$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft File: 9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json) Hash identifier: 1BKe9GwXNRVzEa0wDpBlLAznl89TtO2PTF6MdHNsB+U= Subject key identifier: 4B:97:91:A9:F8:3B:25:92:32:68:CE:7A:8F:73:F9:81:59:22:AB:45 Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A Certificate issuer: /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft Manifest number: 18 Signing time: Thu 19 Sep 2024 06:15:08 +0000 Manifest this update: Thu 19 Sep 2024 06:15:07 +0000 Manifest next update: Thu 26 Sep 2024 06:15:07 +0000 Files and hashes: 1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: 5HeVO3UxpkZuA7jKj6aBqYciMyLtPYH99vuZgH4Jxg0=) 2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: u2oqYx8hN1A4NZgI4YLLmMBGPY6mlehemJgkdznATGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Validity Not Before: Sep 19 06:15:07 2024 GMT Not After : Sep 26 06:15:07 2024 GMT Subject: CN=66ebc16b-8d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:16:40:93:48:6f:e0:40:56:10:07:f8:fb:2d: e6:c3:b5:6a:bb:a4:e9:dd:13:0f:44:68:ce:e2:12: 33:22:b6:42:d5:f1:72:ac:df:4b:e6:3e:69:46:9e: 0e:7f:67:51:f7:66:fb:86:03:88:94:10:52:c7:b4: ae:30:cc:17:7e:cd:7a:b7:a4:4e:95:cf:9d:d0:b0: a9:c0:80:7c:af:fd:fe:e6:ea:3c:d4:2b:79:e4:98: bf:7c:e6:4f:21:c2:ee:5e:20:5e:a5:cc:5a:d9:f5: bf:1c:a4:ba:7a:f2:3e:f7:cb:a5:79:dc:98:35:a1: f3:4b:60:e5:eb:9c:f2:43:de:85:36:42:f3:36:9a: 90:67:be:df:0f:fb:df:cb:f7:8b:69:71:a0:43:a9: 89:79:e9:d4:46:cb:92:53:7f:8b:30:92:68:2e:8f: 00:23:a0:c7:a2:21:e1:49:c3:89:88:74:d3:88:c9: 08:a5:d1:80:48:d7:a4:6a:c5:2a:a4:5c:8e:42:ac: 49:59:0c:9d:35:4a:46:16:3b:09:9b:45:9e:8a:89: 6d:1f:a0:18:70:92:9e:fd:0a:e3:3f:5f:e9:d7:96: 28:e1:95:b5:ee:b8:6e:28:e3:29:90:ba:bd:63:63: 26:ce:76:04:c0:23:d4:63:7d:81:9e:0a:af:46:52: fc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:97:91:A9:F8:3B:25:92:32:68:CE:7A:8F:73:F9:81:59:22:AB:45 X509v3 Authority Key Identifier: keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b0:49:f8:b7:53:db:91:bd:51:3e:7e:da:7e:cf:6f:4f:af: de:84:12:98:3e:24:dd:db:5c:f4:96:36:8f:59:e3:98:4b:22: 1b:1e:1b:dc:79:c7:a1:ef:cd:f6:0e:17:f2:7f:a7:1c:3b:9f: b2:49:9c:e8:c6:d7:2c:5f:9b:dc:b8:7c:a2:8b:f2:cd:4a:c2: ed:a7:ee:93:97:dd:62:a9:83:1d:8e:d2:48:85:92:a7:5d:9d: 34:6b:dc:a7:91:d4:2a:c7:c6:56:a5:d0:b8:7d:3f:e5:94:09: 5f:f7:3f:f2:f5:57:67:fa:d8:33:f9:78:78:f1:ba:ea:b9:57: 6a:3b:ab:85:f8:ce:f5:15:63:31:ba:b5:56:a6:34:58:23:4a: f9:53:fb:f5:43:8b:54:62:2b:a1:f0:3c:95:df:20:53:8d:06: 97:96:63:80:da:a3:9d:30:d6:c7:7b:27:2d:ed:e3:93:95:0b: 94:a6:45:fd:8c:d7:04:88:68:85:3a:29:7a:17:7d:93:ef:d7: d4:36:ea:a9:b1:27:ed:ad:36:e5:f8:82:c1:9b:1c:8e:37:3c: 05:b8:7e:3e:f8:d6:a8:a8:b7:c2:6e:6a:75:17:19:f8:11:8f: 2d:7c:5c:0b:98:fa:a3:74:93:eb:7c:87:7b:06:d1:62:cb:3f: 51:c0:a1:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OTc2QzExMC8GA1UEBRMoRjdFQTcxQjZFNkNEMDRBNTVEQUVCMEQxNThFMDQ0REU5 QTEyMjE2QTAeFw0yNDA5MTkwNjE1MDdaFw0yNDA5MjYwNjE1MDdaMBgxFjAUBgNV BAMTDTY2ZWJjMTZiLThkNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJFkCTSG/gQFYQB/j7LebDtWq7pOndEw9EaM7iEjMitkLV8XKs30vmPmlGng5/ Z1H3ZvuGA4iUEFLHtK4wzBd+zXq3pE6Vz53QsKnAgHyv/f7m6jzUK3nkmL985k8h wu5eIF6lzFrZ9b8cpLp68j73y6V53Jg1ofNLYOXrnPJD3oU2QvM2mpBnvt8P+9/L 94tpcaBDqYl56dRGy5JTf4swkmgujwAjoMeiIeFJw4mIdNOIyQil0YBI16RqxSqk XI5CrElZDJ01SkYWOwmbRZ6KiW0foBhwkp79CuM/X+nXlijhlbXuuG4o4ymQur1j YybOdgTAI9RjfYGeCq9GUvxrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS5eRqfg7 JZIyaM56j3P5gVkiq0UwHwYDVR0jBBgwFoAU9+pxtubNBKVdrrDRWOBE3poSIWow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5NzZDLzgzNTBEMkJDNTk1 QzExRUY5MTU5NjM1MEM0RjlBRTAyLzktcHh0dWJOQktWZHJyRFJXT0JFM3BvU0lX by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOS1weHR1Yk5CS1ZkcnJEUldPQkUzcG9TSVdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 NzZDLzgzNTBEMkJDNTk1QzExRUY5MTU5NjM1MEM0RjlBRTAyLzktcHh0dWJOQktW ZHJyRFJXT0JFM3BvU0lXby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEiwSfi3U9uRvVE+ftp+z29Pr96EEpg+JN3bXPSWNo9Z45hLIhseG9x5 x6HvzfYOF/J/pxw7n7JJnOjG1yxfm9y4fKKL8s1Kwu2n7pOX3WKpgx2O0kiFkqdd nTRr3KeR1CrHxlal0Lh9P+WUCV/3P/L1V2f62DP5eHjxuuq5V2o7q4X4zvUVYzG6 tVamNFgjSvlT+/VDi1RiK6HwPJXfIFONBpeWY4Dao50w1sd7Jy3t45OVC5SmRf2M 1wSIaIU6KXoXfZPv19Q26qmxJ+2tNuX4gsGbHI43PAW4fj741qiot8JuanUXGfgR jy18XAuY+qN0k+t8h3sG0WLLP1HAof4= -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:48 2024 by rpki-client on console-fra.rpki-client.org