$ rpki-client -vvf rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft File: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft (raw, json) Hash identifier: Abj8EfrohMwdq6jZzD0Qc8JkN/YwdrGVWNlAU4Is6Do= Subject key identifier: 03:67:4D:4C:3E:CE:D3:06:3D:70:C8:0B:8E:B0:DA:0F:F3:54:D1:92 Authority key identifier: 9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB Certificate issuer: /CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB Certificate serial: 084C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft Manifest number: 0846 Signing time: Fri 22 Nov 2024 20:27:05 +0000 Manifest this update: Fri 22 Nov 2024 20:27:05 +0000 Manifest next update: Fri 29 Nov 2024 20:27:05 +0000 Files and hashes: 1: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl (hash: YDyFzOOIzeomFLTvmMhN+kpi1SVyS4vfewgaTGzFvKw=) 2: CDBA3F66B9BD11EAAE22B109C4F9AE02.roa (hash: TS24Pjw+v6UdpS9dyJX3ZRfYWC+R7C8gFtsdpCM/hpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2124 (0x84c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB Validity Not Before: Nov 22 20:27:05 2024 GMT Not After : Nov 29 20:27:05 2024 GMT Subject: CN=6740e919-728e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b4:3b:11:71:e2:1b:d9:99:53:a7:4f:1e:7a: 3b:b2:3b:61:e9:33:b6:5c:00:71:d6:21:3b:54:6e: d3:98:9d:1c:7b:72:55:8e:b5:ce:ba:11:38:8c:6f: 01:42:c1:7b:d4:40:ee:dd:99:58:f6:fd:9f:9f:22: ff:29:41:a7:ef:e5:c7:af:67:6f:b3:cb:35:bd:3d: da:05:77:74:cd:f7:a3:96:0c:44:65:81:c6:11:43: b4:e6:a2:a7:94:49:ce:b6:df:99:23:bd:93:29:77: 4e:01:80:fc:45:f7:21:c3:82:17:ca:af:11:be:8b: ec:22:d6:ae:9e:50:88:cd:b2:70:e8:83:ab:4c:b4: 8d:6d:7c:b2:de:e3:46:eb:57:4e:20:08:68:a6:ab: 1f:59:85:ca:ba:51:ed:57:f3:01:3a:c3:ce:aa:df: 27:84:d8:31:f7:b7:a6:88:70:fd:42:47:ed:b0:44: 6e:80:90:1a:74:35:4c:8b:f3:a7:a4:56:1e:a5:d1: 51:15:8d:1a:05:ba:62:75:06:f7:d8:1a:19:5b:7b: 47:10:d7:d5:68:87:b2:e1:de:67:cb:d3:d2:7a:9c: b0:b8:4d:3c:1c:b0:fe:e3:57:2a:91:17:8c:57:22: 86:b5:97:fa:49:78:71:8e:95:8a:6c:7a:67:ca:5d: a4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:67:4D:4C:3E:CE:D3:06:3D:70:C8:0B:8E:B0:DA:0F:F3:54:D1:92 X509v3 Authority Key Identifier: keyid:9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:19:d6:37:d0:ea:d9:65:9b:0b:ec:fa:87:c5:5b:4d:46:57: e1:c3:ad:5b:b6:38:be:92:ce:41:e7:96:18:13:35:1b:d7:16: 68:30:64:35:e2:44:83:a9:6d:3f:21:41:12:19:9b:f2:76:73: ca:99:5c:02:ab:d5:da:71:5a:ed:79:2d:a1:b4:62:19:61:35: ba:8f:40:9e:ad:22:3b:76:b7:b3:1b:18:01:85:03:dc:ae:27: 7d:b8:33:84:dc:12:b6:86:dd:7b:4c:fd:47:23:97:bd:10:50: 03:7c:ec:4d:da:c5:ed:12:1f:8b:05:b2:c2:a4:12:f2:da:05: 91:af:a6:d6:8a:9b:62:a1:46:ce:6d:a7:f8:73:76:de:93:34: e5:ec:47:60:aa:ea:e9:ef:0c:c0:6d:29:16:12:ce:db:2f:e8: fb:dc:6a:1e:ea:20:d9:b7:49:a4:9b:dc:c8:02:11:fc:16:12: c0:8a:dd:7d:4f:33:01:ae:69:88:4f:3e:24:24:85:a8:f2:48: 2c:a2:eb:79:59:b0:c4:35:0d:18:c3:f6:e4:dc:9a:99:c3:18: d5:a6:46:5d:89:79:ae:25:c1:db:08:c3:aa:11:5f:83:e8:65: 18:5c:a7:6d:7e:83:cd:33:9e:57:e3:28:e4:0c:05:4f:bb:82: af:0b:b5:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlEQjIxMTAvBgNVBAUTKDlCODI1OUY3QjNDMURFREQ0NzE5QkMwQURDNTg3QjNE Qjg5RTdCREIwHhcNMjQxMTIyMjAyNzA1WhcNMjQxMTI5MjAyNzA1WjAYMRYwFAYD VQQDEw02NzQwZTkxOS03MjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLQ7EXHiG9mZU6dPHno7sjth6TO2XABx1iE7VG7TmJ0ce3JVjrXOuhE4jG8B QsF71EDu3ZlY9v2fnyL/KUGn7+XHr2dvs8s1vT3aBXd0zfejlgxEZYHGEUO05qKn lEnOtt+ZI72TKXdOAYD8Rfchw4IXyq8RvovsItaunlCIzbJw6IOrTLSNbXyy3uNG 61dOIAhopqsfWYXKulHtV/MBOsPOqt8nhNgx97emiHD9QkftsERugJAadDVMi/On pFYepdFRFY0aBbpidQb32BoZW3tHENfVaIey4d5ny9PSepywuE08HLD+41cqkReM VyKGtZf6SXhxjpWKbHpnyl2k6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANnTUw+ ztMGPXDIC46w2g/zVNGSMB8GA1UdIwQYMBaAFJuCWfezwd7dRxm8CtxYez24nnvb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OURCMi9BOUNDNDlCNkI5 QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0MUhHYndLM0ZoN1BiaWVl OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL200Slo5N1BCM3QxSEdid0szRmg3UGJpZWU5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OURCMi9BOUNDNDlCNkI5QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0 MUhHYndLM0ZoN1BiaWVlOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4GdY30OrZZZsL7PqHxVtNRlfhw61btji+ks5B55YYEzUb1xZoMGQ1 4kSDqW0/IUESGZvydnPKmVwCq9XacVrteS2htGIZYTW6j0CerSI7drezGxgBhQPc rid9uDOE3BK2ht17TP1HI5e9EFADfOxN2sXtEh+LBbLCpBLy2gWRr6bWiptioUbO baf4c3bekzTl7Edgqurp7wzAbSkWEs7bL+j73Goe6iDZt0mkm9zIAhH8FhLAit19 TzMBrmmITz4kJIWo8kgsout5WbDENQ0Yw/bk3JqZwxjVpkZdiXmuJcHbCMOqEV+D 6GUYXKdtfoPNM55X4yjkDAVPu4KvC7Uu -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:29 2024 by rpki-client on console-ams.rpki-client.org