$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft File: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft (raw, json) Hash identifier: R0qOP/RgKqIyp0+YMn1pYu9wJ88gXEzX65qsnMRIHMk= Subject key identifier: 96:1A:87:F6:A3:64:C1:B9:5F:DE:CE:12:F0:DC:05:5D:AB:18:92:F5 Authority key identifier: F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 Certificate issuer: /CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft Manifest number: 13 Signing time: Sat 23 Nov 2024 05:57:21 +0000 Manifest this update: Sat 23 Nov 2024 05:57:21 +0000 Manifest next update: Sat 30 Nov 2024 05:57:21 +0000 Files and hashes: 1: 9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl (hash: n1FgJHBJQ311g2057krHW+UwMaKbPGSKw6j2cTf5y1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B24/serialNumber=F53BCFB8C72C1A3AB65E0EA88E3A1A21D28CD161 Validity Not Before: Nov 23 05:57:21 2024 GMT Not After : Nov 30 05:57:21 2024 GMT Subject: CN=67416ec1-1605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cf:77:31:e8:12:97:5c:fb:b7:92:f0:92:3e: ae:db:7a:12:25:37:32:54:2d:a5:95:47:2c:09:80: 1a:4c:65:ee:e7:e4:5a:93:66:34:78:f2:63:99:e6: 6d:70:6c:1d:9d:f6:2b:11:d1:6f:f9:63:25:22:a7: c5:b1:b3:37:cc:b8:06:48:01:80:76:f6:79:bd:55: 5e:34:26:8d:3a:30:13:b9:dd:55:ce:72:bd:ca:97: 79:da:44:69:5a:4d:a0:d8:87:1c:61:aa:a7:1e:db: 78:30:82:ce:42:5b:6c:b7:98:bf:79:78:7d:ef:a5: 86:07:b9:7c:5a:93:e1:1d:cd:82:eb:43:3c:57:59: 22:c0:ca:44:8f:e5:15:cd:82:d6:9c:62:b6:74:fc: ff:16:d8:e1:e1:a9:af:6d:8b:5b:30:5b:c2:6e:fe: 1d:73:2d:c0:40:2e:11:e8:19:09:b1:ed:5f:b0:ca: 11:95:a0:6f:18:a6:c5:ca:a0:63:19:9a:c9:56:ee: fc:b3:93:f5:e0:10:24:91:03:2a:f5:60:74:29:bb: dc:a0:99:de:82:02:22:f7:c5:5a:17:a4:85:42:31: 36:04:f2:82:c8:cb:28:c4:ce:f3:85:f2:f1:82:20: c3:d0:01:53:93:a5:82:38:34:3d:18:72:4c:07:5a: 59:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1A:87:F6:A3:64:C1:B9:5F:DE:CE:12:F0:DC:05:5D:AB:18:92:F5 X509v3 Authority Key Identifier: keyid:F5:3B:CF:B8:C7:2C:1A:3A:B6:5E:0E:A8:8E:3A:1A:21:D2:8C:D1:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B24/1E4F3A5C8F7611EF84EC7715C4F9AE02/9TvPuMcsGjq2Xg6ojjoaIdKM0WE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:fe:2a:cb:47:a6:cf:86:b1:07:b4:68:a4:92:1a:de:2b:81: 1d:89:7f:c3:aa:88:0e:4f:12:36:99:61:e5:62:f6:1a:1e:d9: cc:3a:23:e3:07:cb:76:9c:09:12:d9:0f:11:c5:e4:cc:94:0a: 13:70:f2:b5:9d:44:55:f8:48:bb:71:93:08:56:5a:2c:48:0a: f1:15:f2:55:4b:24:a1:7b:93:ae:f1:ab:27:33:2d:86:85:63: 89:22:86:25:29:54:11:b0:da:9b:10:34:22:34:91:ee:86:80: db:63:22:66:f7:cf:6b:07:02:08:b8:d4:ef:8c:c6:0b:cf:5e: 0f:14:8e:d0:87:5e:37:cb:e2:d9:05:f2:72:a2:19:d3:dc:7a: b9:20:4a:c6:9a:86:35:ca:d9:95:50:1a:31:7a:04:c0:d0:ad: 9b:85:20:bf:e0:3e:8a:f2:87:2d:0b:f9:d0:71:d6:2c:e8:05: 80:5c:ee:eb:de:94:0c:4b:2e:bc:65:40:35:17:35:f9:a4:c3: d1:7e:0e:42:5c:aa:5f:f4:fc:c2:91:7a:d3:aa:fe:3c:e6:b9: 2f:eb:fe:33:8d:2e:2e:14:3a:80:34:36:5e:80:72:b2:89:fd: cd:2d:ef:31:a6:ee:3b:1b:00:cd:83:6a:e0:66:35:ce:08:14: 4f:71:d9:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0IyNDExMC8GA1UEBRMoRjUzQkNGQjhDNzJDMUEzQUI2NUUwRUE4OEUzQTFBMjFE MjhDRDE2MTAeFw0yNDExMjMwNTU3MjFaFw0yNDExMzAwNTU3MjFaMBgxFjAUBgNV BAMTDTY3NDE2ZWMxLTE2MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZz3cx6BKXXPu3kvCSPq7behIlNzJULaWVRywJgBpMZe7n5FqTZjR48mOZ5m1w bB2d9isR0W/5YyUip8WxszfMuAZIAYB29nm9VV40Jo06MBO53VXOcr3Kl3naRGla TaDYhxxhqqce23gwgs5CW2y3mL95eH3vpYYHuXxak+EdzYLrQzxXWSLAykSP5RXN gtacYrZ0/P8W2OHhqa9ti1swW8Ju/h1zLcBALhHoGQmx7V+wyhGVoG8YpsXKoGMZ mslW7vyzk/XgECSRAyr1YHQpu9ygmd6CAiL3xVoXpIVCMTYE8oLIyyjEzvOF8vGC IMPQAVOTpYI4ND0YckwHWlmJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlhqH9qNk wblf3s4S8NwFXasYkvUwHwYDVR0jBBgwFoAU9TvPuMcsGjq2Xg6ojjoaIdKM0WEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3QjI0LzFFNEYzQTVDOEY3 NjExRUY4NEVDNzcxNUM0RjlBRTAyLzlUdlB1TWNzR2pxMlhnNm9qam9hSWRLTTBX RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOVR2UHVNY3NHanEyWGc2b2pqb2FJZEtNMFdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 QjI0LzFFNEYzQTVDOEY3NjExRUY4NEVDNzcxNUM0RjlBRTAyLzlUdlB1TWNzR2px MlhnNm9qam9hSWRLTTBXRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHL+KstHps+GsQe0aKSSGt4rgR2Jf8OqiA5PEjaZYeVi9hoe2cw6I+MH y3acCRLZDxHF5MyUChNw8rWdRFX4SLtxkwhWWixICvEV8lVLJKF7k67xqyczLYaF Y4kihiUpVBGw2psQNCI0ke6GgNtjImb3z2sHAgi41O+MxgvPXg8UjtCHXjfL4tkF 8nKiGdPcerkgSsaahjXK2ZVQGjF6BMDQrZuFIL/gPoryhy0L+dBx1izoBYBc7uve lAxLLrxlQDUXNfmkw9F+DkJcql/0/MKRetOq/jzmuS/r/jONLi4UOoA0Nl6AcrKJ /c0t7zGm7jsbAM2DauBmNc4IFE9x2WM= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org