$ rpki-client -vvf rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft File: S9XCMYZ-JzlRVcAceEizsByGBvI.mft (raw, json) Hash identifier: 0dW9mK4qLhZERyYLVcJTm7MiVOt2ndkdFnCJitvdf4w= Subject key identifier: 1A:DB:09:52:89:E6:A4:B5:80:26:64:FA:0F:57:45:71:82:F2:FF:9E Authority key identifier: 4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 Certificate issuer: /CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft Manifest number: 0374 Signing time: Sat 23 Nov 2024 00:27:13 +0000 Manifest this update: Sat 23 Nov 2024 00:27:12 +0000 Manifest next update: Sat 30 Nov 2024 00:27:12 +0000 Files and hashes: 1: S9XCMYZ-JzlRVcAceEizsByGBvI.crl (hash: ZsWQcoXnxTx9mWXL/sgs6LvVAAoXTjfIFb2uRlTqSG8=) 2: 24C0E7A684C911EC8CE1246BC4F9AE02.roa (hash: xOZ12cOlEG5/7TsMkSxP626Z5sclYlovpXozWoB9tWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BBE1/serialNumber=4BD5C231867E27395155C01C7848B3B01C8606F2 Validity Not Before: Nov 23 00:27:12 2024 GMT Not After : Nov 30 00:27:12 2024 GMT Subject: CN=67412160-958c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:29:b3:af:67:ff:11:d0:0a:50:7e:fb:42: 81:0c:67:fe:ee:d1:c3:25:4a:eb:9c:c1:a7:aa:10: a2:42:53:08:19:49:ed:1d:f6:97:c3:01:e8:de:55: 9d:74:85:1c:43:ee:2e:a4:e4:9c:08:7d:0b:d1:40: aa:bc:b5:15:aa:48:d7:9c:65:df:ca:1f:2b:2a:29: 86:10:9f:7a:e6:31:76:cc:1a:15:3b:0c:f7:01:62: 8a:c7:d2:8c:29:e5:36:a5:22:d9:82:f9:da:d3:c3: 75:d3:49:10:2b:39:7f:03:20:e2:22:7d:cb:c9:43: 98:b5:59:59:60:c7:75:bf:c8:09:7a:2e:df:50:07: 45:44:9a:8c:9d:6f:c2:34:9c:f1:8a:63:3d:e3:f6: dc:8f:9a:2d:d2:d4:04:2a:2e:d2:19:ee:64:38:c9: b6:1a:31:19:cd:d2:08:4f:f0:5c:69:34:9a:27:69: 57:ad:97:77:de:6e:1d:a7:a8:ca:4c:f7:e5:80:82: e1:d6:84:14:41:81:cb:cc:8b:ec:79:59:cb:1e:21: ea:f0:86:9d:1d:90:1a:b7:6d:92:0c:a2:28:e0:34: 5b:8b:8d:95:e1:2f:89:9e:05:39:92:62:89:56:80: 5f:86:2d:34:a1:d1:ba:96:39:0d:e3:de:14:fb:07: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DB:09:52:89:E6:A4:B5:80:26:64:FA:0F:57:45:71:82:F2:FF:9E X509v3 Authority Key Identifier: keyid:4B:D5:C2:31:86:7E:27:39:51:55:C0:1C:78:48:B3:B0:1C:86:06:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9XCMYZ-JzlRVcAceEizsByGBvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BBE1/9E66034C84C511ECA9861564C4F9AE02/S9XCMYZ-JzlRVcAceEizsByGBvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ae:b3:3f:d4:40:d2:b4:9a:d6:af:a1:30:fe:4e:ff:b0:5f: 