$ rpki-client -vvf rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft File: C1O4Cmyciut01te7VxpSAM5V2PM.mft (raw, json) Hash identifier: tZfHSgJuxSjPtzvRuwA97T8RnLDPv9cp/qNdHaeL9GE= Subject key identifier: D9:2B:AC:25:5A:73:81:1D:FF:DC:ED:AA:73:7B:4B:3C:D3:DC:BA:85 Authority key identifier: 0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3 Certificate issuer: /CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3 Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft Manifest number: 0795 Signing time: Fri 22 Nov 2024 20:52:59 +0000 Manifest this update: Fri 22 Nov 2024 20:52:58 +0000 Manifest next update: Fri 29 Nov 2024 20:52:58 +0000 Files and hashes: 1: C1O4Cmyciut01te7VxpSAM5V2PM.crl (hash: t6n/JQuCNNMUq/xL8VDq80gkzdmMGLwgm/RKJSqdIHw=) 2: E382826C4AF611EFB245AE59C4F9AE02.roa (hash: gHlBFVvPZXMJ6Q+hYaSkMK4+kMOfC8z9KiEMGQejTNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3 Validity Not Before: Nov 22 20:52:58 2024 GMT Not After : Nov 29 20:52:58 2024 GMT Subject: CN=6740ef2a-531e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c9:e3:9b:dd:eb:81:73:24:89:3d:2f:ad:f6: be:20:c9:1c:c7:5b:09:2f:c6:a4:cc:d1:3b:40:ef: ba:e2:2d:f3:00:db:2d:37:e5:58:bb:93:3d:3f:4c: b8:7b:1c:3a:79:c0:cf:83:f8:95:48:ad:b9:1e:7f: 7a:d0:7e:32:e0:45:c1:34:1e:b4:d8:5a:5e:e9:f3: 9d:70:80:c0:c6:b7:b6:c2:95:83:c2:01:c9:1f:a1: ff:a7:80:4a:5b:c9:ff:cd:66:2a:b4:69:13:03:a7: c1:d5:6c:2c:5d:b7:13:dd:99:b1:e0:56:cc:25:1c: 93:df:1a:ff:b9:a1:21:fc:4f:af:1b:10:ab:a4:31: 63:c6:0a:72:b1:d9:f6:9e:ed:3f:f0:85:d3:74:87: 0f:d0:91:75:67:92:9b:db:de:74:71:6e:07:f6:2d: f0:26:4c:11:dd:53:0d:fa:26:1c:b0:ed:7d:56:86: cb:a7:0d:32:b5:11:91:bf:78:83:4d:12:cf:20:4b: bd:cf:aa:5b:33:a6:2d:22:c9:0b:88:71:8c:b3:d7: 01:3c:df:b2:0e:77:0d:84:86:a8:8a:6d:fc:e3:d6: 51:be:77:f5:7b:db:af:79:32:76:c0:1a:66:a2:a6: 0f:2a:93:f5:d0:45:94:09:f2:70:29:64:10:d8:fe: 51:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2B:AC:25:5A:73:81:1D:FF:DC:ED:AA:73:7B:4B:3C:D3:DC:BA:85 X509v3 Authority Key Identifier: keyid:0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b3:12:0c:31:0a:24:96:09:fe:18:9a:e7:e3:99:cb:e6:85: fb:ff:d9:62:2e:ca:35:23:39:33:99:a3:74:55:92:18:78:ae: af:13:f2:4a:7d:0c:e9:4b:57:44:cb:27:b3:31:1f:65:0b:f1: 77:03:a6:1a:d3:bc:54:b1:ca:72:c2:10:2a:45:47:84:be:f1: 10:d3:5e:27:fe:7f:5d:6c:b1:d9:d0:07:6e:ba:7d:87:ad:79: b8:50:03:43:d2:67:fd:c8:55:59:48:f9:b3:65:2b:3c:d9:0a: 8d:9b:ac:18:46:a4:9a:74:68:72:cf:60:40:c2:00:2d:74:ca: 1d:d4:5a:5d:0e:1d:aa:17:0c:76:8d:42:5f:d7:72:83:9e:65: 9c:e8:cb:9a:25:a1:68:2a:56:4f:d8:64:4d:03:ad:72:03:e2: 0c:35:52:6c:05:41:cb:e3:7f:bf:3d:b3:76:f7:68:f1:e3:f6: 09:7c:e0:03:cf:99:72:08:01:61:1a:ee:20:7e:e0:de:9c:7e: 36:6f:5b:05:b5:c6:df:da:46:7d:21:f3:99:e0:fe:8f:47:ab: 1e:c2:fe:5d:cb:4d:7f:0d:da:71:0f:32:26:51:1e:d8:66:31: b2:2e:d1:75:06:e8:8c:3d:9a:88:4d:34:43:d1:54:ee:49:58: 5b:00:2b:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVERUIxMTAvBgNVBAUTKDBCNTNCODBBNkM5QzhBRUI3NEQ2RDdCQjU3MUE1MjAw Q0U1NUQ4RjMwHhcNMjQxMTIyMjA1MjU4WhcNMjQxMTI5MjA1MjU4WjAYMRYwFAYD VQQDEw02NzQwZWYyYS01MzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsnjm93rgXMkiT0vrfa+IMkcx1sJL8akzNE7QO+64i3zANstN+VYu5M9P0y4 exw6ecDPg/iVSK25Hn960H4y4EXBNB602Fpe6fOdcIDAxre2wpWDwgHJH6H/p4BK W8n/zWYqtGkTA6fB1WwsXbcT3Zmx4FbMJRyT3xr/uaEh/E+vGxCrpDFjxgpysdn2 nu0/8IXTdIcP0JF1Z5Kb2950cW4H9i3wJkwR3VMN+iYcsO19VobLpw0ytRGRv3iD TRLPIEu9z6pbM6YtIskLiHGMs9cBPN+yDncNhIaoim3849ZRvnf1e9uveTJ2wBpm oqYPKpP10EWUCfJwKWQQ2P5RhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkrrCVa c4Ed/9ztqnN7SzzT3LqFMB8GA1UdIwQYMBaAFAtTuApsnIrrdNbXu1caUgDOVdjz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NURFQi8xNjJDQjI3NEVB NEMxMUVBQTI1N0I5MzlDNEY5QUUwMi9DMU80Q215Y2l1dDAxdGU3VnhwU0FNNVYy UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MxTzRDbXljaXV0MDF0ZTdWeHBTQU01VjJQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NURFQi8xNjJDQjI3NEVBNEMxMUVBQTI1N0I5MzlDNEY5QUUwMi9DMU80Q215Y2l1 dDAxdGU3VnhwU0FNNVYyUE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQsxIMMQoklgn+GJrn45nL5oX7/9liLso1IzkzmaN0VZIYeK6vE/JK fQzpS1dEyyezMR9lC/F3A6Ya07xUscpywhAqRUeEvvEQ014n/n9dbLHZ0Aduun2H rXm4UAND0mf9yFVZSPmzZSs82QqNm6wYRqSadGhyz2BAwgAtdMod1FpdDh2qFwx2 jUJf13KDnmWc6MuaJaFoKlZP2GRNA61yA+IMNVJsBUHL43+/PbN292jx4/YJfOAD z5lyCAFhGu4gfuDenH42b1sFtcbf2kZ9IfOZ4P6PR6sewv5dy01/DdpxDzImUR7Y ZjGyLtF1BuiMPZqITTRD0VTuSVhbACt/ -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org