$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json) Hash identifier: 3idtxOeUfo//P+azTlR9fR/cWPigx41Vh5N3s4H1bl0= Subject key identifier: 75:01:FD:0F:00:69:6C:27:58:B0:97:92:FC:15:48:ED:92:24:77:6A Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft Manifest number: CF Signing time: Sat 23 Nov 2024 03:47:56 +0000 Manifest this update: Sat 23 Nov 2024 03:47:55 +0000 Manifest next update: Sat 30 Nov 2024 03:47:55 +0000 Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: ef2AkNUb063V2qXLZaM3zo0PHsZSntW8OPu1k5eF99s=) 2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: zqBSUeOYWEL+Dp+1Lu3LHEvs0ar9HNyhixirIt0bPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57 Validity Not Before: Nov 23 03:47:55 2024 GMT Not After : Nov 30 03:47:55 2024 GMT Subject: CN=6741506c-b53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1a:00:60:54:61:80:a8:0f:6c:c2:87:50:99: 7e:ac:d2:29:a0:05:5e:f4:37:8a:8e:5c:e4:d8:1e: 9a:87:1f:ba:8a:5d:25:84:74:90:a1:a1:71:e3:bf: a4:0f:e7:be:1d:28:63:07:50:d9:93:53:7f:af:6d: 1d:9d:46:22:15:01:38:d6:a2:c8:90:5f:75:43:44: d6:7f:d3:fa:e1:32:30:f0:2d:94:34:79:29:ae:b1: 36:67:34:e5:c7:7b:c8:24:2e:9e:9b:7f:86:be:b8: 47:2f:ce:4a:98:20:01:68:34:7e:d2:1d:a4:1a:4a: 2e:46:d3:d9:3f:17:1a:7d:5f:c0:77:82:07:1f:47: 85:0b:eb:62:5d:71:5b:db:01:a5:18:f5:c2:12:89: b8:9d:95:8c:2f:ff:af:c1:38:8f:ac:fe:3b:6b:8d: b0:82:b4:85:22:59:07:95:bb:ca:c6:86:7e:ae:70: 04:ec:68:89:89:83:dd:9a:dd:08:de:c6:a5:8b:91: a9:e2:2c:d7:c7:bf:d9:eb:32:7e:9e:30:8a:28:ca: c1:f3:41:cd:e1:8c:df:c6:51:47:15:b1:77:19:c2: 01:7d:d3:9c:5c:21:0e:3e:4b:d7:10:c8:7e:e1:01: 23:1e:fc:7b:9d:36:81:06:59:8f:0b:65:86:d4:b5: 9b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:01:FD:0F:00:69:6C:27:58:B0:97:92:FC:15:48:ED:92:24:77:6A X509v3 Authority Key Identifier: keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4d:9b:5b:f5:53:0d:2d:ab:8e:e3:65:48:2e:b9:75:4b:6a: bf:88:aa:ca:28:3c:e4:d1:ae:7a:c8:fb:c6:82:26:a2:3f:c5: 49:92:52:e9:3d:c4:3b:05:0a:2f:7f:98:14:eb:f1:4b:26:11: 00:6d:9f:b0:4e:c1:84:40:b9:44:a0:2e:a5:ca:4c:77:bf:c1: c9:6b:fb:c0:87:22:6e:8e:c2:fe:f6:54:95:39:13:3c:ce:a3: 7e:c8:d8:f4:30:98:5a:23:b3:50:55:3b:bd:49:ed:15:e4:ef: 40:65:ff:95:58:e9:cf:68:55:82:09:20:bc:44:ef:29:b6:3a: fd:06:b6:96:ad:1c:8e:ef:0f:64:df:fb:ec:a9:bb:b1:9d:b0: c1:73:b3:04:d3:8e:f9:b3:43:f6:9f:51:f7:7e:e4:a9:54:b4: 67:4f:4c:10:89:73:48:92:6d:9b:24:48:c3:19:58:a1:cb:c2: b1:ae:a6:ec:69:cb:05:f0:e8:86:e5:43:72:5a:b1:fa:7a:b9: 1d:7c:ce:dc:5b:ff:a1:03:53:0f:5a:cb:a1:16:7e:24:58:64: 49:1d:d9:ac:ec:1f:41:0a:a4:04:20:5f:cd:8b:c5:7c:c0:9b: 09:45:93:ee:fe:5b:7c:a1:6d:8d:fb:96:2f:23:6e:bb:c7:58: 50:c0:87:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDQkQxMTAvBgNVBAUTKDRGNjczNTYzMTYwMDIzNkM4MDU5OEExRTMzMjEzQkJE NjgxRUNFNTcwHhcNMjQxMTIzMDM0NzU1WhcNMjQxMTMwMDM0NzU1WjAYMRYwFAYD VQQDEw02NzQxNTA2Yy1iNTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhoAYFRhgKgPbMKHUJl+rNIpoAVe9DeKjlzk2B6ahx+6il0lhHSQoaFx47+k D+e+HShjB1DZk1N/r20dnUYiFQE41qLIkF91Q0TWf9P64TIw8C2UNHkprrE2ZzTl x3vIJC6em3+GvrhHL85KmCABaDR+0h2kGkouRtPZPxcafV/Ad4IHH0eFC+tiXXFb 2wGlGPXCEom4nZWML/+vwTiPrP47a42wgrSFIlkHlbvKxoZ+rnAE7GiJiYPdmt0I 3sali5Gp4izXx7/Z6zJ+njCKKMrB80HN4YzfxlFHFbF3GcIBfdOcXCEOPkvXEMh+ 4QEjHvx7nTaBBlmPC2WG1LWbGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUB/Q8A aWwnWLCXkvwVSO2SJHdqMB8GA1UdIwQYMBaAFE9nNWMWACNsgFmKHjMhO71oHs5X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NENCRC81ODBCRTNBRTZF MjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUkyeUFXWW9lTXlFN3ZXZ2V6 bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QyYzFZeFlBSTJ5QVdZb2VNeUU3dldnZXpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NENCRC81ODBCRTNBRTZFMjQxMUVFOTFEODgwMzdDNEY5QUUwMi9UMmMxWXhZQUky eUFXWW9lTXlFN3ZXZ2V6bGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeTZtb9VMNLauO42VILrl1S2q/iKrKKDzk0a56yPvGgiaiP8VJklLp PcQ7BQovf5gU6/FLJhEAbZ+wTsGEQLlEoC6lykx3v8HJa/vAhyJujsL+9lSVORM8 zqN+yNj0MJhaI7NQVTu9Se0V5O9AZf+VWOnPaFWCCSC8RO8ptjr9BraWrRyO7w9k 3/vsqbuxnbDBc7ME0475s0P2n1H3fuSpVLRnT0wQiXNIkm2bJEjDGVihy8Kxrqbs acsF8OiG5UNyWrH6erkdfM7cW/+hA1MPWsuhFn4kWGRJHdms7B9BCqQEIF/Ni8V8 wJsJRZPu/lt8oW2N+5YvI267x1hQwIe7 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:53 2024 by rpki-client on console-fra.rpki-client.org