69:f9:89:2f:70:d4:d8:db:d3:65:f5:3f:d7:0c:23:ae:a8:6e: 7c:d7:44:50:a2:e2:7d:29:ca:ba:9e:50:43:88:32:cd:53:82: 69:14:41:ea:ee:15:13:f0:57:db:7a:07:61:55:31:c3:08:8a: b2:b9:cd:c6:fc:bb:48:2d:b3:37:3c:61:0b:30:19:e1:83:7b: f8:0a:c6:35:5c:fe:a8:be:5c:55:f0:be:e9:ec:65:25:f0:44: 02:23:bc:7b:a7:d2:7a:2f:34:bf:0d:d9:28:cb:3a:60:ab:be: d1:19:90:f1:c8:ae:c0:8e:38:64:81:b7:13:62:3f:eb:84:ea: 05:7e:1f:a4:97:40:c8:5a:ca:0b:ba:8b:8b:f4:c9:e0:1d:0e: 86:7e:e2:d2:58:16:a0:9b:39:e2:8b:cc:d3:7e:ac:39:a3:d9: f2:13:07:ac:09:32:aa:fc:99:6f:a8:4e:7b:5c:ca:5b:65:ea: f8:25:b3:8c:97:34:78:38:f5:3f:49:d1:41:a7:bc:09:da:c0: 18:04:6b:93:7e:5c:e5:49:70:70:70:f8:1e:0f:0d:17:ff:52: e0:a7:8d:37:4c:9f:d7:db:65:76:9a:65:5c:73:93:af:2d:e4: 9d:5e:2a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJCRTExMTAvBgNVBAUTKDRCRDVDMjMxODY3RTI3Mzk1MTU1QzAxQzc4NDhCM0Iw MUM4NjA2RjIwHhcNMjQxMTIzMDAyNzEyWhcNMjQxMTMwMDAyNzEyWjAYMRYwFAYD VQQDEw02NzQxMjE2MC05NThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3Aps69n/xHQClB++0KBDGf+7tHDJUrrnMGnqhCiQlMIGUntHfaXwwHo3lWd dIUcQ+4upOScCH0L0UCqvLUVqkjXnGXfyh8rKimGEJ965jF2zBoVOwz3AWKKx9KM KeU2pSLZgvna08N100kQKzl/AyDiIn3LyUOYtVlZYMd1v8gJei7fUAdFRJqMnW/C NJzximM94/bcj5ot0tQEKi7SGe5kOMm2GjEZzdIIT/BcaTSaJ2lXrZd33m4dp6jK TPflgILh1oQUQYHLzIvseVnLHiHq8IadHZAat22SDKIo4DRbi42V4S+JngU5kmKJ VoBfhi00odG6ljkN494U+weAvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrbCVKJ 5qS1gCZk+g9XRXGC8v+eMB8GA1UdIwQYMBaAFEvVwjGGfic5UVXAHHhIs7Achgby MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkJFMS85RTY2MDM0Qzg0 QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6bFJWY0FjZUVpenNCeUdC dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5WENNWVotSnpsUlZjQWNlRWl6c0J5R0J2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkJFMS85RTY2MDM0Qzg0QzUxMUVDQTk4NjE1NjRDNEY5QUUwMi9TOVhDTVlaLUp6 bFJWY0FjZUVpenNCeUdCdkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDrrM/1EDStJrWr6Ew/k7/sF9p+YkvcNTY29Nl9T/XDCOuqG5810RQ ouJ9Kcq6nlBDiDLNU4JpFEHq7hUT8FfbegdhVTHDCIqyuc3G/LtILbM3PGELMBnh g3v4CsY1XP6ovlxV8L7p7GUl8EQCI7x7p9J6LzS/Ddkoyzpgq77RGZDxyK7Ajjhk gbcTYj/rhOoFfh+kl0DIWsoLuouL9MngHQ6GfuLSWBagmznii8zTfqw5o9nyEwes CTKq/JlvqE57XMpbZer4JbOMlzR4OPU/SdFBp7wJ2sAYBGuTflzlSXBwcPgeDw0X /1Lgp403TJ/X22V2mmVcc5OvLeSdXioT -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:35 2024 by rpki-client on console-fra.rpki-client.org