$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft File: 9U-AgBarS7BveWqJRmfHC91I-_Y.mft (raw, json) Hash identifier: mSQSGoye7/jtqNwFIdwnCeWytp3Q1OeH+FGtaBY1oLE= Subject key identifier: 3C:CF:48:29:C2:28:A8:1A:78:3A:15:BD:E4:A8:3A:FD:CF:E6:A8:9C Authority key identifier: F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 Certificate issuer: /CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft Manifest number: 25 Signing time: Thu 21 Nov 2024 05:51:15 +0000 Manifest this update: Thu 21 Nov 2024 05:51:14 +0000 Manifest next update: Thu 28 Nov 2024 05:51:14 +0000 Files and hashes: 1: 9U-AgBarS7BveWqJRmfHC91I-_Y.crl (hash: AK9PteA0Lm7dICK5IKnpXT/WmF53y+DjfffQk8NbOlg=) 2: 21642FDA720811EF8F352D23C4F9AE02.roa (hash: 3wZO5NpUkTFN/tJddHseNs+Usy8EJHQkjD9s+ZGedQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932/serialNumber=F54F808016AB4BB06F796A894667C70BDD48FBF6 Validity Not Before: Nov 21 05:51:14 2024 GMT Not After : Nov 28 05:51:14 2024 GMT Subject: CN=673eca53-49d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:75:57:2a:87:8a:f4:2d:e4:0e:b1:9d:06: 73:21:5f:09:cc:3f:eb:77:47:c4:23:6a:b6:3d:7e: e1:e3:9c:a6:a1:a2:a0:1b:ba:8e:eb:f9:e9:49:2a: ff:ba:42:8b:b0:36:49:ef:03:90:72:a4:ae:f9:9b: 10:bd:4f:1a:f7:62:8b:85:49:55:99:f6:03:29:e5: e5:8d:e3:5e:04:e1:b3:56:98:39:76:9d:bf:0d:82: c9:8b:48:44:d1:d6:3f:48:04:a7:17:ac:1c:3d:7c: 7f:38:c9:c8:d1:e6:3b:2c:68:6a:fe:87:cc:4a:d5: 72:1d:38:e2:a5:76:a5:16:96:2e:a8:ca:0b:d6:fa: 6f:6f:cb:77:d0:e9:0e:76:87:34:d2:ea:32:7a:61: 6d:74:5f:b9:3e:96:c6:b7:1c:42:47:db:0c:2a:2f: 0e:25:39:62:2c:a8:da:fc:d6:dd:ac:4a:9a:db:42: b7:ef:f6:56:57:be:00:4b:08:a3:e5:2b:5e:f6:f5: fd:21:77:28:7b:38:8d:06:d5:69:f8:03:4c:cd:07: 6d:af:c0:8c:fa:77:89:05:b7:18:87:74:dc:0c:ac: 9c:a5:6e:2a:01:9f:26:5a:14:9d:a3:6f:21:08:fa: d6:7f:e8:16:76:11:cd:12:1a:48:f9:65:f0:be:01: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CF:48:29:C2:28:A8:1A:78:3A:15:BD:E4:A8:3A:FD:CF:E6:A8:9C X509v3 Authority Key Identifier: keyid:F5:4F:80:80:16:AB:4B:B0:6F:79:6A:89:46:67:C7:0B:DD:48:FB:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9U-AgBarS7BveWqJRmfHC91I-_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/47CA35E4720711EF9DC8BA21C4F9AE02/9U-AgBarS7BveWqJRmfHC91I-_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:a6:ed:02:91:44:75:76:50:3b:61:51:c7:93:f4:de:2e:cc: