$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft File: V09tVmTqm98xXPZMjl5n0mODwgU.mft (raw, json) Hash identifier: WbP5/Isbs2wFasTpT+V4SJhLdTtoFS4KpPeZGeY0EJM= Subject key identifier: BD:E3:98:3D:16:BD:75:33:D0:AE:AE:49:5A:CD:70:6E:78:0F:75:A9 Authority key identifier: 57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 Certificate issuer: /CN=A91B85FC/serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Certificate serial: 0A88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft Manifest number: 0A82 Signing time: Fri 22 Nov 2024 19:22:50 +0000 Manifest this update: Fri 22 Nov 2024 19:22:49 +0000 Manifest next update: Fri 29 Nov 2024 19:22:49 +0000 Files and hashes: 1: V09tVmTqm98xXPZMjl5n0mODwgU.crl (hash: YvBG3/IrFtF/wz7Mgzp3ZZNWs/k5uzYUSIy2Jp81RSQ=) 2: 52216250493611EAA0968624C4F9AE02.roa (hash: XjkXLtL5CTFLl3MU4C1ptKiUasRS1cFai/QK6ioOeWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2696 (0xa88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B85FC/serialNumber=574F6D5664EA9BDF315CF64C8E5E67D26383C205 Validity Not Before: Nov 22 19:22:49 2024 GMT Not After : Nov 29 19:22:49 2024 GMT Subject: CN=6740da09-fda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:be:fe:d5:2b:f3:73:d9:bf:52:45:67:93: 5a:bc:b6:22:3c:99:9d:2c:e6:df:3e:12:14:6a:1a: 4b:2a:ff:1b:78:cb:4c:eb:fe:5c:91:47:cf:c5:55: fd:7f:45:93:09:13:4a:01:2c:db:52:7e:ac:a5:5d: 72:cf:07:d5:0b:ae:45:e4:3d:50:38:d8:e6:37:56: 4d:fc:6a:72:e5:32:60:e1:df:17:75:70:cf:30:d7: 32:8e:b5:17:12:84:47:60:64:2d:72:f2:a6:57:31: d2:7f:bd:16:b9:f1:e0:1b:0b:45:9e:f8:a2:66:47: 10:25:44:3b:4e:11:d8:0b:40:5c:83:4b:33:15:63: 09:15:70:6b:d0:51:2b:ed:62:d2:06:83:15:ff:99: 9d:98:dd:79:a0:2c:68:4a:82:7a:24:9c:a3:55:cf: 2c:c1:28:6d:39:e2:7c:31:93:67:c7:4b:f4:8e:f2: ae:7c:6d:b8:5e:6a:de:c4:fc:76:85:07:4a:6a:a2: be:89:df:9e:6c:0e:9b:2a:85:52:b6:ee:ab:5a:9f: bc:07:f4:17:f3:c2:af:71:f1:13:38:5d:86:40:0d: 4c:0b:50:b8:af:92:33:41:d9:36:e9:e4:25:78:7e: 33:36:84:26:83:15:d8:f7:7c:5c:80:8a:a0:dd:5c: 78:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E3:98:3D:16:BD:75:33:D0:AE:AE:49:5A:CD:70:6E:78:0F:75:A9 X509v3 Authority Key Identifier: keyid:57:4F:6D:56:64:EA:9B:DF:31:5C:F6:4C:8E:5E:67:D2:63:83:C2:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V09tVmTqm98xXPZMjl5n0mODwgU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85FC/8816EFF8493411EAAD84BF1EC4F9AE02/V09tVmTqm98xXPZMjl5n0mODwgU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:f8:5f:1b:1c:9a:55:4e:da:7b:54:cb:85:dd:89:6f:05:57: 