$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: B5WLXprXnQ1uup18yboyscDlCe8QuP0xyVi7FbR5aqg= Subject key identifier: 0C:F3:65:BC:E0:2D:6F:3F:5B:37:2C:10:D9:62:31:99:28:F2:18:9B Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 010F Signing time: Sat 23 Nov 2024 03:07:18 +0000 Manifest this update: Sat 23 Nov 2024 03:07:18 +0000 Manifest next update: Sat 30 Nov 2024 03:07:18 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: VteGLWtYeNxH7+9GekBHpJUcecRxacqwvZ1dPenqRcw=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: /g02epL+NyCJaEeLF1U/HHteqWgxtq7I5NLpXCZSdQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: Nov 23 03:07:18 2024 GMT Not After : Nov 30 03:07:18 2024 GMT Subject: CN=674146e6-982e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2b:61:1f:25:90:a8:8c:08:42:35:cd:07:8b: 1c:be:18:d5:0f:05:e8:f2:9c:03:e9:18:f1:e2:54: bd:85:0a:79:86:ec:a9:1e:c9:ef:9d:29:1f:b4:62: 40:30:fe:c6:97:05:d5:a8:b8:a7:e5:26:c4:a9:96: 8c:9a:fb:e4:08:10:89:cc:d5:58:e1:53:4b:72:28: 6d:35:3d:6b:75:48:8a:2e:de:af:91:cc:b2:c4:e8: 38:ea:30:3e:e5:7a:27:43:c0:ce:8f:34:98:fd:8f: ba:30:1c:fd:2e:b6:69:00:c6:47:6f:2b:9f:5b:e0: f8:6a:b7:8d:f3:ac:bd:ac:71:4b:7d:12:1d:50:46: 51:a9:c4:5c:c2:b8:ad:f4:b4:81:a7:58:77:31:97: 5f:9f:25:e4:51:3f:a7:d3:fc:0c:9b:c4:6f:c8:4a: 65:ca:3b:8c:36:47:f6:f0:4a:3c:ca:4d:18:dd:bb: 1b:7e:d4:8f:20:83:94:07:75:e7:13:af:4a:ce:69: f1:92:7b:d8:8b:44:4b:9b:1a:ea:db:4b:3a:45:a4: 7a:a6:8a:d7:2d:e5:4f:13:e7:68:93:65:4e:c9:7b: 02:90:c7:a3:95:24:c4:2b:57:cb:f5:24:2e:54:c0: 96:5f:91:36:ff:0e:6a:68:4a:3c:57:dc:98:c4:3b: d3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F3:65:BC:E0:2D:6F:3F:5B:37:2C:10:D9:62:31:99:28:F2:18:9B X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b2:98:d6:e6:ac:91:64:b4:2f:0c:38:09:12:43:dd:ed:0e: b4:97:95:e2:ac:91:4d:70:0c:bb:88:7d:8a:f4:ea:8f:74:95: 23:a5:9a:34:87:b5:9b:e4:81:26:eb:12:d0:1c:a2:e8:9a:f9: 10:8f:d6:f2:cc:5b:d1:89:5d:5f:a3:f7:d4:fc:8b:e2:33:e8: 49:df:14:bf:b5:7d:03:d6:d5:66:53:57:ab:36:25:b2:62:db: 39:b3:f4:c2:83:54:55:fe:40:38:04:c9:ba:40:d1:79:6b:b3: da:a5:23:9e:b5:ee:e6:2f:28:20:9f:04:f4:3d:1c:da:13:94: 85:d1:bd:42:cf:70:75:8e:ea:21:69:c8:c6:35:e2:25:c3:9d: 7e:0e:92:cb:d6:26:4b:23:a6:1e:73:e0:16:bb:15:16:54:32: 9e:1a:9e:ac:92:ad:74:11:78:e3:71:61:8d:48:f6:90:a5:37: 45:14:e2:23:b6:13:b6:00:f6:f5:c9:2d:50:b4:fa:bb:9b:57: d1:1d:14:2e:5f:dc:0a:ce:f5:3b:20:ae:60:ed:68:52:ad:22: 40:77:aa:95:ef:17:7b:13:44:28:7e:72:2f:4f:cd:d2:71:79: 45:8e:bd:03:ef:34:d2:3e:2c:1f:15:c9:2b:7e:98:e7:57:20: 21:95:be:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjQxMTIzMDMwNzE4WhcNMjQxMTMwMDMwNzE4WjAYMRYwFAYD VQQDEw02NzQxNDZlNi05ODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoithHyWQqIwIQjXNB4scvhjVDwXo8pwD6Rjx4lS9hQp5huypHsnvnSkftGJA MP7GlwXVqLin5SbEqZaMmvvkCBCJzNVY4VNLcihtNT1rdUiKLt6vkcyyxOg46jA+ 5XonQ8DOjzSY/Y+6MBz9LrZpAMZHbyufW+D4areN86y9rHFLfRIdUEZRqcRcwrit 9LSBp1h3MZdfnyXkUT+n0/wMm8RvyEplyjuMNkf28Eo8yk0Y3bsbftSPIIOUB3Xn E69KzmnxknvYi0RLmxrq20s6RaR6porXLeVPE+dok2VOyXsCkMejlSTEK1fL9SQu VMCWX5E2/w5qaEo8V9yYxDvThwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzzZbzg LW8/WzcsENliMZko8hibMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSspjW5qyRZLQvDDgJEkPd7Q60l5XirJFNcAy7iH2K9OqPdJUjpZo0 h7Wb5IEm6xLQHKLomvkQj9byzFvRiV1fo/fU/IviM+hJ3xS/tX0D1tVmU1erNiWy Yts5s/TCg1RV/kA4BMm6QNF5a7PapSOete7mLyggnwT0PRzaE5SF0b1Cz3B1juoh acjGNeIlw51+DpLL1iZLI6Yec+AWuxUWVDKeGp6skq10EXjjcWGNSPaQpTdFFOIj thO2APb1yS1QtPq7m1fRHRQuX9wKzvU7IK5g7WhSrSJAd6qV7xd7E0QofnIvT83S cXlFjr0D7zTSPiwfFckrfpjnVyAhlb47 -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org