$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft File: McT5Bk-J5WsZTriEkukCHBUt6z4.mft (raw, json) Hash identifier: SMV6wHaWKYDVbobTPiV+mIW097oWa92zciJVuTvkgIM= Subject key identifier: 4E:2C:87:27:9A:2F:D9:F4:76:BB:0C:B6:BB:9E:50:59:D3:61:44:9A Authority key identifier: 31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E Certificate issuer: /CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E Certificate serial: 089A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft Manifest number: 0890 Signing time: Wed 20 Nov 2024 20:16:55 +0000 Manifest this update: Wed 20 Nov 2024 20:16:55 +0000 Manifest next update: Wed 27 Nov 2024 20:16:55 +0000 Files and hashes: 1: McT5Bk-J5WsZTriEkukCHBUt6z4.crl (hash: x3z41nc84/60f+2XqW4T8YdmbdUv9Qfv/0ZI9/ow/Eg=) 2: DB4932CEC2B611EB9BF18A81C4F9AE02.roa (hash: f5L6qbZHYJinb4dxqK06lf1TWxmjBDPvh/3tmuODvG0=) 3: 900E2272349F11EDA1460419C4F9AE02.roa (hash: HGunzzYv3iFdylbWWDt7mDl9oSSW1dEW1MLMdnMxAEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2202 (0x89a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133E16/serialNumber=31C4F9064F89E56B194EB88492E9021C152DEB3E Validity Not Before: Nov 20 20:16:55 2024 GMT Not After : Nov 27 20:16:55 2024 GMT Subject: CN=673e43b7-d773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:7f:07:fe:a1:16:29:8d:57:7c:67:57:65: eb:b5:1e:98:8b:d7:ae:55:ee:ad:9d:1b:8a:bf:a5: 25:42:7e:91:27:93:3d:6d:af:cd:77:5d:64:ab:42: 39:37:29:27:3d:93:96:50:16:a5:16:b8:0f:d0:aa: a5:1e:df:1f:be:93:4e:9c:79:2d:92:d3:c0:98:58: ad:77:a9:5e:94:e0:6a:e6:b6:5b:78:92:8b:25:f0: 51:d2:76:d6:5d:67:d0:03:28:7c:c5:c7:44:ad:50: a2:de:f0:5d:8f:a8:f8:54:b8:05:ae:bb:7c:be:f5: 3f:2e:6c:3d:f8:4b:6f:6c:72:12:5a:eb:41:14:fb: fa:43:37:a3:f8:36:27:87:3a:97:80:11:f4:65:4f: 85:90:89:42:e1:2d:74:69:95:f5:ce:d4:a1:88:f5: cf:fd:e0:e3:86:39:4f:d4:ef:9d:70:06:24:dc:cb: 8a:4c:06:4c:72:65:58:42:0c:27:64:fa:13:01:5f: 9a:26:4b:4c:09:9d:d7:5c:98:d6:a6:8b:87:97:0f: 44:ab:a7:2e:c7:5b:41:27:63:98:2b:8f:33:d6:d2: 5e:43:54:6e:d2:9e:f7:2c:df:7a:c3:e7:77:25:35: 06:c9:cb:f9:4d:5a:fc:f9:56:07:d9:7d:eb:2b:ea: 76:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2C:87:27:9A:2F:D9:F4:76:BB:0C:B6:BB:9E:50:59:D3:61:44:9A X509v3 Authority Key Identifier: keyid:31:C4:F9:06:4F:89:E5:6B:19:4E:B8:84:92:E9:02:1C:15:2D:EB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McT5Bk-J5WsZTriEkukCHBUt6z4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/DC54D9A6AC7411EA86EA9F48C4F9AE02/McT5Bk-J5WsZTriEkukCHBUt6z4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:d8:5a:58:3c:a4:30:0e:d6:4d:3e:53:42:8a:98:dc:98:dd: