$ rpki-client -vvf rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft File: n9G-cXTisFCTO8GixenIZUcWBfI.mft (raw, json) Hash identifier: jXJFR6QVSXXmKhc7aisoUpVuQgaHuu7D7fr+m9dSdrc= Subject key identifier: 15:6C:A9:6F:60:37:27:24:CD:E6:28:6A:91:81:BA:89:8C:EB:D3:34 Authority key identifier: 9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 Certificate issuer: /CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Certificate serial: 070D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft Manifest number: 0708 Signing time: Fri 22 Nov 2024 21:25:42 +0000 Manifest this update: Fri 22 Nov 2024 21:25:41 +0000 Manifest next update: Fri 29 Nov 2024 21:25:41 +0000 Files and hashes: 1: n9G-cXTisFCTO8GixenIZUcWBfI.crl (hash: noPBFKOHOYBbg6XPHXX6Y3iMlFQAKKKfmzqxNXAE8AE=) 2: 1C9AC81A1B5411EB99C9EE6DC4F9AE02.roa (hash: sPnbljaDBmWrfqdfFlvNku+IoDBHr9vsXcs9cIAu9pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189599/serialNumber=9FD1BE7174E2B050933BC1A2C5E9C865471605F2 Validity Not Before: Nov 22 21:25:41 2024 GMT Not After : Nov 29 21:25:41 2024 GMT Subject: CN=6740f6d5-4981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:4d:bb:1e:ef:2b:e2:dd:0c:37:55:dd:40: 6b:af:11:87:87:ca:55:59:e9:68:5e:f3:30:44:ee: ae:84:5d:0f:0f:f0:f2:66:62:41:a9:19:53:8f:ec: 40:d1:e4:5f:d5:f9:04:25:de:ca:ee:1d:68:6e:bf: b3:63:99:7b:99:23:c1:63:6e:bd:2b:f3:1b:5e:e0: 17:12:e9:32:c0:c1:58:fe:36:de:73:de:c9:72:11: 91:39:91:41:eb:9c:5b:25:35:53:f6:d3:0f:c7:27: f6:3e:a1:f0:6d:fa:0b:e0:77:56:eb:b0:21:e6:39: 11:5d:6a:b3:da:dd:10:6d:61:9e:7d:dc:bd:3b:b1: 6f:69:e0:85:e7:77:78:bc:ed:7a:f8:4d:cc:02:66: 47:50:af:c0:95:d9:98:5f:fd:66:0f:07:3c:b3:9f: d7:bd:a7:dd:86:0e:b8:a4:a7:c4:d5:f1:08:c1:b2: b0:af:5c:30:e0:b7:d6:a3:d0:54:74:bb:aa:8b:41: 16:ae:b6:5d:15:d6:f5:51:6c:c1:02:c6:07:dc:6f: 7a:8f:08:3a:86:e1:a6:55:f1:15:46:3c:4a:6b:5f: da:65:07:43:2f:4d:0b:3f:0a:18:a4:af:db:fe:e5: 67:bf:a3:48:fd:e4:71:2b:58:d0:39:aa:37:68:42: 75:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6C:A9:6F:60:37:27:24:CD:E6:28:6A:91:81:BA:89:8C:EB:D3:34 X509v3 Authority Key Identifier: keyid:9F:D1:BE:71:74:E2:B0:50:93:3B:C1:A2:C5:E9:C8:65:47:16:05:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9G-cXTisFCTO8GixenIZUcWBfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189599/74B3B8561B5211EBB6489A69C4F9AE02/n9G-cXTisFCTO8GixenIZUcWBfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:70:d0:1b:48:4e:63:35:26:10:48:ba:e0:30:f4:b1:3c:ba: 