$ rpki-client -vvf rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft File: 9h-6phkp0QD6mdvUgM6MLE7nP_E.mft (raw, json) Hash identifier: Cs8TswRQX5QwaR/rzWF8Z5w4SO2EHZj2NS3KQ6YkoQo= Subject key identifier: 6E:29:46:68:C2:F3:4A:CF:8D:00:B0:2E:BF:08:C3:66:A1:8E:59:36 Authority key identifier: F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1 Certificate issuer: /CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1 Certificate serial: 0A57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft Manifest number: 0A49 Signing time: Wed 20 Nov 2024 19:27:33 +0000 Manifest this update: Wed 20 Nov 2024 19:27:33 +0000 Manifest next update: Wed 27 Nov 2024 19:27:33 +0000 Files and hashes: 1: 9h-6phkp0QD6mdvUgM6MLE7nP_E.crl (hash: XWW3EfMv5ltuXI7JcJvv4Ac/RkjOb6ih8UyaPplMdCs=) 2: FDF734905C9D11EA91DB3C7CC4F9AE02.roa (hash: vXdhueOKeH2L+EhcuXNxIR6NEBaIJ+rO+WquQADkcYg=) 3: 8DB89FC2572311EA9D4ED562C4F9AE02.roa (hash: uIlmxyBkIRVTtfqtlVJMMghD2D4RDYW/jdv8jycrnJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2647 (0xa57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EAFB/serialNumber=F61FBAA61929D100FA99DBD480CE8C2C4EE73FF1 Validity Not Before: Nov 20 19:27:33 2024 GMT Not After : Nov 27 19:27:33 2024 GMT Subject: CN=673e3825-1a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e4:fc:f2:12:cb:d3:01:6f:66:6e:9a:26:7d: d1:ec:1e:ea:53:59:5b:35:bf:33:39:16:2e:76:43: cc:7a:53:33:79:e3:5b:ae:f0:d5:85:34:86:46:0d: 45:c4:bf:f7:a2:e5:50:38:50:32:2b:87:2b:ef:81: 0c:2d:ec:9e:cb:67:cd:5f:6a:c5:7c:91:7a:2a:ee: 01:95:6d:fe:d5:8a:3e:e3:11:3c:c7:f0:8a:5e:d8: 21:18:c5:7a:e9:65:30:cf:f7:55:7f:73:60:2a:9b: ab:be:fc:bf:a3:7f:54:fb:57:7e:26:44:1c:30:a0: cf:76:58:51:48:19:ee:bf:70:42:09:aa:2b:03:bd: e7:ba:b6:08:94:c7:9e:c3:8e:a3:59:0d:f0:46:79: fa:b8:99:21:0e:98:b3:e2:47:12:e1:d5:a3:02:cf: d7:b5:df:bc:94:33:6a:e7:10:c1:b8:fa:f0:f7:03: a6:80:fd:70:4a:4a:35:a5:3c:7d:6f:5b:f5:ff:bf: c8:b6:7e:48:94:4a:0e:ae:90:8a:29:91:a2:bc:69: 7d:a3:07:b5:7e:46:d8:e7:32:76:d0:83:3d:ca:dd: 39:90:84:f3:04:84:fc:f8:57:da:9d:df:12:dd:09: ee:b0:61:6f:11:b3:8d:d7:83:2b:1d:b5:10:fc:d2: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:29:46:68:C2:F3:4A:CF:8D:00:B0:2E:BF:08:C3:66:A1:8E:59:36 X509v3 Authority Key Identifier: keyid:F6:1F:BA:A6:19:29:D1:00:FA:99:DB:D4:80:CE:8C:2C:4E:E7:3F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h-6phkp0QD6mdvUgM6MLE7nP_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EAFB/094F746E54F711EA838FA84FC4F9AE02/9h-6phkp0QD6mdvUgM6MLE7nP_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ef:5b:9c:8a:b9:1c:a6:8a:3a:22:d0:ac:36:ef:80:bf:4e: e0:63:4a:1a:30:4e:68:b7:90:ae:09:49:dd:89:8f:99:fa:a5: 5e:01:76:06:ed:e5:29:08:c1:41:c9:d1:49:9c:f0:a7:05:71: 93:c1:19:50:0d:30:b8:0c:6d:6d:5a:91:48:8e:83:a5:22:3b: be:fe:d2:4a:62:cc:bf:a7:f1:1e:8d:ab:cf:36:2d:0b:1c:73: d2:d9:62:10:90:83:51:ba:39:bf:07:13:c9:99:ed:f7:f9:fc: 84:aa:95:c2:6a:c4:c1:8f:30:d7:c0:fa:c7:88:81:f5:02:fc: e9:da:fa:89:63:06:27:58:e6:47:f5:83:96:ae:30:79:c1:99: e3:55:b7:04:1c:ef:4d:0d:67:81:b9:8b:1f:47:a8:4d:c4:bb: a2:b9:b0:3b:1b:a6:b1:61:34:0e:04:19:9a:f2:5b:b1:22:20: 0e:de:92:01:52:66:68:f5:40:69:2c:31:7e:3f:39:82:c2:14: 18:a1:1d:45:6a:a5:35:86:3c:9c:ed:f6:a5:0b:42:ba:1c:1e: b7:fa:2b:aa:69:1f:1f:62:3b:7d:8b:99:bb:52:6d:95:bf:4a: 8f:40:1d:8c:51:fd:4b:6f:bf:f0:25:ff:c8:41:a0:69:f3:55: 10:69:c2:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVBRkIxMTAvBgNVBAUTKEY2MUZCQUE2MTkyOUQxMDBGQTk5REJENDgwQ0U4QzJD NEVFNzNGRjEwHhcNMjQxMTIwMTkyNzMzWhcNMjQxMTI3MTkyNzMzWjAYMRYwFAYD VQQDEw02NzNlMzgyNS0xYTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OT88hLL0wFvZm6aJn3R7B7qU1lbNb8zORYudkPMelMzeeNbrvDVhTSGRg1F xL/3ouVQOFAyK4cr74EMLeyey2fNX2rFfJF6Ku4BlW3+1Yo+4xE8x/CKXtghGMV6 6WUwz/dVf3NgKpurvvy/o39U+1d+JkQcMKDPdlhRSBnuv3BCCaorA73nurYIlMee w46jWQ3wRnn6uJkhDpiz4kcS4dWjAs/Xtd+8lDNq5xDBuPrw9wOmgP1wSko1pTx9 b1v1/7/Itn5IlEoOrpCKKZGivGl9owe1fkbY5zJ20IM9yt05kITzBIT8+Ffand8S 3QnusGFvEbON14MrHbUQ/NJ05QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4pRmjC 80rPjQCwLr8Iw2ahjlk2MB8GA1UdIwQYMBaAFPYfuqYZKdEA+pnb1IDOjCxO5z/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUFGQi8wOTRGNzQ2RTU0 RjcxMUVBODM4RkE4NEZDNEY5QUUwMi85aC02cGhrcDBRRDZtZHZVZ002TUxFN25Q X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloLTZwaGtwMFFENm1kdlVnTTZNTEU3blBfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUFGQi8wOTRGNzQ2RTU0RjcxMUVBODM4RkE4NEZDNEY5QUUwMi85aC02cGhrcDBR RDZtZHZVZ002TUxFN25QX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn71ucirkcpoo6ItCsNu+Av07gY0oaME5ot5CuCUndiY+Z+qVeAXYG 7eUpCMFBydFJnPCnBXGTwRlQDTC4DG1tWpFIjoOlIju+/tJKYsy/p/EejavPNi0L HHPS2WIQkINRujm/BxPJme33+fyEqpXCasTBjzDXwPrHiIH1Avzp2vqJYwYnWOZH 9YOWrjB5wZnjVbcEHO9NDWeBuYsfR6hNxLuiubA7G6axYTQOBBma8luxIiAO3pIB UmZo9UBpLDF+PzmCwhQYoR1FaqU1hjyc7falC0K6HB63+iuqaR8fYjt9i5m7Um2V v0qPQB2MUf1Lb7/wJf/IQaBp81UQacKl -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:42 2024 by rpki-client on console-fra.rpki-client.org