$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: iYgZLE3qj9VKCziby6pE704cHI49CQ7jrIJBvZyhPGg= Subject key identifier: 90:8D:FD:22:63:BE:AC:05:8A:71:59:6A:6E:92:74:A1:79:27:3F:75 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 96 Signing time: Sat 23 Nov 2024 04:46:43 +0000 Manifest this update: Sat 23 Nov 2024 04:46:43 +0000 Manifest next update: Sat 30 Nov 2024 04:46:43 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: fF6MQAboExEMvFf5X6dmFU0I1bSu07d+ZNtY2vsWHp8=) 2: 0DBEE8A6F37011EEACC7EB7AC4F9AE02.roa (hash: /gSA3t31p4sHh/nVImDlZ6C1qeedlIwa0gXefZnIFWo=) 3: 83BD68508E5411EF9626DF3CC4F9AE02.roa (hash: yYy9sqW+bIg76QGHQOdsCbUROu4kV020oIkec6So/dM=) 4: 8C57FA52713F11EF8D640386C4F9AE02.roa (hash: orX7iaQ2sXxPDAe8FqqwBwDCa5TlPKBOOBIQjPR1yMw=) 5: 8F4855FA719D11EF89D9262FC4F9AE02.roa (hash: hPiEFlCjIc8KK76tsuspz1ONu+ItwEBYhz4W04Yol+g=) 6: 6C8DB570FE1911EEBC22905DC4F9AE02.roa (hash: hPgoNHbP8TnQMLHkO9eUXhsu4qNgnVEZOfgux/wVtSU=) 7: 6B4135EA8E5411EF86959F3CC4F9AE02.roa (hash: luUkvDNqlzXYq/6L4n4dUaoBqS9AlCMvYXbZ/A3MfRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Nov 23 04:46:43 2024 GMT Not After : Nov 30 04:46:43 2024 GMT Subject: CN=67415e33-1048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c2:58:b5:3e:33:b5:15:de:69:51:73:93:f0: 4e:fa:f8:12:34:6e:74:c4:94:61:2b:fc:ae:f3:73: 8d:c5:e1:a1:95:70:62:f5:82:b4:a4:e5:d7:04:56: cd:69:c1:eb:ce:ab:56:d8:97:f3:ab:5a:b3:85:c3: d0:28:53:f7:96:1e:53:e5:64:06:25:15:1c:d7:3d: 8d:f9:0b:75:d9:81:9a:eb:08:98:20:5a:a4:60:e0: 70:9e:99:c4:aa:79:27:0d:88:83:80:cd:e5:48:de: 08:23:3d:1a:e6:53:c8:74:73:03:1f:6e:bd:b8:64: ab:b9:23:6a:3c:17:19:5e:26:e7:48:d2:c9:63:8e: 14:5b:25:d8:73:70:84:ba:ad:0e:95:7e:1d:da:b8: b7:d5:43:76:8f:b8:f7:65:e7:b6:fa:d9:c1:3a:fd: 14:3f:f6:7f:0a:c0:27:7e:18:66:48:1f:b9:f2:6d: d7:8b:cb:7c:32:23:8c:71:7a:b6:84:b3:d3:66:9d: a3:e4:de:a7:31:41:78:8b:b9:76:1a:9f:4e:d7:83: 48:7a:b8:8d:f1:c0:b9:7f:ff:43:22:99:96:a2:70: 9f:c1:e2:e3:df:ff:02:67:8c:0e:a0:f4:5d:f9:04: c8:34:bc:eb:68:13:50:ba:a6:dd:9a:ea:7d:3c:05: 5e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8D:FD:22:63:BE:AC:05:8A:71:59:6A:6E:92:74:A1:79:27:3F:75 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a9:82:3f:f5:07:b0:cc:da:c8:de:6e:33:d0:12:41:63:fc: 9a:51:ab:a1:b5:e6:30:3c:93:3b:5f:39:6e:89:0a:3c:ee:b4: 87:3f:40:ca:86:23:eb:74:ef:dc:3c:c3:74:07:60:fe:26:c3: 73:e1:31:be:93:14:00:b3:c8:96:b5:77:2c:55:e0:e7:c2:51: 1a:b8:2c:61:18:8d:3c:0f:22:cc:dd:87:08:24:bc:d5:18:23: 8a:b4:9a:6f:c6:15:8d:b4:93:2d:71:d4:a1:f1:56:59:58:59: 9f:41:fa:a3:2b:27:89:4d:2a:27:0c:bf:67:bc:0e:b4:b7:c3: 56:ba:27:5f:dc:80:4d:89:01:0e:e3:72:33:34:09:a5:00:c2: 29:52:2a:74:b3:0c:ad:ee:84:47:c3:d0:19:34:91:b8:e7:1c: 3b:a7:98:6b:9c:21:bc:33:b6:f5:60:bc:50:43:51:81:30:6c: 9d:57:70:d3:9e:c0:34:7c:a9:d1:62:72:48:eb:e2:dc:1d:de: ce:c9:0a:9e:7a:21:45:85:52:7e:83:f4:23:d0:4e:49:83:7d: e3:78:30:0f:86:72:08:71:e5:29:90:f3:c5:cb:7b:2d:84:51: ed:9b:55:67:ef:bb:24:47:b5:99:63:41:57:fd:53:23:1b:0d: c3:a6:8c:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjQxMTIzMDQ0NjQzWhcNMjQxMTMwMDQ0NjQzWjAYMRYwFAYD VQQDEw02NzQxNWUzMy0xMDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9MJYtT4ztRXeaVFzk/BO+vgSNG50xJRhK/yu83ONxeGhlXBi9YK0pOXXBFbN acHrzqtW2Jfzq1qzhcPQKFP3lh5T5WQGJRUc1z2N+Qt12YGa6wiYIFqkYOBwnpnE qnknDYiDgM3lSN4IIz0a5lPIdHMDH269uGSruSNqPBcZXibnSNLJY44UWyXYc3CE uq0OlX4d2ri31UN2j7j3Zee2+tnBOv0UP/Z/CsAnfhhmSB+58m3Xi8t8MiOMcXq2 hLPTZp2j5N6nMUF4i7l2Gp9O14NIeriN8cC5f/9DIpmWonCfweLj3/8CZ4wOoPRd +QTINLzraBNQuqbdmup9PAVeSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCN/SJj vqwFinFZam6SdKF5Jz91MB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZqYI/9QewzNrI3m4z0BJBY/yaUauhteYwPJM7XzluiQo87rSHP0DK hiPrdO/cPMN0B2D+JsNz4TG+kxQAs8iWtXcsVeDnwlEauCxhGI08DyLM3YcIJLzV GCOKtJpvxhWNtJMtcdSh8VZZWFmfQfqjKyeJTSonDL9nvA60t8NWuidf3IBNiQEO 43IzNAmlAMIpUip0swyt7oRHw9AZNJG45xw7p5hrnCG8M7b1YLxQQ1GBMGydV3DT nsA0fKnRYnJI6+LcHd7OyQqeeiFFhVJ+g/Qj0E5Jg33jeDAPhnIIceUpkPPFy3st hFHtm1Vn77skR7WZY0FX/VMjGw3Dpoxd -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org