$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft File: u0yWZedfnhna1G-LYJ00RPto7Uc.mft (raw, json) Hash identifier: n07QsT56XK7hPgmM0DUaNL2dBgcskcPsA68l2At64m8= Subject key identifier: 63:81:A6:7D:86:E4:96:D4:D3:8B:69:ED:26:5A:5C:81:D3:CB:21:FD Authority key identifier: BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 Certificate issuer: /CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Certificate serial: 030A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft Manifest number: 02FB Signing time: Sat 23 Nov 2024 00:51:51 +0000 Manifest this update: Sat 23 Nov 2024 00:51:51 +0000 Manifest next update: Sat 30 Nov 2024 00:51:51 +0000 Files and hashes: 1: u0yWZedfnhna1G-LYJ00RPto7Uc.crl (hash: 6oVJyQ2GVmLDT3RHOJVKkwg2TN0Zhhcr/BO8wrZl30U=) 2: EAC6FF9417C011EF8877F40DC4F9AE02.roa (hash: vNmzdKjnse/Z+176RlP2x/L1BQHH992M43sbUobIhx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 778 (0x30a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DA4/serialNumber=BB4C9665E75F9E19DAD46F8B609D3444FB68ED47 Validity Not Before: Nov 23 00:51:51 2024 GMT Not After : Nov 30 00:51:51 2024 GMT Subject: CN=67412727-c5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:c0:ba:17:1c:b0:79:f4:f0:d4:bf:e8:4c: 50:a5:97:ac:7f:a0:af:10:62:8e:68:03:b0:a9:79: 22:d9:04:21:22:8f:c5:c1:e0:f6:00:b5:d7:db:91: 74:9e:64:9a:a0:0f:fa:bb:45:76:cb:4a:e4:af:73: 7f:5c:85:69:c4:45:78:e6:e5:f5:42:b1:46:93:7d: a9:ea:ab:28:b8:b5:f5:eb:53:b5:ac:ae:2b:98:5d: fb:40:73:c5:24:4c:8a:05:62:45:3e:ee:5d:4e:bc: 8a:71:3c:69:8a:ff:a3:a6:33:64:df:31:bd:19:e6: 66:d8:b1:58:24:11:9a:87:1f:b1:0c:46:14:73:bc: f8:3d:69:2e:52:8c:04:36:27:35:d7:a4:08:89:9a: c4:22:86:e3:d3:f7:11:03:b0:74:b0:14:21:fb:c5: 85:0c:df:94:71:11:b2:df:34:8a:55:33:1b:cb:4f: db:dc:25:19:e7:d7:c3:98:a1:09:36:44:57:db:d9: 83:b0:b5:04:6c:be:a4:c1:7c:69:3c:0c:f6:05:0a: ed:b0:3f:d6:cc:94:6d:01:4f:ca:65:bf:8e:a8:e2: 35:b9:bc:8b:ee:f8:45:b0:fa:4b:e6:1c:e5:75:ed: f3:e3:ca:6b:de:7d:6d:31:92:6e:60:91:08:55:7a: 88:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:81:A6:7D:86:E4:96:D4:D3:8B:69:ED:26:5A:5C:81:D3:CB:21:FD X509v3 Authority Key Identifier: keyid:BB:4C:96:65:E7:5F:9E:19:DA:D4:6F:8B:60:9D:34:44:FB:68:ED:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0yWZedfnhna1G-LYJ00RPto7Uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DA4/8AD49F7EBAE811ECA82F141CC4F9AE02/u0yWZedfnhna1G-LYJ00RPto7Uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f9:ee:89:14:52:25:3e:0b:c0:f0:71:dd:08:cb:34:f4:d7: 