$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft File: h7_uyP-fsmiAINtZpiLBOhXlryA.mft (raw, json) Hash identifier: n86TW9YTC29v7C0sJ+vYWxVDyw8qBxhAojHNQiQhx/k= Subject key identifier: EA:ED:3D:25:4A:13:D7:35:84:30:C5:98:16:A5:65:D5:46:16:39:47 Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 Certificate issuer: /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft Manifest number: D9 Signing time: Sat 23 Nov 2024 03:43:45 +0000 Manifest this update: Sat 23 Nov 2024 03:43:44 +0000 Manifest next update: Sat 30 Nov 2024 03:43:44 +0000 Files and hashes: 1: h7_uyP-fsmiAINtZpiLBOhXlryA.crl (hash: Jq607kK/YpKWd+1j2lLQaJFne/E7P9k6nzTFXJopl+w=) 2: 28382F96644E11EEA1DCB653C4F9AE02.roa (hash: lktW9sNPmgzbEKTFurS4qttNmTooLeonVq9xiqF1yzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20 Validity Not Before: Nov 23 03:43:44 2024 GMT Not After : Nov 30 03:43:44 2024 GMT Subject: CN=67414f71-d6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:51:6b:fb:f6:3d:b1:34:8b:0b:f7:35:99:31: a5:a9:c5:56:66:04:00:87:ff:f5:b0:82:c7:2f:c6: 15:09:da:49:e9:76:3e:d7:8e:a7:6f:54:69:b1:e4: c0:f5:56:d2:6b:6b:31:08:01:4e:35:16:8e:d4:61: 58:c7:66:c5:4c:7e:c0:9f:1e:09:87:07:b4:cd:c8: 60:41:ec:4b:ec:ff:02:8f:12:ad:5b:4e:da:c5:77: 0d:3a:80:77:b7:61:91:50:c5:69:74:8c:fa:e7:4c: f9:ad:e4:a2:2d:9e:0d:e5:80:00:37:99:03:ad:91: 63:e4:da:cd:f4:96:00:7c:75:7b:59:0a:10:2e:e7: e7:7b:23:d1:6d:7d:62:24:ff:77:89:5d:1e:9a:af: b2:03:16:66:d4:ce:e0:b6:2e:c4:2c:4b:98:f9:f9: ca:b8:4d:f6:6f:b4:88:e4:f1:ad:97:72:4b:e2:6d: 9d:81:85:ea:90:cb:67:d9:80:3d:95:34:98:86:66: 9f:22:e7:e7:66:20:d2:d6:b6:fd:8a:45:c1:16:e0: 96:7a:bf:24:f2:80:c0:69:34:6d:d7:9b:f2:e7:3e: fe:31:0c:fe:c2:a3:d6:18:13:9c:59:3b:23:b2:6b: 19:bd:18:e4:3a:16:3b:bb:bd:8b:b2:14:5d:79:18: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:ED:3D:25:4A:13:D7:35:84:30:C5:98:16:A5:65:D5:46:16:39:47 X509v3 Authority Key Identifier: keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:bb:32:41:ba:4a:a7:77:a6:15:23:a1:82:c9:0e:22:16:87: 9a:85:57:e3:69:e7:6d:30:a7:32:4d:11:ac:9d:2c:88:b6:08: 94:ee:bb:6e:65:0e:65:6c:f3:8c:8b:d5:93:67:bf:d7:c3:ad: e3:54:a7:16:e0:98:74:d9:ad:f7:c5:08:0e:42:9b:4b:51:3e: 50:a8:3a:4a:9e:fd:6d:30:7d:7c:35:b0:a6:f3:0d:bb:71:7a: a8:1c:6a:7c:eb:0e:a0:43:6a:62:96:96:88:80:3d:ff:6c:9e: 44:99:c8:77:03:18:3d:ce:c3:56:e2:cc:5a:c7:9a:ed:e5:01: e4:b9:6c:4a:54:e3:80:d0:34:62:3e:f8:36:bd:42:76:33:ab: ec:53:13:50:43:3a:bf:0c:b2:2c:9c:96:5a:d1:df:60:67:dd: 60:7b:0d:9d:bb:14:73:b6:e6:fe:30:e5:ec:99:75:93:32:fc: 64:8b:cf:b3:67:c2:d0:e8:6f:1f:ce:ce:4e:ac:67:7c:94:03: 61:ac:f7:58:03:3e:07:91:79:bc:37:80:a3:bc:c4:93:d0:ae: 2b:97:31:1c:c0:90:cb:b0:e6:f9:59:3e:31:23:85:f8:1f:3f: 88:18:42:ba:b7:dc:64:bb:38:13:3d:7d:42:69:19:d9:6f:2e: 9d:91:4a:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCN0ExMTAvBgNVBAUTKDg3QkZFRUM4RkY5RkIyNjg4MDIwREI1OUE2MjJDMTNB MTVFNUFGMjAwHhcNMjQxMTIzMDM0MzQ0WhcNMjQxMTMwMDM0MzQ0WjAYMRYwFAYD VQQDEw02NzQxNGY3MS1kNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolFr+/Y9sTSLC/c1mTGlqcVWZgQAh//1sILHL8YVCdpJ6XY+146nb1RpseTA 9VbSa2sxCAFONRaO1GFYx2bFTH7Anx4Jhwe0zchgQexL7P8CjxKtW07axXcNOoB3 t2GRUMVpdIz650z5reSiLZ4N5YAAN5kDrZFj5NrN9JYAfHV7WQoQLufneyPRbX1i JP93iV0emq+yAxZm1M7gti7ELEuY+fnKuE32b7SI5PGtl3JL4m2dgYXqkMtn2YA9 lTSYhmafIufnZiDS1rb9ikXBFuCWer8k8oDAaTRt15vy5z7+MQz+wqPWGBOcWTsj smsZvRjkOhY7u72LshRdeRi3zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrtPSVK E9c1hDDFmBalZdVGFjlHMB8GA1UdIwQYMBaAFIe/7sj/n7JogCDbWaYiwToV5a8g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI3QS8wNkExOTYwMjY0 NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNtaUFJTnRacGlMQk9oWGxy eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3X3V5UC1mc21pQUlOdFpwaUxCT2hYbHJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI3QS8wNkExOTYwMjY0NEQxMUVFODRENDAzNEZDNEY5QUUwMi9oN191eVAtZnNt aUFJTnRacGlMQk9oWGxyeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBuzJBukqnd6YVI6GCyQ4iFoeahVfjaedtMKcyTRGsnSyItgiU7rtu ZQ5lbPOMi9WTZ7/Xw63jVKcW4Jh02a33xQgOQptLUT5QqDpKnv1tMH18NbCm8w27 cXqoHGp86w6gQ2pilpaIgD3/bJ5Emch3Axg9zsNW4sxax5rt5QHkuWxKVOOA0DRi Pvg2vUJ2M6vsUxNQQzq/DLIsnJZa0d9gZ91gew2duxRztub+MOXsmXWTMvxki8+z Z8LQ6G8fzs5OrGd8lANhrPdYAz4HkXm8N4CjvMST0K4rlzEcwJDLsOb5WT4xI4X4 Hz+IGEK6t9xkuzgTPX1CaRnZby6dkUpx -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:46 2024 by rpki-client on console-fra.rpki-client.org