$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft File: 9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json) Hash identifier: Cw9E2mEN/jnZHBUCeXoCZZVcWQGeJRsYU4C0+PUknbM= Subject key identifier: 62:DB:92:69:AC:45:F7:BA:1E:BE:90:32:19:BC:F8:A8:48:DF:21:0F Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 09A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft Manifest number: 092C Signing time: Wed 20 Nov 2024 20:08:23 +0000 Manifest this update: Wed 20 Nov 2024 20:08:22 +0000 Manifest next update: Wed 27 Nov 2024 20:08:22 +0000 Files and hashes: 1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: poxIbrKVbE0A65AcOnHfl/A1ZZe7SENvQZuVUiu67kI=) 2: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: njiA97BWiRk9sCmTbQIlp3Ri+tWF0C8maPKeLAkzd1A=) 3: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: rr65iu6MYNNXkhjzO3hqMXE1BOxqX/2ZffD6fmtUudc=) 4: 5970F06CA08311EA984D590DC4F9AE02.roa (hash: EwEE9/5gmNZTCy1amscaIzjvtu3HA+jIbh55U8rBRUQ=) 5: 8518C04E9DAB11EF81B62215C4F9AE02.roa (hash: GdZ2TQfj0CwNiCT6qUPjCD2PuCO+fLkV+HKlKoezX+g=) 6: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: JKGwZrx9wrsIXPGCYWa5pAiczTrp7fQvRORuHLwpOAA=) 7: 6D7D902C7A8511ED97714485C4F9AE02.roa (hash: KvCrmvF5+PMpTBorxwKFuKrDDb/EZFQvX0TZJBEkOPI=) 8: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: fbwzA56Hd0lU5VpI0ywqmhInHds+7Q5Ab35sCgUacus=) 9: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: 24YebT/eCpzy2OYMv6Aeg+ODlII/BFqv/zb/WSfHSZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2473 (0x9a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Nov 20 20:08:22 2024 GMT Not After : Nov 27 20:08:22 2024 GMT Subject: CN=673e41b6-22c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:10:ca:64:2e:5d:0e:13:98:d5:5c:e9:aa: 86:e4:67:7e:24:bf:1e:1c:9c:f3:25:ca:df:b7:9d: 49:88:6f:91:00:e8:54:94:80:39:47:03:8c:f3:db: 73:5d:0d:b8:36:3b:5c:60:00:dc:40:de:b8:d8:f8: 62:2a:cf:d6:55:14:79:0a:f2:2e:df:6d:39:be:65: 83:1c:71:ea:f2:d8:5a:0d:7d:f4:65:92:a7:90:de: 24:6b:64:89:90:c9:e9:53:8c:c9:b6:f8:e6:b7:09: 61:84:79:1e:4b:d4:54:10:76:ce:fb:dc:b5:69:a3: b1:d5:df:fe:70:84:bb:53:95:30:fd:e4:c8:7c:9f: 82:5b:a2:15:7d:0d:86:c8:a9:37:f8:a9:98:95:44: b6:45:ab:4b:cd:4d:d0:c0:e2:eb:03:62:4f:59:72: 17:f6:c0:d9:30:e4:e5:0d:d0:d4:e8:22:3b:a1:9d: 81:6a:da:41:93:a9:35:93:79:63:8f:c7:d3:27:61: da:82:bd:ff:4a:eb:18:03:bc:78:13:a4:6c:89:21: 82:69:ae:71:6c:2f:0e:dd:b9:b5:d3:01:11:cd:77: e1:73:c4:2a:71:91:5e:a9:3f:53:e4:f3:56:6e:6f: 1a:52:9e:20:46:6f:a6:1c:0f:6f:b9:b9:ee:2b:91: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:DB:92:69:AC:45:F7:BA:1E:BE:90:32:19:BC:F8:A8:48:DF:21:0F X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:25:93:b1:e5:ff:63:2e:e2:0c:f5:3f:bb:20:76:c7:3b:90: 9e:64:85:0a:70:f3:bd:23:9e:67:51:ab:69:eb:40:c1:9e:0e: c9:fe:f0:ff:f6:c5:df:e1:2c:65:09:61:e3:da:97:a4:ad:59: 70:e4:40:2f:8d:48:d1:3b:c0:a4:2c:55:a8:d5:aa:cd:ab:0c: f3:2f:b3:d5:e6:73:58:91:61:f9:ab:97:cf:7e:7c:e4:88:92: 4e:64:22:df:90:69:08:b3:7e:9c:f5:aa:88:61:10:cf:12:42: 3a:bd:78:c3:fb:ef:e9:c8:5f:d1:75:d2:93:f1:03:36:f2:e6: 5f:d6:ed:2c:23:80:6a:1c:83:bb:dd:ab:7c:8d:aa:d6:a5:63: 4b:07:af:05:d5:51:ec:1e:63:9a:db:b5:de:34:50:5b:a3:8f: 98:be:40:57:69:d2:1d:2f:78:01:af:6c:23:ec:52:a7:2e:4f: e9:92:63:96:3f:66:4b:4b:83:a7:0b:86:22:31:87:d9:af:41: 37:22:b8:7c:37:84:0b:1b:39:2f:48:b1:8a:f4:a4:c7:f4:82: 04:71:e1:f6:95:e9:19:bb:6b:8c:b3:57:20:4a:97:f5:94:10: d8:39:f7:02:a0:6d:e0:d1:79:b8:d8:14:de:ff:0d:aa:06:37: 5a:df:46:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjQxMTIwMjAwODIyWhcNMjQxMTI3MjAwODIyWjAYMRYwFAYD VQQDEw02NzNlNDFiNi0yMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8kQymQuXQ4TmNVc6aqG5Gd+JL8eHJzzJcrft51JiG+RAOhUlIA5RwOM89tz XQ24NjtcYADcQN642PhiKs/WVRR5CvIu3205vmWDHHHq8thaDX30ZZKnkN4ka2SJ kMnpU4zJtvjmtwlhhHkeS9RUEHbO+9y1aaOx1d/+cIS7U5Uw/eTIfJ+CW6IVfQ2G yKk3+KmYlUS2RatLzU3QwOLrA2JPWXIX9sDZMOTlDdDU6CI7oZ2BatpBk6k1k3lj j8fTJ2Hagr3/SusYA7x4E6RsiSGCaa5xbC8O3bm10wERzXfhc8QqcZFeqT9T5PNW bm8aUp4gRm+mHA9vubnuK5GOZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLbkmms Rfe6Hr6QMhm8+KhI3yEPMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDE3Mi81OTc2MTI2NDlFNEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRW ZHVYdW5rSGxWMjhEU01ScWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByJZOx5f9jLuIM9T+7IHbHO5CeZIUKcPO9I55nUatp60DBng7J/vD/ 9sXf4SxlCWHj2pekrVlw5EAvjUjRO8CkLFWo1arNqwzzL7PV5nNYkWH5q5fPfnzk iJJOZCLfkGkIs36c9aqIYRDPEkI6vXjD++/pyF/RddKT8QM28uZf1u0sI4BqHIO7 3at8jarWpWNLB68F1VHsHmOa27XeNFBbo4+YvkBXadIdL3gBr2wj7FKnLk/pkmOW P2ZLS4OnC4YiMYfZr0E3Irh8N4QLGzkvSLGK9KTH9IIEceH2lekZu2uMs1cgSpf1 lBDYOfcCoG3g0Xm42BTe/w2qBjda30bd -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:37 2024 by rpki-client on console-fra.rpki-client.org