$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json) Hash identifier: qq+gNFrghDp0eMDYZhRmN/n9DBfRGPJVJR7htGDun1M= Subject key identifier: 64:77:09:A5:4A:32:0E:71:9B:20:FD:8E:E5:48:11:01:CF:93:29:FF Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft Manifest number: 0175 Signing time: Thu 21 Nov 2024 02:08:18 +0000 Manifest this update: Thu 21 Nov 2024 02:08:18 +0000 Manifest next update: Thu 28 Nov 2024 02:08:18 +0000 Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: LsL0Ee972kMuI7XPRKQtUWioYzLjbthA9eUX/O5X01I=) 2: C7E21B026AED11ED97121F2BC4F9AE02.roa (hash: 3+Upn21KBIIQ52u+KXtC8fitbPdwy4fWqI6j9Dzm3Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Validity Not Before: Nov 21 02:08:18 2024 GMT Not After : Nov 28 02:08:18 2024 GMT Subject: CN=673e9612-f745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:58:ee:2f:28:ee:59:5b:4c:09:84:53:b8: eb:c7:72:fc:ef:74:b1:ca:04:a1:2c:2e:fd:ff:05: 91:ce:19:f6:72:a8:94:1a:16:d7:bd:21:86:6e:ad: ac:16:bc:65:48:57:72:7f:5d:09:ae:27:ce:55:11: 2e:13:d0:de:ae:31:00:81:92:33:f4:6d:e4:5a:4e: ef:a8:f3:6e:51:d1:cd:43:e9:0b:98:ff:1e:f9:14: 61:bd:e1:06:49:49:d0:31:7a:7f:e3:fc:b8:63:00: 2f:48:94:66:57:0f:60:e3:ac:23:0a:27:69:11:d4: 92:13:9c:9e:b9:55:eb:e4:d1:d6:f3:76:c6:42:de: 41:55:47:66:b3:b8:d0:31:32:01:7b:43:de:b7:c2: 65:36:7f:61:11:99:a7:60:b4:00:3a:63:0b:86:61: 29:e8:28:2c:d1:c7:2f:3a:5a:d9:a0:1c:3e:f8:b2: 42:bc:a5:ed:79:71:36:94:3e:13:9f:66:01:60:f9: d9:48:b7:04:b8:48:e1:21:e5:b5:23:5a:55:98:28: 09:6d:1f:ef:8b:a1:b5:2e:3b:aa:c4:7d:7f:45:90: 06:40:2d:bb:49:87:7c:cf:54:99:eb:57:e0:f8:26: 25:a0:24:92:c9:8d:87:73:5d:2b:13:f5:49:ff:3e: ee:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:77:09:A5:4A:32:0E:71:9B:20:FD:8E:E5:48:11:01:CF:93:29:FF X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d9:77:7b:46:ff:ec:1a:46:32:d4:41:86:fb:f1:38:0f:f0: f5:b6:da:ce:1e:a0:7f:2b:63:1c:92:c5:9d:a1:3a:56:44:ec: 2a:45:b0:ff:83:ae:82:20:a3:9f:95:ab:2e:00:9d:52:e0:e0: 57:02:dd:89:80:f3:16:34:2c:55:35:1c:f8:e1:e3:17:a4:29: 4b:04:fc:eb:cc:f4:b7:bf:81:62:4c:1a:a2:64:0e:05:54:16: 19:04:e7:35:3d:a1:0e:10:5b:6e:8a:80:0e:8b:36:90:ac:f4: 9b:3c:e4:e7:6b:d0:8c:be:d7:5b:81:83:a5:c9:ab:a7:3d:68: 13:09:92:99:fe:43:ce:66:9c:57:84:f7:5d:66:53:1a:95:70: 7e:6a:c4:59:99:77:4a:01:18:84:69:13:5d:0c:53:ee:19:4f: e7:54:b6:17:0f:0f:b7:0e:e2:a1:c3:8c:51:b6:34:82:98:b6: 40:d0:08:48:24:9e:e6:dd:57:c1:b8:23:16:31:2f:28:8e:25: f3:a8:8b:32:9f:4a:68:be:0b:30:1c:12:0d:3a:1f:fd:1d:b3: 38:ba:5e:11:f3:af:68:b6:92:07:e3:3f:ef:a0:dc:f9:db:22: f2:bc:c3:93:be:08:8e:1b:3a:cf:96:83:89:d1:51:32:4e:13: 1c:6d:bf:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjQxMTIxMDIwODE4WhcNMjQxMTI4MDIwODE4WjAYMRYwFAYD VQQDEw02NzNlOTYxMi1mNzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlFY7i8o7llbTAmEU7jrx3L873SxygShLC79/wWRzhn2cqiUGhbXvSGGbq2s FrxlSFdyf10JrifOVREuE9DerjEAgZIz9G3kWk7vqPNuUdHNQ+kLmP8e+RRhveEG SUnQMXp/4/y4YwAvSJRmVw9g46wjCidpEdSSE5yeuVXr5NHW83bGQt5BVUdms7jQ MTIBe0Pet8JlNn9hEZmnYLQAOmMLhmEp6Cgs0ccvOlrZoBw++LJCvKXteXE2lD4T n2YBYPnZSLcEuEjhIeW1I1pVmCgJbR/vi6G1LjuqxH1/RZAGQC27SYd8z1SZ61fg +CYloCSSyY2Hc10rE/VJ/z7uswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGR3CaVK Mg5xmyD9juVIEQHPkyn/MB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5 RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB62Xd7Rv/sGkYy1EGG+/E4D/D1ttrOHqB/K2McksWdoTpWROwqRbD/ g66CIKOflasuAJ1S4OBXAt2JgPMWNCxVNRz44eMXpClLBPzrzPS3v4FiTBqiZA4F VBYZBOc1PaEOEFtuioAOizaQrPSbPOTna9CMvtdbgYOlyaunPWgTCZKZ/kPOZpxX hPddZlMalXB+asRZmXdKARiEaRNdDFPuGU/nVLYXDw+3DuKhw4xRtjSCmLZA0AhI JJ7m3VfBuCMWMS8ojiXzqIsyn0povgswHBINOh/9HbM4ul4R869otpIH4z/voNz5 2yLyvMOTvgiOGzrPloOJ0VEyThMcbb9O -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:53 2024 by rpki-client on console-fra.rpki-client.org