$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: TJ2sb6+hznN6w/0pTFPyLOKXXCD4heRd9hi4PBQjEeI= Subject key identifier: 3C:6E:7F:00:DA:93:77:B9:5C:CA:3A:4B:84:BB:93:BB:C0:2B:3F:7C Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0C5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0C42 Signing time: Fri 22 Nov 2024 18:10:24 +0000 Manifest this update: Fri 22 Nov 2024 18:10:23 +0000 Manifest next update: Fri 29 Nov 2024 18:10:23 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: scZVWomEugSPewhCsq/KrFYffW2gy9ROXkEg3aEsXaA=) 2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: pjMkyMYT5Kd5Onu44Wh/MhrOgUl1AW4Ni8kXARqOIXE=) 3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: UlDA7w/+0KHaD2dlRNhXd2T+XWH2yCwy1a4TnLwF5+c=) 4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: KOkcxFkgs+tvKpwVSPTdbjlP2a3aZlPgsitLXyhAd5s=) 5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: ibj8KgitiLOO63xInpDEW7gNAYWQe6nI4+x8vt/ZxMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: Nov 22 18:10:23 2024 GMT Not After : Nov 29 18:10:23 2024 GMT Subject: CN=6740c910-a9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:6d:eb:4d:c8:5b:e2:86:6c:9b:b1:c9:53: 44:71:a3:a1:45:e3:d8:05:26:37:86:57:45:28:83: cf:6e:0b:18:7e:ce:85:c0:09:9c:45:0c:fc:8c:9c: 2f:08:03:b4:34:c8:00:07:94:97:6a:99:2c:a4:5b: 05:67:35:f5:0f:84:11:ae:11:ff:2e:5a:78:f2:78: 63:4f:45:93:4c:06:e2:9a:66:92:7d:97:26:a1:a8: 02:e8:c1:d3:e0:4c:57:52:14:b6:0d:ce:40:b6:26: ae:a7:c9:a1:00:cb:4c:35:0f:8f:bc:45:81:7a:30: 54:9e:f0:eb:7b:c8:37:d8:3e:e4:41:55:da:8f:10: e1:89:ff:1d:73:b2:e7:cb:61:a4:ff:50:12:f3:41: 64:18:8b:59:eb:7c:78:d6:4f:b5:29:40:9a:35:57: a1:46:18:0a:f3:50:e3:fa:34:cf:eb:f8:44:7c:a5: 0a:18:7d:97:fe:d6:44:ef:fd:3e:6c:4c:d2:41:1b: c1:bf:da:72:05:75:99:8a:88:e9:5d:ac:a1:0d:19: 56:31:9f:26:22:1c:c7:9e:db:a7:b6:3a:30:9d:27: c7:99:5a:da:5e:95:d4:af:5e:6e:cc:b4:0c:1e:cc: ec:7d:3e:6a:eb:76:84:1b:c8:85:93:7c:ea:20:99: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6E:7F:00:DA:93:77:B9:5C:CA:3A:4B:84:BB:93:BB:C0:2B:3F:7C X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c1:84:50:b9:c9:ce:4e:55:68:66:78:f6:26:4b:64:0c:b3: 9c:d9:8f:0d:7b:a7:39:1e:c5:a7:0a:72:0e:29:c7:d1:29:3e: d8:04:63:71:8b:ef:93:91:1e:a6:42:85:bd:05:75:b3:23:d6: 08:81:6e:ad:a2:eb:af:c3:ae:ba:f3:b0:3b:e0:e5:bf:5c:ef: e0:50:f3:e3:24:0b:5e:7c:ab:51:d1:60:88:97:b8:14:c5:3f: b4:3b:57:0c:0c:94:ab:e1:0f:47:fb:48:59:b1:dd:de:72:3d: 4e:40:e9:6f:d2:59:66:0b:91:36:ac:b8:9f:e8:c9:54:d6:05: 49:f2:c1:47:60:0a:30:21:80:42:03:5f:df:51:f2:64:8b:27: a6:26:d9:ec:ae:f4:4d:09:d3:e0:41:d4:5c:e3:d8:35:b0:45: 3d:9a:68:c3:c4:af:26:a8:07:08:72:61:08:b8:d7:b4:a6:1c: 4a:22:83:43:b5:4f:ec:c5:56:02:a2:50:27:0f:7d:47:79:c0: ea:e9:dd:f4:0d:0f:71:18:e0:68:26:e0:52:72:f1:a4:e4:65: 67:2c:cf:f3:43:87:ed:f6:00:d5:2c:10:a4:c7:9b:94:82:62: 1c:5b:df:6d:0d:1b:f0:e9:41:0e:9f:67:92:11:8d:64:2c:37: 5d:7f:b6:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjQxMTIyMTgxMDIzWhcNMjQxMTI5MTgxMDIzWjAYMRYwFAYD VQQDEw02NzQwYzkxMC1hOWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lBt603IW+KGbJuxyVNEcaOhRePYBSY3hldFKIPPbgsYfs6FwAmcRQz8jJwv CAO0NMgAB5SXapkspFsFZzX1D4QRrhH/Llp48nhjT0WTTAbimmaSfZcmoagC6MHT 4ExXUhS2Dc5Atiaup8mhAMtMNQ+PvEWBejBUnvDre8g32D7kQVXajxDhif8dc7Ln y2Gk/1AS80FkGItZ63x41k+1KUCaNVehRhgK81Dj+jTP6/hEfKUKGH2X/tZE7/0+ bEzSQRvBv9pyBXWZiojpXayhDRlWMZ8mIhzHntuntjownSfHmVraXpXUr15uzLQM HszsfT5q63aEG8iFk3zqIJk+qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxufwDa k3e5XMo6S4S7k7vAKz98MB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLwYRQucnOTlVoZnj2JktkDLOc2Y8Ne6c5HsWnCnIOKcfRKT7YBGNx i++TkR6mQoW9BXWzI9YIgW6touuvw66687A74OW/XO/gUPPjJAtefKtR0WCIl7gU xT+0O1cMDJSr4Q9H+0hZsd3ecj1OQOlv0llmC5E2rLif6MlU1gVJ8sFHYAowIYBC A1/fUfJkiyemJtnsrvRNCdPgQdRc49g1sEU9mmjDxK8mqAcIcmEIuNe0phxKIoND tU/sxVYColAnD31HecDq6d30DQ9xGOBoJuBScvGk5GVnLM/zQ4ft9gDVLBCkx5uU gmIcW99tDRvw6UEOn2eSEY1kLDddf7ZK -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:03 2024 by rpki-client on console-ams.rpki-client.org