50:5e:9b:50:3b:6a:65:e9:a7:a4:25:fa:73:80:3f:e3:f4:48: 29:99:bd:8f:b7:90:24:4e:71:74:b8:d0:59:4d:4f:20:14:b6: fe:16:64:72:d6:8b:8e:72:85:d0:7c:7f:8b:1c:91:0b:d4:a5: 39:f3:51:6a:9c:75:76:19:83:13:27:11:c6:24:b0:06:35:a3: b7:b4:f2:5a:3b:e2:77:11:ac:05:53:fd:0d:f4:d0:0c:0f:9e: f3:46:8e:bd:3e:6d:5f:ea:1e:43:4d:40:62:68:a5:56:c2:b4: 92:b9:9e:3c:2e:e7:c7:9b:38:6a:3f:7a:4d:57:98:21:75:74: d2:6c:3b:b1:be:f6:a9:db:28:7c:ba:a1:75:39:c3:3a:1e:b8: e7:58:ce:47:bb:b3:0d:5c:bb:d7:29:4d:2b:b5:74:ee:be:c6: b0:2c:f5:f1:cc:3b:75:ff:62:dc:9a:f6:8f:25:58:7d:4c:ad: 4d:1b:c4:17:ae:3a:d4:a1:15:5e:54:fc:95:b0:c4:91:6a:6c: 54:e7:99:a8:6a:64:45:57:a3:5c:7b:6b:d7:f1:60:0b:c5:93: 4b:3f:25:0b:a9:d2:4f:21:b5:83:e4:5e:55:51:8d:43:8e:6a: ba:ca:d9:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg1RkMxMTAvBgNVBAUTKDU3NEY2RDU2NjRFQTlCREYzMTVDRjY0QzhFNUU2N0Qy NjM4M0MyMDUwHhcNMjQxMTIyMTkyMjQ5WhcNMjQxMTI5MTkyMjQ5WjAYMRYwFAYD VQQDEw02NzQwZGEwOS1mZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsK2+/tUr83PZv1JFZ5NavLYiPJmdLObfPhIUahpLKv8beMtM6/5ckUfPxVX9 f0WTCRNKASzbUn6spV1yzwfVC65F5D1QONjmN1ZN/Gpy5TJg4d8XdXDPMNcyjrUX EoRHYGQtcvKmVzHSf70WufHgGwtFnviiZkcQJUQ7ThHYC0Bcg0szFWMJFXBr0FEr 7WLSBoMV/5mdmN15oCxoSoJ6JJyjVc8swShtOeJ8MZNnx0v0jvKufG24XmrexPx2 hQdKaqK+id+ebA6bKoVStu6rWp+8B/QX88KvcfETOF2GQA1MC1C4r5IzQdk26eQl eH4zNoQmgxXY93xcgIqg3Vx4YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3jmD0W vXUz0K6uSVrNcG54D3WpMB8GA1UdIwQYMBaAFFdPbVZk6pvfMVz2TI5eZ9Jjg8IF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVGQy84ODE2RUZGODQ5 MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05OHhYUFpNamw1bjBtT0R3 Z1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YwOXRWbVRxbTk4eFhQWk1qbDVuMG1PRHdnVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODVGQy84ODE2RUZGODQ5MzQxMUVBQUQ4NEJGMUVDNEY5QUUwMi9WMDl0Vm1UcW05 OHhYUFpNamw1bjBtT0R3Z1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV+F8bHJpVTtp7VMuF3YlvBVdQXptQO2pl6aekJfpzgD/j9Egpmb2P t5AkTnF0uNBZTU8gFLb+FmRy1ouOcoXQfH+LHJEL1KU581FqnHV2GYMTJxHGJLAG NaO3tPJaO+J3EawFU/0N9NAMD57zRo69Pm1f6h5DTUBiaKVWwrSSuZ48LufHmzhq P3pNV5ghdXTSbDuxvvap2yh8uqF1OcM6HrjnWM5Hu7MNXLvXKU0rtXTuvsawLPXx zDt1/2LcmvaPJVh9TK1NG8QXrjrUoRVeVPyVsMSRamxU55moamRFV6Nce2vX8WAL xZNLPyULqdJPIbWD5F5VUY1Djmq6ytka -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org