDXpVBhW14457+kugUK8KrfgaSfbbdoYpUY R97oMPeXzH8jeaBUXhnvCyneAetHiMxkJYKSNl7VylG7jIwCc5TVHQ/CLfPalJ8e EYxPAo4YMKOE2fmP8Sgu7rqiVwopPISx7nqizB/7CS5YXkOEo6YPjN+9BSRt2mWG fiiZI7Tbi6/iFhP1Vd5QlzL2w4PUZMD1QtMxHax/0mwzK71+N4C1qvbMZvH8cjz3 VOQwWQXwqNiW2vBOP9Z2PXkKHkHk48AF -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:44 2024 by rpki-client on console-fra.rpki-client.org