$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft File: lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft (raw, json) Hash identifier: 7YJjy+LPqOSLGrrw/ZFVfQKWLXp3UhbtQtX/ggas21o= Subject key identifier: 10:A5:12:8E:1A:E5:DC:9B:4D:99:8F:E6:86:E1:94:CD:90:60:00:4D Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 Certificate issuer: /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft Manifest number: 01EB Signing time: Sat 23 Nov 2024 01:40:20 +0000 Manifest this update: Sat 23 Nov 2024 01:40:19 +0000 Manifest next update: Sat 30 Nov 2024 01:40:19 +0000 Files and hashes: 1: lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl (hash: /WYzA0j3U+UlCkpZpz7M+1shW056j2Ef9SQAtDHFVRI=) 2: AF6A12881EBB11EDB35A2561C4F9AE02.roa (hash: cKa9eR42THXESBXh5GR6j0R3nTxgHwhQOzuCbJGCePs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0 Validity Not Before: Nov 23 01:40:19 2024 GMT Not After : Nov 30 01:40:19 2024 GMT Subject: CN=67413283-57b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:c9:c6:84:78:28:46:90:d9:af:72:93:80: 56:0b:0c:a2:92:1d:fc:b8:51:b4:af:c7:60:9d:39: 8d:94:6e:6d:b4:7c:87:1e:63:eb:e2:1b:e3:65:1f: 4f:64:d6:c1:69:90:56:97:a8:af:d7:35:3d:cf:cd: 25:d7:0d:dd:69:28:9d:ce:16:2f:fc:20:e5:68:35: 73:ff:b7:03:4f:bb:d7:b0:90:55:a8:d3:f0:bb:ca: 8d:0a:cb:56:bc:18:74:e6:53:cd:ee:34:96:e0:aa: 44:af:8e:85:43:0b:79:32:ff:9f:5d:81:eb:91:7b: 20:3f:fa:ce:92:77:e6:9e:87:8d:64:96:a7:2e:79: 37:c2:ba:b8:97:b1:e0:32:d1:a9:ef:03:3d:bf:45: 8b:4a:94:a5:8d:6d:88:e6:06:fb:ce:2a:bd:99:e2: 71:f9:23:5c:96:b0:65:d3:5c:65:a3:f0:a2:9a:0b: b9:a1:13:11:ac:1e:80:51:9e:51:f4:00:22:37:b6: b0:b8:1e:43:3d:15:35:19:6d:bb:dc:17:ae:72:80: b3:fc:32:08:d9:a2:39:ed:0d:c4:40:99:25:f0:c0: 02:c7:5c:41:3c:2c:c9:52:46:3a:87:05:81:fb:31: 7c:2e:7e:bf:80:3f:25:bb:3a:85:c3:8e:c1:a0:d2: 46:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A5:12:8E:1A:E5:DC:9B:4D:99:8F:E6:86:E1:94:CD:90:60:00:4D X509v3 Authority Key Identifier: keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:4f:43:c4:88:36:1c:7d:e9:fa:34:49:5a:88:2c:77:93:ec: 49:b6:1b:96:b9:3a:a4:bb:95:01:da:73:f5:74:70:a5:97:4e: 0a:07:41:92:bd:ee:de:5e:5f:b7:13:16:a9:2c:c5:64:f7:0f: de:24:7e:70:8d:df:ae:11:8d:af:78:8a:77:27:1e:ff:5f:83: 27:73:b2:b9:26:73:bd:28:ab:2f:9e:99:1b:50:b9:fa:19:03: 90:e0:fd:d6:1d:18:ec:39:d1:d7:ca:ac:79:46:85:a4:40:d5: 33:b9:52:eb:7f:f8:ab:54:c3:43:d1:dc:56:11:8d:36:87:79: f4:a8:69:82:36:f9:1f:67:78:12:5d:69:22:d0:8b:91:10:47: 0f:07:a2:24:a3:22:3f:a9:cf:2a:ea:55:a7:ed:f3:73:68:85: 34:13:da:23:99:a5:7e:99:a4:8d:8c:b6:dd:16:dc:1a:bc:00: c4:16:60:c9:3a:f5:80:66:8e:f3:f4:c4:ff:55:c5:80:b5:d8: 92:f0:eb:1d:10:b6:18:76:ed:58:83:97:cb:96:69:c8:0c:47: 61:06:fd:1a:f3:a6:bc:e2:99:99:20:4a:0a:2e:14:36:70:08: f0:f6:3e:83:0e:1e:1f:af:40:75:27:43:f6:6c:3f:8d:24:ed: 7f:8c:82:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBGMUYxMTAvBgNVBAUTKDk1MkY3MTJERjExODQxMjA4QTNCNEE4NzQ2MjBDNTlG RUVENzcwQjAwHhcNMjQxMTIzMDE0MDE5WhcNMjQxMTMwMDE0MDE5WjAYMRYwFAYD VQQDEw02NzQxMzI4My01N2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZXJxoR4KEaQ2a9yk4BWCwyikh38uFG0r8dgnTmNlG5ttHyHHmPr4hvjZR9P ZNbBaZBWl6iv1zU9z80l1w3daSidzhYv/CDlaDVz/7cDT7vXsJBVqNPwu8qNCstW vBh05lPN7jSW4KpEr46FQwt5Mv+fXYHrkXsgP/rOknfmnoeNZJanLnk3wrq4l7Hg MtGp7wM9v0WLSpSljW2I5gb7ziq9meJx+SNclrBl01xlo/Cimgu5oRMRrB6AUZ5R 9AAiN7awuB5DPRU1GW273BeucoCz/DII2aI57Q3EQJkl8MACx1xBPCzJUkY6hwWB +zF8Ln6/gD8luzqFw47BoNJG5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBClEo4a 5dybTZmP5obhlM2QYABNMB8GA1UdIwQYMBaAFJUvcS3xGEEgijtKh0YgxZ/u13Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEYxRi82QzBGRUY1QTFF QjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFTQ0tPMHFIUmlERm4tN1hj TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTOXhMZkVZUVNDS08wcUhSaURGbi03WGNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEYxRi82QzBGRUY1QTFFQjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFT Q0tPMHFIUmlERm4tN1hjTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApT0PEiDYcfen6NElaiCx3k+xJthuWuTqku5UB2nP1dHCll04KB0GS ve7eXl+3ExapLMVk9w/eJH5wjd+uEY2veIp3Jx7/X4Mnc7K5JnO9KKsvnpkbULn6 GQOQ4P3WHRjsOdHXyqx5RoWkQNUzuVLrf/irVMND0dxWEY02h3n0qGmCNvkfZ3gS XWki0IuREEcPB6IkoyI/qc8q6lWn7fNzaIU0E9ojmaV+maSNjLbdFtwavADEFmDJ OvWAZo7z9MT/VcWAtdiS8OsdELYYdu1Yg5fLlmnIDEdhBv0a86a84pmZIEoKLhQ2 cAjw9j6DDh4fr0B1J0P2bD+NJO1/jIK2 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:31 2024 by rpki-client on console-ams.rpki-client.org