$ rpki-client -vvf rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft File: E39piIvunMg7q0H68slC0Qryy2U.mft (raw, json) Hash identifier: M5T2fWxjOcHGFtO4dA98/ewDv7ufiCK4hjVu0qCWhxs= Subject key identifier: 5B:10:B3:CB:A9:A8:C9:81:EC:F4:71:7F:B0:C1:D9:4C:34:C8:A1:E0 Authority key identifier: 13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 Certificate issuer: /CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Certificate serial: 0416 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft Manifest number: 0412 Signing time: Fri 22 Nov 2024 23:57:02 +0000 Manifest this update: Fri 22 Nov 2024 23:57:01 +0000 Manifest next update: Fri 29 Nov 2024 23:57:01 +0000 Files and hashes: 1: E39piIvunMg7q0H68slC0Qryy2U.crl (hash: 2k8ewe+7h4m+BzNZ4BY/efgGTj0BLH8eWAoGnwkEY+E=) 2: 279EE41683E111ECBB82F47DC4F9AE02.roa (hash: ngK147vMs6q/RHxhjfKLOtDjm0hQwKZIJBdKYWfYSHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B30A/serialNumber=137F69888BEE9CC83BAB41FAF2C942D10AF2CB65 Validity Not Before: Nov 22 23:57:01 2024 GMT Not After : Nov 29 23:57:01 2024 GMT Subject: CN=67411a4d-c94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:65:cb:f9:0e:75:c1:de:2b:4e:93:85:03: 90:0c:13:17:e8:78:cb:06:af:94:42:f7:5f:fa:9f: e0:9d:df:5a:4b:2e:4b:b9:9f:58:17:05:e4:ce:a6: d2:43:e8:1c:c3:bf:70:d9:e1:2d:e7:9d:34:ce:e5: 0c:9c:a6:cc:1c:ee:ae:78:28:eb:49:f7:e1:82:b1: 13:dc:c8:4b:71:b1:bf:1f:0b:9b:34:2f:4c:d9:ab: 11:4c:09:fd:7c:f1:3c:67:8f:68:85:96:d0:90:76: 6e:a3:08:86:05:4e:76:76:62:5d:03:da:d1:08:c6: 97:85:0d:78:13:df:3b:e3:1c:b2:2e:3a:64:87:05: e8:fc:7d:71:13:1d:ac:b7:2f:17:7b:c4:dd:60:8a: 14:7e:90:8f:56:f6:db:1a:da:68:3b:46:f7:29:1b: 77:f2:fd:bc:7b:c9:16:34:98:12:ed:50:8f:24:98: 12:63:a1:04:e5:66:e6:13:6b:78:56:3d:b7:7d:f4: 4f:81:2b:14:72:aa:0a:f6:c0:14:51:b4:19:16:0a: 8d:bf:e5:7e:3c:7c:21:85:a1:c3:2a:d0:dc:a9:4a: 73:f9:b8:4f:e0:a3:b6:28:63:42:75:e7:84:b7:96: 00:d9:2c:14:68:a6:b6:60:62:68:31:36:97:7e:da: df:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:10:B3:CB:A9:A8:C9:81:EC:F4:71:7F:B0:C1:D9:4C:34:C8:A1:E0 X509v3 Authority Key Identifier: keyid:13:7F:69:88:8B:EE:9C:C8:3B:AB:41:FA:F2:C9:42:D1:0A:F2:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E39piIvunMg7q0H68slC0Qryy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B30A/91AE69AA467C11ECBD66126BC4F9AE02/E39piIvunMg7q0H68slC0Qryy2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:40:f8:d4:e2:76:ec:9e:48:69:ed:76:4c:2c:c4:82:ab:42: