$ rpki-client -vvf rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft File: v3p9VKnGtsG13SUCa_u6fXfkUns.mft (raw, json) Hash identifier: 9PjZZlhATewl7s7fUkXmsOak2/66Vs7HDNi2Hey9E9k= Subject key identifier: BC:67:15:9C:DA:DA:71:FF:6E:75:3A:37:62:7A:71:1E:7F:EF:AF:6F Authority key identifier: BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B Certificate issuer: /CN=A9136302/serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft Manifest number: 1E Signing time: Sat 23 Nov 2024 05:49:25 +0000 Manifest this update: Sat 23 Nov 2024 05:49:25 +0000 Manifest next update: Sat 30 Nov 2024 05:49:25 +0000 Files and hashes: 1: v3p9VKnGtsG13SUCa_u6fXfkUns.crl (hash: xBwmehotH13RZieQpvDzZC9qSWOixDl4F2U5pccejw8=) 2: 94922566814411EFA0DF4C09C4F9AE02.roa (hash: 9kYxJpxlD05Jr699vklpYVPr8eXG1mQPz/w/ByRsgR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136302/serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B Validity Not Before: Nov 23 05:49:25 2024 GMT Not After : Nov 30 05:49:25 2024 GMT Subject: CN=67416ce5-129e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:55:8e:29:ea:68:b7:14:02:d9:84:fa:c3: fe:60:eb:eb:1d:2d:e1:6d:63:5d:1f:4b:ec:7a:29: c0:89:04:67:b7:0b:6a:40:46:ab:e6:4d:55:26:e4: 64:46:f8:b1:e9:94:d1:f6:af:7f:ed:77:b2:6a:54: ef:bb:a9:91:e9:b3:04:d1:5e:4a:12:84:b2:5c:fc: 39:09:f2:c2:0e:43:18:60:61:c2:35:ae:fd:a5:ae: e2:4a:a2:33:10:50:99:df:30:ec:f1:c9:f3:97:0f: 4f:5e:1f:a9:12:34:6c:c5:9d:1d:8b:97:05:02:72: 93:4b:b7:07:a8:ec:7f:51:26:04:13:0f:41:ae:d2: 8f:37:3f:dd:44:44:39:e1:30:a2:29:4e:b0:9f:00: 4c:4f:7b:d3:85:f2:0e:50:25:0b:51:b6:19:00:da: b5:d9:2d:d3:83:05:89:76:59:8e:41:b9:c0:c7:96: 95:7e:1e:67:c5:c3:67:fe:f1:d3:65:9e:fa:76:31: 55:be:5b:1a:c3:7e:54:1e:23:94:a3:89:ef:b4:9d: 13:e1:85:d4:16:39:b8:2d:83:11:04:24:80:80:0a: 28:f6:71:cd:b8:fa:96:9b:36:dd:13:29:6a:d0:5b: 7c:a8:f4:fa:d0:b7:56:32:9c:0c:6f:58:be:4e:a6: 14:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:67:15:9C:DA:DA:71:FF:6E:75:3A:37:62:7A:71:1E:7F:EF:AF:6F X509v3 Authority Key Identifier: keyid:BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a9:56:e7:7d:10:0f:c4:60:be:4f:23:26:1d:c7:39:1a:50: e9:88:1c:16:cf:24:8f:bc:ad:eb:4f:5c:0d:d1:ba:f4:d8:6a: c3:76:48:8e:d2:4f:39:fd:57:4b:e8:9f:da:13:6d:7a:aa:fb: 87:09:0a:fd:ac:1c:f9:d9:56:4a:a4:8f:fe:44:c6:a5:40:6b: 7e:72:f4:a4:69:4c:16:06:9a:50:73:4f:c3:8e:94:78:8f:3f: 5c:37:19:03:87:02:b9:a1:95:60:98:92:83:b6:10:3f:08:12: 4a:5e:2d:33:f2:4b:ae:5d:cb:a7:12:e0:89:34:0b:24:72:5d: b4:5e:db:14:9d:c7:f5:ef:49:25:17:ee:d0:dd:5a:78:68:6c: 62:af:92:40:b6:37:7c:f1:66:f5:30:75:ba:d1:07:fd:c5:f5: 9c:d1:76:d4:a6:25:1c:33:ca:e8:de:50:7a:f8:df:d6:46:0f: 3a:d8:bc:7f:47:0a:d6:3e:6a:36:cb:be:5a:21:63:bd:75:e0: 53:11:c6:d3:b6:1d:c6:55:84:91:cf:c8:bf:a1:f8:23:40:ba: af:0f:7b:7b:2e:3c:85:b1:ba:69:95:d1:6c:d6:a0:6d:22:73: 55:57:b6:c1:b4:fc:d6:ef:80:61:ca:03:d2:96:e4:35:9d:dc: 4e:7b:a3:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjMwMjExMC8GA1UEBRMoQkY3QTdENTRBOUM2QjZDMUI1REQyNTAyNkJGQkJBN0Q3 N0U0NTI3QjAeFw0yNDExMjMwNTQ5MjVaFw0yNDExMzAwNTQ5MjVaMBgxFjAUBgNV BAMTDTY3NDE2Y2U1LTEyOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOYlWOKepotxQC2YT6w/5g6+sdLeFtY10fS+x6KcCJBGe3C2pARqvmTVUm5GRG +LHplNH2r3/td7JqVO+7qZHpswTRXkoShLJc/DkJ8sIOQxhgYcI1rv2lruJKojMQ UJnfMOzxyfOXD09eH6kSNGzFnR2LlwUCcpNLtweo7H9RJgQTD0Gu0o83P91ERDnh MKIpTrCfAExPe9OF8g5QJQtRthkA2rXZLdODBYl2WY5BucDHlpV+HmfFw2f+8dNl nvp2MVW+WxrDflQeI5Sjie+0nRPhhdQWObgtgxEEJICACij2cc24+pabNt0TKWrQ W3yo9PrQt1YynAxvWL5OphSJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvGcVnNra cf9udTo3YnpxHn/vr28wHwYDVR0jBBgwFoAUv3p9VKnGtsG13SUCa/u6fXfkUnsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MzAyLzJGQzRBNzEyODE0 NDExRUY5NUFGQzE0OEM0RjlBRTAyL3YzcDlWS25HdHNHMTNTVUNhX3U2Zlhma1Vu cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjNwOVZLbkd0c0cxM1NVQ2FfdTZmWGZrVW5zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MzAyLzJGQzRBNzEyODE0NDExRUY5NUFGQzE0OEM0RjlBRTAyL3YzcDlWS25HdHNH MTNTVUNhX3U2Zlhma1Vucy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD+pVud9EA/EYL5PIyYdxzkaUOmIHBbPJI+8retPXA3RuvTYasN2SI7S Tzn9V0von9oTbXqq+4cJCv2sHPnZVkqkj/5ExqVAa35y9KRpTBYGmlBzT8OOlHiP P1w3GQOHArmhlWCYkoO2ED8IEkpeLTPyS65dy6cS4Ik0CyRyXbRe2xSdx/XvSSUX 7tDdWnhobGKvkkC2N3zxZvUwdbrRB/3F9ZzRdtSmJRwzyujeUHr439ZGDzrYvH9H CtY+ajbLvlohY7114FMRxtO2HcZVhJHPyL+h+CNAuq8Pe3suPIWxummV0WzWoG0i c1VXtsG0/NbvgGHKA9KW5DWd3E57o1k= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org