$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json) Hash identifier: NaGbNAwinGZZrFg/ZI+BBiu7/MqD3mRvUoFRDvG0mEE= Subject key identifier: 91:F8:75:44:18:D6:A6:E3:DA:22:1D:DD:0D:C6:ED:B0:FC:F5:A9:FD Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 1781 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft Manifest number: 177A Signing time: Wed 20 Nov 2024 16:32:39 +0000 Manifest this update: Wed 20 Nov 2024 16:32:39 +0000 Manifest next update: Wed 27 Nov 2024 16:32:39 +0000 Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: KQBD1uSpa4ICCpNu2o5n8Eh4gbg7b5vy9H5P/2aZdNc=) 2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: W65Bof4UuRWkpC1J6y/jnu+98zllARlm3OPaWe3smHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6017 (0x1781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Nov 20 16:32:39 2024 GMT Not After : Nov 27 16:32:39 2024 GMT Subject: CN=673e0f27-10f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:0a:88:ed:7c:ae:57:cd:96:aa:3e:3e:c1: 79:92:6b:eb:71:04:e8:00:5c:0e:86:17:35:72:1c: cf:ee:89:bb:27:70:f7:3d:8c:b9:6d:1a:0f:9c:02: f5:62:63:4a:3f:29:33:19:c0:c0:87:ba:50:ef:8c: f8:c3:9a:53:8a:4f:02:76:09:3b:d6:a0:8e:af:4d: 20:0b:a1:30:83:50:c7:22:26:20:fd:61:b4:51:79: c4:4d:3d:29:04:7a:31:1c:ef:f7:07:33:d1:f8:48: e1:45:a7:cc:a4:a8:75:ab:f8:8b:cf:7d:ed:16:dd: a1:68:70:e0:b4:94:c4:11:97:1a:64:82:12:1e:53: 1d:07:3b:80:de:76:97:37:36:a9:96:15:f5:02:3b: 41:9a:6d:62:90:58:6d:c5:80:e0:85:fb:5b:03:fa: 93:d2:81:83:e5:e5:83:a2:50:fe:a2:50:d4:9e:1d: 04:b7:41:53:19:7c:14:62:20:d0:44:06:a0:81:f1: a1:cd:89:c4:a0:68:5a:ca:d0:94:2b:4d:f2:a3:6a: 23:ee:de:99:22:0b:7f:8f:f8:3d:58:ab:62:28:46: 73:5c:a8:cf:84:97:4e:0a:a1:ee:4c:dd:33:1e:13: 6f:80:19:52:6c:c2:fd:bd:8d:31:56:83:9b:6c:3e: 02:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F8:75:44:18:D6:A6:E3:DA:22:1D:DD:0D:C6:ED:B0:FC:F5:A9:FD X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:1f:b5:c9:51:d8:71:78:a6:6e:ca:9e:ef:21:aa:89:df:ba: fa:81:da:b6:7c:66:8c:a1:ea:ed:81:30:31:dc:43:0b:06:56: d8:70:14:c8:df:3e:da:bd:f3:c4:1e:de:4a:b2:4b:98:e9:c8: 44:38:41:97:1a:13:45:4b:dd:8a:93:ce:b3:d7:ee:9d:f9:8b: 3f:62:54:67:e6:97:03:29:46:d2:31:ed:13:f4:d1:48:45:11: 35:e7:3c:19:92:9c:22:c8:ec:57:24:a6:8b:66:0d:f9:d6:f6: 38:9a:b6:3e:02:bc:7e:f9:d3:e6:6d:cf:af:65:46:c4:97:2b: d3:c0:4c:53:b7:9d:b1:50:04:c0:1d:52:09:9a:89:0b:2d:92: 2d:20:ab:86:a2:54:bb:48:2e:b2:0a:f4:4f:86:79:42:dd:41: 3b:7a:78:77:ff:2e:0d:ad:de:e0:c6:d3:d6:52:0d:ff:a0:c8: ba:86:11:3c:ca:0f:c6:9b:a4:8f:83:78:eb:ec:b6:c2:0c:d4: 2a:56:c5:41:3c:31:76:c5:20:0f:97:a9:07:60:32:d1:31:30: b4:6d:4b:ee:3b:db:e1:e0:38:f2:1f:d9:67:d8:c5:38:2c:39: 61:b8:1a:de:1d:76:30:9c:f1:2c:6a:e3:a1:c6:9c:42:45:61: e4:dd:b7:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjQxMTIwMTYzMjM5WhcNMjQxMTI3MTYzMjM5WjAYMRYwFAYD VQQDEw02NzNlMGYyNy0xMGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmIKiO18rlfNlqo+PsF5kmvrcQToAFwOhhc1chzP7om7J3D3PYy5bRoPnAL1 YmNKPykzGcDAh7pQ74z4w5pTik8Cdgk71qCOr00gC6Ewg1DHIiYg/WG0UXnETT0p BHoxHO/3BzPR+EjhRafMpKh1q/iLz33tFt2haHDgtJTEEZcaZIISHlMdBzuA3naX NzaplhX1AjtBmm1ikFhtxYDghftbA/qT0oGD5eWDolD+olDUnh0Et0FTGXwUYiDQ RAaggfGhzYnEoGhaytCUK03yo2oj7t6ZIgt/j/g9WKtiKEZzXKjPhJdOCqHuTN0z HhNvgBlSbML9vY0xVoObbD4CawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJH4dUQY 1qbj2iId3Q3G7bD89an9MB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR TFFYVmVFaTVfeFpNQWtJSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqH7XJUdhxeKZuyp7vIaqJ37r6gdq2fGaMoertgTAx3EMLBlbYcBTI 3z7avfPEHt5KskuY6chEOEGXGhNFS92Kk86z1+6d+Ys/YlRn5pcDKUbSMe0T9NFI RRE15zwZkpwiyOxXJKaLZg351vY4mrY+Arx++dPmbc+vZUbElyvTwExTt52xUATA HVIJmokLLZItIKuGolS7SC6yCvRPhnlC3UE7enh3/y4Nrd7gxtPWUg3/oMi6hhE8 yg/Gm6SPg3jr7LbCDNQqVsVBPDF2xSAPl6kHYDLRMTC0bUvuO9vh4DjyH9ln2MU4 LDlhuBreHXYwnPEsauOhxpxCRWHk3bdc -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:55 2024 by rpki-client on console-fra.rpki-client.org