d0:d5:f5:42:8c:40:e3:61:bc:9c:a1:51:ef:0c:4d:2c:a1:25: 4c:cd:31:95:57:ce:cd:37:c8:a0:3e:34:29:23:1e:2f:a0:3f: fc:7e:c9:9f:b2:aa:c1:83:02:28:81:40:2c:7f:a1:37:71:32: 04:20:cf:ce:41:cd:f5:8e:35:e7:56:f4:6d:69:cc:da:07:38: e9:99:2d:a3:a5:09:a8:9c:86:b4:ed:60:a1:1e:ec:67:b6:72: ba:b0:e2:0a:5b:06:a4:30:a9:a7:4d:0f:10:26:56:a1:da:2a: 9d:29:6e:3a:b1:2c:23:6a:96:03:9b:11:2c:1c:f9:16:b3:40: 48:93:18:55:c9:47:7a:bd:8d:b7:c8:47:43:c8:a4:5c:80:4d: de:74:77:12:99:40:a8:1e:42:9b:6a:78:ab:cb:62:58:96:ae: 8a:11:b5:69:69:34:e2:d6:ec:bb:93:ec:e0:cd:e3:4e:07:4a: cf:d8:36:70:41:41:17:ff:32:03:a5:89:58:c7:49:03:40:15: 30:54:6a:d8:06:27:b5:f8:30:99:19:06:68:f7:4d:24:36:fc: a0:58:1e:ac:7c:fa:7d:36:eb:e7:93:59:aa:f4:5a:2b:e6:97: ea:dd:3f:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNFMTYxMTAvBgNVBAUTKDMxQzRGOTA2NEY4OUU1NkIxOTRFQjg4NDkyRTkwMjFD MTUyREVCM0UwHhcNMjQxMTIwMjAxNjU1WhcNMjQxMTI3MjAxNjU1WjAYMRYwFAYD VQQDEw02NzNlNDNiNy1kNzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1p/B/6hFimNV3xnV2XrtR6Yi9euVe6tnRuKv6UlQn6RJ5M9ba/Nd11kq0I5 NyknPZOWUBalFrgP0KqlHt8fvpNOnHktktPAmFitd6lelOBq5rZbeJKLJfBR0nbW XWfQAyh8xcdErVCi3vBdj6j4VLgFrrt8vvU/Lmw9+EtvbHISWutBFPv6Qzej+DYn hzqXgBH0ZU+FkIlC4S10aZX1ztShiPXP/eDjhjlP1O+dcAYk3MuKTAZMcmVYQgwn ZPoTAV+aJktMCZ3XXJjWpouHlw9Eq6cux1tBJ2OYK48z1tJeQ1Ru0p73LN96w+d3 JTUGycv5TVr8+VYH2X3rK+p2FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4shyea L9n0drsMtrueUFnTYUSaMB8GA1UdIwQYMBaAFDHE+QZPieVrGU64hJLpAhwVLes+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0UxNi9EQzU0RDlBNkFD NzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVXc1pUcmlFa3VrQ0hCVXQ2 ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01jVDVCay1KNVdzWlRyaUVrdWtDSEJVdDZ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0UxNi9EQzU0RDlBNkFDNzQxMUVBODZFQTlGNDhDNEY5QUUwMi9NY1Q1QmstSjVX c1pUcmlFa3VrQ0hCVXQ2ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr2FpYPKQwDtZNPlNCipjcmN3Q1fVCjEDjYbycoVHvDE0soSVMzTGV V87NN8igPjQpIx4voD/8fsmfsqrBgwIogUAsf6E3cTIEIM/OQc31jjXnVvRtacza BzjpmS2jpQmonIa07WChHuxntnK6sOIKWwakMKmnTQ8QJlah2iqdKW46sSwjapYD mxEsHPkWs0BIkxhVyUd6vY23yEdDyKRcgE3edHcSmUCoHkKbaniry2JYlq6KEbVp aTTi1uy7k+zgzeNOB0rP2DZwQUEX/zIDpYlYx0kDQBUwVGrYBie1+DCZGQZo900k NvygWB6sfPp9Nuvnk1mq9For5pfq3T+h -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:37 2024 by rpki-client on console-fra.rpki-client.org