$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft File: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft (raw, json) Hash identifier: s0nkhp7eDm7C4CbhzvDYaNJWkXyLRm/gwW7pkmDu7BM= Subject key identifier: 2B:7B:62:29:0F:2A:9B:D9:EB:B8:3C:A9:05:58:93:81:C8:36:57:37 Authority key identifier: F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 Certificate issuer: /CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft Manifest number: 03 Signing time: Wed 23 Oct 2024 06:54:11 +0000 Manifest this update: Wed 23 Oct 2024 06:54:10 +0000 Manifest next update: Wed 30 Oct 2024 06:54:10 +0000 Files and hashes: 1: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl (hash: ZBkSywNeY7ZIXO8FLEeZDKYmbvRhbZ1VzXDjR5/9X7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Validity Not Before: Oct 23 06:54:10 2024 GMT Not After : Oct 30 06:54:10 2024 GMT Subject: CN=67189d92-596e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:05:8f:66:47:a3:db:1c:dc:5d:b2:3c:2a: a4:22:c3:b8:ba:d3:17:7b:26:09:28:d5:dc:78:bd: 5c:e5:a7:8f:a9:db:61:e2:6c:0a:80:9e:35:cf:23: 7c:67:76:f7:35:28:1c:1a:bc:3a:b9:80:bb:83:8e: b3:2e:57:d6:37:52:0d:dc:15:46:9c:4a:fa:e1:62: e2:03:26:94:9b:fe:42:ad:81:8f:ff:aa:c5:08:d3: 10:c2:c9:4d:b7:7d:54:9b:49:88:9e:95:da:2e:ae: 1e:8d:46:72:10:a6:b1:22:9a:1d:9a:23:8e:76:fc: 34:70:83:a5:2a:24:4a:6d:dc:aa:ae:bd:0a:d6:c7: cb:4d:89:a5:30:87:32:85:0e:ac:5b:7f:6d:6f:42: 53:88:57:29:36:fb:b6:e0:20:ca:e7:03:dd:be:bb: 32:48:c2:1f:e5:f0:76:dc:4c:1e:cb:49:e5:a7:4f: a8:ca:69:a6:72:45:82:4a:f3:8a:a5:38:a1:6f:22: 55:44:fd:4d:22:8a:24:bd:4a:77:eb:63:10:00:66: b2:a0:38:ec:23:39:03:9e:07:80:a0:53:90:a1:6f: c6:f0:f7:f6:55:ee:b2:5e:86:07:8e:6f:bc:2b:c2: 5c:5a:63:31:96:cf:23:aa:bd:d8:86:06:dc:9d:ee: b2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7B:62:29:0F:2A:9B:D9:EB:B8:3C:A9:05:58:93:81:C8:36:57:37 X509v3 Authority Key Identifier: keyid:F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:77:dc:60:bd:8f:4b:d8:b4:ed:f0:75:e3:5e:26:58:b1:8b: d9:b3:dd:3c:53:a1:e6:7c:ca:73:a3:fa:c1:f9:25:8c:b0:f8: 0a:de:86:28:29:39:28:da:ff:e1:49:03:56:76:62:b7:69:ef: 61:41:a8:18:ae:24:2e:e2:3c:74:e9:1f:c1:95:e9:b4:bb:ca: 5a:09:ea:d3:ca:c8:7f:ac:c8:b8:92:58:71:db:94:ca:1f:4b: 04:7b:6e:a6:3f:02:4d:1e:c6:f3:e5:cd:03:71:1f:27:01:47: 4f:38:28:02:b8:7b:6c:f0:a1:22:09:90:cf:6b:70:1e:68:04: f3:d1:18:d6:db:7a:91:fa:66:b9:2b:3b:5d:80:ca:53:97:c5: de:6e:3f:c4:b1:f8:14:dd:04:d2:2c:93:10:87:fa:d9:03:32: 46:e4:6f:76:76:47:e7:cc:2f:5f:5c:5e:e2:c2:8b:55:19:61: b0:51:1d:19:2d:f4:5f:43:3e:0e:0f:74:69:e7:92:8f:32:25: e9:20:27:63:d6:4f:c6:b6:d8:6c:51:ce:1a:26:25:ac:1f:28: 9c:c2:65:0e:85:f3:7c:16:03:4c:3a:18:eb:c0:fd:2b:a7:9c: 38:87:ac:b6:2f:3d:2b:04:89:5f:7b:dc:43:47:f0:ca:45:0f: 36:e9:7d:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0IyNDExMC8GA1UEBRMoRjUzQkNGQjhDNzJDMUEzQUI2NUUwRUE4OEUzQTFBMjFE MjhDRDE2MTAeFw0yNDEwMjMwNjU0MTBaFw0yNDEwMzAwNjU0MTBaMBgxFjAUBgNV BAMTDTY3MTg5ZDkyLTU5NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMUwWPZkej2xzcXbI8KqQiw7i60xd7Jgko1dx4vVzlp4+p22HibAqAnjXPI3xn dvc1KBwavDq5gLuDjrMuV9Y3Ug3cFUacSvrhYuIDJpSb/kKtgY//qsUI0xDCyU23 fVSbSYieldourh6NRnIQprEimh2aI452/DRwg6UqJEpt3KquvQrWx8tNiaUwhzKF Dqxbf21vQlOIVyk2+7bgIMrnA92+uzJIwh/l8HbcTB7LSeWnT6jKaaZyRYJK84ql OKFvIlVE/U0iiiS9SnfrYxAAZrKgOOwjOQOeB4CgU5Chb8bw9/ZV7rJehgeOb7wr wlxaYzGWzyOqvdiGBtyd7rLVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK3tiKQ8q m9nruDypBViTgcg2VzcwHwYDVR0jBBgwFoAU9TvPuMcsGjq2Xg6ojjoaIdKM0WEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3QjI0LzFFNEYzQTVDOEY3 NjExRUY4NEVDNzcxNUM0RjlBRTAyLzlUdlB1TWNzR2pxMlhnNm9qam9hSWRLTTBX RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVR2UHVNY3NHanEyWGc2b2pqb2FJZEtNMFdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 QjI0LzFFNEYzQTVDOEY3NjExRUY4NEVDNzcxNUM0RjlBRTAyLzlUdlB1TWNzR2px MlhnNm9qam9hSWRLTTBXRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHV33GC9j0vYtO3wdeNeJlixi9mz3TxToeZ8ynOj+sH5JYyw+Arehigp OSja/+FJA1Z2Yrdp72FBqBiuJC7iPHTpH8GV6bS7yloJ6tPKyH+syLiSWHHblMof SwR7bqY/Ak0exvPlzQNxHycBR084KAK4e2zwoSIJkM9rcB5oBPPRGNbbepH6Zrkr O12AylOXxd5uP8Sx+BTdBNIskxCH+tkDMkbkb3Z2R+fML19cXuLCi1UZYbBRHRkt 9F9DPg4PdGnnko8yJekgJ2PWT8a22GxRzhomJawfKJzCZQ6F83wWA0w6GOvA/Sun nDiHrLYvPSsEiV973ENH8MpFDzbpfQk= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:18 2024 by rpki-client on console-fra.rpki-client.org