$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft File: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft (raw, json) Hash identifier: cNpAZK72qjCE1Oin6cw5R7g7GztyC66l0Z3Hwb20a4E= Subject key identifier: C6:F2:F7:B3:DC:D3:49:9C:01:C5:0A:0A:12:16:D0:49:3A:B4:6C:E4 Authority key identifier: E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 Certificate issuer: /CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft Manifest number: 09 Signing time: Wed 23 Oct 2024 06:48:58 +0000 Manifest this update: Wed 23 Oct 2024 06:48:57 +0000 Manifest next update: Wed 30 Oct 2024 06:48:57 +0000 Files and hashes: 1: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl (hash: w1iTPhJ81U0bNipCtjqN3DYRicM1y6cXkC1+YtZd1eY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Validity Not Before: Oct 23 06:48:57 2024 GMT Not After : Oct 30 06:48:57 2024 GMT Subject: CN=67189c5a-be43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:6e:b1:70:8d:c9:d4:a7:50:44:82:b5:fb: 0a:5f:1d:e1:a4:fb:32:3a:e2:d6:2d:14:ad:13:c3: 02:8b:02:6f:57:74:10:c6:86:ed:9c:44:26:79:11: c1:26:96:da:84:75:37:ed:6c:60:37:52:3a:ad:f5: 93:8a:08:0d:db:67:eb:ee:de:ff:45:e5:68:21:82: f1:1a:51:0b:c3:94:5a:dd:76:82:67:3c:ee:14:10: f8:96:42:2c:90:a0:0b:8a:71:ca:a8:cf:bf:db:87: 35:b9:33:8b:eb:66:3e:c2:1b:3d:4d:b1:ec:30:47: 19:ae:d6:aa:c3:c8:ef:ad:69:37:26:ea:91:c1:69: e1:1d:bc:42:9a:ae:11:4b:90:b6:4f:cd:0e:8e:9b: 0a:9d:0a:da:6d:25:11:4a:4b:e8:78:6f:60:08:bd: c5:76:11:76:dd:f8:4e:8a:ab:47:b3:a9:3b:d9:5a: 80:3d:3e:34:bd:af:38:80:04:16:16:2c:0a:38:76: 1c:b5:62:e6:bb:a7:1d:b8:b9:03:ad:c2:fa:b1:86: f8:a0:dd:6f:7f:7a:00:06:d0:97:26:d3:a6:9c:31: 97:5d:4c:c0:0e:05:9b:ea:47:cf:1c:0b:f7:97:59: 08:ec:b4:1c:76:ad:a4:cf:63:ec:03:d7:d1:93:ac: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F2:F7:B3:DC:D3:49:9C:01:C5:0A:0A:12:16:D0:49:3A:B4:6C:E4 X509v3 Authority Key Identifier: keyid:E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:db:a6:32:5c:c9:57:99:de:44:88:1f:34:d5:68:fe:3a:50: 13:83:0f:43:13:20:f7:72:80:75:33:ac:d0:fa:e4:b9:87:cf: ff:ae:77:97:ab:42:41:75:e4:d2:9a:28:68:5d:74:b8:0a:33: 6e:e2:98:28:09:0f:fe:c1:00:8c:7a:19:ad:6a:a3:95:bf:9d: 7e:f7:a1:1f:7c:db:7c:78:f5:4d:9c:69:98:3f:d5:b3:66:af: 7c:8e:97:fa:bc:f6:80:b3:e4:3d:ed:08:67:9b:a2:3e:e6:e1: 42:55:79:e7:29:9d:8b:f8:1c:15:08:85:df:85:61:0e:fd:ae: 94:87:58:f4:2f:29:84:ae:12:07:c7:db:e7:22:f8:b1:4b:de: 53:0f:19:fb:2c:4a:b3:7d:aa:d1:5d:3b:62:99:8b:58:8f:28: 3e:2b:93:f5:11:1c:f6:5e:39:c0:8f:44:c2:ef:de:c0:23:b0: 10:1c:ef:7a:98:4d:52:8a:f5:06:7c:94:81:d7:5c:f4:85:c9: 6a:ec:58:e4:16:02:34:63:0e:c5:45:1f:af:b1:2f:d0:95:9a: ed:b0:90:13:cb:80:19:a3:4a:1f:94:14:a4:0a:d3:39:9e:5c: 44:b3:71:d0:1d:81:75:22:f1:b6:1b:43:1e:e9:61:a2:f3:bd: f7:03:b4:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjYzMzExMC8GA1UEBRMoRTYwRTIxNDFENzFEQjlGQzg5RkFCRkI1RkRBRDAzNzJE RkEzMzdEMDAeFw0yNDEwMjMwNjQ4NTdaFw0yNDEwMzAwNjQ4NTdaMBgxFjAUBgNV BAMTDTY3MTg5YzVhLWJlNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVgG6xcI3J1KdQRIK1+wpfHeGk+zI64tYtFK0TwwKLAm9XdBDGhu2cRCZ5EcEm ltqEdTftbGA3Ujqt9ZOKCA3bZ+vu3v9F5WghgvEaUQvDlFrddoJnPO4UEPiWQiyQ oAuKccqoz7/bhzW5M4vrZj7CGz1NsewwRxmu1qrDyO+taTcm6pHBaeEdvEKarhFL kLZPzQ6OmwqdCtptJRFKS+h4b2AIvcV2EXbd+E6Kq0ezqTvZWoA9PjS9rziABBYW LAo4dhy1Yua7px24uQOtwvqxhvig3W9/egAG0Jcm06acMZddTMAOBZvqR88cC/eX WQjstBx2raTPY+wD19GTrMxnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxvL3s9zT SZwBxQoKEhbQSTq0bOQwHwYDVR0jBBgwFoAU5g4hQdcdufyJ+r+1/a0Dct+jN9Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNjMzL0Q5MTY1RUJBODZE OTExRUY4QjhCRUIxRkM0RjlBRTAyLzVnNGhRZGNkdWZ5Si1yLTFfYTBEY3Qtak45 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNWc0aFFkY2R1ZnlKLXItMV9hMERjdC1qTjlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NjMzL0Q5MTY1RUJBODZEOTExRUY4QjhCRUIxRkM0RjlBRTAyLzVnNGhRZGNkdWZ5 Si1yLTFfYTBEY3Qtak45QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKbbpjJcyVeZ3kSIHzTVaP46UBODD0MTIPdygHUzrND65LmHz/+ud5er QkF15NKaKGhddLgKM27imCgJD/7BAIx6Ga1qo5W/nX73oR9823x49U2caZg/1bNm r3yOl/q89oCz5D3tCGeboj7m4UJVeecpnYv4HBUIhd+FYQ79rpSHWPQvKYSuEgfH 2+ci+LFL3lMPGfssSrN9qtFdO2KZi1iPKD4rk/URHPZeOcCPRMLv3sAjsBAc73qY TVKK9QZ8lIHXXPSFyWrsWOQWAjRjDsVFH6+xL9CVmu2wkBPLgBmjSh+UFKQK0zme XESzcdAdgXUi8bYbQx7pYaLzvfcDtMU= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:55 2024 by rpki-client on console-ams.rpki-client.org