$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft File: P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json) Hash identifier: wSXUAk6+CXr5z8rRv07BJ8HY/cQ6PiOQHnGsvPsJOyI= Subject key identifier: EB:88:C3:24:6A:66:4C:5E:C4:DA:03:2A:09:09:E9:2A:79:F6:3C:36 Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D Certificate issuer: /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft Manifest number: 0490 Signing time: Fri 22 Nov 2024 23:33:30 +0000 Manifest this update: Fri 22 Nov 2024 23:33:30 +0000 Manifest next update: Fri 29 Nov 2024 23:33:30 +0000 Files and hashes: 1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: VzF9eJGkKa6wxebKrwEd+kQjoSs0AG6Q4hyvJ7rY0tw=) 2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: ECduF6HgxTLoDLFAm0PdDIfSdNYqt9EVcY+nm8e4XyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Validity Not Before: Nov 22 23:33:30 2024 GMT Not After : Nov 29 23:33:30 2024 GMT Subject: CN=674114ca-3a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:26:f5:a6:b8:02:4d:24:0a:c1:eb:ed:ea: ba:0a:06:10:77:13:a1:ae:28:09:84:eb:d9:2a:05: be:e2:4a:ec:c8:c9:19:31:75:ae:52:46:5b:f9:06: df:4a:45:6a:dd:d6:df:51:a3:b3:25:e6:37:28:b0: e1:82:ec:21:45:0b:0b:0b:a5:67:7f:4d:8b:10:93: dc:a4:c2:05:fa:50:78:00:d6:b2:db:f7:be:67:5b: eb:f9:6c:8d:b1:b6:0f:b3:14:ab:28:f3:b7:9a:14: 89:c2:03:c5:9c:9a:1a:a6:18:9a:50:db:d2:a4:16: 03:85:d6:7b:31:64:02:f3:64:51:59:65:ad:15:e4: e5:ca:f2:0e:21:47:a2:50:43:56:6e:b6:a1:4e:2e: 21:99:2d:91:8a:83:4e:11:fb:26:1a:8e:df:ce:f0: 2c:bd:77:e8:c6:88:08:d5:2d:5b:b3:ec:9c:3f:ed: f5:e4:61:17:a6:15:b7:ec:10:ff:89:85:21:65:b8: 1d:69:28:32:3d:5d:e0:8e:a4:8d:94:7a:d3:f2:ca: 87:c4:9a:0b:d3:a3:75:7b:08:9b:14:6c:c1:87:ee: 70:28:92:ec:55:7f:9d:06:c6:7a:5c:05:a1:fe:93: 7b:6b:6e:2d:d5:31:2c:28:fe:bf:ff:c1:7e:e2:79: 53:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:88:C3:24:6A:66:4C:5E:C4:DA:03:2A:09:09:E9:2A:79:F6:3C:36 X509v3 Authority Key Identifier: keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e7:53:99:79:d2:c3:ef:7f:57:ff:92:1a:95:21:8f:4a:a1: 0c:db:a8:76:37:4c:81:a4:ae:72:04:57:91:88:e0:28:14:f1: ab:88:f6:09:3d:56:40:59:15:ec:0d:62:e5:95:6e:7e:53:ec: 0e:97:cb:d8:75:1a:47:ed:9d:98:92:f9:45:0e:4c:d1:11:48: 38:9a:a8:a2:8e:63:3c:e0:56:87:3b:bf:85:97:12:f7:cd:41: 2c:a0:18:16:a2:71:64:6d:c8:bc:4b:59:b5:d2:01:14:62:fd: 2e:65:41:9e:a7:c5:f5:e9:01:0b:31:00:37:8b:10:82:00:98: 9d:2e:01:13:50:74:51:fe:5c:db:42:3f:44:19:6f:4f:5a:6c: 85:6a:2c:18:94:0f:62:15:07:4c:b7:85:65:ae:bb:f5:04:1d: 32:7c:8d:6a:95:aa:50:b7:3b:b3:cc:88:6b:2f:d7:02:39:6e: 90:14:dd:c9:eb:51:ad:03:bc:3f:20:27:0c:ab:fd:35:91:5b: 10:50:53:87:a2:31:75:b8:f5:77:89:53:47:2d:83:8c:4d:b5: c1:b1:d5:4c:23:e9:d5:2f:28:ce:ab:7d:6d:3e:b6:ba:30:a4: 98:19:6d:f0:4f:ec:a7:9f:ec:72:e3:61:39:60:67:5b:7a:4e: ce:a9:67:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ1MUMxMTAvBgNVBAUTKDNGRDUzMTYwMjU3REIwMUIyRUUwRUYwMTNDMUUyRDQy RUIxQTI4OEQwHhcNMjQxMTIyMjMzMzMwWhcNMjQxMTI5MjMzMzMwWjAYMRYwFAYD VQQDEw02NzQxMTRjYS0zYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzs8m9aa4Ak0kCsHr7eq6CgYQdxOhrigJhOvZKgW+4krsyMkZMXWuUkZb+Qbf SkVq3dbfUaOzJeY3KLDhguwhRQsLC6Vnf02LEJPcpMIF+lB4ANay2/e+Z1vr+WyN sbYPsxSrKPO3mhSJwgPFnJoaphiaUNvSpBYDhdZ7MWQC82RRWWWtFeTlyvIOIUei UENWbrahTi4hmS2RioNOEfsmGo7fzvAsvXfoxogI1S1bs+ycP+315GEXphW37BD/ iYUhZbgdaSgyPV3gjqSNlHrT8sqHxJoL06N1ewibFGzBh+5wKJLsVX+dBsZ6XAWh /pN7a24t1TEsKP6//8F+4nlTmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuIwyRq ZkxexNoDKgkJ6Sp59jw2MB8GA1UdIwQYMBaAFD/VMWAlfbAbLuDvATweLULrGiiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDUxQy9CRDMxMjcxNjE0 NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNCc3U0TzhCUEI0dFF1c2FL STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5VXhZQ1Y5c0JzdTRPOEJQQjR0UXVzYUtJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDUxQy9CRDMxMjcxNjE0NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNC c3U0TzhCUEI0dFF1c2FLSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs51OZedLD739X/5IalSGPSqEM26h2N0yBpK5yBFeRiOAoFPGriPYJ PVZAWRXsDWLllW5+U+wOl8vYdRpH7Z2YkvlFDkzREUg4mqiijmM84FaHO7+FlxL3 zUEsoBgWonFkbci8S1m10gEUYv0uZUGep8X16QELMQA3ixCCAJidLgETUHRR/lzb Qj9EGW9PWmyFaiwYlA9iFQdMt4Vlrrv1BB0yfI1qlapQtzuzzIhrL9cCOW6QFN3J 61GtA7w/ICcMq/01kVsQUFOHojF1uPV3iVNHLYOMTbXBsdVMI+nVLyjOq31tPra6 MKSYGW3wT+ynn+xy42E5YGdbek7OqWdu -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org