$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.mft (raw, json) Hash identifier: 94o3nzqLBOCiam2/uLUiABK9lxbKWLRb/8383rRArZE= Subject key identifier: 4D:0B:7F:C2:CC:AC:10:40:B6:FC:4D:08:E5:EF:72:3A:31:F0:59:57 Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Certificate serial: 1448 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft Manifest number: 143F Signing time: Fri 22 Nov 2024 16:55:00 +0000 Manifest this update: Fri 22 Nov 2024 16:54:59 +0000 Manifest next update: Fri 29 Nov 2024 16:54:59 +0000 Files and hashes: 1: 8Os9EfDsrmhzaV1az7e0rcVfNFg.crl (hash: /uSKwjbK5fUbE2XSssY17qfIqXXHWlpmhe8S4o0Plqo=) 2: 5F150B08D48611E9A4473984C4F9AE02.roa (hash: 3TAeoADoUSB3POhUma+elKDotqf5jHNMzMECIe1qOeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5192 (0x1448) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Validity Not Before: Nov 22 16:54:59 2024 GMT Not After : Nov 29 16:54:59 2024 GMT Subject: CN=6740b764-b73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:8e:b4:f4:bf:a3:be:05:74:0f:a4:8d:07: 10:53:de:93:c8:f2:dc:b6:5c:c2:85:96:59:3d:87: 98:62:8e:53:08:61:66:e5:0a:fb:d2:f0:b6:2d:d3: 92:37:4a:0e:1c:16:96:19:22:82:ee:8c:51:c5:2d: 09:66:98:38:a7:2e:96:31:1f:4f:eb:8b:6c:03:70: 79:14:1d:34:bd:e2:3b:10:2c:7b:52:d2:82:92:d0: 5c:df:f9:c4:ee:c5:39:02:62:7a:71:05:44:75:8b: 9c:54:52:e9:b5:ae:d2:3e:e3:c6:81:fd:86:0f:d6: 8c:06:17:da:5e:cb:fd:f9:f6:64:fe:ee:8c:c1:6b: 53:96:1d:41:aa:23:fb:62:9a:09:cc:04:49:55:37: bc:c3:d2:d8:d6:1f:ae:fa:bd:e2:e9:3c:1d:27:d9: 44:d9:1c:05:eb:7c:9b:0c:7d:28:57:8a:50:4b:cb: 02:17:2a:c1:68:01:e1:e5:28:48:cb:44:ac:f4:df: ab:86:c3:02:0e:ea:ea:ce:2c:e5:0e:42:67:ad:24: 58:89:f0:b6:09:91:07:ac:62:6a:bb:5a:63:c6:8b: 21:54:50:23:3b:8f:21:1d:36:54:a8:6f:f8:d3:c3: b6:3d:58:a7:0b:f7:ee:69:17:c7:78:24:58:b1:1c: 61:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0B:7F:C2:CC:AC:10:40:B6:FC:4D:08:E5:EF:72:3A:31:F0:59:57 X509v3 Authority Key Identifier: keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a1:3f:42:9a:d5:10:17:2f:09:11:c1:69:e5:43:b0:38:5f: d2:78:99:4b:33:bc:74:5f:57:10:6f:e6:11:22:ae:05:37:19: e0:3d:96:30:25:c5:fa:d7:0d:91:08:da:13:10:3f:4f:86:24: b2:9f:e9:1e:87:3c:01:b8:86:2b:b1:cd:10:34:c5:22:48:72: 31:b0:e9:98:90:ba:02:99:b9:c9:17:50:5d:e6:f7:79:77:f3: 67:2a:47:46:80:b4:a9:d7:1b:bc:48:1a:83:fa:e7:ec:d2:4f: b6:69:11:76:06:2c:81:a4:3d:14:bb:b6:2e:94:ef:ee:76:c3: cf:ec:8b:c8:02:3d:ff:12:03:a7:48:84:d1:71:e4:68:60:16: dc:35:64:b5:08:9f:ef:ba:db:ab:dd:2c:bc:e3:8d:e4:c7:be: 46:2f:1d:58:ea:e5:d3:0c:b3:40:c6:29:90:cb:4c:1f:5e:ce: 9b:0f:15:c0:9a:03:e2:49:2d:79:97:ca:f4:fc:2b:99:06:d1: 4c:03:b2:10:cf:86:11:ab:48:8f:7b:a9:e8:df:f9:9d:9b:34: 95:49:3e:46:5d:40:c0:32:f6:ce:f4:f6:19:69:e1:f7:e1:49: 90:81:42:5d:a0:73:cf:dd:a3:d0:b7:95:68:a1:83:e3:35:d0: 45:c2:84:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5QkIxMTAvBgNVBAUTKEYwRUIzRDExRjBFQ0FFNjg3MzY5NUQ1QUNGQjdCNEFE QzU1RjM0NTgwHhcNMjQxMTIyMTY1NDU5WhcNMjQxMTI5MTY1NDU5WjAYMRYwFAYD VQQDEw02NzQwYjc2NC1iNzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJiOtPS/o74FdA+kjQcQU96TyPLctlzChZZZPYeYYo5TCGFm5Qr70vC2LdOS N0oOHBaWGSKC7oxRxS0JZpg4py6WMR9P64tsA3B5FB00veI7ECx7UtKCktBc3/nE 7sU5AmJ6cQVEdYucVFLpta7SPuPGgf2GD9aMBhfaXsv9+fZk/u6MwWtTlh1BqiP7 YpoJzARJVTe8w9LY1h+u+r3i6TwdJ9lE2RwF63ybDH0oV4pQS8sCFyrBaAHh5ShI y0Ss9N+rhsMCDurqzizlDkJnrSRYifC2CZEHrGJqu1pjxoshVFAjO48hHTZUqG/4 08O2PVinC/fuaRfHeCRYsRxhZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0Lf8LM rBBAtvxNCOXvcjox8FlXMB8GA1UdIwQYMBaAFPDrPRHw7K5oc2ldWs+3tK3FXzRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTlCQi9BQjFDQUM4NjYw OTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3JtaHphVjFhejdlMHJjVmZO RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPczlFZkRzcm1oemFWMWF6N2UwcmNWZk5GZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTlCQi9BQjFDQUM4NjYwOTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3Jt aHphVjFhejdlMHJjVmZORmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLoT9CmtUQFy8JEcFp5UOwOF/SeJlLM7x0X1cQb+YRIq4FNxngPZYw JcX61w2RCNoTED9PhiSyn+kehzwBuIYrsc0QNMUiSHIxsOmYkLoCmbnJF1Bd5vd5 d/NnKkdGgLSp1xu8SBqD+ufs0k+2aRF2BiyBpD0Uu7YulO/udsPP7IvIAj3/EgOn SITRceRoYBbcNWS1CJ/vutur3Sy8443kx75GLx1Y6uXTDLNAximQy0wfXs6bDxXA mgPiSS15l8r0/CuZBtFMA7IQz4YRq0iPe6no3/mdmzSVST5GXUDAMvbO9PYZaeH3 4UmQgUJdoHPP3aPQt5VooYPjNdBFwoS9 -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:44 2024 by rpki-client on console-fra.rpki-client.org