$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft File: i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json) Hash identifier: iWUc1vLdvZL/qOVX6Ewmq+7X3u5zw9wdT7tH/QMGW0k= Subject key identifier: 1F:27:F5:62:68:F0:99:5E:D2:93:4E:BF:E3:85:78:DF:D3:81:C2:0B Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D Certificate issuer: /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Certificate serial: 070D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft Manifest number: 0702 Signing time: Fri 22 Nov 2024 21:27:32 +0000 Manifest this update: Fri 22 Nov 2024 21:27:32 +0000 Manifest next update: Fri 29 Nov 2024 21:27:32 +0000 Files and hashes: 1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: WZ4i+c9n8Nu8xVcp3yJ3VVP8+cBfgV2HwNr6d+V5QbY=) 2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: 54RasFpInkk46NqANXGRnQQRyrIL2lzCqTjJuJoAKLM=) 3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: eITJ7zYLAhKWDtK1wNVCYFqUDK3lmpweT8MrA45hMHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Validity Not Before: Nov 22 21:27:32 2024 GMT Not After : Nov 29 21:27:32 2024 GMT Subject: CN=6740f744-549b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:49:85:73:ed:6f:ad:a1:c6:b9:a3:8f:b2: c3:c2:32:81:e3:3a:96:27:f5:e0:d6:71:99:49:4f: 9e:2c:ff:96:d0:15:3e:32:15:d3:1b:36:1e:c2:c2: 24:50:88:7a:a2:90:d7:08:26:7b:db:a9:bd:db:f6: 55:cc:29:b2:13:bd:ee:60:78:43:27:01:fa:7d:c0: 88:3b:5a:d9:ce:37:74:c1:fb:19:5e:d7:3f:fc:dd: c1:f2:ba:46:a2:bf:e0:92:8e:e4:63:f1:d8:f7:97: 5a:7d:b9:ba:bc:af:1e:9a:eb:1f:25:c2:1d:fc:d4: eb:80:e3:0f:99:59:03:db:49:36:b3:9f:52:b2:ec: 7e:a8:ab:eb:f9:99:c0:6e:2f:92:0d:ba:53:a2:9b: fb:7f:36:87:39:e9:32:3f:63:9a:1a:94:11:2c:15: b5:cc:6a:13:2f:63:93:7d:41:e6:a8:95:dd:1a:af: 34:d1:f7:2b:fd:e3:1a:13:82:c1:a5:e5:85:a4:9b: a5:fa:72:e8:f6:89:f8:b8:a5:f1:6c:f8:80:48:36: 29:d7:d0:bb:a0:d1:72:7a:29:6c:00:61:87:3d:28: 6e:bb:fb:ff:e5:cd:00:1a:c5:c6:26:45:6f:7e:61: 46:b4:73:e1:39:b8:a5:0d:6a:c7:66:79:6c:2a:b1: 6c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:27:F5:62:68:F0:99:5E:D2:93:4E:BF:E3:85:78:DF:D3:81:C2:0B X509v3 Authority Key Identifier: keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:99:e8:ad:55:24:4b:bb:32:14:40:0b:7d:5c:a7:27:30:4e: 5d:aa:7d:ee:81:27:30:36:6a:fc:20:06:73:de:e1:17:0d:81: 14:e3:31:80:40:ed:a7:af:ba:79:4b:47:59:ed:5f:7a:29:97: 3e:1e:eb:20:01:d0:25:55:b1:12:35:84:90:7c:08:fd:d7:50: ab:f0:ea:69:b6:cf:f9:67:49:a5:b5:10:fe:eb:06:a3:48:1e: 6b:36:52:44:0a:aa:45:9d:13:17:49:77:f7:fd:75:6d:fe:9c: e7:bf:46:c3:9e:34:e0:80:e5:11:d5:38:34:e5:48:e7:9d:4a: 65:60:f6:fe:ff:9b:11:8c:2e:b3:47:bf:9f:31:68:3d:e1:51: 2e:aa:7b:74:28:39:76:8b:86:1d:6d:01:c0:53:4c:48:64:72: 00:75:bf:a8:9d:ec:a0:13:7e:54:c0:c6:9a:10:81:4f:8c:c1: 88:e5:77:86:6e:58:de:86:98:c6:04:72:e6:d0:cc:3a:83:b4: c9:4f:11:fd:f1:36:6a:8c:ff:7e:97:f9:c7:31:fe:88:33:1d: 60:49:9c:01:66:02:de:43:89:17:c7:7a:69:bb:06:91:59:be: b6:fa:ce:ae:11:73:93:01:9f:0e:d5:b3:64:fe:d8:19:15:47: e4:e6:77:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3RTQxMTAvBgNVBAUTKDhCREE4QTFGRTA3QjQ2QzMzMDYzMDQ2QTcyNUVBQjg1 NjQyQjlDMkQwHhcNMjQxMTIyMjEyNzMyWhcNMjQxMTI5MjEyNzMyWjAYMRYwFAYD VQQDEw02NzQwZjc0NC01NDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtstJhXPtb62hxrmjj7LDwjKB4zqWJ/Xg1nGZSU+eLP+W0BU+MhXTGzYewsIk UIh6opDXCCZ726m92/ZVzCmyE73uYHhDJwH6fcCIO1rZzjd0wfsZXtc//N3B8rpG or/gko7kY/HY95dafbm6vK8emusfJcId/NTrgOMPmVkD20k2s59Ssux+qKvr+ZnA bi+SDbpTopv7fzaHOekyP2OaGpQRLBW1zGoTL2OTfUHmqJXdGq800fcr/eMaE4LB peWFpJul+nLo9on4uKXxbPiASDYp19C7oNFyeilsAGGHPShuu/v/5c0AGsXGJkVv fmFGtHPhObilDWrHZnlsKrFs9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8n9WJo 8Jle0pNOv+OFeN/TgcILMB8GA1UdIwQYMBaAFIvaih/ge0bDMGMEanJeq4VkK5wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzdFNC8zNkZCMTE0NDFE NUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1JzTXdZd1JxY2w2cmhXUXJu QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5cUtILUI3UnNNd1l3UnFjbDZyaFdRcm5DMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzdFNC8zNkZCMTE0NDFENUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1Jz TXdZd1JxY2w2cmhXUXJuQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0meitVSRLuzIUQAt9XKcnME5dqn3ugScwNmr8IAZz3uEXDYEU4zGA QO2nr7p5S0dZ7V96KZc+HusgAdAlVbESNYSQfAj911Cr8Oppts/5Z0mltRD+6waj SB5rNlJECqpFnRMXSXf3/XVt/pznv0bDnjTggOUR1Tg05UjnnUplYPb+/5sRjC6z R7+fMWg94VEuqnt0KDl2i4YdbQHAU0xIZHIAdb+oneygE35UwMaaEIFPjMGI5XeG bljehpjGBHLm0Mw6g7TJTxH98TZqjP9+l/nHMf6IMx1gSZwBZgLeQ4kXx3ppuwaR Wb62+s6uEXOTAZ8O1bNk/tgZFUfk5nfv -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org