$ rpki-client -vvf rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft File: 1c9c-LTYDyITBPNliOOVYERH93o.mft (raw, json) Hash identifier: ZYuoJAfSfVZpVxsv134o6/xPddTfrrsXI1Rxi8V+4Fw= Subject key identifier: 9B:6A:B0:E7:20:4B:51:9C:D1:E9:4A:3A:91:D4:0E:2C:07:51:8D:87 Authority key identifier: D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A Certificate issuer: /CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft Manifest number: 018D Signing time: Thu 21 Nov 2024 01:54:29 +0000 Manifest this update: Thu 21 Nov 2024 01:54:29 +0000 Manifest next update: Thu 28 Nov 2024 01:54:29 +0000 Files and hashes: 1: 1c9c-LTYDyITBPNliOOVYERH93o.crl (hash: iS6aYk8m0jO39BmN5JNCLUjBDjsh6HX867f0RkxhK3Q=) 2: A83E51EC45F611EDBA9D6062C4F9AE02.roa (hash: jD51iPrbzJDYVHI7eRj6WEF8ux+0Y9e0GCmn/E2/uJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A5BB/serialNumber=D5CF5CF8B4D80F221304F36588E395604447F77A Validity Not Before: Nov 21 01:54:29 2024 GMT Not After : Nov 28 01:54:29 2024 GMT Subject: CN=673e92d5-25bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:5c:9e:b8:db:71:9d:21:1c:9d:82:af:cc: 22:0a:3f:a2:cf:55:10:ac:7c:94:97:7e:b2:70:45: 72:af:c6:04:a1:f0:19:90:65:51:4a:77:61:f7:da: 22:4c:79:99:28:df:3b:49:9e:20:0c:28:d2:25:a6: 6b:e9:c9:96:20:f1:d8:4b:98:40:c2:52:11:73:87: ac:72:6b:0a:0b:17:b3:a8:cd:35:c5:17:6d:e2:94: c2:0d:cd:0d:ed:d6:ac:74:52:d7:c6:7f:35:9c:8c: 53:2c:76:82:a6:58:55:c0:23:e3:a0:2f:3a:01:6d: 25:62:38:b2:f3:94:2b:2e:70:c3:0b:8b:7b:37:02: 53:c6:1d:2d:70:c3:ad:08:74:c0:a0:37:b9:bc:90: df:12:05:ae:bc:f7:5c:95:6c:aa:12:b5:da:72:89: 97:57:af:d6:ff:82:8e:6e:3b:19:7c:59:da:1c:38: f0:0c:0f:f5:f3:67:44:20:4e:72:6a:5f:a3:7f:a7: f8:e5:ab:a2:fb:1f:4a:a4:12:6d:c5:b2:26:53:d5: ef:e2:b0:45:ec:4a:cb:32:da:a1:0b:2b:7d:dd:5f: 79:ad:71:2f:bb:47:34:e8:f9:8e:56:72:08:5b:22: 0b:c8:a3:ec:ff:8f:9a:13:98:d1:ec:00:7d:ff:a5: 51:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6A:B0:E7:20:4B:51:9C:D1:E9:4A:3A:91:D4:0E:2C:07:51:8D:87 X509v3 Authority Key Identifier: keyid:D5:CF:5C:F8:B4:D8:0F:22:13:04:F3:65:88:E3:95:60:44:47:F7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1c9c-LTYDyITBPNliOOVYERH93o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A5BB/723CD9AA45F211ED964B4C5AC4F9AE02/1c9c-LTYDyITBPNliOOVYERH93o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f9:ee:24:15:96:ad:e6:38:e3:7f:ff:c7:b5:5f:c1:da:65: 