$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: 6g6pUDD43lBFLx0MYOumwbbBZgcUoIi09P3DahWBXfg= Subject key identifier: 01:9D:89:93:E3:DA:90:68:6F:EE:05:0A:20:37:73:1A:19:B5:B7:D6 Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 096A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 0964 Signing time: Fri 22 Nov 2024 19:54:43 +0000 Manifest this update: Fri 22 Nov 2024 19:54:43 +0000 Manifest next update: Fri 29 Nov 2024 19:54:43 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: 4A7X9UTPdYfOiyVDZSLy1omOnJrNzTbWYD0pukoVe7M=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: cA7XN+BX0okwbajHtJeBaMsPf8wdB1bPHmCfQQAkqnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2410 (0x96a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: Nov 22 19:54:43 2024 GMT Not After : Nov 29 19:54:43 2024 GMT Subject: CN=6740e183-4dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b4:d6:7d:fc:a3:dc:f8:87:91:7d:1a:99:fb: 69:d5:07:56:a6:aa:4e:a9:ad:36:a1:0d:b5:56:d5: 99:72:9c:cf:98:a6:40:75:11:eb:a2:15:08:25:45: 07:75:ee:56:28:9f:d9:3b:5b:ab:cd:d4:63:4e:52: b7:a9:74:b2:15:f0:a6:77:93:e6:56:cb:6f:99:f1: 73:3d:38:24:8d:40:1d:53:7e:b6:18:31:91:2f:ee: ea:ec:80:96:56:59:cf:36:fe:0c:f3:cd:95:6e:01: 9e:ba:95:a5:c5:7f:28:5a:d4:e2:0d:81:29:50:cb: cb:78:f0:87:27:ad:0d:9b:da:15:5b:ac:91:65:d7: bf:f5:6c:16:dd:20:c5:70:6b:1b:47:60:db:f2:0e: b2:43:d9:b7:72:d9:5a:d6:99:a6:18:a5:d5:af:0c: 68:7a:9c:85:09:cf:58:f4:33:e0:15:d6:11:33:ab: 96:e4:c3:7c:62:65:f5:1b:32:ec:89:6f:9f:01:73: e5:bd:e8:1f:46:09:27:f9:fc:17:93:1b:89:97:fc: da:dd:76:63:fb:eb:cc:99:5f:48:5a:46:5b:81:42: f6:62:39:3c:d0:9d:cd:a1:ed:34:1d:99:d0:b0:0b: 8f:9b:ea:78:61:51:96:86:26:d4:ee:12:b6:f4:9a: b0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9D:89:93:E3:DA:90:68:6F:EE:05:0A:20:37:73:1A:19:B5:B7:D6 X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:43:10:ea:c9:24:45:c4:25:b8:37:f3:ca:67:1e:d3:ad:1b: 5d:d1:64:45:ab:65:a0:7a:5e:2f:3a:ca:35:21:0c:b2:90:32: 0c:01:b4:85:e0:ca:69:1b:f8:1c:52:75:50:96:aa:9b:61:ad: 66:66:6f:f3:a8:6d:ce:5a:d4:4c:71:49:2b:e8:93:82:09:a1: d3:5a:6d:28:ec:1e:7e:be:8c:eb:0e:bd:e2:ca:fa:69:34:f6: 05:3a:a0:42:cc:76:0f:ce:98:34:49:c0:ed:d5:5b:71:9d:9f: 2c:f9:3d:b1:13:6f:9e:8c:66:b8:17:e0:8e:a3:52:ad:39:4b: d1:9f:5e:51:bc:7d:d7:af:12:c1:66:f4:02:cf:59:47:33:10: 15:0e:6d:49:0e:31:cd:95:80:97:f3:68:ae:be:fb:94:39:79: 7a:f0:5f:a6:8a:e0:3e:e0:26:d5:ab:14:50:47:22:2b:a8:20: a1:55:43:31:70:ae:23:c1:63:2f:75:f7:f4:23:32:76:57:6f: 16:c4:dc:55:6b:04:a6:f8:24:ff:3b:e8:23:41:e3:53:ce:b8: 51:f2:71:fb:ac:dc:ec:ca:c1:ab:4c:f5:55:25:20:3b:a2:58: db:6c:45:a9:14:e5:ab:5a:29:6b:92:cf:45:4f:32:5b:04:d1: 89:74:b9:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjQxMTIyMTk1NDQzWhcNMjQxMTI5MTk1NDQzWjAYMRYwFAYD VQQDEw02NzQwZTE4My00ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLTWffyj3PiHkX0amftp1QdWpqpOqa02oQ21VtWZcpzPmKZAdRHrohUIJUUH de5WKJ/ZO1urzdRjTlK3qXSyFfCmd5PmVstvmfFzPTgkjUAdU362GDGRL+7q7ICW VlnPNv4M882VbgGeupWlxX8oWtTiDYEpUMvLePCHJ60Nm9oVW6yRZde/9WwW3SDF cGsbR2Db8g6yQ9m3ctla1pmmGKXVrwxoepyFCc9Y9DPgFdYRM6uW5MN8YmX1GzLs iW+fAXPlvegfRgkn+fwXkxuJl/za3XZj++vMmV9IWkZbgUL2Yjk80J3Noe00HZnQ sAuPm+p4YVGWhibU7hK29JqwbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGdiZPj 2pBob+4FCiA3cxoZtbfWMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADQxDqySRFxCW4N/PKZx7TrRtd0WRFq2Wgel4vOso1IQyykDIMAbSF 4MppG/gcUnVQlqqbYa1mZm/zqG3OWtRMcUkr6JOCCaHTWm0o7B5+vozrDr3iyvpp NPYFOqBCzHYPzpg0ScDt1VtxnZ8s+T2xE2+ejGa4F+COo1KtOUvRn15RvH3XrxLB ZvQCz1lHMxAVDm1JDjHNlYCX82iuvvuUOXl68F+miuA+4CbVqxRQRyIrqCChVUMx cK4jwWMvdff0IzJ2V28WxNxVawSm+CT/O+gjQeNTzrhR8nH7rNzsysGrTPVVJSA7 oljbbEWpFOWrWilrks9FTzJbBNGJdLke -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:25 2024 by rpki-client on console-ams.rpki-client.org