$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: PsTG4wiy0SKGsa7FiYwnb712c1fzybnH/ln4AFXJXpk= Subject key identifier: 06:E4:CC:B1:F4:4C:BD:7C:37:07:64:43:4C:EC:B5:9D:D8:0A:13:EF Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 0F8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 0F74 Signing time: Fri 22 Nov 2024 17:32:21 +0000 Manifest this update: Fri 22 Nov 2024 17:32:20 +0000 Manifest next update: Fri 29 Nov 2024 17:32:20 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: EZnIwrZRGjY23eY3FWFK2YuyM9Fp72Ppr7iP1Ay08SI=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: t5d/tqSi5Ak9PYp92aRcAW1miOjLpd8PCdqy2sv9Qk4=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: O75ak5g3Sd3oJTig8KK/2ICaXFxfuZ2760QEleY1kic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Nov 22 17:32:20 2024 GMT Not After : Nov 29 17:32:20 2024 GMT Subject: CN=6740c024-e716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:61:54:25:d1:1a:d8:7a:02:52:56:7c:8b: f3:76:4a:b2:36:2b:02:9d:93:b9:84:d9:85:f1:ad: e0:f6:c3:88:da:e8:24:61:e5:e7:a5:c4:2e:88:ed: db:74:b3:42:e4:fb:f8:76:f8:69:0c:61:b6:44:28: 45:c3:7f:7b:d1:2d:dc:1f:87:fb:14:b3:03:82:48: 97:d9:ac:ee:3b:ab:9a:9e:23:c8:da:0b:ba:a0:83: 07:10:65:2f:a7:ca:67:fd:c5:27:86:76:6a:5d:ce: 2f:61:4d:08:a2:cb:21:42:ad:ba:06:62:d8:8a:8a: 8e:51:bc:f3:8d:d8:8b:a5:1e:0a:62:3e:e4:e4:a8: 6f:e5:ae:2f:f9:47:9a:4d:f8:45:77:40:36:8a:1a: 90:fd:55:07:cd:c4:c5:38:c9:89:5f:98:cb:3c:9d: 10:7d:a7:59:16:eb:0a:a0:d0:c6:d7:95:76:ab:95: 7b:fd:a1:84:8c:97:ff:c4:2d:0e:fc:f1:6e:f9:24: 55:10:cd:6c:e4:91:7b:1e:1e:1f:86:c0:02:40:9f: b8:d5:fb:df:92:84:eb:9b:85:5b:9a:bd:71:a6:7b: ac:7d:8e:c3:92:6b:3b:60:d6:7f:40:22:fb:a0:10: af:23:c7:79:9d:a2:4c:3f:f8:68:4f:5c:82:e6:ad: 29:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E4:CC:B1:F4:4C:BD:7C:37:07:64:43:4C:EC:B5:9D:D8:0A:13:EF X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3d:a0:e6:c5:f4:12:fc:08:72:ee:8e:cc:7f:75:d1:96:5c: 1d:06:4c:92:1b:4a:bf:e1:02:59:ba:53:59:51:b5:1a:d0:ce: 4c:04:4e:41:36:ca:38:87:f5:8a:1e:f7:dc:5f:db:c2:c6:9b: 44:ea:50:ba:22:fb:81:b9:66:ce:c8:03:e4:0d:5d:9e:c2:9f: 29:de:e5:48:91:a7:2b:d8:48:29:68:20:33:48:8d:7e:4e:26: b4:13:28:2a:87:b9:dd:3d:7f:21:55:be:4a:73:98:f3:99:f4: bc:64:9d:47:c4:60:21:3a:f7:b3:6c:47:09:9c:67:bf:5d:80: 24:d9:cf:b1:19:7f:ed:85:37:35:f6:af:ff:1a:4c:24:79:7f: 92:6b:58:9c:85:ad:32:25:e6:88:a1:41:3c:1a:51:5c:7c:dd: cd:af:fd:65:ea:8c:51:cd:7e:80:8b:33:84:99:b5:21:6c:96: ec:f8:36:8b:16:05:81:1b:53:90:73:83:1d:37:5b:ee:aa:77: 3c:de:f7:06:17:da:b1:3f:4a:02:60:23:60:2d:4e:7f:68:53: 89:f6:5a:18:07:6c:bf:f4:62:7d:a3:a2:8f:8a:73:f8:56:c4: 4f:10:ca:ca:cf:2f:74:a0:6d:63:c1:38:39:c6:04:0d:17:5b: 28:10:af:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjQxMTIyMTczMjIwWhcNMjQxMTI5MTczMjIwWjAYMRYwFAYD VQQDEw02NzQwYzAyNC1lNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhthVCXRGth6AlJWfIvzdkqyNisCnZO5hNmF8a3g9sOI2ugkYeXnpcQuiO3b dLNC5Pv4dvhpDGG2RChFw3970S3cH4f7FLMDgkiX2azuO6uaniPI2gu6oIMHEGUv p8pn/cUnhnZqXc4vYU0IosshQq26BmLYioqOUbzzjdiLpR4KYj7k5Khv5a4v+Uea TfhFd0A2ihqQ/VUHzcTFOMmJX5jLPJ0QfadZFusKoNDG15V2q5V7/aGEjJf/xC0O /PFu+SRVEM1s5JF7Hh4fhsACQJ+41fvfkoTrm4Vbmr1xpnusfY7Dkms7YNZ/QCL7 oBCvI8d5naJMP/hoT1yC5q0pGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbkzLH0 TL18NwdkQ0zstZ3YChPvMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfPaDmxfQS/Ahy7o7Mf3XRllwdBkySG0q/4QJZulNZUbUa0M5MBE5B Nso4h/WKHvfcX9vCxptE6lC6IvuBuWbOyAPkDV2ewp8p3uVIkacr2EgpaCAzSI1+ Tia0Eygqh7ndPX8hVb5Kc5jzmfS8ZJ1HxGAhOvezbEcJnGe/XYAk2c+xGX/thTc1 9q//GkwkeX+Sa1icha0yJeaIoUE8GlFcfN3Nr/1l6oxRzX6AizOEmbUhbJbs+DaL FgWBG1OQc4MdN1vuqnc83vcGF9qxP0oCYCNgLU5/aFOJ9loYB2y/9GJ9o6KPinP4 VsRPEMrKzy90oG1jwTg5xgQNF1soEK/C -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org