$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json) Hash identifier: jkaNH3PPDlwgGUoQTc9LWmINzv1V+URsJG9BYwTjZZQ= Subject key identifier: 36:CC:37:39:77:E6:7C:16:D9:3C:CD:98:08:37:29:99:0B:5C:6F:E1 Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 25C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft Manifest number: 25AC Signing time: Fri 22 Nov 2024 15:42:58 +0000 Manifest this update: Fri 22 Nov 2024 15:42:58 +0000 Manifest next update: Fri 29 Nov 2024 15:42:58 +0000 Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: +vNF44gbyaj093zch6VB9S+ToFjN1nRNBpehtLJ+hVs=) 2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: Uki4zZBq+AXoZS1WsNdomdB56dr+Us9kfJZonwp4fTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9667 (0x25c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Validity Not Before: Nov 22 15:42:58 2024 GMT Not After : Nov 29 15:42:58 2024 GMT Subject: CN=6740a682-e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c1:86:9f:83:90:d0:b8:e6:23:59:78:b6:83: 0a:1e:30:42:6c:98:0b:c1:7a:51:08:3c:46:a7:36: 37:35:b4:20:3c:e5:13:a3:dc:fe:e9:7f:5c:f0:d0: 66:10:bb:b7:26:5c:63:7a:b5:d4:21:f2:9c:8f:a1: 35:05:cf:6d:4b:03:25:a5:a6:45:c6:5e:42:3b:c3: 35:2f:f1:85:e4:f4:d3:d2:df:79:d1:30:16:b2:e8: e5:2c:00:8b:ee:63:88:e8:9e:27:10:ca:3b:ab:c3: ea:aa:d4:44:cc:be:36:63:4e:6e:f9:9f:27:c2:f5: cd:98:c8:6c:19:63:4b:f4:c6:cc:0f:6a:95:e4:a2: b4:66:2e:f4:3d:2f:47:78:21:d3:bd:60:16:bb:20: d2:54:fe:fd:e9:2a:75:af:2e:a5:e1:a4:36:03:51: 5d:83:8e:8c:58:a9:ad:17:2f:5d:6e:df:ca:e3:ea: 57:ac:2f:12:d2:f7:f3:5e:a6:5e:3f:6e:23:09:e2: a1:70:1a:8e:6e:28:b1:b5:69:c4:96:a6:56:9f:a2: 4a:a5:e9:ba:38:4d:6f:b7:bb:01:33:19:84:f6:60: 08:79:13:96:ae:d0:d9:e5:31:85:4a:27:03:6c:8a: 3a:a8:e8:82:94:8a:c9:c1:39:0e:4b:27:4e:a3:5e: 1d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CC:37:39:77:E6:7C:16:D9:3C:CD:98:08:37:29:99:0B:5C:6F:E1 X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:77:27:3f:70:4f:f7:f2:81:e1:f4:3a:10:ed:7f:e5:36:7c: 6a:a7:d0:79:69:09:f8:2a:02:33:da:49:5f:4a:7c:b2:6a:a9: 70:f1:12:ea:b6:07:d4:d2:f0:11:c6:31:26:c2:20:0c:e8:9b: 36:0e:cb:44:e3:25:12:64:d6:f8:0d:72:d1:63:4e:d9:88:4c: 08:0a:b0:c8:fc:b9:68:57:4e:bb:80:c3:07:91:21:41:88:11: 48:b7:2c:83:8d:44:75:2a:f8:bc:9c:65:23:30:91:ff:da:c6: f5:99:a5:7d:8d:a8:a7:b7:72:f0:0c:51:21:e1:a6:f8:5f:9d: e0:be:30:80:f2:c4:6a:c8:83:a7:38:6a:d6:70:96:0d:3e:df: e8:85:c7:b9:eb:5a:5a:71:00:4b:f3:8c:e5:92:b1:aa:0a:49: 88:95:60:e5:b4:23:25:b3:6c:97:6f:7c:b3:84:33:4d:cb:7b: 89:d7:b8:e7:ba:b6:d3:e1:fc:6b:98:f6:6e:37:4d:ff:2c:f7: c7:be:0e:25:50:09:18:03:90:91:41:2d:a9:e2:d2:24:21:21: 71:71:d0:33:a7:c4:12:4d:8d:e5:af:a1:8b:2d:b9:ba:78:da: 30:cb:b3:6e:53:23:eb:c5:47:c5:e7:2c:61:c8:e0:7d:7c:1b: 03:55:c7:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjQxMTIyMTU0MjU4WhcNMjQxMTI5MTU0MjU4WjAYMRYwFAYD VQQDEw02NzQwYTY4Mi1lMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cGGn4OQ0LjmI1l4toMKHjBCbJgLwXpRCDxGpzY3NbQgPOUTo9z+6X9c8NBm ELu3JlxjerXUIfKcj6E1Bc9tSwMlpaZFxl5CO8M1L/GF5PTT0t950TAWsujlLACL 7mOI6J4nEMo7q8PqqtREzL42Y05u+Z8nwvXNmMhsGWNL9MbMD2qV5KK0Zi70PS9H eCHTvWAWuyDSVP796Sp1ry6l4aQ2A1Fdg46MWKmtFy9dbt/K4+pXrC8S0vfzXqZe P24jCeKhcBqObiixtWnElqZWn6JKpem6OE1vt7sBMxmE9mAIeROWrtDZ5TGFSicD bIo6qOiClIrJwTkOSydOo14d8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbMNzl3 5nwW2TzNmAg3KZkLXG/hMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBdyc/cE/38oHh9DoQ7X/lNnxqp9B5aQn4KgIz2klfSnyyaqlw8RLq tgfU0vARxjEmwiAM6Js2DstE4yUSZNb4DXLRY07ZiEwICrDI/LloV067gMMHkSFB iBFItyyDjUR1Kvi8nGUjMJH/2sb1maV9jaint3LwDFEh4ab4X53gvjCA8sRqyIOn OGrWcJYNPt/ohce561pacQBL84zlkrGqCkmIlWDltCMls2yXb3yzhDNNy3uJ17jn urbT4fxrmPZuN03/LPfHvg4lUAkYA5CRQS2p4tIkISFxcdAzp8QSTY3lr6GLLbm6 eNowy7NuUyPrxUfF5yxhyOB9fBsDVcct -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:44 2024 by rpki-client on console-fra.rpki-client.org