$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: Olz8nRL/Ms36qvcSUR3xMfVP9Iu9p12mlpYkIaQWPN8= Subject key identifier: 13:A5:C9:19:A0:F6:E4:BB:94:67:D9:87:4A:E6:DB:70:AC:02:35:FB Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 14CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 14C2 Signing time: Fri 22 Nov 2024 16:51:18 +0000 Manifest this update: Fri 22 Nov 2024 16:51:18 +0000 Manifest next update: Fri 29 Nov 2024 16:51:18 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: bfpfw1j79nI5tePn5t3k8YnRbhEwfYcEEq3E/2Pe/GA=) 2: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: S5mRurG916ui1hjUc9swark9ywmNDAZ5nDRIJrKsR2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5324 (0x14cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Nov 22 16:51:18 2024 GMT Not After : Nov 29 16:51:18 2024 GMT Subject: CN=6740b686-f564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:24:a4:33:08:18:57:aa:3a:0d:2b:28:cd: b3:84:4f:6d:6b:cb:6a:32:97:7f:b3:a5:fa:25:b7: a8:e0:72:d0:b9:ae:65:66:b0:87:8d:48:7d:b0:c4: 02:a0:bd:fe:65:15:6d:a6:4b:a9:20:f6:f2:0d:f0: 8b:a5:47:07:32:95:86:f8:9d:96:82:52:89:a6:a2: ab:0e:85:a2:26:76:8a:2f:f9:42:92:6b:ab:2f:eb: c4:52:62:67:de:69:64:23:1a:d3:a0:6d:71:ae:b9: 83:65:c2:36:05:74:4d:65:ec:d9:4d:d6:93:04:53: 51:e4:65:f3:e4:17:f8:58:bb:7e:12:3c:d9:a5:75: 5f:a6:f7:2f:99:1a:55:eb:f6:85:02:e4:60:1f:d2: 9d:dc:42:cc:7e:cf:cc:f7:1f:02:b0:d1:e5:0d:c4: 2d:67:ed:8b:3c:3c:36:d3:e5:b4:35:07:3e:2a:e0: d1:98:06:70:24:a8:22:f4:4b:fb:1a:72:4f:f9:40: bc:32:29:33:c6:c1:bb:d9:b1:1b:2c:7b:47:0c:61: 5a:29:6b:10:c3:51:06:b4:e6:4e:54:19:99:3c:dd: 8f:65:ab:9b:e6:b7:64:1d:f4:2c:48:3a:9d:5f:c3: 70:2c:fa:4e:f2:a1:3a:c7:4a:0c:71:58:42:d0:7b: 71:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A5:C9:19:A0:F6:E4:BB:94:67:D9:87:4A:E6:DB:70:AC:02:35:FB X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:cd:65:d1:ea:c8:29:f8:fb:70:9b:4e:c9:3e:7f:0e:5e:9b: 78:a1:81:1f:aa:43:1e:f1:90:9d:db:00:81:2c:6d:90:f9:e3: a6:44:9c:99:4a:11:2a:33:08:03:64:b8:c4:59:c5:4e:9f:3c: 3d:f1:46:0a:f0:68:38:dd:8a:f7:48:e8:7b:09:43:81:0e:d6: 4f:70:17:ae:24:a4:97:f4:a5:a2:eb:31:98:00:2c:cb:32:bc: fc:16:55:0d:fb:19:06:73:05:6a:10:b2:f4:16:19:2b:f7:b9: 39:31:8b:6c:48:ba:c9:3f:97:2b:60:74:bd:cd:4c:fc:6b:e4: 1d:15:12:e5:fa:90:21:80:84:c0:45:c6:32:cb:09:92:4b:4e: 07:ed:78:da:f6:61:1d:dc:18:db:60:f6:87:9e:6e:17:a4:be: 60:3e:1a:1b:7e:c7:ac:3f:46:ad:56:12:2c:72:70:56:5d:2e: 74:ab:73:3b:74:91:4a:e9:37:cc:4f:64:5f:70:d1:4c:9c:db: be:21:f9:db:32:e9:6f:de:c6:35:97:ab:ae:2c:8a:43:b0:b5: f1:03:f5:0e:ca:37:ed:b6:3e:13:48:24:d2:37:b1:f4:58:24: 76:c0:5a:7f:ce:07:6c:ec:7d:66:1f:54:4f:09:6e:50:81:98: d4:41:aa:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjQxMTIyMTY1MTE4WhcNMjQxMTI5MTY1MTE4WjAYMRYwFAYD VQQDEw02NzQwYjY4Ni1mNTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/AkpDMIGFeqOg0rKM2zhE9ta8tqMpd/s6X6Jbeo4HLQua5lZrCHjUh9sMQC oL3+ZRVtpkupIPbyDfCLpUcHMpWG+J2WglKJpqKrDoWiJnaKL/lCkmurL+vEUmJn 3mlkIxrToG1xrrmDZcI2BXRNZezZTdaTBFNR5GXz5Bf4WLt+EjzZpXVfpvcvmRpV 6/aFAuRgH9Kd3ELMfs/M9x8CsNHlDcQtZ+2LPDw20+W0NQc+KuDRmAZwJKgi9Ev7 GnJP+UC8MikzxsG72bEbLHtHDGFaKWsQw1EGtOZOVBmZPN2PZaub5rdkHfQsSDqd X8NwLPpO8qE6x0oMcVhC0Htx1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOlyRmg 9uS7lGfZh0rm23CsAjX7MB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGzWXR6sgp+Ptwm07JPn8OXpt4oYEfqkMe8ZCd2wCBLG2Q+eOmRJyZ ShEqMwgDZLjEWcVOnzw98UYK8Gg43Yr3SOh7CUOBDtZPcBeuJKSX9KWi6zGYACzL Mrz8FlUN+xkGcwVqELL0Fhkr97k5MYtsSLrJP5crYHS9zUz8a+QdFRLl+pAhgITA RcYyywmSS04H7Xja9mEd3BjbYPaHnm4XpL5gPhobfsesP0atVhIscnBWXS50q3M7 dJFK6TfMT2RfcNFMnNu+IfnbMulv3sY1l6uuLIpDsLXxA/UOyjfttj4TSCTSN7H0 WCR2wFp/zgds7H1mH1RPCW5QgZjUQapw -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org