$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: qoaa+ZOP99rGg5DcJIes4q6fhlSP8ZArzOcrgq3rj9M= Subject key identifier: F2:88:99:D6:47:C3:E5:06:87:3D:70:CF:95:5B:0C:50:11:F5:48:2E Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: 8A Signing time: Sat 23 Nov 2024 04:33:45 +0000 Manifest this update: Sat 23 Nov 2024 04:33:45 +0000 Manifest next update: Sat 30 Nov 2024 04:33:45 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: 9iMcdV0vKaTBqN/rz9X4LS2x3YGrk+ebrEvUyR7TqIA=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: tvAepCJ9vU9LlsSGa7be0kh+waK/rq2mEdxPZDyL1PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: Nov 23 04:33:45 2024 GMT Not After : Nov 30 04:33:45 2024 GMT Subject: CN=67415b29-f1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:65:c5:fa:00:9c:61:e1:7b:d1:71:18:d9:10: 7b:dd:9a:26:50:31:c0:88:84:a4:15:4a:08:ba:f9: c3:4e:2c:d9:63:b9:fc:ac:93:85:4c:ec:ec:f1:34: 80:28:3c:78:d6:ac:5f:38:0c:d6:4e:23:03:26:6d: e6:73:2f:d3:2a:79:71:b2:6c:e5:0e:1f:7f:c3:6d: a7:27:83:61:07:f5:e8:5b:56:bc:b7:ab:45:8e:15: c0:7b:36:21:c0:8d:88:5d:68:c8:b0:26:d3:bd:57: cb:2b:b4:00:9a:79:2d:cf:74:f5:38:67:a5:56:4a: 27:a2:e0:1f:a7:db:dc:57:fc:40:9f:7f:88:c1:43: e3:70:b8:67:e2:fe:9a:7c:d6:35:37:ca:e2:67:21: f8:eb:b3:62:4c:5e:62:cc:b3:9d:62:1b:ca:b6:c6: 59:71:8f:40:aa:1d:91:27:2a:4a:39:ee:6c:2d:c8: 8a:ba:ac:9e:80:e1:ac:c3:84:9e:5b:42:0d:48:a4: 7f:82:c1:1b:64:af:e3:93:6c:6f:8a:3b:92:8d:c7: 10:3d:f5:54:51:1d:94:4e:56:0f:0d:79:69:75:90: 34:88:c9:61:c4:ef:24:a7:b5:5b:e2:f6:6c:33:82: 32:10:4c:6b:25:23:47:50:01:d3:9e:86:05:b2:1c: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:88:99:D6:47:C3:E5:06:87:3D:70:CF:95:5B:0C:50:11:F5:48:2E X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:63:6d:84:02:cc:f9:69:de:71:88:54:b7:8c:54:c5:e3:eb: e3:e7:6d:bf:a6:17:22:f6:4b:03:11:2b:cb:8d:dc:e7:e0:eb: 11:2a:a3:b9:9f:29:8b:2f:56:1d:c2:bb:ff:f2:90:8b:21:cf: 90:8a:46:19:54:e0:09:bc:f6:41:d8:41:55:4d:75:3e:68:82: 0b:80:55:f5:21:d1:f6:60:b5:e0:f5:08:64:df:6e:03:99:8a: bf:35:c8:29:d5:c4:88:4b:65:7b:00:a5:37:86:36:60:0e:9c: 58:b7:bb:ba:05:da:09:44:bd:67:88:53:5e:27:d8:56:dc:8e: 60:8c:28:8d:91:99:67:e7:26:2d:9c:6d:9b:25:53:af:4d:c1: 4a:1c:d8:07:02:11:b6:02:57:02:d6:ef:8f:1a:c1:87:67:59: 39:01:96:c7:b1:f5:7c:42:c2:93:2c:2a:b3:f8:bb:a9:1f:7a: 49:b0:7c:2e:06:a1:0d:cd:5e:31:ac:6f:95:10:50:f7:99:75: c3:7c:31:79:30:29:19:09:5d:67:5a:24:44:cd:c6:22:61:38: 69:75:88:39:80:c4:88:66:aa:20:19:16:65:13:5e:76:48:0f: 24:ba:e8:ac:23:dd:5a:25:af:fa:52:c3:16:77:ee:fa:25:a0: 39:80:66:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw OUY1RjVCOTMwHhcNMjQxMTIzMDQzMzQ1WhcNMjQxMTMwMDQzMzQ1WjAYMRYwFAYD VQQDEw02NzQxNWIyOS1mMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGXF+gCcYeF70XEY2RB73ZomUDHAiISkFUoIuvnDTizZY7n8rJOFTOzs8TSA KDx41qxfOAzWTiMDJm3mcy/TKnlxsmzlDh9/w22nJ4NhB/XoW1a8t6tFjhXAezYh wI2IXWjIsCbTvVfLK7QAmnktz3T1OGelVkonouAfp9vcV/xAn3+IwUPjcLhn4v6a fNY1N8riZyH467NiTF5izLOdYhvKtsZZcY9Aqh2RJypKOe5sLciKuqyegOGsw4Se W0INSKR/gsEbZK/jk2xvijuSjccQPfVUUR2UTlYPDXlpdZA0iMlhxO8kp7Vb4vZs M4IyEExrJSNHUAHTnoYFshzaLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKImdZH w+UGhz1wz5VbDFAR9UguMB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5 QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10 RURDWnVuaWdLTTBKOWZXNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYY22EAsz5ad5xiFS3jFTF4+vj522/phci9ksDESvLjdzn4OsRKqO5 nymLL1Ydwrv/8pCLIc+QikYZVOAJvPZB2EFVTXU+aIILgFX1IdH2YLXg9Qhk324D mYq/Ncgp1cSIS2V7AKU3hjZgDpxYt7u6BdoJRL1niFNeJ9hW3I5gjCiNkZln5yYt nG2bJVOvTcFKHNgHAhG2AlcC1u+PGsGHZ1k5AZbHsfV8QsKTLCqz+LupH3pJsHwu BqENzV4xrG+VEFD3mXXDfDF5MCkZCV1nWiREzcYiYThpdYg5gMSIZqogGRZlE152 SA8kuuisI91aJa/6UsMWd+76JaA5gGaz -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:25 2024 by rpki-client on console-fra.rpki-client.org