99:09:99:92:60:4b:c7:9d:09:d3:36:fb:2c:4f:ce:01:29:44: 41:74:f8:85:45:1c:bb:4a:0e:b7:34:84:92:94:3a:67:63:c3: 0d:40:99:a0:cc:cf:41:e7:63:66:ce:fe:55:63:f2:7d:dc:8b: c7:8d:28:b1:48:ea:97:f0:43:10:24:a2:67:cf:2f:ae:9d:d0: 78:7c:81:26:01:a4:f9:0a:07:b0:c5:ce:8e:ce:40:4c:25:37: 44:f4:35:e6:54:49:ed:37:73:6d:5b:5b:ce:b1:c4:49:f6:88: 6e:95:97:be:06:5b:f9:10:d5:51:37:30:cc:07:a6:56:a0:8d: 4d:ad:12:fa:55:de:ea:3e:45:56:44:de:03:73:89:61:64:41: 95:aa:f3:b1:1e:23:db:b5:7b:c6:80:6c:76:86:71:c4:1c:71: 0d:b2:2b:c5:86:22:bc:75:6e:86:26:90:d1:37:e9:e4:41:ce: f1:a8:8e:9d:a1:46:aa:ce:5b:7f:9d:a3:4e:02:50:4d:2f:93: 9e:d2:06:33:2c:78:6f:f2:a2:62:d7:2a:da:9a:1c:56:64:79: aa:d3:25:66:f4:72:72:11:0f:84:27:25:1f:3e:d1:e9:5b:a6: 7b:c2:06:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1QkIxMTAvBgNVBAUTKEQ1Q0Y1Q0Y4QjREODBGMjIxMzA0RjM2NTg4RTM5NTYw NDQ0N0Y3N0EwHhcNMjQxMTIxMDE1NDI5WhcNMjQxMTI4MDE1NDI5WjAYMRYwFAYD VQQDEw02NzNlOTJkNS0yNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAtcnrjbcZ0hHJ2Cr8wiCj+iz1UQrHyUl36ycEVyr8YEofAZkGVRSndh99oi THmZKN87SZ4gDCjSJaZr6cmWIPHYS5hAwlIRc4escmsKCxezqM01xRdt4pTCDc0N 7dasdFLXxn81nIxTLHaCplhVwCPjoC86AW0lYjiy85QrLnDDC4t7NwJTxh0tcMOt CHTAoDe5vJDfEgWuvPdclWyqErXacomXV6/W/4KObjsZfFnaHDjwDA/182dEIE5y al+jf6f45aui+x9KpBJtxbImU9Xv4rBF7ErLMtqhCyt93V95rXEvu0c06PmOVnII WyILyKPs/4+aE5jR7AB9/6VRXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtqsOcg S1Gc0elKOpHUDiwHUY2HMB8GA1UdIwQYMBaAFNXPXPi02A8iEwTzZYjjlWBER/d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTVCQi83MjNDRDlBQTQ1 RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5SVRCUE5saU9PVllFUkg5 M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFjOWMtTFRZRHlJVEJQTmxpT09WWUVSSDkzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTVCQi83MjNDRDlBQTQ1RjIxMUVEOTY0QjRDNUFDNEY5QUUwMi8xYzljLUxUWUR5 SVRCUE5saU9PVllFUkg5M28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc+e4kFZat5jjjf//HtV/B2mWZCZmSYEvHnQnTNvssT84BKURBdPiF RRy7Sg63NISSlDpnY8MNQJmgzM9B52Nmzv5VY/J93IvHjSixSOqX8EMQJKJnzy+u ndB4fIEmAaT5Cgewxc6OzkBMJTdE9DXmVEntN3NtW1vOscRJ9ohulZe+Blv5ENVR NzDMB6ZWoI1NrRL6Vd7qPkVWRN4Dc4lhZEGVqvOxHiPbtXvGgGx2hnHEHHENsivF hiK8dW6GJpDRN+nkQc7xqI6doUaqzlt/naNOAlBNL5Oe0gYzLHhv8qJi1yramhxW ZHmq0yVm9HJyEQ+EJyUfPtHpW6Z7wgbV -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:36 2024 by rpki-client on console-ams.rpki-client.org