7c:8f:b4:46:b0:2b:0d:32:65:a2:68:74:ba:43:0d:97:ea:06: 4d:cc:d1:4f:49:6f:a0:60:6f:b5:ea:fd:b8:5f:aa:f2:e4:7d: 8a:73:ff:29:41:22:fe:74:4a:f5:e4:35:a3:6b:1e:35:e7:0e: a9:ed:07:2f:fe:ab:d5:08:38:de:8c:27:89:c0:16:f7:fb:df: 8d:9f:8d:30:6c:73:4c:35:8c:03:a8:3e:5d:ab:04:29:ff:38: 44:75:94:0e:52:d3:d0:66:93:f8:07:e8:f8:4e:78:ca:90:2a: 88:51:db:71:27:d9:e5:9e:1d:25:5a:d6:1e:c7:e9:b8:c7:ef: 13:67:37:ca:9d:90:73:42:c5:7d:6b:80:de:ac:58:34:c4:1e: 12:29:6f:41:78:e9:0e:9b:0a:89:cc:3c:b5:da:24:ea:39:47: 77:a8:f5:0d:6a:34:57:67:b6:25:67:f6:70:a7:0c:d4:4f:ed: 00:e6:f0:26:65:9b:37:06:50:53:45:07:2b:af:46:f3:d6:11: 63:a0:e1:56:93:ea:46:83:9d:b2:fb:28:26:ae:36:b5:24:62: ed:85:42:20:03:1d:e9:66:04:5a:9e:79:ea:a2:16:fc:8f:b5: 04:9d:2b:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQTQxMTAvBgNVBAUTKEJCNEM5NjY1RTc1RjlFMTlEQUQ0NkY4QjYwOUQzNDQ0 RkI2OEVENDcwHhcNMjQxMTIzMDA1MTUxWhcNMjQxMTMwMDA1MTUxWjAYMRYwFAYD VQQDEw02NzQxMjcyNy1jNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW3AuhccsHn08NS/6ExQpZesf6CvEGKOaAOwqXki2QQhIo/FweD2ALXX25F0 nmSaoA/6u0V2y0rkr3N/XIVpxEV45uX1QrFGk32p6qsouLX161O1rK4rmF37QHPF JEyKBWJFPu5dTryKcTxpiv+jpjNk3zG9GeZm2LFYJBGahx+xDEYUc7z4PWkuUowE Nic116QIiZrEIobj0/cRA7B0sBQh+8WFDN+UcRGy3zSKVTMby0/b3CUZ59fDmKEJ NkRX29mDsLUEbL6kwXxpPAz2BQrtsD/WzJRtAU/KZb+OqOI1ubyL7vhFsPpL5hzl de3z48pr3n1tMZJuYJEIVXqINwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOBpn2G 5JbU04tp7SZaXIHTyyH9MB8GA1UdIwQYMBaAFLtMlmXnX54Z2tRvi2CdNET7aO1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRBNC84QUQ0OUY3RUJB RTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5obmExRy1MWUowMFJQdG83 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UweVdaZWRmbmhuYTFHLUxZSjAwUlB0bzdVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRBNC84QUQ0OUY3RUJBRTgxMUVDQTgyRjE0MUNDNEY5QUUwMi91MHlXWmVkZm5o bmExRy1MWUowMFJQdG83VWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz+e6JFFIlPgvA8HHdCMs09Nd8j7RGsCsNMmWiaHS6Qw2X6gZNzNFP SW+gYG+16v24X6ry5H2Kc/8pQSL+dEr15DWjax415w6p7Qcv/qvVCDjejCeJwBb3 +9+Nn40wbHNMNYwDqD5dqwQp/zhEdZQOUtPQZpP4B+j4TnjKkCqIUdtxJ9nlnh0l WtYex+m4x+8TZzfKnZBzQsV9a4DerFg0xB4SKW9BeOkOmwqJzDy12iTqOUd3qPUN ajRXZ7YlZ/ZwpwzUT+0A5vAmZZs3BlBTRQcrr0bz1hFjoOFWk+pGg52y+ygmrja1 JGLthUIgAx3pZgRannnqohb8j7UEnSvd -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:38 2024 by rpki-client on console-ams.rpki-client.org