b5:b2:ad:cd:09:95:82:38:fb:be:ff:31:30:92:38:fa:75:72: 46:14:ae:c6:15:40:5d:f3:e5:e7:ff:08:f8:a0:ba:d2:65:7c: 4e:bd:aa:7b:4f:3a:4e:f3:db:20:75:89:5b:2b:11:a9:72:41: 00:a1:09:e0:82:20:4d:cd:a5:9e:14:03:4c:91:06:79:b7:58: 1f:af:a6:28:4c:86:09:71:17:83:ef:18:d0:f6:54:bf:0b:41: f4:38:a2:4e:a4:7e:c1:20:1d:0a:a2:ec:d0:66:21:ba:60:15: 7e:16:11:50:53:0d:7b:ea:07:cd:a4:08:7a:34:bc:1e:33:1f: ef:ed:12:40:68:7f:75:8b:97:39:e4:23:d9:c7:e9:bc:1e:ce: 12:85:29:dc:9b:7a:51:7d:2d:35:da:80:f2:71:a0:70:4c:c1: 6e:08:41:63:e8:41:a8:02:75:31:43:c4:9b:86:89:71:ad:d1: dc:42:1b:48:54:9b:59:19:d7:3f:5c:ab:06:94:8f:18:df:2e: 48:31:89:83:01:de:38:12:a3:83:83:e7:1c:31:12:3b:12:2e: b1:19:57:2f:b4:b0:ba:1c:dc:8b:61:42:6e:b9:7e:bd:33:1a: 9e:52:26:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTkzMjExMC8GA1UEBRMoRjU0RjgwODAxNkFCNEJCMDZGNzk2QTg5NDY2N0M3MEJE RDQ4RkJGNjAeFw0yNDExMjEwNTUxMTRaFw0yNDExMjgwNTUxMTRaMBgxFjAUBgNV BAMTDTY3M2VjYTUzLTQ5ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoRXVXKoeK9C3kDrGdBnMhXwnMP+t3R8QjarY9fuHjnKahoqAbuo7r+elJKv+6 QouwNknvA5BypK75mxC9Txr3YouFSVWZ9gMp5eWN414E4bNWmDl2nb8NgsmLSETR 1j9IBKcXrBw9fH84ycjR5jssaGr+h8xK1XIdOOKldqUWli6oygvW+m9vy3fQ6Q52 hzTS6jJ6YW10X7k+lsa3HEJH2wwqLw4lOWIsqNr81t2sSprbQrfv9lZXvgBLCKPl K1729f0hdyh7OI0G1Wn4A0zNB22vwIz6d4kFtxiHdNwMrJylbioBnyZaFJ2jbyEI +tZ/6BZ2Ec0SGkj5ZfC+AbM5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPM9IKcIo qBp4OhW95Kg6/c/mqJwwHwYDVR0jBBgwFoAU9U+AgBarS7BveWqJRmfHC91I+/Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxOTMyLzQ3Q0EzNUU0NzIw NzExRUY5REM4QkEyMUM0RjlBRTAyLzlVLUFnQmFyUzdCdmVXcUpSbWZIQzkxSS1f WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOVUtQWdCYXJTN0J2ZVdxSlJtZkhDOTFJLV9ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx OTMyLzQ3Q0EzNUU0NzIwNzExRUY5REM4QkEyMUM0RjlBRTAyLzlVLUFnQmFyUzdC dmVXcUpSbWZIQzkxSS1fWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANim7QKRRHV2UDthUceT9N4uzLWyrc0JlYI4+77/MTCSOPp1ckYUrsYV QF3z5ef/CPigutJlfE69qntPOk7z2yB1iVsrEalyQQChCeCCIE3NpZ4UA0yRBnm3 WB+vpihMhglxF4PvGND2VL8LQfQ4ok6kfsEgHQqi7NBmIbpgFX4WEVBTDXvqB82k CHo0vB4zH+/tEkBof3WLlznkI9nH6bwezhKFKdybelF9LTXagPJxoHBMwW4IQWPo QagCdTFDxJuGiXGt0dxCG0hUm1kZ1z9cqwaUjxjfLkgxiYMB3jgSo4OD5xwxEjsS LrEZVy+0sLoc3IthQm65fr0zGp5SJns= -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:15 2024 by rpki-client on console-fra.rpki-client.org