$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: PI6/FSyG4xLY3A1h3hKbrDfrUSnEJNosGonWdZLHkAw= Subject key identifier: A5:E4:D3:1A:41:AE:4C:D1:E0:00:3A:8E:C7:92:06:16:82:ED:84:AB Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 038C Signing time: Sat 23 Nov 2024 00:21:47 +0000 Manifest this update: Sat 23 Nov 2024 00:21:47 +0000 Manifest next update: Sat 30 Nov 2024 00:21:47 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: NDiBr3xvFyh4CwUwn1OZEoo4w9svQAKDH+XHsqs+DGc=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 9AbsTY8cTY46TpPDuvc4IXAIWNpWgIpIVFjtcxPCVMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Validity Not Before: Nov 23 00:21:47 2024 GMT Not After : Nov 30 00:21:47 2024 GMT Subject: CN=6741201b-2099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:13:f0:f0:55:0f:9a:4b:8c:aa:44:7e:af: c8:26:32:fa:fe:20:04:c1:04:af:a2:a2:01:b0:5a: 58:1d:c9:a4:6c:b4:fc:f0:2c:9a:67:35:32:aa:67: 7c:2a:e1:c0:be:63:a9:1f:b2:11:8a:fa:56:82:97: d4:11:4d:30:dc:94:56:14:31:83:89:16:47:51:31: 42:36:6b:96:79:a9:f8:22:04:ac:52:7e:6c:bb:b6: a8:10:45:1b:69:3d:ef:1f:fe:59:bc:6a:74:2e:b1: 9d:3a:17:34:d0:48:a2:ef:d9:fe:ab:13:29:35:fb: 0d:76:af:ca:7e:ce:f0:86:bb:30:9d:12:cb:eb:f3: 1f:7d:19:f3:d7:42:77:78:1d:92:48:ee:52:e3:64: ed:44:f4:af:31:77:92:fc:77:8d:0d:3f:7d:f4:ad: a5:f5:eb:c5:5a:9b:64:e3:80:a1:99:e4:19:5a:ad: 8c:eb:e0:b4:77:59:48:d6:2c:5a:16:f2:8d:a3:c7: 6e:aa:61:77:a3:0f:91:7c:b4:cd:24:94:84:e2:3a: ae:df:85:29:3e:7d:1c:d3:2c:47:8f:86:71:53:5f: c0:db:f8:67:07:8e:62:5c:f9:d6:1b:bc:85:10:ae: c3:5d:1d:5e:9e:31:41:27:64:f1:da:92:ce:fa:8b: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E4:D3:1A:41:AE:4C:D1:E0:00:3A:8E:C7:92:06:16:82:ED:84:AB X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:6b:5a:ee:f8:c8:18:f1:a1:c4:bf:e5:b6:a4:ad:c3:aa:aa: c7:3b:7e:1c:c2:30:d4:5c:9f:96:ab:02:56:41:89:61:48:ac: 58:7c:e2:a0:80:4c:f5:81:27:c3:c9:80:55:c2:c3:5a:ee:08: 7b:6a:cb:b0:bf:91:6b:9c:1e:c8:b1:0a:ae:05:8e:62:23:e9: fd:57:ee:4f:80:59:2e:81:29:a3:4b:ef:c0:da:b5:35:d9:f4: b4:98:2e:52:b4:a9:f9:c8:37:ed:82:b5:97:72:f7:1f:e2:41: 3b:2e:3b:af:a0:d6:ad:05:e1:8d:d8:a7:d4:1b:58:7c:12:e5: 8b:c5:19:cd:ba:38:0a:59:46:dc:30:db:f0:c5:cf:ab:a8:59: 2f:cc:49:64:3e:aa:36:14:41:1b:92:99:08:b6:35:36:6a:d1: cd:8f:22:24:ae:40:47:6a:cf:03:98:e4:3a:34:2b:d2:97:63: 36:9a:19:a9:ad:07:79:93:92:71:12:2b:ab:28:88:3d:cf:99: 52:fe:3e:8f:61:9a:1e:a7:00:94:e3:6b:6c:8a:85:65:e0:4b: 32:6a:22:26:5a:b7:7d:18:94:d2:88:9e:61:af:93:3e:b1:b4: 5b:09:63:6e:32:24:cf:3f:1f:e3:1e:85:b6:4c:5c:bb:d9:d9: ab:82:e4:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjQxMTIzMDAyMTQ3WhcNMjQxMTMwMDAyMTQ3WjAYMRYwFAYD VQQDEw02NzQxMjAxYi0yMDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwykT8PBVD5pLjKpEfq/IJjL6/iAEwQSvoqIBsFpYHcmkbLT88CyaZzUyqmd8 KuHAvmOpH7IRivpWgpfUEU0w3JRWFDGDiRZHUTFCNmuWean4IgSsUn5su7aoEEUb aT3vH/5ZvGp0LrGdOhc00Eii79n+qxMpNfsNdq/Kfs7whrswnRLL6/MffRnz10J3 eB2SSO5S42TtRPSvMXeS/HeNDT999K2l9evFWptk44ChmeQZWq2M6+C0d1lI1ixa FvKNo8duqmF3ow+RfLTNJJSE4jqu34UpPn0c0yxHj4ZxU1/A2/hnB45iXPnWG7yF EK7DXR1enjFBJ2Tx2pLO+osnnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXk0xpB rkzR4AA6jseSBhaC7YSrMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVa1ru+MgY8aHEv+W2pK3DqqrHO34cwjDUXJ+WqwJWQYlhSKxYfOKg gEz1gSfDyYBVwsNa7gh7asuwv5FrnB7IsQquBY5iI+n9V+5PgFkugSmjS+/A2rU1 2fS0mC5StKn5yDftgrWXcvcf4kE7LjuvoNatBeGN2KfUG1h8EuWLxRnNujgKWUbc MNvwxc+rqFkvzElkPqo2FEEbkpkItjU2atHNjyIkrkBHas8DmOQ6NCvSl2M2mhmp rQd5k5JxEiurKIg9z5lS/j6PYZoepwCU42tsioVl4EsyaiImWrd9GJTSiJ5hr5M+ sbRbCWNuMiTPPx/jHoW2TFy72dmrguTs -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org