$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json) Hash identifier: Bw2eIEQbhN9bTWcfOASPfkySecDXM7oCAfgE4ywbxUU= Subject key identifier: 60:68:50:DD:1D:C4:1E:14:F9:F7:CD:A0:CA:63:D8:D3:B3:C8:12:06 Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft Manifest number: 08 Signing time: Wed 23 Oct 2024 06:51:56 +0000 Manifest this update: Wed 23 Oct 2024 06:51:56 +0000 Manifest next update: Wed 30 Oct 2024 06:51:55 +0000 Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: j0jEgrn2zybQObqBp3kFHwzC6BY9CTgf61bgtTO3QE0=) 2: BD5940CE8BCB11EFAE8ADA5BC4F9AE02.roa (hash: 7M7tnskcAr6syWX8xx3lbIELsXSwEQW4ePT2HDbCQH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Oct 23 06:51:56 2024 GMT Not After : Oct 30 06:51:55 2024 GMT Subject: CN=67189d0c-30fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:fc:41:75:a4:1f:8f:bc:1a:c0:dd:63:77: dc:78:c1:b6:19:d0:3b:56:5f:70:47:a3:a5:43:c1: 1b:64:22:e0:5b:97:5e:df:64:0e:f0:61:0e:05:3a: 63:98:80:65:5a:bb:b2:d1:43:b5:5c:7e:77:cc:26: 33:cb:5f:12:90:d9:54:bd:86:3a:59:28:02:cc:ae: 63:02:ee:5f:0c:6d:b3:b5:e2:23:e4:ca:51:e6:36: 1f:4e:86:db:f5:85:5b:73:86:1d:ce:96:de:e8:6e: 73:e0:d3:a4:07:8b:fb:55:da:05:6e:45:a9:5a:45: 69:a2:31:e9:8e:b4:5d:8b:02:5d:ff:ca:32:66:e1: 16:c0:eb:88:ce:ae:41:c5:60:69:ac:d4:84:1e:d4: fc:61:25:7f:d5:b3:11:2d:65:27:64:a4:32:33:1f: 3a:62:76:4d:7f:78:80:9c:59:e2:7e:21:ee:b3:fe: e4:01:3b:4a:1f:86:0e:61:b7:09:35:e5:a1:33:f4: cb:00:65:3e:fb:6d:ea:c5:66:f6:2e:3d:2e:7b:b1: 84:b0:4d:84:17:12:22:27:96:f3:38:ad:79:ee:20: 53:36:fe:52:bc:ae:b7:f2:50:fd:1c:91:90:4d:cb: 10:bc:fa:cb:eb:a8:1f:3e:96:24:a6:35:56:a6:2d: db:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:68:50:DD:1D:C4:1E:14:F9:F7:CD:A0:CA:63:D8:D3:B3:C8:12:06 X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:77:92:f8:72:fe:d1:22:b2:4e:65:91:82:24:16:c5:34:6a: 94:33:12:ec:d2:1f:43:51:50:1a:4f:d4:51:a7:fe:86:1b:6c: 68:50:69:34:43:ae:1c:f8:8f:0e:18:99:15:f6:0a:de:b0:91: bb:ec:5b:9e:dd:5e:a6:fb:65:a2:3e:87:94:74:19:ac:df:42: eb:36:ae:be:b1:0d:3d:48:dc:97:de:c7:25:f4:37:35:f0:19: a4:f6:e6:39:26:7c:96:00:21:5d:3c:c8:a8:38:0c:02:37:69: da:9a:82:6d:8a:82:63:83:17:75:9d:16:15:09:b3:42:2f:59: 76:a1:ba:17:24:57:bd:3b:1f:50:4b:c8:21:88:90:4d:97:3f: 4a:1f:db:b0:4a:ae:8a:a5:2d:c2:99:86:1a:86:e2:3a:26:99: 04:14:ff:d5:a3:28:b8:ef:8b:af:8e:63:26:9f:e6:07:5c:a8: ed:e0:12:49:5e:92:e5:27:e3:47:e8:b7:63:d9:e4:4c:00:ab: 14:4b:bc:27:9f:94:81:32:0a:d6:d9:56:87:b0:b4:f3:c6:24: c7:8e:8f:45:f4:69:c3:2c:1c:74:d9:64:df:e8:d4:4c:35:a2: 8d:f1:f4:26:04:10:da:b0:16:18:97:4d:a4:24:5a:cc:7a:cd: 94:7a:da:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEM5RTExMC8GA1UEBRMoRkQ5RDdGNjYwRjNBMTMwQ0E0OEJFQkJBNjZFMTYyQkQz MDM0RTM4RDAeFw0yNDEwMjMwNjUxNTZaFw0yNDEwMzAwNjUxNTVaMBgxFjAUBgNV BAMTDTY3MTg5ZDBjLTMwZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuWfxBdaQfj7wawN1jd9x4wbYZ0DtWX3BHo6VDwRtkIuBbl17fZA7wYQ4FOmOY gGVau7LRQ7VcfnfMJjPLXxKQ2VS9hjpZKALMrmMC7l8MbbO14iPkylHmNh9Ohtv1 hVtzhh3Olt7obnPg06QHi/tV2gVuRalaRWmiMemOtF2LAl3/yjJm4RbA64jOrkHF YGms1IQe1PxhJX/VsxEtZSdkpDIzHzpidk1/eICcWeJ+Ie6z/uQBO0ofhg5htwk1 5aEz9MsAZT77berFZvYuPS57sYSwTYQXEiInlvM4rXnuIFM2/lK8rrfyUP0ckZBN yxC8+svrqB8+liSmNVamLdsjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYGhQ3R3E HhT5982gymPY07PIEgYwHwYDVR0jBBgwFoAU/Z1/Zg86Ewyki+u6ZuFivTA0440w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQzlFLzRFRkQxNUI2OEJD QTExRUZBQkZDMUEzOUM0RjlBRTAyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1oxX1pnODZFd3lraS11Nlp1Rml2VEEwNDQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QzlFLzRFRkQxNUI2OEJDQTExRUZBQkZDMUEzOUM0RjlBRTAyL19aMV9aZzg2RXd5 a2ktdTZadUZpdlRBMDQ0MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD53kvhy/tEisk5lkYIkFsU0apQzEuzSH0NRUBpP1FGn/oYbbGhQaTRD rhz4jw4YmRX2Ct6wkbvsW57dXqb7ZaI+h5R0GazfQus2rr6xDT1I3JfexyX0NzXw GaT25jkmfJYAIV08yKg4DAI3adqagm2KgmODF3WdFhUJs0IvWXahuhckV707H1BL yCGIkE2XP0of27BKroqlLcKZhhqG4jommQQU/9WjKLjvi6+OYyaf5gdcqO3gEkle kuUn40fot2PZ5EwAqxRLvCeflIEyCtbZVoewtPPGJMeOj0X0acMsHHTZZN/o1Ew1 oo3x9CYEENqwFhiXTaQkWsx6zZR62us= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:20 2024 by rpki-client on console-fra.rpki-client.org