$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft File: S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json) Hash identifier: N5W1ye6wKZIhJRrWklz4qEkzB2c8O5FwozKDvqSd+O4= Subject key identifier: 1F:F5:BA:D1:19:B2:69:8E:A2:F7:03:78:64:A9:B4:90:9C:80:C4:C1 Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65 Certificate issuer: /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft Manifest number: 0148 Signing time: Sat 23 Nov 2024 02:36:23 +0000 Manifest this update: Sat 23 Nov 2024 02:36:22 +0000 Manifest next update: Sat 30 Nov 2024 02:36:22 +0000 Files and hashes: 1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: NSSpZUbVsgrfMBw8AwN4PtLCPXjFNUCgWs2CY2+ZbDw=) 2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: ng/eOnYi4Xdy1o4WQsnieJhysvyMRUBiYik4ZaLFfxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65 Validity Not Before: Nov 23 02:36:22 2024 GMT Not After : Nov 30 02:36:22 2024 GMT Subject: CN=67413fa6-c656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ed:3d:58:6e:83:e8:ba:cf:7b:36:2f:3d:e6: 97:7a:45:cd:6d:d9:d4:7a:65:62:0f:3f:82:0c:06: 8c:42:4f:d3:23:47:75:f4:ae:8c:40:d8:5a:c7:43: 12:1a:74:ec:f8:a8:56:1b:ac:73:e4:1b:f2:b2:d4: 2f:6f:74:86:42:df:0c:c9:b0:10:c5:de:12:49:69: 44:d3:e2:05:f7:01:ff:d7:55:3a:e3:bc:a6:62:bc: 51:77:a0:a0:62:e3:b2:6a:7e:00:5e:61:fb:6c:a7: c4:49:7b:40:8d:5e:a3:be:2c:bb:e0:33:33:3e:40: 4a:6e:20:b4:58:26:d4:5a:b7:30:62:2e:42:b1:7a: c4:03:42:c3:14:60:7d:ab:5e:37:7f:32:5d:5a:4a: c7:bf:4c:38:98:8e:5f:9c:1c:e6:63:17:1e:bc:bf: 68:5c:8b:d0:77:22:06:19:79:2f:fc:fb:cd:40:c7: c7:dd:cf:0f:02:20:f1:88:a7:3f:61:a5:48:e4:b4: 6b:31:28:a7:1f:6d:e0:c2:28:2a:10:f4:80:0a:8f: 75:6e:02:9f:5c:2d:6c:9e:cc:af:0e:3f:00:bf:cd: 51:3c:e4:7c:77:0c:36:06:39:fa:27:16:be:2d:ee: cf:f7:08:2a:42:23:41:2a:8e:b8:f3:dd:51:ac:a2: 0e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F5:BA:D1:19:B2:69:8E:A2:F7:03:78:64:A9:B4:90:9C:80:C4:C1 X509v3 Authority Key Identifier: keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:cb:77:9a:8d:55:0c:7c:20:8f:55:ff:3d:cb:c1:7d:cc:cf: ad:8b:55:67:55:48:74:1b:73:c4:15:fe:bd:3e:dd:20:b3:9a: 1c:98:6c:df:6b:ee:db:9e:ed:22:1c:ea:bb:f6:5e:dc:f8:be: e8:bb:7c:46:49:bc:a2:ae:6a:b1:37:fa:81:c5:a7:61:d7:e4: bb:75:fc:5d:dc:93:b8:a6:32:75:70:fb:68:87:4e:74:6c:b4: ab:4d:4e:e9:bc:eb:ba:54:25:14:56:7e:82:be:86:58:ff:7b: 92:4a:8d:96:8c:dc:80:e4:0d:c0:c7:37:75:23:14:e9:6f:f1: 7d:5b:06:c8:ab:de:cf:61:6f:6f:c9:04:c5:b6:13:9b:26:0b: d8:fb:61:dd:99:74:b8:0f:37:1b:3a:ea:3f:3f:e8:53:78:df: 2b:de:4b:d9:00:f1:e6:ff:50:9e:5d:49:f5:e4:1b:e4:b7:3f: 0a:93:4b:73:db:b0:42:d9:cc:89:b1:f9:b6:ed:1f:d4:76:e9: 3e:41:4d:30:89:12:29:d4:d4:14:1d:3e:b3:d3:0d:51:78:d0: d2:95:1b:14:ef:6b:a5:97:76:aa:38:69:b5:69:8d:74:0a:e2: d7:d7:7b:c2:15:8e:85:ee:73:58:53:fe:36:91:7e:d6:bd:8c: 8f:7e:3a:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZGNzIxMTAvBgNVBAUTKDRCRDcwM0I3RkVDQTNBQTJBODM2Njc1RkEwRjNGMzI5 ODEyRTZGNjUwHhcNMjQxMTIzMDIzNjIyWhcNMjQxMTMwMDIzNjIyWjAYMRYwFAYD VQQDEw02NzQxM2ZhNi1jNjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApe09WG6D6LrPezYvPeaXekXNbdnUemViDz+CDAaMQk/TI0d19K6MQNhax0MS GnTs+KhWG6xz5BvystQvb3SGQt8MybAQxd4SSWlE0+IF9wH/11U647ymYrxRd6Cg YuOyan4AXmH7bKfESXtAjV6jviy74DMzPkBKbiC0WCbUWrcwYi5CsXrEA0LDFGB9 q143fzJdWkrHv0w4mI5fnBzmYxcevL9oXIvQdyIGGXkv/PvNQMfH3c8PAiDxiKc/ YaVI5LRrMSinH23gwigqEPSACo91bgKfXC1snsyvDj8Av81RPOR8dww2Bjn6Jxa+ Le7P9wgqQiNBKo64891RrKIOcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/1utEZ smmOovcDeGSptJCcgMTBMB8GA1UdIwQYMBaAFEvXA7f+yjqiqDZnX6Dz8ymBLm9l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkY3Mi8yNkE1NTlENkJB QTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09xS29ObWRmb1BQektZRXVi MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M5Y0R0XzdLT3FLb05tZGZvUFB6S1lFdWIyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkY3Mi8yNkE1NTlENkJBQTAxMUVEQUQxNjAxNzJDNEY5QUUwMi9TOWNEdF83S09x S29ObWRmb1BQektZRXViMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJy3eajVUMfCCPVf89y8F9zM+ti1VnVUh0G3PEFf69Pt0gs5ocmGzf a+7bnu0iHOq79l7c+L7ou3xGSbyirmqxN/qBxadh1+S7dfxd3JO4pjJ1cPtoh050 bLSrTU7pvOu6VCUUVn6CvoZY/3uSSo2WjNyA5A3Axzd1IxTpb/F9WwbIq97PYW9v yQTFthObJgvY+2HdmXS4DzcbOuo/P+hTeN8r3kvZAPHm/1CeXUn15Bvktz8Kk0tz 27BC2cyJsfm27R/Uduk+QU0wiRIp1NQUHT6z0w1ReNDSlRsU72ull3aqOGm1aY10 CuLX13vCFY6F7nNYU/42kX7WvYyPfjpd -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:49 2024 by rpki-client on console-fra.rpki-client.org