a7:69:55:db:79:94:d0:28:09:39:79:a5:36:47:d9:53:71:2e: 20:89:e3:df:d3:a9:1c:01:0a:d2:cb:c9:ec:34:e4:25:ac:d0: ae:b6:f6:49:be:2c:e2:2c:3f:70:a2:87:29:1c:e0:63:3c:53: 8b:9c:d0:e6:75:35:41:ff:87:11:1f:a6:2f:20:1a:e0:0b:3b: c5:71:2e:45:67:5c:19:d0:8b:82:20:b6:56:10:12:71:cb:08: f6:d1:92:70:3e:aa:07:7f:70:4a:c8:09:6a:9c:09:8b:63:30: 3a:57:e5:4f:28:b8:50:db:be:91:ea:bf:1c:95:45:ee:e6:83: 02:75:ea:f9:41:13:9a:16:ce:b5:94:68:cc:f5:c3:20:78:38: e2:0d:e7:61:7d:bc:8d:29:79:d5:0e:03:83:2e:1d:d2:91:09: e8:15:e2:52:db:05:57:25:0e:25:22:99:0b:27:43:0a:35:79: 36:1b:1d:94:9c:eb:90:04:09:11:2c:b4:f6:5f:7b:88:d5:8a: a2:f8:f1:5d:82:f3:f9:72:24:13:a0:5b:ab:5c:94:08:00:58: 94:89:cd:f4:45:37:7f:22:3f:0e:30:98:01:5e:31:aa:bd:f3: ca:48:11:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIzMEExMTAvBgNVBAUTKDEzN0Y2OTg4OEJFRTlDQzgzQkFCNDFGQUYyQzk0MkQx MEFGMkNCNjUwHhcNMjQxMTIyMjM1NzAxWhcNMjQxMTI5MjM1NzAxWjAYMRYwFAYD VQQDEw02NzQxMWE0ZC1jOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtply/kOdcHeK06ThQOQDBMX6HjLBq+UQvdf+p/gnd9aSy5LuZ9YFwXkzqbS Q+gcw79w2eEt5500zuUMnKbMHO6ueCjrSffhgrET3MhLcbG/HwubNC9M2asRTAn9 fPE8Z49ohZbQkHZuowiGBU52dmJdA9rRCMaXhQ14E9874xyyLjpkhwXo/H1xEx2s ty8Xe8TdYIoUfpCPVvbbGtpoO0b3KRt38v28e8kWNJgS7VCPJJgSY6EE5WbmE2t4 Vj23ffRPgSsUcqoK9sAUUbQZFgqNv+V+PHwhhaHDKtDcqUpz+bhP4KO2KGNCdeeE t5YA2SwUaKa2YGJoMTaXftrfbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsQs8up qMmB7PRxf7DB2Uw0yKHgMB8GA1UdIwQYMBaAFBN/aYiL7pzIO6tB+vLJQtEK8stl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjMwQS85MUFFNjlBQTQ2 N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5NZzdxMEg2OHNsQzBRcnl5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UzOXBpSXZ1bk1nN3EwSDY4c2xDMFFyeXkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjMwQS85MUFFNjlBQTQ2N0MxMUVDQkQ2NjEyNkJDNEY5QUUwMi9FMzlwaUl2dW5N ZzdxMEg2OHNsQzBRcnl5MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyQPjU4nbsnkhp7XZMLMSCq0KnaVXbeZTQKAk5eaU2R9lTcS4giePf 06kcAQrSy8nsNOQlrNCutvZJviziLD9woocpHOBjPFOLnNDmdTVB/4cRH6YvIBrg CzvFcS5FZ1wZ0IuCILZWEBJxywj20ZJwPqoHf3BKyAlqnAmLYzA6V+VPKLhQ276R 6r8clUXu5oMCder5QROaFs61lGjM9cMgeDjiDedhfbyNKXnVDgODLh3SkQnoFeJS 2wVXJQ4lIpkLJ0MKNXk2Gx2UnOuQBAkRLLT2X3uI1Yqi+PFdgvP5ciQToFurXJQI AFiUic30RTd/Ij8OMJgBXjGqvfPKSBGE -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:21 2024 by rpki-client on console-ams.rpki-client.org