$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft File: mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json) Hash identifier: u2qV/Q2Ec0nTIHMUxo86TOYq0H+Qql5uukaX8a768JE= Subject key identifier: 11:E6:55:2D:39:34:C6:2E:F5:54:C1:64:DB:40:B3:49:5E:80:14:AB Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft Manifest number: BD Signing time: Sat 23 Nov 2024 03:59:49 +0000 Manifest this update: Sat 23 Nov 2024 03:59:48 +0000 Manifest next update: Sat 30 Nov 2024 03:59:48 +0000 Files and hashes: 1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: wdv+akpj4+Zw36CMKHYSAbI9z7qDVSCBJhHHrywYKE8=) 2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: xXj+TZCLhrIdzyPWF6AJ+EZHZBHKwdF6FraC4iYNXC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Validity Not Before: Nov 23 03:59:48 2024 GMT Not After : Nov 30 03:59:48 2024 GMT Subject: CN=67415334-b31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c3:ac:82:9a:bb:7c:6b:15:3b:49:31:30:b2: c2:06:9b:c3:26:a8:b5:23:c3:77:e5:e1:d0:15:4b: 61:a7:b3:61:bf:da:31:3f:e6:1c:14:8c:72:d7:22: 60:c6:71:3c:0e:9c:ca:42:37:7d:83:1d:87:87:8e: 09:ca:d2:80:d4:6b:4f:03:9d:ea:18:82:e1:91:38: c3:f1:84:9f:f3:49:5c:aa:c5:d3:b3:8b:4d:2d:9b: 70:1e:4b:31:1b:ef:3a:05:03:4b:35:0f:43:31:7e: 21:38:72:3c:b3:45:47:d8:42:ca:35:5a:c7:d3:89: 07:ed:42:97:25:bc:4f:69:1a:77:71:5f:25:b5:25: 01:f4:44:20:dd:ea:69:99:30:66:00:a7:59:fa:3a: 15:60:d7:04:36:41:3a:c3:8a:04:b4:91:3d:84:a1: 97:99:14:c7:a7:15:ca:d7:ff:f3:6a:9b:6e:21:4f: 77:13:78:3a:00:29:22:7b:fc:5e:cd:7b:4a:d9:09: 19:52:e8:ea:02:c3:a0:6e:cf:29:18:61:ec:68:68: ef:25:64:64:15:f6:44:63:4f:82:c0:c8:12:7f:d1: 98:ab:84:46:ab:df:4b:88:82:f9:c7:89:eb:51:f7: a8:af:2d:75:86:b8:4d:bc:81:ed:8f:f1:f5:43:08: ae:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E6:55:2D:39:34:C6:2E:F5:54:C1:64:DB:40:B3:49:5E:80:14:AB X509v3 Authority Key Identifier: keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:10:52:f0:11:c2:f7:b7:52:7a:55:8d:33:1b:78:b4:3f:95: 76:eb:ba:e1:53:c0:b7:c8:f3:c2:2b:42:07:f7:05:55:de:b2: 0f:8f:2f:18:46:ed:60:65:ac:21:c6:c6:70:8c:6e:75:e5:81: c5:d2:a9:c9:06:d5:b2:8d:d8:b3:09:98:f0:f2:de:05:31:8e: d4:50:b5:7e:c3:d9:0c:2b:7b:1c:4a:de:86:11:91:16:de:8e: 7b:ca:0c:8e:2b:a7:32:62:c7:cd:c4:81:94:a1:f5:9d:68:4b: 64:30:2e:14:18:f3:02:6e:d2:98:30:fc:21:ce:9e:05:66:77: 0b:09:aa:0d:71:38:03:ea:8c:b4:5b:70:c2:91:a3:d0:e1:f0: c9:a1:6c:03:13:9b:c2:03:58:5c:dd:bc:c7:55:d4:8e:04:5a: 80:ed:c4:4a:1f:3f:58:13:ec:4e:df:89:1d:76:9e:bd:43:18: 32:bd:9d:55:06:13:56:0b:84:26:84:a4:25:84:ce:7e:5a:70: 8d:8f:2a:8c:9d:62:1c:d9:9d:8c:27:6a:cc:67:18:02:d6:18: c0:4b:e8:ae:8a:4a:73:e8:ab:a2:49:18:2c:56:58:a9:a8:0c: 8e:76:26:6d:d7:94:0d:db:f3:0d:63:a0:1b:4b:cd:f5:11:8e: 12:c9:d1:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk1OTExMTAvBgNVBAUTKDlBRDM0OUY0NTQ4NTNCQjE4OTJBRkVGNjA0OEMxODcy NTgwNTc3NjEwHhcNMjQxMTIzMDM1OTQ4WhcNMjQxMTMwMDM1OTQ4WjAYMRYwFAYD VQQDEw02NzQxNTMzNC1iMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcOsgpq7fGsVO0kxMLLCBpvDJqi1I8N35eHQFUthp7Nhv9oxP+YcFIxy1yJg xnE8DpzKQjd9gx2Hh44JytKA1GtPA53qGILhkTjD8YSf80lcqsXTs4tNLZtwHksx G+86BQNLNQ9DMX4hOHI8s0VH2ELKNVrH04kH7UKXJbxPaRp3cV8ltSUB9EQg3epp mTBmAKdZ+joVYNcENkE6w4oEtJE9hKGXmRTHpxXK1//zaptuIU93E3g6ACkie/xe zXtK2QkZUujqAsOgbs8pGGHsaGjvJWRkFfZEY0+CwMgSf9GYq4RGq99LiIL5x4nr Ufeory11hrhNvIHtj/H1QwiuLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHmVS05 NMYu9VTBZNtAs0legBSrMB8GA1UdIwQYMBaAFJrTSfRUhTuxiSr+9gSMGHJYBXdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTU5MS9ERUQ4MzU2ODg5 MkMxMUVFOTQ3NzgxNkRDNEY5QUUwMi9tdE5KOUZTRk83R0pLdjcyQkl3WWNsZ0Zk MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL210Tko5RlNGTzdHSkt2NzJCSXdZY2xnRmQyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTU5MS9ERUQ4MzU2ODg5MkMxMUVFOTQ3NzgxNkRDNEY5QUUwMi9tdE5KOUZTRk83 R0pLdjcyQkl3WWNsZ0ZkMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjEFLwEcL3t1J6VY0zG3i0P5V267rhU8C3yPPCK0IH9wVV3rIPjy8Y Ru1gZawhxsZwjG515YHF0qnJBtWyjdizCZjw8t4FMY7UULV+w9kMK3scSt6GEZEW 3o57ygyOK6cyYsfNxIGUofWdaEtkMC4UGPMCbtKYMPwhzp4FZncLCaoNcTgD6oy0 W3DCkaPQ4fDJoWwDE5vCA1hc3bzHVdSOBFqA7cRKHz9YE+xO34kddp69QxgyvZ1V BhNWC4QmhKQlhM5+WnCNjyqMnWIc2Z2MJ2rMZxgC1hjAS+iuikpz6KuiSRgsVlip qAyOdiZt15QN2/MNY6AbS831EY4SydFj -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org