$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json) Hash identifier: JPR7tZaji3D39J1u0gBB24OfpB1HxBBDqut+fr90LNw= Subject key identifier: 08:19:27:AB:2E:0E:BC:4D:AA:EA:44:54:E8:EC:DB:07:62:57:95:E4 Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft Manifest number: 47 Signing time: Sat 23 Nov 2024 05:19:18 +0000 Manifest this update: Sat 23 Nov 2024 05:19:18 +0000 Manifest next update: Sat 30 Nov 2024 05:19:18 +0000 Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: g8wGIGhux1uZiss/0Xye6x7lP1TzIkv0Vz9g258lxXM=) 2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: o7hk30ShUIz7UkIOVQj3yZK9QaxLJPC0RUpttTojnJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Validity Not Before: Nov 23 05:19:18 2024 GMT Not After : Nov 30 05:19:18 2024 GMT Subject: CN=674165d6-7128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d9:ce:5d:9f:12:89:7c:6e:98:bb:85:75:d5: 4c:42:23:0a:53:8d:f7:fa:c9:f4:f0:b1:63:12:22: b5:7d:57:66:f3:cf:78:c8:4d:a4:41:75:f7:77:4b: 40:26:b1:41:70:d1:af:4e:0a:ab:ee:8a:7f:75:86: 83:80:6b:6d:1c:f9:78:dc:55:62:73:ae:f6:ef:eb: bd:41:78:19:1c:5e:7c:5b:c0:6b:9f:a4:38:e6:6e: 9d:9b:69:8e:66:40:66:76:4b:29:94:17:1e:1f:7b: 3f:8a:22:07:c9:af:ce:fe:0d:6b:c3:36:27:b8:c4: e7:9d:35:03:bd:4b:a3:6e:59:4a:39:d1:a5:c1:e7: ee:b8:86:f8:41:d6:c5:97:14:33:96:e1:9a:11:e4: 86:3b:dc:88:6a:5b:91:12:a4:34:39:51:33:af:b8: 19:a1:4b:ea:61:c1:a8:71:08:02:f2:6c:1e:ac:56: 8d:34:3d:0c:45:fb:66:27:9a:d5:c3:f8:56:e2:b7: 61:a9:6b:f0:ba:07:29:86:f6:cb:e6:41:eb:7c:fb: 77:94:bd:a0:6b:9f:bd:be:47:34:3b:95:3e:d2:02: 35:d4:32:d7:ee:77:9b:ad:3a:71:d8:6a:74:10:e2: 8e:9e:14:1f:ec:9f:64:81:d8:94:d4:ce:99:09:dd: 92:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:19:27:AB:2E:0E:BC:4D:AA:EA:44:54:E8:EC:DB:07:62:57:95:E4 X509v3 Authority Key Identifier: keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:10:ca:dd:12:f2:21:d7:c7:d9:0d:30:ad:c5:c3:7a:12:4a: 70:d7:8a:4b:0b:a8:ae:82:5c:a8:4f:c0:09:1e:22:05:9f:cc: 7f:8e:5c:3b:4d:5a:f9:1f:48:bd:5e:e6:bd:11:1e:66:d3:ef: 17:f9:e8:e1:d1:48:ab:1f:c6:62:3b:70:ef:e4:96:82:6a:f1: be:e4:f3:8e:a4:31:20:80:e6:f3:b2:1a:91:51:31:d3:93:1a: 3a:4f:a4:99:05:6f:75:93:92:37:ca:52:e3:e8:95:55:1a:ca: 79:f2:9b:32:4e:97:78:75:7a:16:bb:17:50:f8:30:8a:a5:02: 0a:6d:fb:e6:bd:a8:52:77:fc:f4:a2:3d:8e:b1:a2:5e:33:6e: d0:71:49:33:50:47:4f:03:5d:ad:cd:c7:a7:36:23:89:81:f1: 70:3b:6e:89:2a:41:84:b2:bd:5d:12:50:28:a4:4d:2f:b3:b4: c3:1d:70:67:ae:bc:e6:94:98:2c:3d:01:a3:6e:22:d6:ca:3a: 50:8b:31:f3:3b:ba:d2:cf:78:bb:f1:be:27:ef:ee:46:fb:e2: ca:7c:e5:7f:c5:95:2d:21:60:f1:0e:69:52:b0:9e:d7:d0:72: 8e:1a:57:83:6d:97:d5:91:06:a9:b7:0b:64:c0:35:7b:8b:b0: 68:87:4a:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MUE5QzExMC8GA1UEBRMoQjU5REZEQjUwOEE5QkFCRENGOERBQUFGRTNGM0RFNjk1 OUZCMTNBQTAeFw0yNDExMjMwNTE5MThaFw0yNDExMzAwNTE5MThaMBgxFjAUBgNV BAMTDTY3NDE2NWQ2LTcxMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDo2c5dnxKJfG6Yu4V11UxCIwpTjff6yfTwsWMSIrV9V2bzz3jITaRBdfd3S0Am sUFw0a9OCqvuin91hoOAa20c+XjcVWJzrvbv671BeBkcXnxbwGufpDjmbp2baY5m QGZ2SymUFx4fez+KIgfJr87+DWvDNie4xOedNQO9S6NuWUo50aXB5+64hvhB1sWX FDOW4ZoR5IY73IhqW5ESpDQ5UTOvuBmhS+phwahxCALybB6sVo00PQxF+2YnmtXD +Fbit2Gpa/C6BymG9svmQet8+3eUvaBrn72+RzQ7lT7SAjXUMtfud5utOnHYanQQ 4o6eFB/sn2SB2JTUzpkJ3ZKBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCBknqy4O vE2q6kRU6OzbB2JXleQwHwYDVR0jBBgwFoAUtZ39tQipur3Pjaqv4/PeaVn7E6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxQTlDLzhFOEIzRTdFNDA3 MDExRUZCNEExODAwQUM0RjlBRTAyL3RaMzl0UWlwdXIzUGphcXY0X1BlYVZuN0U2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdFozOXRRaXB1cjNQamFxdjRfUGVhVm43RTZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx QTlDLzhFOEIzRTdFNDA3MDExRUZCNEExODAwQUM0RjlBRTAyL3RaMzl0UWlwdXIz UGphcXY0X1BlYVZuN0U2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI8Qyt0S8iHXx9kNMK3Fw3oSSnDXiksLqK6CXKhPwAkeIgWfzH+OXDtN WvkfSL1e5r0RHmbT7xf56OHRSKsfxmI7cO/kloJq8b7k846kMSCA5vOyGpFRMdOT GjpPpJkFb3WTkjfKUuPolVUaynnymzJOl3h1eha7F1D4MIqlAgpt++a9qFJ3/PSi PY6xol4zbtBxSTNQR08DXa3Nx6c2I4mB8XA7bokqQYSyvV0SUCikTS+ztMMdcGeu vOaUmCw9AaNuItbKOlCLMfM7utLPeLvxvifv7kb74sp85X/FlS0hYPEOaVKwntfQ co4aV4Ntl9WRBqm3C2TANXuLsGiHSiM= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:24 2024 by rpki-client on console-ams.rpki-client.org