$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json) Hash identifier: zzW4Scly08MNbw/FagbMNouuI0Urll8eE/uwHFevyTk= Subject key identifier: 16:CA:BE:0F:E5:DD:1F:69:4B:4C:4E:43:03:22:1C:F7:FC:4C:CB:36 Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Certificate serial: B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft Manifest number: B0 Signing time: Sat 23 Nov 2024 04:10:16 +0000 Manifest this update: Sat 23 Nov 2024 04:10:16 +0000 Manifest next update: Sat 30 Nov 2024 04:10:16 +0000 Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: nMemq/C1AoNd7Rvu4nqJyIzcpQ5nn8Iv/IUrs62QHq0=) 2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: WWv1zP+/ieoUNA4o8+/TPeIk+mIn2LFhm0aViRzuk9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Validity Not Before: Nov 23 04:10:16 2024 GMT Not After : Nov 30 04:10:16 2024 GMT Subject: CN=674155a8-aed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:62:7a:ff:72:20:a1:0f:ad:70:92:b8:46: 8a:f0:c6:4e:ee:5b:bf:a7:56:03:87:ec:4f:af:1b: 9a:62:fb:ba:ac:d8:5e:85:03:34:d4:e5:35:51:35: 45:8c:48:df:23:54:b7:60:59:63:93:aa:e1:0d:59: d3:26:7b:21:93:4a:6d:e8:72:fc:8a:da:50:11:65: c2:cc:33:42:02:c5:b4:07:9e:c8:90:04:b2:4f:ef: e2:99:9e:e0:b3:de:2c:b1:2b:35:be:ad:fe:63:e6: 4a:35:0c:cd:cb:93:da:cd:50:ef:7d:50:4b:77:fa: 8f:f7:cc:8e:30:63:1c:e9:44:83:d7:d6:6d:1f:00: f1:0e:41:12:4b:ee:43:4b:31:1a:04:1b:1b:ef:bb: 73:b7:6c:31:27:9f:df:08:01:31:11:22:4f:3a:ec: 6b:4e:8b:a1:2b:c0:11:93:e7:4e:d0:0c:20:34:ce: 82:42:0a:6b:70:f8:4c:a1:46:15:c7:7a:39:01:7f: 94:37:aa:bc:30:0f:29:55:2c:65:04:63:14:5d:81: 38:69:8d:39:b2:8a:85:42:aa:cf:e5:ca:60:3f:5d: 7a:1a:1d:0d:dd:f3:16:74:09:27:90:fd:7c:65:7d: ee:98:ac:b4:06:35:bc:97:fa:66:28:5a:f4:42:a1: 9a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CA:BE:0F:E5:DD:1F:69:4B:4C:4E:43:03:22:1C:F7:FC:4C:CB:36 X509v3 Authority Key Identifier: keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:55:38:33:1d:71:f0:b5:fe:b4:bb:d0:8b:b9:fe:30:02:fe: 0f:7b:59:6d:1c:d3:6f:b8:99:23:b9:3c:d2:7d:d5:17:73:1d: 86:14:32:ee:bb:68:7a:b3:b8:11:77:99:eb:32:1d:5a:b9:2a: 9c:c1:0d:df:25:5d:56:2f:ba:f7:6d:e1:2b:f2:78:61:b7:74: 3b:82:a1:61:e5:6a:a3:c0:fa:a4:4a:46:51:be:ca:72:7a:92: 83:2b:e5:2e:15:73:f0:fb:41:f5:92:95:4f:11:a7:ec:89:48: f3:c6:fe:a6:5a:f6:72:77:35:62:e7:f5:15:ea:c2:22:40:87: da:5b:2b:68:5c:28:9c:eb:5f:86:ef:2b:78:fd:f7:ee:b2:65: 20:23:28:c4:31:00:67:dd:af:75:77:c7:50:63:a2:c8:74:14: 83:92:39:35:2e:e7:5e:dc:fb:68:c9:03:dc:1d:96:f1:2e:31: 0f:a0:d0:c6:aa:3c:38:4b:39:63:bb:cc:f1:39:3a:c0:1c:1d: 1a:6d:45:f1:11:d2:95:72:f6:b7:dc:97:f9:a4:ac:63:e9:4e: 72:87:3b:d4:43:52:32:5e:00:2a:57:45:6d:73:b7:ab:6e:04: 74:75:3f:c4:53:86:e8:da:09:1b:96:31:8f:c6:64:7c:57:0c: fc:dd:e8:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAzNzIxMTAvBgNVBAUTKEYyOUIyM0VBNEUxMTRDREM5Q0E2RDM3RjVFRjc5RUY0 QzM1QzcyODIwHhcNMjQxMTIzMDQxMDE2WhcNMjQxMTMwMDQxMDE2WjAYMRYwFAYD VQQDEw02NzQxNTVhOC1hZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmliev9yIKEPrXCSuEaK8MZO7lu/p1YDh+xPrxuaYvu6rNhehQM01OU1UTVF jEjfI1S3YFljk6rhDVnTJnshk0pt6HL8itpQEWXCzDNCAsW0B57IkASyT+/imZ7g s94ssSs1vq3+Y+ZKNQzNy5PazVDvfVBLd/qP98yOMGMc6USD19ZtHwDxDkESS+5D SzEaBBsb77tzt2wxJ5/fCAExESJPOuxrTouhK8ARk+dO0AwgNM6CQgprcPhMoUYV x3o5AX+UN6q8MA8pVSxlBGMUXYE4aY05soqFQqrP5cpgP116Gh0N3fMWdAknkP18 ZX3umKy0BjW8l/pmKFr0QqGaRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbKvg/l 3R9pS0xOQwMiHPf8TMs2MB8GA1UdIwQYMBaAFPKbI+pOEUzcnKbTf173nvTDXHKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDM3Mi8yMEE1NEZDODlE ODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlROeWNwdE5fWHZlZTlNTmNj b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhwc2o2azRSVE55Y3B0Tl9YdmVlOU1OY2NvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDM3Mi8yMEE1NEZDODlEODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlRO eWNwdE5fWHZlZTlNTmNjb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4VTgzHXHwtf60u9CLuf4wAv4Pe1ltHNNvuJkjuTzSfdUXcx2GFDLu u2h6s7gRd5nrMh1auSqcwQ3fJV1WL7r3beEr8nhht3Q7gqFh5WqjwPqkSkZRvspy epKDK+UuFXPw+0H1kpVPEafsiUjzxv6mWvZydzVi5/UV6sIiQIfaWytoXCic61+G 7yt4/ffusmUgIyjEMQBn3a91d8dQY6LIdBSDkjk1Lude3PtoyQPcHZbxLjEPoNDG qjw4Szlju8zxOTrAHB0abUXxEdKVcva33Jf5pKxj6U5yhzvUQ1IyXgAqV0Vtc7er bgR0dT/EU4bo2gkbljGPxmR8Vwz83ehV -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:22 2024 by rpki-client on console-ams.rpki-client.org