$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft File: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft (raw, json) Hash identifier: acZmt1u/hl/i8afCCZPETQ5BaYsoYnmn9y4Ej92azlA= Subject key identifier: 04:C8:1D:44:75:D6:FB:C7:4C:AC:89:FA:34:5D:51:41:0B:DA:F2:AD Authority key identifier: F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 Certificate issuer: /CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Certificate serial: 0B47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft Manifest number: 0B3E Signing time: Fri 22 Nov 2024 18:58:15 +0000 Manifest this update: Fri 22 Nov 2024 18:58:15 +0000 Manifest next update: Fri 29 Nov 2024 18:58:15 +0000 Files and hashes: 1: -bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl (hash: kVIIf1wglnLkkfpXnZXPRuQXwVhz3yLvyM8K8UCTLqk=) 2: 01A8B084262811EA8269E33EC4F9AE02.roa (hash: j7UjuVCTVv/7mfOqRurAg480j9GWmLg6ExID4Lwvt4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2887 (0xb47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121D73/serialNumber=F9B975161FE2EA37E0E462AD5F5B8A74280134E6 Validity Not Before: Nov 22 18:58:15 2024 GMT Not After : Nov 29 18:58:15 2024 GMT Subject: CN=6740d447-e30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:55:87:da:c6:10:84:8c:57:7c:5c:c8:e6:89: a2:20:b9:81:d8:ab:09:fa:e9:40:f8:e9:e6:dd:60: 6c:97:f4:5f:a1:9a:1e:66:e8:4d:a7:e4:9c:87:34: 15:e7:4f:9a:7e:62:3b:64:c4:c5:f4:ab:6b:81:c8: 6a:92:ae:fc:3e:4a:a5:93:67:24:5e:4c:e9:e4:ad: 42:fb:92:ec:36:e3:27:cd:ef:c2:ea:b7:ce:35:b0: 01:c6:6e:4c:b6:86:33:5f:11:3a:15:53:cc:a0:7a: f7:2d:4d:42:f0:d6:cd:17:b8:12:a4:0d:82:c6:0b: ea:85:7b:fb:00:ed:17:6b:46:27:6b:3c:fd:84:98: 75:d8:4f:45:3c:62:f9:88:a5:88:2c:60:67:c9:9a: c9:0d:8c:5e:a5:7f:ae:ae:a8:b6:e5:8d:f4:01:12: cd:2c:72:e8:66:60:29:f2:4a:b8:7d:05:bf:02:18: 60:64:66:40:e9:b0:29:9a:ba:3e:c6:aa:27:86:b1: b6:d2:2c:9a:ad:00:67:6e:f7:80:d5:cb:ad:d1:22: cc:30:57:b0:15:b5:14:1c:c7:5a:6b:ab:b4:dc:33: ff:80:84:cc:30:95:c9:4e:af:de:de:ca:2e:29:5e: 58:14:19:bb:56:87:8a:b0:c5:a8:3d:54:a8:5d:89: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C8:1D:44:75:D6:FB:C7:4C:AC:89:FA:34:5D:51:41:0B:DA:F2:AD X509v3 Authority Key Identifier: keyid:F9:B9:75:16:1F:E2:EA:37:E0:E4:62:AD:5F:5B:8A:74:28:01:34:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D73/5CC66BD4262611EA8524E83BC4F9AE02/-bl1Fh_i6jfg5GKtX1uKdCgBNOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:5e:7a:01:2f:c5:3b:fb:ef:a5:c8:89:a6:6e:cd:fb:1d:f5: 9b:b3:eb:64:a1:67:57:80:d4:ce:b3:3b:b9:b4:00:9a:56:d2: f8:ac:5d:fc:b6:48:46:00:b7:2b:92:a0:53:42:51:95:9f:ee: 4d:7a:5a:18:00:2e:99:70:37:5a:21:b6:8e:56:6c:4f:5e:98: c1:d8:91:1e:08:36:5d:a5:8b:0c:a9:4f:07:02:89:a2:77:f9: f0:41:0f:2a:0a:c9:99:3d:49:cc:32:32:b6:43:54:ce:2c:47: ab:c1:fb:33:f8:d9:e4:0e:77:6c:84:ac:df:b9:69:37:a6:25: 79:a2:e2:e3:8a:fb:b2:c2:85:99:df:d0:0a:33:4e:b4:09:f7: a5:66:03:26:2f:f6:52:a0:36:f8:ca:44:7e:34:88:69:e1:e2: bb:7c:ac:17:fa:5b:ec:d0:2d:6f:7e:14:a5:5e:90:28:74:34: 9b:c8:52:73:ef:0b:c4:1b:41:5c:f7:d7:28:30:ed:ad:7f:4d: 97:46:d3:1d:7d:d0:f6:5f:2e:8a:cb:a0:50:ee:f0:e6:07:f9: 32:ac:f3:d0:e0:63:b3:c8:80:e2:7c:a8:d9:79:89:cd:66:2b: ae:c8:a4:78:e1:5f:83:9e:d5:40:05:56:bf:01:17:75:0c:a2: 8e:8e:3b:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFENzMxMTAvBgNVBAUTKEY5Qjk3NTE2MUZFMkVBMzdFMEU0NjJBRDVGNUI4QTc0 MjgwMTM0RTYwHhcNMjQxMTIyMTg1ODE1WhcNMjQxMTI5MTg1ODE1WjAYMRYwFAYD VQQDEw02NzQwZDQ0Ny1lMzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VWH2sYQhIxXfFzI5omiILmB2KsJ+ulA+Onm3WBsl/RfoZoeZuhNp+SchzQV 50+afmI7ZMTF9Ktrgchqkq78Pkqlk2ckXkzp5K1C+5LsNuMnze/C6rfONbABxm5M toYzXxE6FVPMoHr3LU1C8NbNF7gSpA2CxgvqhXv7AO0Xa0Ynazz9hJh12E9FPGL5 iKWILGBnyZrJDYxepX+urqi25Y30ARLNLHLoZmAp8kq4fQW/AhhgZGZA6bApmro+ xqonhrG20iyarQBnbveA1cut0SLMMFewFbUUHMdaa6u03DP/gITMMJXJTq/e3sou KV5YFBm7VoeKsMWoPVSoXYkFFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATIHUR1 1vvHTKyJ+jRdUUEL2vKtMB8GA1UdIwQYMBaAFPm5dRYf4uo34ORirV9binQoATTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQ3My81Q0M2NkJENDI2 MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZqZmc1R0t0WDF1S2RDZ0JO T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1ibDFGaF9pNmpmZzVHS3RYMXVLZENnQk5PWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUQ3My81Q0M2NkJENDI2MjYxMUVBODUyNEU4M0JDNEY5QUUwMi8tYmwxRmhfaTZq Zmc1R0t0WDF1S2RDZ0JOT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoXnoBL8U7+++lyImmbs37HfWbs+tkoWdXgNTOszu5tACaVtL4rF38 tkhGALcrkqBTQlGVn+5NeloYAC6ZcDdaIbaOVmxPXpjB2JEeCDZdpYsMqU8HAomi d/nwQQ8qCsmZPUnMMjK2Q1TOLEerwfsz+NnkDndshKzfuWk3piV5ouLjivuywoWZ 39AKM060CfelZgMmL/ZSoDb4ykR+NIhp4eK7fKwX+lvs0C1vfhSlXpAodDSbyFJz 7wvEG0Fc99coMO2tf02XRtMdfdD2Xy6Ky6BQ7vDmB/kyrPPQ4GOzyIDifKjZeYnN ZiuuyKR44V+DntVABVa/ARd1DKKOjjtf -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org