$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft File: 9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json) Hash identifier: MN/qHkycGUnpbLAY9AdCoh0ZaA92uyQJ/G0tuBD2ht0= Subject key identifier: 6D:40:25:07:86:91:0E:8E:55:2D:EE:A5:8B:2F:33:75:D5:0D:06:05 Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A Certificate issuer: /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft Manifest number: 38 Signing time: Thu 21 Nov 2024 05:35:21 +0000 Manifest this update: Thu 21 Nov 2024 05:35:21 +0000 Manifest next update: Thu 28 Nov 2024 05:35:21 +0000 Files and hashes: 1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: sRe1vy4yiknVSd+dONZaNW/xy5gC3HBn0plLoK3KXpU=) 2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: u2oqYx8hN1A4NZgI4YLLmMBGPY6mlehemJgkdznATGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A Validity Not Before: Nov 21 05:35:21 2024 GMT Not After : Nov 28 05:35:21 2024 GMT Subject: CN=673ec699-778b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:f3:0c:34:e6:90:39:d0:be:b9:46:0d:85: b4:6b:9a:db:d5:94:3c:d3:fc:eb:e4:cb:df:c2:7c: d0:18:fb:f2:6b:90:48:f1:bd:61:21:fa:b0:74:12: 66:46:31:42:38:6e:31:0f:e0:a7:ba:a6:2c:8b:4a: 8b:5c:41:ce:69:d5:e7:28:1b:27:95:8f:90:3d:a9: 2c:66:88:85:64:d9:5b:be:ce:f3:55:04:3c:8c:3b: 1b:ec:0a:af:81:5e:19:ad:b8:89:c3:79:92:97:9a: 6d:4d:a7:8d:c3:3f:e7:0b:c1:5e:b6:75:25:df:ed: e3:1c:af:77:4a:22:68:4f:7c:d7:55:99:ae:6c:52: 76:16:63:e9:84:50:dc:87:ca:cf:5f:91:f2:63:20: 57:85:d9:b3:5a:bc:d3:1f:30:f3:61:bb:02:7f:36: 85:f4:e2:59:73:e1:59:12:e0:68:19:f4:9d:ba:62: 6c:27:70:92:09:7a:1f:52:7a:37:f5:2a:54:0f:6a: 1b:9c:42:01:02:75:fd:3d:ba:02:3a:dc:d4:aa:14: f3:17:a5:57:03:3c:62:da:9c:f6:88:2b:87:43:df: 39:fb:35:dc:60:b0:2b:b4:6f:bc:dd:f2:ce:78:36: 40:69:a8:d2:a9:42:bc:be:9f:07:74:d4:83:bf:c2: 8d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:40:25:07:86:91:0E:8E:55:2D:EE:A5:8B:2F:33:75:D5:0D:06:05 X509v3 Authority Key Identifier: keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:e8:30:09:59:c3:4b:3e:cf:a4:11:8f:66:76:3c:f8:31:f9: ef:c6:55:b2:bb:d5:ca:f6:00:9f:f5:94:38:f0:5a:77:c8:39: 30:e9:98:2d:5d:73:f0:b5:da:73:c1:e3:44:fc:6e:59:6b:91: 50:78:75:53:c0:f2:94:d9:a7:ba:35:7e:03:1f:a0:99:61:4e: 2c:39:1a:6e:f0:27:c2:89:73:c9:50:8f:00:62:b1:7c:1c:a5: 1e:70:36:64:b5:de:b5:0c:d0:84:60:54:83:60:1b:ca:1f:5a: 06:84:17:a1:07:ca:e5:ba:71:48:8b:a1:25:31:6f:36:d5:75: be:00:a1:82:18:c1:fa:d6:b2:7b:19:58:44:5a:fa:98:57:f3: 84:96:56:1f:90:57:ce:0e:9f:0f:b7:4d:b6:8b:28:cb:9a:70: b5:da:aa:a8:1d:70:3a:01:b7:62:c3:c6:24:f9:03:91:ae:f0: de:bf:85:7f:9a:b9:d7:b4:d8:4f:a7:67:f4:8e:79:a7:d5:de: 73:97:0a:47:fd:90:9d:c2:e8:83:ce:3c:77:82:fd:c1:ec:c4: 37:0a:87:34:65:21:cf:6b:bb:39:49:2e:c8:22:02:b5:50:af: 26:e1:58:8d:ae:9f:8c:9d:d5:00:ed:97:c8:73:fb:cc:0b:38: b2:bf:e7:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OTc2QzExMC8GA1UEBRMoRjdFQTcxQjZFNkNEMDRBNTVEQUVCMEQxNThFMDQ0REU5 QTEyMjE2QTAeFw0yNDExMjEwNTM1MjFaFw0yNDExMjgwNTM1MjFaMBgxFjAUBgNV BAMTDTY3M2VjNjk5LTc3OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKrPMMNOaQOdC+uUYNhbRrmtvVlDzT/Ovky9/CfNAY+/JrkEjxvWEh+rB0EmZG MUI4bjEP4Ke6piyLSotcQc5p1ecoGyeVj5A9qSxmiIVk2Vu+zvNVBDyMOxvsCq+B XhmtuInDeZKXmm1Np43DP+cLwV62dSXf7eMcr3dKImhPfNdVma5sUnYWY+mEUNyH ys9fkfJjIFeF2bNavNMfMPNhuwJ/NoX04llz4VkS4GgZ9J26YmwncJIJeh9Sejf1 KlQPahucQgECdf09ugI63NSqFPMXpVcDPGLanPaIK4dD3zn7NdxgsCu0b7zd8s54 NkBpqNKpQry+nwd01IO/wo03AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbUAlB4aR Do5VLe6liy8zddUNBgUwHwYDVR0jBBgwFoAU9+pxtubNBKVdrrDRWOBE3poSIWow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5NzZDLzgzNTBEMkJDNTk1 QzExRUY5MTU5NjM1MEM0RjlBRTAyLzktcHh0dWJOQktWZHJyRFJXT0JFM3BvU0lX by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOS1weHR1Yk5CS1ZkcnJEUldPQkUzcG9TSVdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 NzZDLzgzNTBEMkJDNTk1QzExRUY5MTU5NjM1MEM0RjlBRTAyLzktcHh0dWJOQktW ZHJyRFJXT0JFM3BvU0lXby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjoMAlZw0s+z6QRj2Z2PPgx+e/GVbK71cr2AJ/1lDjwWnfIOTDpmC1d c/C12nPB40T8bllrkVB4dVPA8pTZp7o1fgMfoJlhTiw5Gm7wJ8KJc8lQjwBisXwc pR5wNmS13rUM0IRgVINgG8ofWgaEF6EHyuW6cUiLoSUxbzbVdb4AoYIYwfrWsnsZ WERa+phX84SWVh+QV84Onw+3TbaLKMuacLXaqqgdcDoBt2LDxiT5A5Gu8N6/hX+a ude02E+nZ/SOeafV3nOXCkf9kJ3C6IPOPHeC/cHsxDcKhzRlIc9ruzlJLsgiArVQ rybhWI2un4yd1QDtl8hz+8wLOLK/570= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:02 2024 by rpki-client on console-ams.rpki-client.org