$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6805/9C005F88792F11EAB4505841C4F9AE02/0m3dRZwIWSJhDP72YHCQEbIVyU4.mft File: 0m3dRZwIWSJhDP72YHCQEbIVyU4.mft (raw, json) Hash identifier: bVrVJ58LTae50Xz7nK261lx7LCJwH2i0CivAAZpcl6E= Subject key identifier: C4:26:01:37:F0:F4:72:03:1E:91:3D:37:35:5C:0E:68:E8:8E:ED:D0 Authority key identifier: D2:6D:DD:45:9C:08:59:22:61:0C:FE:F6:60:70:90:11:B2:15:C9:4E Certificate issuer: /CN=A91F6805/serialNumber=D26DDD459C085922610CFEF660709011B215C94E Certificate serial: 099D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m3dRZwIWSJhDP72YHCQEbIVyU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6805/9C005F88792F11EAB4505841C4F9AE02/0m3dRZwIWSJhDP72YHCQEbIVyU4.mft Manifest number: 0995 Signing time: Fri 22 Nov 2024 19:49:37 +0000 Manifest this update: Fri 22 Nov 2024 19:49:36 +0000 Manifest next update: Fri 29 Nov 2024 19:49:36 +0000 Files and hashes: 1: 0m3dRZwIWSJhDP72YHCQEbIVyU4.crl (hash: SRJDah+0DeXsxtyVn6rat7VtQVePaubdMJhcuM3u2xU=) 2: 70B72EB4F7C111EE8AFA9D2BC4F9AE02.roa (hash: 9LdNWEZZU/w7CgJQR6XieRsUyJf6z+vLtFXOdCAfNEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6805/9C005F88792F11EAB4505841C4F9AE02/0m3dRZwIWSJhDP72YHCQEbIVyU4.crl rsync://rpki.apnic.net/member_repository/A91F6805/9C005F88792F11EAB4505841C4F9AE02/0m3dRZwIWSJhDP72YHCQEbIVyU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m3dRZwIWSJhDP72YHCQEbIVyU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2461 (0x99d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6805/serialNumber=D26DDD459C085922610CFEF660709011B215C94E Validity Not Before: Nov 22 19:49:36 2024 GMT Not After : Nov 29 19:49:36 2024 GMT Subject: CN=6740e050-2b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:30:f1:1f:75:11:46:46:68:d3:f2:dd:f9:a2: 43:8c:e2:89:f8:36:fa:cd:99:2d:a7:bc:8d:b4:89: c4:ca:c6:fd:95:88:f1:87:94:7d:44:b9:f9:d9:07: 33:d8:e6:24:18:da:98:ed:82:f5:be:94:59:2a:a4: d0:25:bc:07:08:80:e7:e5:e4:9a:e1:f4:b5:9f:9d: f7:8c:1a:a9:da:b2:fe:01:1f:55:31:c1:a6:74:b1: 80:18:28:31:fc:a0:e2:0f:0d:ce:93:ed:21:4c:1d: 7a:99:69:f1:c0:3f:15:7e:82:65:b8:3f:09:d5:7a: 13:ac:8f:65:3e:d6:5d:2f:a1:31:b1:0d:64:c3:09: 47:87:79:09:3d:e2:37:69:bc:85:88:f6:5d:3c:74: 09:46:22:0c:ec:4c:da:9f:55:2f:44:d0:8f:72:75: 7c:ee:35:c2:0b:01:67:b8:61:72:4f:da:7d:1d:9c: 3d:86:05:c7:38:6c:87:70:2c:3f:8d:49:c3:ca:0c: 39:d6:2c:5d:93:df:70:28:9c:e0:97:6e:a8:6a:2f: 3d:61:e5:86:6f:de:28:ac:43:ca:13:2e:7e:2f:ab: 64:de:f3:39:2f:7d:4b:b6:6c:db:47:a8:49:10:7e: e3:30:27:1e:57:1e:e4:a7:1a:2d:50:30:83:0a:98: 5f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:26:01:37:F0:F4:72:03:1E:91:3D:37:35:5C:0E:68:E8:8E:ED:D0 X509v3 Authority Key Identifier: