$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: dYmyMsJIv5Kf8PxjQdT2NRbyhqOosTE6ZxtsbcN1fL0= Subject key identifier: 52:90:1C:25:BE:89:0B:2C:92:07:5C:5E:15:4A:1F:54:8C:F5:1B:01 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 261E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 25B2 Signing time: Fri 22 Nov 2024 15:44:36 +0000 Manifest this update: Fri 22 Nov 2024 15:44:35 +0000 Manifest next update: Fri 29 Nov 2024 15:44:35 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: Gr1JAngpTzUuJi6TI4btljz0F1SjjkvZdgQth3RhHxE=) 2: 99C38DDE95C311EF8BAA846AC4F9AE02.roa (hash: DTSCNfC+ZQO725wLkDaJCLTqEP7IAx/7xDezw0K1KMY=) 3: 949FF22A0F8211EE9C28226AC4F9AE02.roa (hash: B3hRYF0bO26k9gxz4EV9GoirQCVy5mfb+aHOF6vK71Q=) 4: 1A2A87A49A7C11EFBD23E931C4F9AE02.roa (hash: 7K2xflgEe2f5oUDUJpCuX0VdQYf9blRsU24adUj9J0o=) 5: 8FC6588099D711EFB8A4757AC4F9AE02.roa (hash: 1CSi3qctGMotONHo8tYYgLhlzkmsspX1ps6Gp7aQZp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9758 (0x261e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Nov 22 15:44:35 2024 GMT Not After : Nov 29 15:44:35 2024 GMT Subject: CN=6740a6e3-b73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:f1:e2:78:be:e2:1e:6b:a8:fd:84:f8:a7: 9b:88:9f:40:05:8e:d8:bb:61:ed:00:f1:63:af:e1: 73:2b:bc:4e:fd:36:a0:65:65:c1:33:f7:df:d5:4f: 45:76:48:87:f7:09:14:8a:be:97:05:e8:1f:58:45: 62:ac:91:40:98:fe:a9:88:0e:4e:8e:bb:27:d4:8f: 94:f4:ba:03:3c:56:88:93:b1:e2:b7:4b:43:85:00: 7f:c8:29:17:cf:7e:dc:fc:56:a8:05:6c:61:87:a2: f7:e2:d3:6b:46:24:ac:08:06:ae:fb:0c:fa:38:26: 55:40:35:94:0d:32:f3:31:31:f9:0e:6c:f4:49:57: 39:cb:f8:be:15:b8:27:22:08:dc:30:c9:38:51:81: b0:2c:cc:f7:12:58:05:97:85:6a:67:a0:66:e9:53: da:28:ed:fa:fb:11:61:31:99:43:58:39:98:3a:7f: ba:ff:b2:28:f9:1f:ab:7f:fb:14:59:11:81:df:95: c4:17:18:4c:8d:fc:82:24:da:07:72:70:44:b1:d5: 6d:ad:75:be:b0:46:88:bf:78:14:ac:0f:07:72:12: e1:ed:ea:e7:bb:3f:97:0e:b9:3d:f7:38:e2:98:16: 33:6c:cf:b6:97:93:b2:0e:bd:20:de:98:56:e6:79: ab:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:90:1C:25:BE:89:0B:2C:92:07:5C:5E:15:4A:1F:54:8C:F5:1B:01 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ea:dc:73:99:82:d3:aa:5b:5c:c7:92:85:3f:ae:2f:81:e3: 1e:d3:68:88:c6:a0:6c:87:24:1a:c0:45:e6:7d:86:13:35:0e: 30:65:43:e6:f6:98:03:d2:fc:54:03:a0:c5:cf:df:fe:85:d2: 97:cf:59:39:f4:b5:b9:da:7d:e5:bc:3c:fd:b0:3c:07:3a:3b: f6:68:cc:0e:d0:21:f8:19:31:eb:06:4d:19:66:7e:94:8a:d0: 61:6c:19:9a:05:40:d2:16:da:88:7a:8f:80:d4:f6:b9:6a:e7: 4f:0e:b7:38:3d:17:d3:24:93:d7:ff:c7:4a:36:04:e9:7d:2c: 8b:ea:66:51:bb:65:ea:3a:e2:dc:d8:88:2d:b9:a4:f7:95:43: f8:b6:1d:66:c5:a3:6f:25:65:34:3b:1f:66:24:58:ea:3a:e3: 26:bd:5a:69:8b:09:5c:ba:46:ae:75:5c:27:1c:7d:49:6a:e8: 2a:a9:ea:99:d0:dd:2b:f3:00:99:56:cd:c6:b8:f2:45:61:69: f1:19:44:72:39:1b:9e:3a:21:ce:f2:42:c0:9e:37:ab:c0:1d: 5e:55:99:9f:d9:d9:d7:7c:89:2e:77:d0:b0:91:ee:6f:5d:35: 46:e1:28:99:f2:4d:2a:6b:d1:3c:7a:20:8a:73:66:0e:55:83: 1a:59:e1:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjQxMTIyMTU0NDM1WhcNMjQxMTI5MTU0NDM1WjAYMRYwFAYD VQQDEw02NzQwYTZlMy1iNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCjx4ni+4h5rqP2E+KebiJ9ABY7Yu2HtAPFjr+FzK7xO/TagZWXBM/ff1U9F dkiH9wkUir6XBegfWEVirJFAmP6piA5Ojrsn1I+U9LoDPFaIk7Hit0tDhQB/yCkX z37c/FaoBWxhh6L34tNrRiSsCAau+wz6OCZVQDWUDTLzMTH5Dmz0SVc5y/i+Fbgn IgjcMMk4UYGwLMz3ElgFl4VqZ6Bm6VPaKO36+xFhMZlDWDmYOn+6/7Io+R+rf/sU WRGB35XEFxhMjfyCJNoHcnBEsdVtrXW+sEaIv3gUrA8HchLh7ernuz+XDrk99zji mBYzbM+2l5OyDr0g3phW5nmrqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKQHCW+ iQsskgdcXhVKH1SM9RsBMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR6txzmYLTqltcx5KFP64vgeMe02iIxqBshyQawEXmfYYTNQ4wZUPm 9pgD0vxUA6DFz9/+hdKXz1k59LW52n3lvDz9sDwHOjv2aMwO0CH4GTHrBk0ZZn6U itBhbBmaBUDSFtqIeo+A1Pa5audPDrc4PRfTJJPX/8dKNgTpfSyL6mZRu2XqOuLc 2IgtuaT3lUP4th1mxaNvJWU0Ox9mJFjqOuMmvVppiwlcukaudVwnHH1JaugqqeqZ 0N0r8wCZVs3GuPJFYWnxGURyORueOiHO8kLAnjerwB1eVZmf2dnXfIkud9Cwke5v XTVG4SiZ8k0qa9E8eiCKc2YOVYMaWeHU -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:17 2024 by rpki-client on console-ams.rpki-client.org