$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: /px0VVT00r7SRkyZXqgnFx4yThg9LFwY07fR6NCWuKM= Subject key identifier: AD:B4:20:0C:2E:70:2A:CE:D7:7D:4D:85:A2:0B:F4:82:90:B8:84:B6 Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: A7 Signing time: Thu 21 Nov 2024 04:19:48 +0000 Manifest this update: Thu 21 Nov 2024 04:19:47 +0000 Manifest next update: Thu 28 Nov 2024 04:19:47 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: s+uoeicz1z6CxgmlZfJzT1AARpx45KdOp3pDrz39O04=) 2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: avXsfjELw9kpDvws2JPtdoH0HM/yAF3dKj0UAvRbtj0=) 3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: EikgtLBFZ+GcMX0vibVaRvnZCJfkspVWoQB1eoPQJJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: Nov 21 04:19:47 2024 GMT Not After : Nov 28 04:19:47 2024 GMT Subject: CN=673eb4e3-4bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:2d:04:c0:d8:42:23:c8:1d:6b:12:bb:0a: 94:2f:34:69:ec:1a:55:7e:bf:d4:f6:95:23:13:91: 09:54:90:e0:0d:8f:27:13:96:6a:11:aa:67:5f:0e: c4:d0:74:ed:6b:93:d9:f8:a5:96:09:cd:35:ec:6e: 3f:9c:de:59:3f:92:11:e1:27:85:1a:30:8c:87:5f: a4:be:1b:0f:2f:32:92:bf:fa:ac:6a:3b:f9:db:f0: cc:a7:e8:9a:2b:73:22:d8:a6:27:e9:4b:89:91:32: e1:1c:15:b9:6d:aa:43:6e:b4:c3:a7:04:56:b3:89: 7b:3d:96:d7:d7:9b:43:6f:0d:8e:de:c3:70:1c:43: ad:b4:06:c4:a4:e9:69:cc:38:27:20:37:16:a3:37: 6e:ca:74:37:0d:98:e7:23:19:14:1e:28:a8:d0:14: 14:44:3d:93:02:44:91:90:51:3a:6a:15:91:1d:69: c8:f7:03:8d:fd:85:06:e0:9f:18:21:aa:2d:d4:18: f1:3c:35:dd:ac:fd:55:48:3a:86:e0:41:63:98:40: c3:aa:6e:f3:ed:bf:17:0e:b7:22:44:d6:09:9c:2e: b0:e0:29:3b:44:73:d4:ef:7c:01:67:a0:bb:f8:c2: 11:33:eb:d7:c4:9a:6a:2d:39:68:92:29:22:a1:42: 09:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B4:20:0C:2E:70:2A:CE:D7:7D:4D:85:A2:0B:F4:82:90:B8:84:B6 X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ec:75:78:04:31:f4:9b:23:4c:4d:65:3d:6c:57:14:f4:79: 8d:fa:52:e0:92:5f:7e:3b:78:90:e1:0a:08:b5:70:0c:34:70: 6a:95:0a:8d:f6:90:15:78:a3:a2:66:67:90:b8:08:57:a2:cf: 14:64:f6:c1:9b:a7:40:df:84:5e:c4:89:cc:44:81:91:10:42: cc:36:b9:0e:87:a9:b5:27:78:e1:a9:85:5a:96:04:ed:56:69: 13:93:10:79:bc:84:77:e8:31:01:ae:19:40:96:9d:97:59:ac: 60:dc:17:c4:01:bd:ae:b4:11:e6:98:a7:5c:aa:44:44:f4:23: cb:c5:82:74:5b:95:c8:6f:ed:2a:11:4c:4e:04:a1:62:a2:67: ac:cf:af:e8:b6:f1:b3:b6:33:8e:ae:5b:03:ad:f5:0e:65:c8: 8d:ed:40:d8:0f:4f:6b:21:45:cb:39:bd:6f:7d:66:94:9c:16: 21:dd:38:7b:e3:a2:49:9b:64:d4:d3:9a:4f:08:25:eb:0d:0f: 27:53:6c:eb:8c:0b:d4:dc:c9:2a:3c:f2:91:b3:71:d9:cd:cb: d7:86:7d:63:ee:ee:2a:f5:94:4a:96:c6:92:b6:0c:24:18:3d: 4d:32:b0:e0:ee:16:4f:2e:26:9b:db:64:cc:29:e4:ef:e4:2d: 33:6a:34:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw Q0UwQzI5RkEwHhcNMjQxMTIxMDQxOTQ3WhcNMjQxMTI4MDQxOTQ3WjAYMRYwFAYD VQQDEw02NzNlYjRlMy00YmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaotBMDYQiPIHWsSuwqULzRp7BpVfr/U9pUjE5EJVJDgDY8nE5ZqEapnXw7E 0HTta5PZ+KWWCc017G4/nN5ZP5IR4SeFGjCMh1+kvhsPLzKSv/qsajv52/DMp+ia K3Mi2KYn6UuJkTLhHBW5bapDbrTDpwRWs4l7PZbX15tDbw2O3sNwHEOttAbEpOlp zDgnIDcWozduynQ3DZjnIxkUHiio0BQURD2TAkSRkFE6ahWRHWnI9wON/YUG4J8Y Iaot1BjxPDXdrP1VSDqG4EFjmEDDqm7z7b8XDrciRNYJnC6w4Ck7RHPU73wBZ6C7 +MIRM+vXxJpqLTlokikioUIJSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK20IAwu cCrO131NhaIL9IKQuIS2MB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU MzVaUzlidGlTT1FNNE1LZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV7HV4BDH0myNMTWU9bFcU9HmN+lLgkl9+O3iQ4QoItXAMNHBqlQqN 9pAVeKOiZmeQuAhXos8UZPbBm6dA34RexInMRIGREELMNrkOh6m1J3jhqYValgTt VmkTkxB5vIR36DEBrhlAlp2XWaxg3BfEAb2utBHmmKdcqkRE9CPLxYJ0W5XIb+0q EUxOBKFiomesz6/otvGztjOOrlsDrfUOZciN7UDYD09rIUXLOb1vfWaUnBYh3Th7 46JJm2TU05pPCCXrDQ8nU2zrjAvU3MkqPPKRs3HZzcvXhn1j7u4q9ZRKlsaStgwk GD1NMrDg7hZPLiab22TMKeTv5C0zajRR -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org