$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: KJFjZ5H95sPtcK9ksy2IydoB+UvFe1WVTHHTaK9kzds= Subject key identifier: A2:69:10:EB:46:D4:89:F3:22:0C:C1:86:13:07:D4:22:0B:FD:B3:43 Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: D9 Signing time: Sat 23 Nov 2024 03:40:17 +0000 Manifest this update: Sat 23 Nov 2024 03:40:16 +0000 Manifest next update: Sat 30 Nov 2024 03:40:16 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: WFuVY3/LHaUP44Yq51HMxqB4DOL+lK4TJ7T5n+b/2TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: Nov 23 03:40:16 2024 GMT Not After : Nov 30 03:40:16 2024 GMT Subject: CN=67414ea1-2574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cf:e4:8e:fc:7f:3e:7c:10:a0:1a:7e:d5:9f: 1f:67:64:d8:ec:58:14:30:c7:c0:8a:40:b8:ea:e9: 17:3c:e7:db:54:e9:42:99:a6:21:9d:71:62:48:69: 2d:8f:c9:1d:33:4d:81:c9:86:ed:a4:45:00:43:ca: 5b:5c:33:6e:62:2d:df:74:aa:d9:d0:3e:4c:fa:05: 77:64:ca:16:c8:0b:b0:6e:f3:a1:7b:91:be:40:fb: d0:8f:13:bd:37:1e:9d:e5:43:70:3e:33:77:13:c9: a2:0e:35:58:dc:00:2b:53:07:7e:c1:05:4f:ab:cd: 77:da:7a:fd:d4:20:ac:ab:e5:6e:32:aa:60:34:e5: d7:3a:8f:fa:d6:47:54:85:88:44:64:45:4d:76:aa: 90:18:28:d6:2b:d2:fb:09:be:16:90:bc:f4:bb:31: af:48:01:bb:aa:27:43:0a:37:18:69:2e:11:68:28: 21:7c:85:62:0a:0d:6f:22:96:94:0e:49:4c:e7:96: 81:8c:45:b8:df:2f:66:c9:ec:7b:6f:92:ec:5c:57: 1f:54:bc:34:e8:e2:05:b8:41:4e:4e:a6:87:cc:d5: 65:b8:86:04:93:51:84:c0:9c:d4:34:08:4b:83:50: 72:70:a2:77:57:82:9a:be:a3:29:50:77:f3:01:f7: 01:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:69:10:EB:46:D4:89:F3:22:0C:C1:86:13:07:D4:22:0B:FD:B3:43 X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:34:ac:d7:50:d9:90:af:d9:3d:2a:54:0b:a7:75:ec:ba:3d: 57:57:f4:ee:ce:39:5d:2a:b2:e8:42:19:c9:ae:10:1c:10:67: a8:ae:a8:7e:a3:bb:31:d9:03:4b:66:f9:9b:83:5a:48:ab:81: 84:7d:c7:ce:8a:51:20:ca:db:ce:20:03:ac:36:6c:b4:0c:2d: 60:ad:85:85:f7:c0:16:cc:4e:11:5a:7b:19:6a:80:9f:c3:7a: bc:93:8f:f3:e7:31:c8:7d:5e:37:89:f9:0f:e1:94:b6:49:48: ee:b0:9d:7f:7e:11:f7:bf:05:dc:66:50:f5:03:d1:1c:08:c5: 63:ca:53:35:77:0e:69:b4:d3:b4:92:5d:e2:97:52:4d:33:48: 4c:5e:52:9f:a6:52:9c:0a:d7:ff:1d:3f:97:87:51:96:d3:4a: f3:bb:e2:b6:6b:80:ef:43:eb:71:25:93:6d:94:32:3d:f5:04: 82:71:97:61:1f:0f:6a:e7:45:10:1a:23:0f:e3:b8:62:71:2f: 42:46:50:c6:35:d9:1e:3c:1a:57:91:78:19:d6:1d:fa:a8:df: 25:9a:fc:14:bf:ff:88:dc:81:99:a3:43:7d:35:3b:f3:b5:1c: 95:82:6f:d4:36:b9:0c:bd:8e:91:68:e0:4d:04:68:97:f5:65: c0:ce:b1:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjQxMTIzMDM0MDE2WhcNMjQxMTMwMDM0MDE2WjAYMRYwFAYD VQQDEw02NzQxNGVhMS0yNTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA78/kjvx/PnwQoBp+1Z8fZ2TY7FgUMMfAikC46ukXPOfbVOlCmaYhnXFiSGkt j8kdM02ByYbtpEUAQ8pbXDNuYi3fdKrZ0D5M+gV3ZMoWyAuwbvOhe5G+QPvQjxO9 Nx6d5UNwPjN3E8miDjVY3AArUwd+wQVPq8132nr91CCsq+VuMqpgNOXXOo/61kdU hYhEZEVNdqqQGCjWK9L7Cb4WkLz0uzGvSAG7qidDCjcYaS4RaCghfIViCg1vIpaU DklM55aBjEW43y9myex7b5LsXFcfVLw06OIFuEFOTqaHzNVluIYEk1GEwJzUNAhL g1BycKJ3V4KavqMpUHfzAfcBhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJpEOtG 1InzIgzBhhMH1CIL/bNDMB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6NKzXUNmQr9k9KlQLp3Xsuj1XV/TuzjldKrLoQhnJrhAcEGeorqh+ o7sx2QNLZvmbg1pIq4GEfcfOilEgytvOIAOsNmy0DC1grYWF98AWzE4RWnsZaoCf w3q8k4/z5zHIfV43ifkP4ZS2SUjusJ1/fhH3vwXcZlD1A9EcCMVjylM1dw5ptNO0 kl3il1JNM0hMXlKfplKcCtf/HT+Xh1GW00rzu+K2a4DvQ+txJZNtlDI99QSCcZdh Hw9q50UQGiMP47hicS9CRlDGNdkePBpXkXgZ1h36qN8lmvwUv/+I3IGZo0N9NTvz tRyVgm/UNrkMvY6RaOBNBGiX9WXAzrF/ -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org