$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft File: 9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json) Hash identifier: WQQ2jXDUo80iTxt9skzzxL9NtLVHiF6+IDXCFEwde2A= Subject key identifier: F3:A9:F2:59:7B:17:9E:F6:BE:CD:6D:72:B8:34:24:A6:81:71:C1:FC Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 Certificate issuer: /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft Manifest number: F5 Signing time: Wed 20 Nov 2024 19:54:01 +0000 Manifest this update: Wed 20 Nov 2024 19:54:00 +0000 Manifest next update: Wed 27 Nov 2024 19:54:00 +0000 Files and hashes: 1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: hwGmAcdRukgOH8FzgfxNb15BugvvUuSd3G+grgrk+X0=) 2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: lFLb5NpPAwbZnhrazOQk8+Bk3DLcKzcmqfwSS/XE9cE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Validity Not Before: Nov 20 19:54:00 2024 GMT Not After : Nov 27 19:54:00 2024 GMT Subject: CN=673e3e58-c962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:e2:3b:3a:e4:07:a3:84:e4:fb:43:c8:3f: 6b:3d:54:a0:e1:fa:cd:a7:37:b6:76:a7:c9:19:01: 03:c8:ef:97:3b:66:09:8c:9c:d5:c0:a6:11:60:a1: a9:d6:89:57:82:67:52:98:7b:a0:a9:84:75:6c:e7: eb:6d:62:b5:04:9d:6c:b2:09:10:e8:da:5d:f1:11: 24:ec:f9:d6:cb:f1:c6:a9:ea:97:bd:f3:be:32:c9: 4f:d2:a7:fa:12:55:e0:5c:24:f5:3e:e3:b6:cc:fe: 3b:1a:e7:cc:3e:e3:d8:b2:14:19:18:4d:76:c7:30: 6b:e6:1b:8f:86:2f:60:12:f6:26:b9:09:79:df:05: 94:02:ac:43:fe:a1:24:d1:43:f0:14:15:fe:88:55: 87:e3:21:a6:6d:f7:2f:5f:17:26:cc:1f:b3:59:f1: 69:d9:f2:9a:e8:89:a5:4b:b3:8c:8c:9f:93:0d:af: d5:53:c4:24:26:e4:c0:a7:68:24:58:b1:99:c3:2f: 8d:82:14:ce:1d:7a:8f:1f:77:2d:67:b3:9b:db:9e: 6b:b5:37:94:3c:77:ba:5e:cd:cd:e0:01:42:17:d8: 77:54:b0:ac:57:b2:3a:ed:7b:6b:b6:b4:c4:08:98: 56:a1:01:5b:b2:5a:60:01:64:86:0a:ad:1e:38:15: f3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A9:F2:59:7B:17:9E:F6:BE:CD:6D:72:B8:34:24:A6:81:71:C1:FC X509v3 Authority Key Identifier: keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:2f:41:25:89:0c:3d:6a:a7:0f:e7:5c:ad:5d:6e:ab:6f:68: 1b:c9:e4:11:76:da:f7:fa:65:f6:7d:58:87:02:d3:7a:b9:dc: 32:52:cf:03:c4:be:0d:24:bb:5e:27:46:43:7f:e5:2c:0f:87: 24:1a:cf:d0:f2:b9:10:74:e9:76:7d:0e:6e:da:8a:6f:63:4d: c4:f3:10:fc:e0:e1:fd:14:28:97:2b:19:ff:b9:b9:ea:17:97: 6f:9e:0b:7f:09:d0:69:b8:cc:83:c6:d4:be:90:b1:ca:62:51: eb:74:c0:81:01:25:84:d3:00:42:a4:db:37:7e:53:a0:ae:10: 4f:47:c5:ab:61:16:a7:3a:d1:f8:f7:25:94:5c:58:d9:a5:e2: f0:ba:34:a2:fd:f1:2a:50:34:3c:48:19:e1:0f:eb:ce:52:5b: 1c:5a:eb:b1:e5:b3:c8:2b:60:83:13:c5:e6:e2:ee:86:e3:ca: 9d:91:38:49:b0:12:ef:81:ce:7a:fe:e8:fe:d6:db:6e:42:0e: cd:4d:ea:24:5f:1d:a9:7e:33:2f:6a:f0:e7:53:67:22:8f:ba: e3:db:d8:fe:d9:d5:55:8a:99:b6:1a:64:58:36:b4:5f:8d:06: 25:1d:43:4c:21:73:8d:82:ae:7a:ce:6d:df:1b:ce:38:50:aa: c2:c8:20:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKEY2NUNGRDFDRjNCMUM1QThFQTYwODcxRkEzQzM0MDYx REI0Q0YzODMwHhcNMjQxMTIwMTk1NDAwWhcNMjQxMTI3MTk1NDAwWjAYMRYwFAYD VQQDEw02NzNlM2U1OC1jOTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTziOzrkB6OE5PtDyD9rPVSg4frNpze2dqfJGQEDyO+XO2YJjJzVwKYRYKGp 1olXgmdSmHugqYR1bOfrbWK1BJ1ssgkQ6Npd8REk7PnWy/HGqeqXvfO+MslP0qf6 ElXgXCT1PuO2zP47GufMPuPYshQZGE12xzBr5huPhi9gEvYmuQl53wWUAqxD/qEk 0UPwFBX+iFWH4yGmbfcvXxcmzB+zWfFp2fKa6ImlS7OMjJ+TDa/VU8QkJuTAp2gk WLGZwy+NghTOHXqPH3ctZ7Ob255rtTeUPHe6Xs3N4AFCF9h3VLCsV7I67XtrtrTE CJhWoQFbslpgAWSGCq0eOBXzEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOp8ll7 F572vs1tcrg0JKaBccH8MB8GA1UdIwQYMBaAFPZc/RzzscWo6mCHH6PDQGHbTPOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9DRUU2ODgyMjM3 QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhhanFZSWNmbzhOQVlkdE04 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsejlIUE94eGFqcVlJY2ZvOE5BWWR0TTg0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9DRUU2ODgyMjM3QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhh anFZSWNmbzhOQVlkdE04NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrL0EliQw9aqcP51ytXW6rb2gbyeQRdtr3+mX2fViHAtN6udwyUs8D xL4NJLteJ0ZDf+UsD4ckGs/Q8rkQdOl2fQ5u2opvY03E8xD84OH9FCiXKxn/ubnq F5dvngt/CdBpuMyDxtS+kLHKYlHrdMCBASWE0wBCpNs3flOgrhBPR8WrYRanOtH4 9yWUXFjZpeLwujSi/fEqUDQ8SBnhD+vOUlscWuux5bPIK2CDE8Xm4u6G48qdkThJ sBLvgc56/uj+1ttuQg7NTeokXx2pfjMvavDnU2cij7rj29j+2dVVipm2GmRYNrRf jQYlHUNMIXONgq56zm3fG844UKrCyCAE -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:43 2024 by rpki-client on console-fra.rpki-client.org