5b:36:50:11:d8:20:6d:1b:17:79:8f:9d:77:9a:c2:bb:5d:03: 81:57:49:6d:de:56:e6:5a:be:0e:58:ca:bd:05:2a:ec:ab:73: f2:3f:50:31:94:28:5a:af:fd:d8:0a:71:71:32:2f:b7:18:6d: 8d:8e:df:df:23:3e:04:df:bc:67:dc:af:d6:14:1f:d0:96:0e: bf:5c:81:43:72:2b:2d:d7:ac:bb:7c:71:ec:37:0c:ab:2a:41: f1:fd:ba:4a:de:01:99:4b:f1:ce:21:97:58:c2:a9:15:4e:b3: ab:67:f5:db:f0:c2:a0:08:c5:19:1c:3f:58:6e:ff:38:00:d6: 8b:5f:7d:d3:d7:66:33:74:32:95:c9:88:55:84:b7:8c:86:53: 4c:03:ae:03:a2:5c:32:a9:e4:a9:70:f8:ee:b1:c4:35:04:6c: 6b:e2:e4:71:f9:53:07:b1:a4:bc:bc:a0:fa:64:e5:4b:86:60: 3b:ff:59:af:93:57:b2:ac:50:3f:13:f9:29:c4:12:25:92:3b: 56:07:ec:cf:cb:c6:6d:4e:1a:95:b5:d9:69:ce:16:b9:e5:28: ad:8a:16:88:85:d3:65:6a:fc:4c:13:26:73:55:38:73:f0:b2: 96:b0:ce:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1OTkxMTAvBgNVBAUTKDlGRDFCRTcxNzRFMkIwNTA5MzNCQzFBMkM1RTlDODY1 NDcxNjA1RjIwHhcNMjQxMTIyMjEyNTQxWhcNMjQxMTI5MjEyNTQxWjAYMRYwFAYD VQQDEw02NzQwZjZkNS00OTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMpNux7vK+LdDDdV3UBrrxGHh8pVWeloXvMwRO6uhF0PD/DyZmJBqRlTj+xA 0eRf1fkEJd7K7h1obr+zY5l7mSPBY269K/MbXuAXEukywMFY/jbec97JchGROZFB 65xbJTVT9tMPxyf2PqHwbfoL4HdW67Ah5jkRXWqz2t0QbWGefdy9O7FvaeCF53d4 vO16+E3MAmZHUK/AldmYX/1mDwc8s5/Xvafdhg64pKfE1fEIwbKwr1ww4LfWo9BU dLuqi0EWrrZdFdb1UWzBAsYH3G96jwg6huGmVfEVRjxKa1/aZQdDL00LPwoYpK/b /uVnv6NI/eRxK1jQOao3aEJ1uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVsqW9g NyckzeYoapGBuomM69M0MB8GA1UdIwQYMBaAFJ/RvnF04rBQkzvBosXpyGVHFgXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTU5OS83NEIzQjg1NjFC NTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNGQ1RPOEdpeGVuSVpVY1dC ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL245Ry1jWFRpc0ZDVE84R2l4ZW5JWlVjV0JmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTU5OS83NEIzQjg1NjFCNTIxMUVCQjY0ODlBNjlDNEY5QUUwMi9uOUctY1hUaXNG Q1RPOEdpeGVuSVpVY1dCZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQcNAbSE5jNSYQSLrgMPSxPLpbNlAR2CBtGxd5j513msK7XQOBV0lt 3lbmWr4OWMq9BSrsq3PyP1AxlChar/3YCnFxMi+3GG2Njt/fIz4E37xn3K/WFB/Q lg6/XIFDcist16y7fHHsNwyrKkHx/bpK3gGZS/HOIZdYwqkVTrOrZ/Xb8MKgCMUZ HD9Ybv84ANaLX33T12YzdDKVyYhVhLeMhlNMA64DolwyqeSpcPjuscQ1BGxr4uRx +VMHsaS8vKD6ZOVLhmA7/1mvk1eyrFA/E/kpxBIlkjtWB+zPy8ZtThqVtdlpzha5 5SitihaIhdNlavxMEyZzVThz8LKWsM6w -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org