$ rpki-client -vvf rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft File: _9C9_G0db07W7Tg5A59B6e3Gb7o.mft (raw, json) Hash identifier: p3nlMZVqiI+hy3PF0dRBTLQNW2AAf4tp3uAs3QkkywI= Subject key identifier: 59:EF:12:E4:2F:5B:8B:78:96:AD:73:8B:DC:84:42:EB:54:A3:57:F2 Authority key identifier: FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA Certificate issuer: /CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Certificate serial: 07F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft Manifest number: 07F4 Signing time: Fri 22 Nov 2024 20:37:27 +0000 Manifest this update: Fri 22 Nov 2024 20:37:27 +0000 Manifest next update: Fri 29 Nov 2024 20:37:27 +0000 Files and hashes: 1: _9C9_G0db07W7Tg5A59B6e3Gb7o.crl (hash: hou5JzRzr1FRqCt2FTfbPqsP3kbBKP/MkXwTI0sY2VA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919697D/serialNumber=FFD0BDFC6D1D6F4ED6ED3839039F41E9EDC66FBA Validity Not Before: Nov 22 20:37:27 2024 GMT Not After : Nov 29 20:37:27 2024 GMT Subject: CN=6740eb87-fbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f8:cd:fb:da:7a:2a:db:0b:d1:84:ff:72:c6: ec:88:90:cc:39:f4:37:68:58:72:c4:7e:d1:f0:ba: 85:be:50:63:8d:13:b1:c7:7a:05:0c:79:10:88:ab: 2d:8d:62:f7:31:e6:71:9c:d5:5e:80:45:95:e9:d5: 58:cc:55:94:60:f3:ce:6d:55:94:d1:d7:c2:5d:db: dd:5e:cd:17:8e:3b:aa:f3:76:ae:c5:a5:ff:62:44: 4b:90:fa:9d:da:3c:c9:1b:d0:7b:de:67:7d:ce:56: 2d:6c:58:a9:27:cd:00:0d:49:18:55:7f:a9:d3:69: bc:1b:49:a9:88:23:86:6f:e2:19:ad:36:c3:0c:26: 8b:83:88:8b:55:1c:99:a2:00:47:44:14:13:13:41: 83:ee:4b:f0:51:3c:6f:90:3c:70:77:15:14:e4:92: 04:12:2b:92:00:32:92:a3:fc:97:07:aa:79:cc:61: e7:29:02:76:7a:d1:ab:f3:a1:97:80:13:bf:e2:55: 08:2d:36:ed:ea:01:8a:db:4e:6d:bb:aa:d5:03:ea: 10:18:3f:b6:e9:fd:5b:3c:dc:a3:97:ad:40:8b:fa: 98:bc:05:58:c4:e2:25:e8:dc:2a:ff:1f:d3:a4:31: 86:40:22:d8:29:2c:12:d3:6b:d3:d4:13:b0:3d:47: 58:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EF:12:E4:2F:5B:8B:78:96:AD:73:8B:DC:84:42:EB:54:A3:57:F2 X509v3 Authority Key Identifier: keyid:FF:D0:BD:FC:6D:1D:6F:4E:D6:ED:38:39:03:9F:41:E9:ED:C6:6F:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_9C9_G0db07W7Tg5A59B6e3Gb7o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919697D/9D28EC0CC7BF11EA90084D1DC4F9AE02/_9C9_G0db07W7Tg5A59B6e3Gb7o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:9b:ca:99:27:a9:ae:57:2f:30:98:c3:02:10:91:4d:5c:fe: