$ rpki-client -vvf rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft File: 5c6UvYXPCPR6j97JcE8dztA4Bow.mft (raw, json) Hash identifier: hCDk6/Nw7f456pJ6fbAyTfZZ5tWDqj7B7CK8bFZRaac= Subject key identifier: 6C:2C:BA:87:72:4D:BE:C0:0E:F8:18:D4:12:A9:12:79:D9:A9:16:34 Authority key identifier: E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C Certificate issuer: /CN=A91517A0/serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft Manifest number: 09 Signing time: Sat 23 Nov 2024 06:05:09 +0000 Manifest this update: Sat 23 Nov 2024 06:05:09 +0000 Manifest next update: Sat 30 Nov 2024 06:05:09 +0000 Files and hashes: 1: 5c6UvYXPCPR6j97JcE8dztA4Bow.crl (hash: wRS1Et3OkZMzk9BL0cm/lAS4jUgXd6lf43i0RpeIOLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517A0/serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C Validity Not Before: Nov 23 06:05:09 2024 GMT Not After : Nov 30 06:05:09 2024 GMT Subject: CN=67417095-43be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:36:1f:54:68:47:67:9d:9b:79:16:38:15: df:3c:d1:4b:a6:47:15:ce:0d:42:5e:86:f1:7d:3b: d0:1b:0b:9b:cd:da:ec:9d:e7:2c:16:0d:78:8a:88: 3c:25:96:65:ab:07:d7:11:77:29:42:19:5e:c7:f1: a0:1a:7c:77:53:bb:2f:13:b6:be:2f:16:92:0b:eb: 21:ca:d6:7f:e1:10:f5:c0:6e:83:17:b6:11:55:f7: bf:44:f6:3a:73:63:a7:fb:ed:f2:e4:dd:82:58:32: dd:52:4f:60:c4:bb:99:68:60:f0:34:45:3b:63:83: 69:33:3e:93:37:c8:f8:f3:d4:76:34:f1:a4:1e:68: 82:78:08:1b:9c:f5:7d:e1:d7:77:b7:28:58:2d:a2: 03:1c:bb:18:9b:47:e8:c1:64:a6:90:e9:fe:46:f8: c3:fe:7c:83:01:9e:7d:74:78:d5:03:2a:38:ea:ea: bf:82:c2:8b:02:64:22:fc:b3:5a:f7:ef:0a:4b:29: 7f:92:24:c6:67:c0:b0:4d:c5:23:ae:41:1b:8f:b9: 35:9b:73:68:6b:c4:65:3a:63:ce:5b:5b:5f:7d:9f: d9:8d:6c:5b:80:22:c1:00:de:fc:ff:ef:e7:41:51: cf:48:76:36:bb:aa:3c:4a:75:79:9a:ce:34:fe:14: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2C:BA:87:72:4D:BE:C0:0E:F8:18:D4:12:A9:12:79:D9:A9:16:34 X509v3 Authority Key Identifier: keyid:E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:7c:5f:f0:af:2b:65:64:7d:ca:47:10:50:70:4a:bd:bc:58: 57:06:61:2a:fd:f2:ec:8a:31:c8:a5:6c:0f:cd:0a:ca:8f:cd: f5:1b:7a:b3:a5:f8:57:15:f7:e5:e0:1d:86:75:16:8f:e7:b6: b4:6d:8c:96:ff:9b:6b:88:e8:c9:3c:60:f1:d1:2e:e6:e5:c0: 13:78:8c:92:d6:0e:97:34:c4:5d:36:26:d8:5f:fd:ef:97:f2: c2:e7:61:2a:7a:92:2c:62:26:57:ca:3b:e0:b7:64:7c:c0:9b: e3:a6:de:72:a7:3b:a1:19:d1:34:6e:4b:08:87:af:28:9e:37: 17:b9:8a:b6:c7:d8:59:83:03:77:a5:13:cc:9c:a0:40:b3:1b: 45:58:36:6c:43:55:ce:c2:a4:6f:1a:7c:cd:2e:ca:b6:f5:5a: 27:04:bb:bb:e8:4b:fe:f1:0f:35:7c:ee:a6:66:a2:32:7c:4c: ae:d3:42:2d:99:b2:9b:64:94:a4:e2:47:bd:c4:31:49:c3:57: cf:28:d7:3b:8e:92:73:74:d5:44:68:6e:5e:73:4e:f8:9b:fc: 85:55:65:81:ab:a0:7f:44:1d:11:7e:5b:10:48:17:a2:43:c6: 56:ca:62:3c:1e:d2:09:cf:5c:d0:a9:1f:c6:90:24:54:24:67: 81:fc:57:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTdBMDExMC8GA1UEBRMoRTVDRTk0QkQ4NUNGMDhGNDdBOEZERUM5NzA0RjFEQ0VE MDM4MDY4QzAeFw0yNDExMjMwNjA1MDlaFw0yNDExMzAwNjA1MDlaMBgxFjAUBgNV BAMTDTY3NDE3MDk1LTQzYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7jjYfVGhHZ52beRY4Fd880UumRxXODUJehvF9O9AbC5vN2uyd5ywWDXiKiDwl lmWrB9cRdylCGV7H8aAafHdTuy8Ttr4vFpIL6yHK1n/hEPXAboMXthFV979E9jpz Y6f77fLk3YJYMt1ST2DEu5loYPA0RTtjg2kzPpM3yPjz1HY08aQeaIJ4CBuc9X3h 13e3KFgtogMcuxibR+jBZKaQ6f5G+MP+fIMBnn10eNUDKjjq6r+CwosCZCL8s1r3 7wpLKX+SJMZnwLBNxSOuQRuPuTWbc2hrxGU6Y85bW199n9mNbFuAIsEA3vz/7+dB Uc9Idja7qjxKdXmazjT+FPfZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbCy6h3JN vsAO+BjUEqkSedmpFjQwHwYDVR0jBBgwFoAU5c6UvYXPCPR6j97JcE8dztA4Boww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxN0EwLzk1NUZBNTUyOUY2 OTExRUZBNEZFQUY2NUM0RjlBRTAyLzVjNlV2WVhQQ1BSNmo5N0pjRThkenRBNEJv dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNWM2VXZZWFBDUFI2ajk3SmNFOGR6dEE0Qm93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx N0EwLzk1NUZBNTUyOUY2OTExRUZBNEZFQUY2NUM0RjlBRTAyLzVjNlV2WVhQQ1BS Nmo5N0pjRThkenRBNEJvdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC58X/CvK2VkfcpHEFBwSr28WFcGYSr98uyKMcilbA/NCsqPzfUberOl +FcV9+XgHYZ1Fo/ntrRtjJb/m2uI6Mk8YPHRLublwBN4jJLWDpc0xF02Jthf/e+X 8sLnYSp6kixiJlfKO+C3ZHzAm+Om3nKnO6EZ0TRuSwiHryieNxe5irbH2FmDA3el E8ycoECzG0VYNmxDVc7CpG8afM0uyrb1WicEu7voS/7xDzV87qZmojJ8TK7TQi2Z sptklKTiR73EMUnDV88o1zuOknN01URobl5zTvib/IVVZYGroH9EHRF+WxBIF6JD xlbKYjwe0gnPXNCpH8aQJFQkZ4H8VyE= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:02 2024 by rpki-client on console-ams.rpki-client.org