$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: sOVkhhRwpGHtlRG0KvbeCzx3HiIdPpreNWU+OopIMVI= Subject key identifier: 73:F9:98:FC:C6:23:B8:7E:6C:B3:03:CB:7D:41:59:47:1B:96:FC:1D Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: F6 Signing time: Mon 25 Nov 2024 03:20:46 +0000 Manifest this update: Mon 25 Nov 2024 03:20:46 +0000 Manifest next update: Mon 02 Dec 2024 03:20:46 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: 9pHCdM02BNbp3CG6fktrGpCQUmYmQ0fkzDiIrDKLlKE=) 2: 22F2C0647DCB11EEB9150234C4F9AE02.roa (hash: 0KwtvVvJORSXDZJXoDg8yH9MqNo0pSSAze/dXIycs7s=) 3: E10D7D267F5811EEBC62AB76C4F9AE02.roa (hash: drY6kiiYoCje6DGog8gQjYKlelhVvkYt3X5Ifw7Tcek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 03:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Nov 25 03:20:46 2024 GMT Not After : Dec 2 03:20:46 2024 GMT Subject: CN=6743ed0e-c349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:ec:98:6c:20:6b:41:45:1e:16:41:7e:3d: 50:d3:3e:88:3e:7b:fd:c0:87:b2:c5:96:b7:a3:91: c7:6e:04:44:6a:ec:c7:64:c1:80:cb:90:c5:38:4a: fe:aa:bc:f5:34:55:11:54:5b:85:ef:7f:0b:af:b0: f8:e6:40:9e:40:27:1c:ce:75:55:1d:1c:0f:e6:9b: d8:5f:b3:f7:df:3c:0e:e5:09:ec:dd:e2:ad:1c:18: a3:09:18:eb:11:ff:82:96:86:cf:cd:83:3b:d0:ae: 0f:54:36:db:99:eb:53:84:ae:09:ac:1b:67:01:93: b8:25:6e:ea:72:a5:36:c0:2d:bb:ff:6b:aa:06:89: 31:39:61:bd:b4:5c:fb:50:ee:87:e4:8e:c1:8f:97: 1f:b5:c3:35:c0:75:eb:e6:8a:e3:9d:11:27:70:ff: 2c:08:30:f5:8f:a5:33:ef:bb:79:68:42:0a:a8:75: 97:5b:67:f3:d2:34:c0:fc:5c:d9:2d:0a:53:76:c4: de:b9:51:c0:93:54:e1:34:fb:37:98:46:32:d8:ef: 7a:45:de:ed:ab:b6:53:47:89:04:f3:15:ae:28:a4: 9b:4f:29:04:96:3e:ea:9c:de:a8:ec:eb:df:7b:c7: 0c:12:08:c3:0f:d6:d9:51:fb:67:7e:6d:d5:f5:57: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F9:98:FC:C6:23:B8:7E:6C:B3:03:CB:7D:41:59:47:1B:96:FC:1D X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:73:a3:91:e3:ed:38:da:1e:16:91:20:44:81:38:48:28:9b: 91:d4:ed:a2:63:13:75:0d:84:b0:ec:db:37:ba:65:9b:7c:8f: 1c:f1:bd:f5:f5:cc:7d:8e:4e:b9:b8:c9:3c:e9:b3:c4:33:3a: 32:4b:8e:55:d9:78:d5:8d:76:e7:77:a2:82:32:8e:13:18:5b: 39:6d:8a:16:c3:3e:15:10:c8:4f:bd:8f:16:0a:4c:3f:c2:43: 2c:67:23:b7:b3:4e:f6:63:9b:85:f2:c6:cb:56:42:21:e5:eb: 13:6f:4d:a7:51:c4:6a:a1:d0:00:95:bd:75:32:c9:f8:25:d4: 72:b7:c7:fd:67:58:79:1f:b7:11:68:da:55:60:10:21:a4:dc: 74:53:78:23:39:c4:24:3b:08:3d:f4:b3:65:45:1d:4a:ee:85: 14:8a:d4:58:ad:30:e6:89:8b:5a:7e:9c:cd:53:cb:45:de:ab: 40:2a:99:1c:ce:d5:72:a2:8c:43:a3:b7:a7:3f:76:cf:68:d2: bb:44:d0:86:43:0f:6b:9c:cb:74:27:24:46:cc:02:e3:f3:1e: 49:18:80:fc:87:8d:25:de:b0:72:ff:6b:e1:5c:fb:40:21:2b: 36:6c:25:05:ee:33:d9:ae:26:6a:80:b2:73:fd:fd:bf:51:59: 19:0a:d3:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjQxMTI1MDMyMDQ2WhcNMjQxMjAyMDMyMDQ2WjAYMRYwFAYD VQQDEw02NzQzZWQwZS1jMzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqTsmGwga0FFHhZBfj1Q0z6IPnv9wIeyxZa3o5HHbgREauzHZMGAy5DFOEr+ qrz1NFURVFuF738Lr7D45kCeQCccznVVHRwP5pvYX7P33zwO5Qns3eKtHBijCRjr Ef+ClobPzYM70K4PVDbbmetThK4JrBtnAZO4JW7qcqU2wC27/2uqBokxOWG9tFz7 UO6H5I7Bj5cftcM1wHXr5orjnREncP8sCDD1j6Uz77t5aEIKqHWXW2fz0jTA/FzZ LQpTdsTeuVHAk1ThNPs3mEYy2O96Rd7tq7ZTR4kE8xWuKKSbTykElj7qnN6o7Ovf e8cMEgjDD9bZUftnfm3V9VehMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHP5mPzG I7h+bLMDy31BWUcblvwdMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3c6OR4+042h4WkSBEgThIKJuR1O2iYxN1DYSw7Ns3umWbfI8c8b31 9cx9jk65uMk86bPEMzoyS45V2XjVjXbnd6KCMo4TGFs5bYoWwz4VEMhPvY8WCkw/ wkMsZyO3s072Y5uF8sbLVkIh5esTb02nUcRqodAAlb11Msn4JdRyt8f9Z1h5H7cR aNpVYBAhpNx0U3gjOcQkOwg99LNlRR1K7oUUitRYrTDmiYtafpzNU8tF3qtAKpkc ztVyooxDo7enP3bPaNK7RNCGQw9rnMt0JyRGzALj8x5JGID8h40l3rBy/2vhXPtA ISs2bCUF7jPZriZqgLJz/f2/UVkZCtNZ -----END CERTIFICATE-----Generated at Mon Nov 25 04:54:32 2024 by rpki-client on console-fra.rpki-client.org