$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft File: T9_kS5mxsmWWg5PVlkLCD5OURKM.mft (raw, json) Hash identifier: Kqh/aSv6eRvobHNMO2GTni3WcXxM8nwFAf2y+IxaSvk= Subject key identifier: 38:C1:68:75:24:4C:EA:F4:FB:87:09:98:27:94:94:E5:D0:CB:46:A2 Authority key identifier: 4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3 Certificate issuer: /CN=A919A713/serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft Manifest number: 0287 Signing time: Sat 23 Nov 2024 01:09:26 +0000 Manifest this update: Sat 23 Nov 2024 01:09:25 +0000 Manifest next update: Sat 30 Nov 2024 01:09:25 +0000 Files and hashes: 1: T9_kS5mxsmWWg5PVlkLCD5OURKM.crl (hash: +p0g0Fgv3f6c5upa0wXav+Z859iXdHw8ILBHFAN0cws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713/serialNumber=4FDFE44B99B1B265968393D59642C20F939444A3 Validity Not Before: Nov 23 01:09:25 2024 GMT Not After : Nov 30 01:09:25 2024 GMT Subject: CN=67412b46-f648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:63:7b:48:2d:1c:19:0b:16:6d:65:e4:9e: c2:00:19:d6:1b:e0:37:4c:d7:bc:1a:65:e8:23:e2: c8:d2:15:8d:c7:ff:50:c5:f3:9c:4e:27:75:86:07: 22:c1:aa:cd:34:7e:a0:78:c0:a6:17:7d:11:22:e3: 4e:5f:5f:8d:1e:60:94:50:ed:b1:f0:c2:8e:33:8e: 09:84:1b:32:0d:e7:14:77:b2:e9:02:d0:6f:a9:b4: 67:90:00:e5:a0:8b:15:a8:b8:23:f5:94:79:d9:9e: 7a:8f:6f:2f:3a:19:e7:b7:9d:eb:9d:d6:10:1d:58: c1:f9:a4:e3:1c:a8:5f:6f:d3:b8:ff:6e:c8:a4:fb: cd:c7:e8:26:a7:09:f9:83:fe:f5:fa:2a:ea:5a:c6: c4:cd:2b:d3:37:12:c6:18:b5:4a:f4:89:33:3c:5c: b5:2c:f9:86:18:8d:f3:6b:57:fe:bb:5a:88:14:e9: c5:74:5a:66:b9:07:2f:cf:eb:45:d7:61:88:c0:aa: 59:b2:42:20:10:a3:c6:a6:60:f7:23:23:74:54:9d: dc:e7:6e:4b:0d:62:68:bd:62:f6:f0:3c:c3:10:ce: bc:68:87:e4:c4:30:c6:9b:6e:f0:88:d2:77:e1:61: 89:4d:d4:ae:d0:45:22:88:ef:9e:6e:54:b5:ec:4e: 1f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C1:68:75:24:4C:EA:F4:FB:87:09:98:27:94:94:E5:D0:CB:46:A2 X509v3 Authority Key Identifier: keyid:4F:DF:E4:4B:99:B1:B2:65:96:83:93:D5:96:42:C2:0F:93:94:44:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T9_kS5mxsmWWg5PVlkLCD5OURKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/3E5A09D2E0DA11EC94C7E062C4F9AE02/T9_kS5mxsmWWg5PVlkLCD5OURKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:8d:e4:f8:7c:e9:87:7e:e4:55:4f:8b:10:bb:74:98:0f:16: 05:71:83:8f:f4:d9:c5:e9:fc:5b:79:3d:7f:18:97:78:7b:c5: 81:81:8b:56:e1:2a:e8:fc:2b:59:b8:48:e1:77:40:f0:ac:db: ee:03:d7:99:f9:0c:99:7a:ed:19:7f:83:0c:f8:c4:77:6a:71: 62:d7:cb:8d:77:4b:5e:80:ef:3d:0a:91:f9:2e:a6:55:63:85: 97:c1:ed:db:8e:1c:1f:3c:03:69:25:44:a2:cc:c0:48:31:d5: 0e:b2:12:bf:11:ca:e7:79:aa:f6:48:09:33:ba:d2:76:dd:ba: b5:70:66:31:ad:95:72:a5:d9:f6:86:2c:a6:b2:3f:5c:9f:01: d4:51:0a:38:78:cc:b4:82:b4:47:c3:d4:e8:b3:f0:1e:cd:d5: 0b:89:83:a7:ca:e6:04:48:67:c1:68:d5:35:1e:66:1b:ff:f4: f2:77:0d:28:93:63:65:78:73:8e:f3:f2:2d:26:27:88:3a:39: e8:a2:fe:6f:f2:00:7d:d1:f6:fc:0d:4d:39:d5:7f:b5:1d:31: 34:83:fa:01:58:be:c5:f8:ce:81:15:bd:68:6c:8f:7c:85:96: 03:70:5f:75:a2:fc:1b:ce:4f:b3:de:33:67:58:7f:87:8f:f6: af:a4:28:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDRGREZFNDRCOTlCMUIyNjU5NjgzOTNENTk2NDJDMjBG OTM5NDQ0QTMwHhcNMjQxMTIzMDEwOTI1WhcNMjQxMTMwMDEwOTI1WjAYMRYwFAYD VQQDEw02NzQxMmI0Ni1mNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArc1je0gtHBkLFm1l5J7CABnWG+A3TNe8GmXoI+LI0hWNx/9QxfOcTid1hgci warNNH6geMCmF30RIuNOX1+NHmCUUO2x8MKOM44JhBsyDecUd7LpAtBvqbRnkADl oIsVqLgj9ZR52Z56j28vOhnnt53rndYQHVjB+aTjHKhfb9O4/27IpPvNx+gmpwn5 g/71+irqWsbEzSvTNxLGGLVK9IkzPFy1LPmGGI3za1f+u1qIFOnFdFpmuQcvz+tF 12GIwKpZskIgEKPGpmD3IyN0VJ3c525LDWJovWL28DzDEM68aIfkxDDGm27wiNJ3 4WGJTdSu0EUiiO+eblS17E4frwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjBaHUk TOr0+4cJmCeUlOXQy0aiMB8GA1UdIwQYMBaAFE/f5EuZsbJlloOT1ZZCwg+TlESj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zRTVBMDlEMkUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9UOV9rUzVteHNtV1dnNVBWbGtMQ0Q1T1VS S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5X2tTNW14c21XV2c1UFZsa0xDRDVPVVJLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zRTVBMDlEMkUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9UOV9rUzVteHNt V1dnNVBWbGtMQ0Q1T1VSS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDujeT4fOmHfuRVT4sQu3SYDxYFcYOP9NnF6fxbeT1/GJd4e8WBgYtW 4Sro/CtZuEjhd0DwrNvuA9eZ+QyZeu0Zf4MM+MR3anFi18uNd0tegO89CpH5LqZV Y4WXwe3bjhwfPANpJUSizMBIMdUOshK/Ecrnear2SAkzutJ23bq1cGYxrZVypdn2 hiymsj9cnwHUUQo4eMy0grRHw9Tos/AezdULiYOnyuYESGfBaNU1HmYb//Tydw0o k2NleHOO8/ItJieIOjnoov5v8gB90fb8DU051X+1HTE0g/oBWL7F+M6BFb1obI98 hZYDcF91ovwbzk+z3jNnWH+Hj/avpCgt -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:45 2024 by rpki-client on console-ams.rpki-client.org