$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: LTMkSEqeHidftX3CLT/+G6NZv1lO6o6icUyfQBg3U/E= Subject key identifier: 1B:CE:2E:79:FF:55:6F:88:8B:51:44:31:F7:66:DA:4A:63:43:E0:A7 Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: 0D Signing time: Wed 23 Oct 2024 06:50:11 +0000 Manifest this update: Wed 23 Oct 2024 06:50:11 +0000 Manifest next update: Wed 30 Oct 2024 06:50:11 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: qwVbS/bxBQZiwtXhpzzPQh9aj9XivPJn6hk06fjvW/A=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: xlW1WRvz7DCMXZZnV+rfb+Ls8+ewucJliDacTm3Al7M=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Oct 23 06:50:11 2024 GMT Not After : Oct 30 06:50:11 2024 GMT Subject: CN=67189ca3-e17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5d:84:28:39:70:97:60:11:b5:93:7f:43:90: 72:23:f0:28:11:7c:6e:65:2a:60:82:9f:f2:96:cd: 15:47:62:dc:65:a6:97:39:b9:d9:7d:70:1b:db:29: ce:1b:11:35:c1:af:77:85:7c:37:bc:bd:12:dc:48: 39:7d:67:0c:77:86:aa:7b:c0:0d:00:ea:cc:8a:5d: a8:6b:e6:3e:4f:35:02:89:64:ec:58:f0:89:e1:b0: d3:0f:4f:cd:41:a4:42:56:db:19:69:6f:95:f1:c4: 00:1b:9d:c6:d9:82:92:94:9b:c3:70:17:73:11:2c: 33:41:d8:8f:a6:28:6d:eb:6e:95:6b:b7:37:91:bb: 73:e0:31:c6:e7:48:8a:45:68:d3:aa:cb:ac:c1:e2: 84:92:7c:c6:04:d8:9e:39:ad:27:23:f3:9e:eb:84: e1:89:ea:00:64:ee:4d:83:49:17:40:17:db:f8:4b: 74:1f:42:69:e5:37:ce:85:ff:5b:4a:2c:b7:ef:b1: 18:2a:04:52:ea:e3:23:6c:a4:26:54:36:65:8a:05: 42:a6:04:aa:1f:ee:3e:a4:18:24:6f:62:70:a5:ff: f4:ee:2a:a7:bf:80:cf:a7:e8:66:b2:eb:5e:5b:85: d4:a4:e2:2c:66:15:fe:3e:57:ec:32:41:0f:2f:da: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CE:2E:79:FF:55:6F:88:8B:51:44:31:F7:66:DA:4A:63:43:E0:A7 X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:dd:ab:48:12:0b:58:52:4d:eb:37:36:0f:08:b4:ab:a2:69: ac:33:63:e4:f2:e1:9a:7c:7f:5a:7b:0c:33:81:85:24:23:7a: 03:fc:20:88:5c:75:24:16:84:12:5d:74:fd:56:08:fd:a5:cc: 07:1d:03:cf:fb:39:48:82:28:5c:f8:20:57:a3:b5:13:70:00: d5:92:cd:f4:aa:85:0c:6b:35:82:60:19:5c:bd:67:d8:84:c6: 96:5d:a2:f2:99:78:d7:55:44:ce:2f:07:14:1c:e0:e9:a0:39: b2:be:3a:16:79:b4:10:71:db:f4:33:91:b0:10:36:da:73:5a: 30:3d:86:3f:6c:f3:91:dc:c2:1c:68:39:64:72:c6:17:d0:65: 79:88:b1:cb:57:5d:77:91:74:dd:e0:57:c3:00:54:dc:9e:95: d3:c0:1c:06:44:0f:3d:65:e1:d1:81:e4:8e:09:d9:10:a6:c1: 2f:d2:e5:4c:e1:a9:d5:0c:7e:17:3a:0f:50:b5:9f:00:5c:b0: 61:ab:33:57:64:bd:5c:d9:ac:ba:5a:18:82:a8:fb:23:61:83: 79:55:1e:c4:09:3b:6c:f0:c6:c9:1c:04:78:97:94:bc:fd:f6: ec:98:e9:62:e8:c0:01:8a:59:49:e1:f6:c2:9e:a7:b8:19:2d: 7d:a2:c6:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjNFNzExMC8GA1UEBRMoQTU5RjdFRTJGQTI3NTkzN0YzRTFDMkRCQTVCQjhGQkY2 M0QzN0MzNDAeFw0yNDEwMjMwNjUwMTFaFw0yNDEwMzAwNjUwMTFaMBgxFjAUBgNV BAMTDTY3MTg5Y2EzLWUxN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSXYQoOXCXYBG1k39DkHIj8CgRfG5lKmCCn/KWzRVHYtxlppc5udl9cBvbKc4b ETXBr3eFfDe8vRLcSDl9Zwx3hqp7wA0A6syKXahr5j5PNQKJZOxY8InhsNMPT81B pEJW2xlpb5XxxAAbncbZgpKUm8NwF3MRLDNB2I+mKG3rbpVrtzeRu3PgMcbnSIpF aNOqy6zB4oSSfMYE2J45rScj857rhOGJ6gBk7k2DSRdAF9v4S3QfQmnlN86F/1tK LLfvsRgqBFLq4yNspCZUNmWKBUKmBKof7j6kGCRvYnCl//TuKqe/gM+n6Gay615b hdSk4ixmFf4+V+wyQQ8v2ilNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUG84uef9V b4iLUUQx92baSmND4KcwHwYDVR0jBBgwFoAUpZ9+4vonWTfz4cLbpbuPv2PTfDQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2M0U3LzQxQjBDOTg2ODg3 MTExRUZBNzA4RDE3REM0RjlBRTAyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZE US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcFo5LTR2b25XVGZ6NGNMYnBidVB2MlBUZkRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 M0U3LzQxQjBDOTg2ODg3MTExRUZBNzA4RDE3REM0RjlBRTAyL3BaOS00dm9uV1Rm ejRjTGJwYnVQdjJQVGZEUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD/dq0gSC1hSTes3Ng8ItKuiaawzY+Ty4Zp8f1p7DDOBhSQjegP8IIhc dSQWhBJddP1WCP2lzAcdA8/7OUiCKFz4IFejtRNwANWSzfSqhQxrNYJgGVy9Z9iE xpZdovKZeNdVRM4vBxQc4OmgObK+OhZ5tBBx2/QzkbAQNtpzWjA9hj9s85Hcwhxo OWRyxhfQZXmIsctXXXeRdN3gV8MAVNyeldPAHAZEDz1l4dGB5I4J2RCmwS/S5Uzh qdUMfhc6D1C1nwBcsGGrM1dkvVzZrLpaGIKo+yNhg3lVHsQJO2zwxskcBHiXlLz9 9uyY6WLowAGKWUnh9sKep7gZLX2ixgA= -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:26 2024 by rpki-client on console-fra.rpki-client.org