$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json) Hash identifier: NlxjiN1LEERo8dAtqnt5FHnc7/eRscfPFmdpjyb5nW4= Subject key identifier: EA:FF:69:D7:F3:CE:19:E5:C5:99:BC:4E:84:EC:A7:0D:1A:91:BB:77 Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft Manifest number: CB Signing time: Sat 23 Nov 2024 03:53:44 +0000 Manifest this update: Sat 23 Nov 2024 03:53:44 +0000 Manifest next update: Sat 30 Nov 2024 03:53:44 +0000 Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: zEbpCNl7kIcApl4eV+/n2Xg8HrO6rAj+s9WrejQOl4g=) 2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: SUwPdVpyD78LluiuQbCbX3WP+GiH5YDeeAZtixdrMe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Validity Not Before: Nov 23 03:53:44 2024 GMT Not After : Nov 30 03:53:44 2024 GMT Subject: CN=674151c8-e45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:59:f1:91:40:fe:14:2d:a0:8c:7f:d6:62: 20:2f:de:b2:b7:54:c1:87:8c:fa:97:01:7b:fd:ae: 66:74:be:a1:6f:45:82:37:ed:9b:57:a0:86:36:0c: 72:3f:0a:d7:d5:22:44:44:6e:8b:68:7f:0c:62:bf: da:5c:51:e1:9f:a5:a0:40:7e:c5:28:6d:ba:d5:cc: e8:ae:58:ce:30:bb:35:24:9a:47:2b:ee:43:1f:48: 03:8e:05:59:3d:31:16:5f:d9:2b:15:f0:f0:04:95: 63:2b:19:10:c6:63:83:a8:69:e1:5e:e5:51:ee:f1: 79:62:9f:78:ec:23:b1:36:82:94:20:55:51:92:05: 06:36:73:ff:41:7b:6d:18:72:3b:1e:53:0d:d3:8d: 0b:4a:03:75:02:43:ac:22:be:59:d1:ba:22:58:15: 94:40:64:6a:9b:2a:3a:a6:7a:36:9a:28:18:75:08: 20:d0:b7:46:db:3d:ca:6c:82:49:dc:43:48:c8:7b: 96:0a:a7:df:9a:70:2e:db:05:25:cb:be:ef:97:67: f8:b0:3d:4e:17:7b:76:3b:74:35:a5:4a:d2:f4:44: ea:5f:8b:1d:e4:b0:27:05:28:72:9a:04:d5:8e:9a: 31:39:0a:09:8c:36:4e:ab:dd:e8:31:e2:5b:58:35: 92:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FF:69:D7:F3:CE:19:E5:C5:99:BC:4E:84:EC:A7:0D:1A:91:BB:77 X509v3 Authority Key Identifier: keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8d:35:d2:ea:1d:d7:05:23:6a:22:37:68:c1:cc:1d:5a:e1: 6f:91:ef:0a:88:b3:68:6d:71:c3:af:fd:27:d6:21:e9:03:5d: cb:18:e6:88:55:6e:ab:e3:66:09:62:9d:5c:7e:dc:f4:c4:86: c4:0d:1c:f9:28:74:e1:be:56:b3:d0:8b:30:6a:3e:0c:c8:7b: d8:1f:e5:1a:e6:65:67:b0:3f:3d:43:01:29:5e:d6:31:ae:da: e7:2d:d4:ae:87:38:06:85:ac:93:5c:5c:31:19:55:09:e7:45: 43:2d:61:37:5e:2b:89:3f:09:f4:99:e5:8b:e7:ab:cd:5a:3f: f2:03:e1:d1:5e:1c:e3:89:81:0d:ad:d9:d6:d8:cb:91:f0:d9: b3:33:46:a5:99:49:1a:5e:67:6f:98:78:f6:27:f4:b6:2e:f3: 98:2e:da:4a:86:4b:23:4e:43:50:6f:77:9c:58:e1:fb:4e:48: eb:96:e1:74:50:36:9a:60:d3:4a:4a:d3:54:32:a7:39:20:22: 0f:09:95:71:e0:7e:9c:e7:a5:7d:d8:ce:e2:59:c5:48:45:73: 64:ed:89:df:ff:d4:5f:1c:91:03:c1:d9:80:13:c8:e6:ff:e1: 3b:d5:bb:2d:6e:02:2f:fe:2a:b8:4e:be:7a:ad:f0:23:3e:62: e4:8e:a7:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0RUU4MUY1RTI2 MUFFNjcxQzkwHhcNMjQxMTIzMDM1MzQ0WhcNMjQxMTMwMDM1MzQ0WjAYMRYwFAYD VQQDEw02NzQxNTFjOC1lNDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVxZ8ZFA/hQtoIx/1mIgL96yt1TBh4z6lwF7/a5mdL6hb0WCN+2bV6CGNgxy PwrX1SJERG6LaH8MYr/aXFHhn6WgQH7FKG261czorljOMLs1JJpHK+5DH0gDjgVZ PTEWX9krFfDwBJVjKxkQxmODqGnhXuVR7vF5Yp947COxNoKUIFVRkgUGNnP/QXtt GHI7HlMN040LSgN1AkOsIr5Z0boiWBWUQGRqmyo6pno2migYdQgg0LdG2z3KbIJJ 3ENIyHuWCqffmnAu2wUly77vl2f4sD1OF3t2O3Q1pUrS9ETqX4sd5LAnBShymgTV jpoxOQoJjDZOq93oMeJbWDWSQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOr/adfz zhnlxZm8ToTspw0akbt3MB8GA1UdIwQYMBaAFLTtsNbMtfAMkwQ3TugfXiYa5nHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkFDNi9BMUI2Q0JFQTc5 N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThBeVRCRGRPNkI5ZUpocm1j Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThB eVRCRGRPNkI5ZUpocm1jY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxjTXS6h3XBSNqIjdowcwdWuFvke8KiLNobXHDr/0n1iHpA13LGOaI VW6r42YJYp1cftz0xIbEDRz5KHThvlaz0Iswaj4MyHvYH+Ua5mVnsD89QwEpXtYx rtrnLdSuhzgGhayTXFwxGVUJ50VDLWE3XiuJPwn0meWL56vNWj/yA+HRXhzjiYEN rdnW2MuR8NmzM0almUkaXmdvmHj2J/S2LvOYLtpKhksjTkNQb3ecWOH7TkjrluF0 UDaaYNNKStNUMqc5ICIPCZVx4H6c56V92M7iWcVIRXNk7Ynf/9RfHJEDwdmAE8jm /+E71bstbgIv/iq4Tr56rfAjPmLkjqem -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:43 2024 by rpki-client on console-fra.rpki-client.org