$ rpki-client -vvf rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft File: t9SqT11yMa9OdH93IkWsA3ECEPA.mft (raw, json) Hash identifier: lMYf9G1VGNFQI3KHWkdPdUceJ6777L8sKk/ddDAM3+c= Subject key identifier: 24:B1:F0:27:FB:57:8C:E1:96:E7:4E:62:21:18:F6:F0:98:A3:04:B5 Authority key identifier: B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0 Certificate issuer: /CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft Manifest number: 01B5 Signing time: Sat 23 Nov 2024 01:48:00 +0000 Manifest this update: Sat 23 Nov 2024 01:47:59 +0000 Manifest next update: Sat 30 Nov 2024 01:47:59 +0000 Files and hashes: 1: t9SqT11yMa9OdH93IkWsA3ECEPA.crl (hash: 4VAIUIsTeS45nPntOky1wB64UQg4+LjBGxcuEWr694A=) 2: 5D5B0F7C34CA11EDA301482BC4F9AE02.roa (hash: QdE82JCa+rzN4wKDDSZqFCcZCfWColrn6QaXFC11S4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0 Validity Not Before: Nov 23 01:47:59 2024 GMT Not After : Nov 30 01:47:59 2024 GMT Subject: CN=67413450-c912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f2:74:13:be:26:30:c8:06:db:98:23:2c:21: 7f:23:57:5b:6a:80:52:47:bc:e8:69:e8:ff:fe:dc: 18:12:eb:90:59:d1:ac:78:76:21:c6:c6:75:fd:f5: 9f:6b:85:8c:a4:4b:d5:51:67:cd:6d:c9:49:91:54: 76:cc:f6:fc:03:93:57:0e:5e:93:ec:75:c5:de:05: 09:75:cc:55:5f:45:f0:ec:9a:68:7f:84:d2:b3:eb: 1b:d4:bd:d6:4b:ec:cf:cb:3b:ab:a8:cc:cb:4f:b4: 27:5a:1a:e2:86:4c:4d:d8:27:71:3c:c8:b7:27:5e: f5:3d:a7:35:cb:af:6f:25:b4:38:05:e9:54:13:2e: be:91:7a:22:77:41:4d:6e:e8:e2:2a:1c:1b:e6:70: 87:fe:99:74:16:2e:29:cf:61:25:14:46:29:a9:aa: 53:8c:bd:f9:5c:d3:e0:05:ce:67:19:f6:f1:c6:f8: a7:29:17:98:cf:46:99:11:d0:00:82:49:34:4f:ed: c9:f3:9a:77:9e:08:a0:94:a8:82:d4:77:31:c8:3c: 6c:50:71:7f:18:cd:15:49:29:75:d9:ab:40:a6:79: c7:0f:8a:b4:ed:48:1b:2d:29:3f:8b:3d:7d:d7:b0: 32:60:47:39:33:fc:e7:20:6b:20:c9:33:2a:57:21: 88:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B1:F0:27:FB:57:8C:E1:96:E7:4E:62:21:18:F6:F0:98:A3:04:B5 X509v3 Authority Key Identifier: keyid:B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:3a:b0:72:16:f5:97:45:a1:de:56:fd:9e:f2:ce:f4:5e:0d: b8:80:7e:21:b0:bc:63:29:78:85:94:bf:1e:03:5b:c8:84:26: af:35:cd:8e:83:70:fb:b4:57:cd:28:81:aa:ca:5c:15:d0:6a: ca:ef:80:41:84:1c:12:2d:d3:41:81:d1:9b:33:7b:e2:a8:0e: b5:a0:75:2b:8a:8d:1c:78:67:3b:ec:8e:91:2a:b6:7b:e4:26: 36:a6:49:a4:d9:71:47:ea:29:c3:f4:78:fd:c1:60:04:fb:21: 1a:f6:41:5a:28:e4:bd:51:71:92:d1:dd:fb:03:f7:fe:8d:4e: 48:7b:4f:a7:33:1d:a5:f4:74:f4:a9:d9:96:2c:4f:81:bd:f0: e1:97:e0:d4:c0:10:1e:01:b1:d1:0b:10:69:59:b0:e8:f1:ec: c0:f7:a7:82:82:32:c1:a8:6b:6b:86:ac:ec:ac:f1:f4:66:b1: 60:e5:73:d8:41:56:30:4c:79:85:09:bd:06:3f:3e:da:76:3d: 25:ad:7c:77:a1:11:63:22:72:4e:6f:df:61:1b:51:7c:d3:f9: b2:c2:8a:17:bb:fa:46:ae:30:d3:77:35:7a:ee:b0:af:b6:c3: 57:c8:fd:df:2a:2d:a2:c6:40:d7:0b:53:83:33:19:86:70:df: c9:f0:1a:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RjYxMTAvBgNVBAUTKEI3RDRBQTRGNUQ3MjMxQUY0RTc0N0Y3NzIyNDVBQzAz NzEwMjEwRjAwHhcNMjQxMTIzMDE0NzU5WhcNMjQxMTMwMDE0NzU5WjAYMRYwFAYD VQQDEw02NzQxMzQ1MC1jOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fJ0E74mMMgG25gjLCF/I1dbaoBSR7zoaej//twYEuuQWdGseHYhxsZ1/fWf a4WMpEvVUWfNbclJkVR2zPb8A5NXDl6T7HXF3gUJdcxVX0Xw7Jpof4TSs+sb1L3W S+zPyzurqMzLT7QnWhrihkxN2CdxPMi3J171Pac1y69vJbQ4BelUEy6+kXoid0FN bujiKhwb5nCH/pl0Fi4pz2ElFEYpqapTjL35XNPgBc5nGfbxxvinKReYz0aZEdAA gkk0T+3J85p3ngiglKiC1HcxyDxsUHF/GM0VSSl12atApnnHD4q07UgbLSk/iz19 17AyYEc5M/znIGsgyTMqVyGIAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSx8Cf7 V4zhludOYiEY9vCYowS1MB8GA1UdIwQYMBaAFLfUqk9dcjGvTnR/dyJFrANxAhDw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGNi8xM0E0MjBBODM0 MjAxMUVEODVFQ0JGMzNDNEY5QUUwMi90OVNxVDExeU1hOU9kSDkzSWtXc0EzRUNF UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5U3FUMTF5TWE5T2RIOTNJa1dzQTNFQ0VQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVGNi8xM0E0MjBBODM0MjAxMUVEODVFQ0JGMzNDNEY5QUUwMi90OVNxVDExeU1h OU9kSDkzSWtXc0EzRUNFUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9OrByFvWXRaHeVv2e8s70Xg24gH4hsLxjKXiFlL8eA1vIhCavNc2O g3D7tFfNKIGqylwV0GrK74BBhBwSLdNBgdGbM3viqA61oHUrio0ceGc77I6RKrZ7 5CY2pkmk2XFH6inD9Hj9wWAE+yEa9kFaKOS9UXGS0d37A/f+jU5Ie0+nMx2l9HT0 qdmWLE+BvfDhl+DUwBAeAbHRCxBpWbDo8ezA96eCgjLBqGtrhqzsrPH0ZrFg5XPY QVYwTHmFCb0GPz7adj0lrXx3oRFjInJOb99hG1F80/mywooXu/pGrjDTdzV67rCv tsNXyP3fKi2ixkDXC1ODMxmGcN/J8Bru -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:32 2024 by rpki-client on console-ams.rpki-client.org