c7:32:44:cb:1c:8c:24:e5:f7:cd:d5:0b:ab:14:ce:3d:82:77: 58:45:89:ce:0d:ba:80:d8:07:aa:15:b6:1d:12:13:9f:52:ab: c6:95:f4:bd:7e:9d:3f:39:c2:9f:0d:cb:83:9b:b5:65:45:ef: af:80:40:b2:9f:cb:8d:93:31:32:71:a1:92:27:86:26:8b:33: 0c:25:11:46:d7:cf:bd:a8:02:d3:53:f6:e2:a2:9b:1b:bc:27: 00:a1:dc:77:ec:69:69:ab:d2:8b:88:1c:87:df:65:46:2b:6b: f3:2c:48:57:5f:3b:34:d2:af:94:77:74:a6:c6:63:93:9c:a7: 94:b0:ee:0a:93:f0:fa:dd:20:1a:c2:9c:b8:ee:b8:19:16:d4: 08:34:bc:b2:b5:83:ec:26:90:e1:0b:5a:c2:10:2b:13:52:a5: 68:65:9b:42:3c:9b:bf:33:3d:e8:fe:3d:74:44:ab:cd:29:1d: a6:48:5f:ce:81:a5:68:7c:53:ff:5b:46:0d:9c:bc:31:a6:65: e8:6e:41:65:7e:1a:8f:d4:d6:79:87:d3:2e:da:f6:84:05:d8: 0a:9b:78:bb:98:3f:7f:de:f5:44:60:72:8d:fe:5b:51:37:06: 42:e4:81:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY5N0QxMTAvBgNVBAUTKEZGRDBCREZDNkQxRDZGNEVENkVEMzgzOTAzOUY0MUU5 RURDNjZGQkEwHhcNMjQxMTIyMjAzNzI3WhcNMjQxMTI5MjAzNzI3WjAYMRYwFAYD VQQDEw02NzQwZWI4Ny1mYmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fjN+9p6KtsL0YT/csbsiJDMOfQ3aFhyxH7R8LqFvlBjjROxx3oFDHkQiKst jWL3MeZxnNVegEWV6dVYzFWUYPPObVWU0dfCXdvdXs0Xjjuq83auxaX/YkRLkPqd 2jzJG9B73md9zlYtbFipJ80ADUkYVX+p02m8G0mpiCOGb+IZrTbDDCaLg4iLVRyZ ogBHRBQTE0GD7kvwUTxvkDxwdxUU5JIEEiuSADKSo/yXB6p5zGHnKQJ2etGr86GX gBO/4lUILTbt6gGK205tu6rVA+oQGD+26f1bPNyjl61Ai/qYvAVYxOIl6Nwq/x/T pDGGQCLYKSwS02vT1BOwPUdYrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnvEuQv W4t4lq1zi9yEQutUo1fyMB8GA1UdIwQYMBaAFP/QvfxtHW9O1u04OQOfQentxm+6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3RC85RDI4RUMwQ0M3 QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIwN1c3VGc1QTU5QjZlM0di N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL185QzlfRzBkYjA3VzdUZzVBNTlCNmUzR2I3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Njk3RC85RDI4RUMwQ0M3QkYxMUVBOTAwODREMURDNEY5QUUwMi9fOUM5X0cwZGIw N1c3VGc1QTU5QjZlM0diN28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXm8qZJ6muVy8wmMMCEJFNXP7HMkTLHIwk5ffN1QurFM49gndYRYnO DbqA2AeqFbYdEhOfUqvGlfS9fp0/OcKfDcuDm7VlRe+vgECyn8uNkzEycaGSJ4Ym izMMJRFG18+9qALTU/biopsbvCcAodx37Glpq9KLiByH32VGK2vzLEhXXzs00q+U d3SmxmOTnKeUsO4Kk/D63SAawpy47rgZFtQINLyytYPsJpDhC1rCECsTUqVoZZtC PJu/Mz3o/j10RKvNKR2mSF/OgaVofFP/W0YNnLwxpmXobkFlfhqP1NZ5h9Mu2vaE BdgKm3i7mD9/3vVEYHKN/ltRNwZC5IGu -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:10 2024 by rpki-client on console-fra.rpki-client.org