$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: Q59fsXo50SsYCS0/6w3BwsDaGs9Q/6uAbtsIBTwBvtM= Subject key identifier: C4:96:ED:83:34:CD:86:48:9E:FE:C0:D9:08:30:F6:98:ED:BD:E5:FE Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0963 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0949 Signing time: Fri 22 Nov 2024 20:01:57 +0000 Manifest this update: Fri 22 Nov 2024 20:01:56 +0000 Manifest next update: Fri 29 Nov 2024 20:01:56 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: 83FlEFp1qj9RNpdjompcu31f7LFAeSjGLUxz4VBl54U=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: J3OAo2oioplrlBzQe4yXqYfONxy+KByGMfnHbS1PbXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2403 (0x963) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Nov 22 20:01:56 2024 GMT Not After : Nov 29 20:01:56 2024 GMT Subject: CN=6740e335-d256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:32:5f:76:c8:b4:b6:c7:4a:cb:c7:ab:33: 3e:52:86:b7:2d:94:5f:1d:5f:ba:60:39:88:dc:b6: cd:f4:5c:c6:a9:f2:18:9c:15:ed:46:5c:09:d4:cd: 7b:70:c9:08:19:79:03:b2:ed:47:02:28:28:37:d9: 76:0e:f1:51:9b:34:c1:84:c4:ca:07:af:2a:12:7b: fe:f4:27:9a:b5:22:21:88:da:2d:31:ab:80:56:f6: 44:b5:71:cb:a7:89:1e:42:0c:24:78:c6:ce:bf:21: 85:15:e1:26:de:46:bb:dd:7c:dc:4b:88:13:56:10: 09:e1:12:39:fd:83:3a:8b:49:fe:e7:eb:d9:09:95: 5a:3e:91:90:3d:73:32:50:31:d6:1e:a5:ee:f2:9d: d8:c5:7c:db:65:d8:75:e2:fc:83:87:dd:47:4a:13: 31:ee:a5:00:b3:6e:1e:84:9a:31:6d:c5:64:69:fe: 4b:ec:11:a2:50:cf:62:61:12:80:de:5c:d7:72:da: 35:33:aa:52:e1:eb:d6:e9:5e:ae:bb:00:7c:6f:9b: d6:27:23:0c:bb:57:ec:94:b6:19:d1:64:76:de:a1: 5c:95:94:08:e5:32:a7:3c:32:b0:b9:ed:07:cc:1e: de:86:c2:8e:b2:0e:53:aa:78:55:66:bb:d3:c4:88: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:96:ED:83:34:CD:86:48:9E:FE:C0:D9:08:30:F6:98:ED:BD:E5:FE X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:c6:d8:05:c1:b7:ad:75:7e:4d:64:c7:76:d7:aa:01:43:39: 0f:3a:93:71:bb:b0:61:d6:e4:93:40:4f:80:f0:e6:49:98:17: 55:d8:4b:52:61:bf:9f:2a:63:6c:63:bd:95:79:65:b8:50:22: 45:69:cc:d5:7e:5e:60:cb:b3:5b:62:75:94:50:58:4e:4e:77: 18:fe:2e:80:ed:83:fa:d3:b5:a0:fd:a4:15:13:d2:6a:c4:cd: 8d:82:9a:71:d3:cc:f1:85:86:57:49:93:eb:96:b8:d5:59:3e: a6:bf:00:b5:5a:fe:28:f4:40:89:1f:3a:04:04:a1:c4:24:a4: ff:f7:8d:9b:07:b7:49:a4:43:68:c9:04:e0:05:b6:a9:e6:36: f3:54:be:ed:96:87:81:ff:d6:60:b5:32:a7:ef:13:ea:d1:4f: f5:3a:00:37:5e:1e:ba:f3:e3:6b:74:79:5e:e5:ca:69:da:09: 07:63:19:4a:28:e9:28:9a:81:07:19:fa:43:03:e7:66:6a:80: 6e:eb:de:a1:85:0f:20:f2:b6:de:18:7f:9c:46:38:c7:b3:d8: 65:10:b8:f1:6a:75:00:22:a2:3f:8c:fd:de:3d:ee:84:bd:d6: 2b:49:34:d3:5f:e7:1a:ca:35:3c:75:b9:ff:fb:22:3b:e2:ca: d4:e7:dd:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjQxMTIyMjAwMTU2WhcNMjQxMTI5MjAwMTU2WjAYMRYwFAYD VQQDEw02NzQwZTMzNS1kMjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcgyX3bItLbHSsvHqzM+Uoa3LZRfHV+6YDmI3LbN9FzGqfIYnBXtRlwJ1M17 cMkIGXkDsu1HAigoN9l2DvFRmzTBhMTKB68qEnv+9CeatSIhiNotMauAVvZEtXHL p4keQgwkeMbOvyGFFeEm3ka73XzcS4gTVhAJ4RI5/YM6i0n+5+vZCZVaPpGQPXMy UDHWHqXu8p3YxXzbZdh14vyDh91HShMx7qUAs24ehJoxbcVkaf5L7BGiUM9iYRKA 3lzXcto1M6pS4evW6V6uuwB8b5vWJyMMu1fslLYZ0WR23qFclZQI5TKnPDKwue0H zB7ehsKOsg5TqnhVZrvTxIjuFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSW7YM0 zYZInv7A2Qgw9pjtveX+MB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+xtgFwbetdX5NZMd216oBQzkPOpNxu7Bh1uSTQE+A8OZJmBdV2EtS Yb+fKmNsY72VeWW4UCJFaczVfl5gy7NbYnWUUFhOTncY/i6A7YP607Wg/aQVE9Jq xM2Ngppx08zxhYZXSZPrlrjVWT6mvwC1Wv4o9ECJHzoEBKHEJKT/942bB7dJpENo yQTgBbap5jbzVL7tloeB/9ZgtTKn7xPq0U/1OgA3Xh668+NrdHle5cpp2gkHYxlK KOkomoEHGfpDA+dmaoBu696hhQ8g8rbeGH+cRjjHs9hlELjxanUAIqI/jP3ePe6E vdYrSTTTX+cayjU8dbn/+yI74srU591w -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org