keyid:D2:6D:DD:45:9C:08:59:22:61:0C:FE:F6:60:70:90:11:B2:15:C9:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6805/9C005F88792F11EAB4505841C4F9AE02/0m3dRZwIWSJhDP72YHCQEbIVyU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m3dRZwIWSJhDP72YHCQEbIVyU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6805/9C005F88792F11EAB4505841C4F9AE02/0m3dRZwIWSJhDP72YHCQEbIVyU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bc:1a:48:67:c5:28:80:e8:f7:3a:39:c6:c6:0b:2c:09:f7: 33:0b:17:0c:8c:23:64:d3:a8:8d:9d:fe:23:c6:29:a3:96:37: f8:2b:93:7c:7a:2d:34:f4:b3:14:68:34:40:1f:b5:71:79:d4: b0:1b:4e:f6:fb:99:d6:35:c5:b2:56:b7:0e:84:a8:10:d8:40: d1:90:e4:47:70:4a:21:1d:6e:a8:e8:00:db:87:a5:5a:4e:5d: 4c:9b:9e:7c:84:96:05:5d:60:bf:94:62:a6:2f:82:cf:7a:ae: d1:3a:a7:ed:50:86:23:0d:86:37:cf:04:dd:a2:46:ba:93:3e: 14:10:c8:6b:57:f1:41:8f:51:da:7a:b5:94:5f:23:45:9e:82: 4c:1c:c4:d6:ad:6f:a8:6f:33:6b:b7:56:7e:54:fe:08:d4:98: 87:82:8f:25:1f:1b:d3:d2:7c:53:25:56:03:12:fd:25:b3:c4: 09:0f:3d:54:c0:93:a9:98:c1:f9:b8:93:c7:6d:d0:a5:1a:56: b4:50:63:85:4d:0d:56:92:71:ee:02:25:d0:d9:45:e2:fb:d7: f2:c3:1b:15:c7:a6:e8:37:d7:cd:d0:77:7d:f1:d8:58:47:3b: 5e:f8:78:03:4d:c8:55:6d:ec:86:14:cd:e2:5f:9d:a3:e7:c4: 87:b5:c3:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY4MDUxMTAvBgNVBAUTKEQyNkRERDQ1OUMwODU5MjI2MTBDRkVGNjYwNzA5MDEx QjIxNUM5NEUwHhcNMjQxMTIyMTk0OTM2WhcNMjQxMTI5MTk0OTM2WjAYMRYwFAYD VQQDEw02NzQwZTA1MC0yYjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8TDxH3URRkZo0/Ld+aJDjOKJ+Db6zZktp7yNtInEysb9lYjxh5R9RLn52Qcz 2OYkGNqY7YL1vpRZKqTQJbwHCIDn5eSa4fS1n533jBqp2rL+AR9VMcGmdLGAGCgx /KDiDw3Ok+0hTB16mWnxwD8VfoJluD8J1XoTrI9lPtZdL6ExsQ1kwwlHh3kJPeI3 abyFiPZdPHQJRiIM7Ezan1UvRNCPcnV87jXCCwFnuGFyT9p9HZw9hgXHOGyHcCw/ jUnDygw51ixdk99wKJzgl26oai89YeWGb94orEPKEy5+L6tk3vM5L31LtmzbR6hJ EH7jMCceVx7kpxotUDCDCphfWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQmATfw 9HIDHpE9NzVcDmjoju3QMB8GA1UdIwQYMBaAFNJt3UWcCFkiYQz+9mBwkBGyFclO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjgwNS85QzAwNUY4ODc5 MkYxMUVBQjQ1MDU4NDFDNEY5QUUwMi8wbTNkUlp3SVdTSmhEUDcyWUhDUUViSVZ5 VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtM2RSWndJV1NKaERQNzJZSENRRWJJVnlVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjgwNS85QzAwNUY4ODc5MkYxMUVBQjQ1MDU4NDFDNEY5QUUwMi8wbTNkUlp3SVdT SmhEUDcyWUhDUUViSVZ5VTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcvBpIZ8UogOj3OjnGxgssCfczCxcMjCNk06iNnf4jximjljf4K5N8 ei009LMUaDRAH7VxedSwG072+5nWNcWyVrcOhKgQ2EDRkORHcEohHW6o6ADbh6Va Tl1Mm558hJYFXWC/lGKmL4LPeq7ROqftUIYjDYY3zwTdoka6kz4UEMhrV/FBj1Ha erWUXyNFnoJMHMTWrW+obzNrt1Z+VP4I1JiHgo8lHxvT0nxTJVYDEv0ls8QJDz1U wJOpmMH5uJPHbdClGla0UGOFTQ1WknHuAiXQ2UXi+9fywxsVx6boN9fN0Hd98dhY Rzte+HgDTchVbeyGFM3iX52j58SHtcPL -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org