$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft File: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json) Hash identifier: 9gG/TxqGScOiGPMJe9WDyMtU1gNjhRY8l/IrQHYupIM= Subject key identifier: 80:3E:7C:70:62:84:B4:CC:C4:B9:A9:A1:A2:FF:75:94:D6:BC:47:C1 Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 Certificate issuer: /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft Manifest number: 09 Signing time: Wed 25 Dec 2024 06:13:40 +0000 Manifest this update: Wed 25 Dec 2024 06:13:39 +0000 Manifest next update: Wed 01 Jan 2025 06:13:39 +0000 Files and hashes: 1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: fGtBJijqeu6AZa13PB+V0A5BsStX955MYHtUEZm2x3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jan 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29 Validity Not Before: Dec 25 06:13:39 2024 GMT Not After : Jan 1 06:13:39 2025 GMT Subject: CN=676ba293-946a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d4:c2:bf:a4:de:ab:12:24:8d:67:45:5a:23: c0:6b:ab:c4:8f:1b:ce:75:e2:1a:ef:bb:17:3f:18: e1:38:07:26:0c:c2:76:74:73:8a:4b:b1:92:27:57: 62:97:ae:18:a9:ad:ca:9c:c6:60:dd:56:29:94:6d: b3:61:5c:74:ae:14:e2:98:c8:65:6a:61:ea:61:fa: dd:04:77:89:f1:0b:e1:9b:fe:20:7b:bf:12:73:c6: 48:8e:4d:d3:c7:60:bf:6e:b0:4e:de:fd:08:09:96: f4:3f:94:eb:ba:44:30:4d:a7:a1:59:c9:af:e6:a6: 4d:3c:13:3e:c0:53:71:cd:0f:1b:5a:e9:ef:70:c6: f8:5a:96:e9:a8:62:38:8f:b0:4e:88:8d:22:ff:18: 50:4a:ff:09:ee:fb:a6:9f:c8:bf:fe:1e:c0:9d:65: 51:67:91:40:22:c0:64:9b:a8:f6:01:92:a9:30:13: ee:17:4e:84:c2:64:ca:01:f1:f3:7f:30:04:cb:ea: f1:1d:27:54:26:a4:d4:b2:a0:86:99:49:40:94:bc: c5:4e:1d:98:da:97:16:10:4e:10:ef:2a:68:30:1d: 7e:22:2d:65:5e:08:5a:ef:b1:3b:1b:15:1c:22:cb: 05:36:53:38:5a:6e:d0:5d:6a:23:5e:f8:39:f4:d2: bd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3E:7C:70:62:84:B4:CC:C4:B9:A9:A1:A2:FF:75:94:D6:BC:47:C1 X509v3 Authority Key Identifier: keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ab:3b:56:76:ce:07:a2:76:4b:b8:4e:89:76:9b:f7:bb:28: 51:ac:a8:d1:a0:e9:2d:0d:9f:06:ab:ed:a8:2a:ab:49:3b:57: f1:5d:a4:85:b5:51:7f:03:b6:67:d2:66:0a:a9:3b:a3:2d:2a: f0:56:eb:bd:cd:9d:ca:3d:14:ac:3d:8f:97:f6:ee:86:f9:72: 31:11:9b:f8:46:8f:72:11:e6:68:4a:65:03:1c:89:ac:38:49: fc:eb:1e:ea:5f:ea:10:4d:8f:76:95:c6:b4:61:e1:71:74:91: 4a:67:13:69:78:ce:b1:21:37:06:5c:e5:3d:1f:97:80:c9:80: 39:65:19:b1:a4:3f:e3:3c:32:62:f3:f9:86:2a:70:3b:3c:3f: 2d:35:b0:e7:d1:cd:c9:8b:48:92:2c:02:5f:85:b4:19:03:78: 20:1b:52:32:0c:6a:ea:d0:c7:b9:9a:11:86:3d:71:ec:60:98: 6c:94:ac:df:d8:7a:3b:c9:c0:c8:7f:b2:3d:c6:cb:cf:cd:35: bd:52:b2:17:06:d8:3b:41:ad:cb:66:45:27:e5:8b:09:6f:76: a9:18:28:2d:16:d9:c6:fc:36:c0:bc:ef:0f:64:a3:1c:42:c6: a3:31:bf:02:1f:20:e4:e2:bd:be:5d:67:c3:78:0f:ab:75:04: cb:d2:d3:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTkzRTExMC8GA1UEBRMoRTBBQjZEOTc3MjY1REIwRDVDNThENDMzQTI4QjNDQzIw NTFBMEMyOTAeFw0yNDEyMjUwNjEzMzlaFw0yNTAxMDEwNjEzMzlaMBgxFjAUBgNV BAMTDTY3NmJhMjkzLTk0NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDh1MK/pN6rEiSNZ0VaI8Brq8SPG8514hrvuxc/GOE4ByYMwnZ0c4pLsZInV2KX rhiprcqcxmDdVimUbbNhXHSuFOKYyGVqYeph+t0Ed4nxC+Gb/iB7vxJzxkiOTdPH YL9usE7e/QgJlvQ/lOu6RDBNp6FZya/mpk08Ez7AU3HNDxta6e9wxvhalumoYjiP sE6IjSL/GFBK/wnu+6afyL/+HsCdZVFnkUAiwGSbqPYBkqkwE+4XToTCZMoB8fN/ MATL6vEdJ1QmpNSyoIaZSUCUvMVOHZjalxYQThDvKmgwHX4iLWVeCFrvsTsbFRwi ywU2UzhabtBdaiNe+Dn00r3rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgD58cGKE tMzEuamhov91lNa8R8EwHwYDVR0jBBgwFoAU4Kttl3Jl2w1cWNQzoos8wgUaDCkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBOTNFLzQ3MUIzNzI4Qjc5 QTExRUY4RUM0OTk1MUM0RjlBRTAyLzRLdHRsM0psMncxY1dOUXpvb3M4d2dVYURD ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNEt0dGwzSmwydzFjV05Rem9vczh3Z1VhRENrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB OTNFLzQ3MUIzNzI4Qjc5QTExRUY4RUM0OTk1MUM0RjlBRTAyLzRLdHRsM0psMncx Y1dOUXpvb3M4d2dVYURDay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHKrO1Z2zgeidku4Tol2m/e7KFGsqNGg6S0Nnwar7agqq0k7V/FdpIW1 UX8DtmfSZgqpO6MtKvBW673Nnco9FKw9j5f27ob5cjERm/hGj3IR5mhKZQMciaw4 SfzrHupf6hBNj3aVxrRh4XF0kUpnE2l4zrEhNwZc5T0fl4DJgDllGbGkP+M8MmLz +YYqcDs8Py01sOfRzcmLSJIsAl+FtBkDeCAbUjIMaurQx7maEYY9cexgmGyUrN/Y ejvJwMh/sj3Gy8/NNb1SshcG2DtBrctmRSfliwlvdqkYKC0W2cb8NsC87w9koxxC xqMxvwIfIOTivb5dZ8N4D6t1BMvS08M= -----END CERTIFICATE-----Generated at Wed Dec 25 08:01:20 2024 by rpki-client on console-fra.rpki-client.org