$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json) Hash identifier: 2OARZYSCIAkm5ykmMWKIpfrbQ2ZxsPaxnHoNvbnEv2w= Subject key identifier: 3A:15:46:E2:58:02:8B:59:A0:0B:BE:B7:2A:86:5B:BE:A5:94:E6:76 Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 09A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft Manifest number: 099D Signing time: Fri 22 Nov 2024 19:48:32 +0000 Manifest this update: Fri 22 Nov 2024 19:48:31 +0000 Manifest next update: Fri 29 Nov 2024 19:48:31 +0000 Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: LlvNsWj6KhPs/6tZNWLf/MuVYXb/X8G0g8K8Beiw2YA=) 2: 8DA4D91477EF11EAB5508A28C4F9AE02.roa (hash: ibjFmXnXnU8N5O1p29U2A3A7TTL4SvNFNaoSn7RurMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2470 (0x9a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: Nov 22 19:48:31 2024 GMT Not After : Nov 29 19:48:31 2024 GMT Subject: CN=6740e010-859c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:fb:11:e2:7d:96:43:92:b6:a9:7e:78:7c: 3a:a9:99:4c:a0:6c:1c:9a:e1:e8:f7:ed:b5:2d:a7: bb:3f:25:48:aa:f6:e1:6a:b5:f0:67:37:3f:84:d7: 2b:f5:db:10:c0:59:25:2f:2a:49:6a:ff:77:38:70: ac:97:fc:06:fa:5f:b2:6e:6e:10:63:fd:59:bc:92: 12:b5:87:23:54:ad:68:1e:4d:eb:ac:19:9a:60:09: 45:af:74:02:3c:6a:d4:6a:73:64:18:26:ee:7c:2a: 59:f6:7f:88:a9:fa:39:de:13:b6:ac:39:82:76:3a: c5:0c:7a:31:00:57:96:de:01:2c:d8:5d:ee:95:79: e8:3e:70:e8:2f:a9:ff:fc:e2:89:3c:b0:80:24:ea: 0d:58:67:54:71:e9:1a:82:54:be:95:83:73:e2:57: 7b:f9:2f:1f:cf:70:4e:5c:77:0d:80:62:3f:90:31: dc:f8:3f:ca:81:1e:80:89:24:95:01:b8:ae:d7:1b: 98:57:db:7c:95:c0:5c:48:d9:59:bf:fc:34:af:38: cc:77:cf:b7:c4:45:1f:b8:60:ce:06:cd:43:ac:56: 70:6b:d8:57:08:8a:9c:17:08:d2:e6:63:d5:f8:a2: 8a:e6:7b:51:1a:3b:c8:ce:b2:59:67:e1:26:47:0c: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:15:46:E2:58:02:8B:59:A0:0B:BE:B7:2A:86:5B:BE:A5:94:E6:76 X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:45:9b:1b:03:6d:f2:bb:4c:fd:f4:8b:21:68:84:53:47:39: 32:f5:54:a7:0b:eb:90:e6:a6:59:68:e4:ed:1b:33:ae:10:7d: 42:c4:c8:94:03:a0:22:fb:0a:96:13:ea:eb:59:a7:c7:19:e3: 91:1d:cd:71:9e:d6:13:08:87:7d:00:1b:52:17:88:30:d9:5f: 0e:4d:93:ba:6b:31:f7:42:d4:53:f0:31:d2:6a:47:29:67:a3: 89:74:ea:4f:34:6b:e1:3b:0e:a5:63:a0:62:35:df:5c:09:a0: 5d:92:d3:07:2e:7f:30:f5:ab:71:fd:26:26:d0:a2:a0:68:90: cd:80:55:cf:b8:0c:53:9f:80:77:07:49:5d:b0:e0:59:ba:55: 98:95:06:c9:0f:75:aa:0c:d1:98:44:13:96:62:bf:21:e4:2a: d8:3a:ae:f3:0c:40:d1:83:05:b7:a3:b7:98:72:7a:46:2e:3a: 6d:0e:03:59:40:aa:a4:09:4b:23:b3:b1:cf:8a:bd:58:41:ab: d0:eb:87:a9:8c:19:f3:59:50:21:4c:c9:3f:f2:8f:cc:84:d6: 42:a1:e3:14:05:b3:cf:b9:c0:dc:2c:e8:6e:9e:be:54:9f:e6: 59:3a:6b:f6:69:74:de:97:41:b5:79:10:5e:c0:a5:ac:2d:62: db:ff:6e:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjQxMTIyMTk0ODMxWhcNMjQxMTI5MTk0ODMxWjAYMRYwFAYD VQQDEw02NzQwZTAxMC04NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tH7EeJ9lkOStql+eHw6qZlMoGwcmuHo9+21Lae7PyVIqvbharXwZzc/hNcr 9dsQwFklLypJav93OHCsl/wG+l+ybm4QY/1ZvJIStYcjVK1oHk3rrBmaYAlFr3QC PGrUanNkGCbufCpZ9n+Iqfo53hO2rDmCdjrFDHoxAFeW3gEs2F3ulXnoPnDoL6n/ /OKJPLCAJOoNWGdUcekaglS+lYNz4ld7+S8fz3BOXHcNgGI/kDHc+D/KgR6AiSSV Abiu1xuYV9t8lcBcSNlZv/w0rzjMd8+3xEUfuGDOBs1DrFZwa9hXCIqcFwjS5mPV +KKK5ntRGjvIzrJZZ+EmRwzMqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoVRuJY AotZoAu+tyqGW76llOZ2MB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu RWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDmRZsbA23yu0z99IshaIRTRzky9VSnC+uQ5qZZaOTtGzOuEH1CxMiU A6Ai+wqWE+rrWafHGeORHc1xntYTCId9ABtSF4gw2V8OTZO6azH3QtRT8DHSakcp Z6OJdOpPNGvhOw6lY6BiNd9cCaBdktMHLn8w9atx/SYm0KKgaJDNgFXPuAxTn4B3 B0ldsOBZulWYlQbJD3WqDNGYRBOWYr8h5CrYOq7zDEDRgwW3o7eYcnpGLjptDgNZ QKqkCUsjs7HPir1YQavQ64epjBnzWVAhTMk/8o/MhNZCoeMUBbPPucDcLOhunr5U n+ZZOmv2aXTel0G1eRBewKWsLWLb/26Z -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org