$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft File: 5ufguvNPIMPZye8md2gF84JGO4Y.mft (raw, json) Hash identifier: DP8usu4et7P5JSNljI5M4wTFlMxMUU6o9kAM64QPTaE= Subject key identifier: EC:6C:42:C5:AA:7D:F3:44:F0:DD:EC:74:8A:94:81:06:8A:36:AD:01 Authority key identifier: E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86 Certificate issuer: /CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86 Certificate serial: 060E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft Manifest number: 060A Signing time: Fri 22 Nov 2024 22:13:14 +0000 Manifest this update: Fri 22 Nov 2024 22:13:13 +0000 Manifest next update: Fri 29 Nov 2024 22:13:13 +0000 Files and hashes: 1: 5ufguvNPIMPZye8md2gF84JGO4Y.crl (hash: dEikSAwrqivYYTxTMduNqEPQXLYhVyDV9H3l56L+tqc=) 2: 159A3C967D7211EBA0A7FF60C4F9AE02.roa (hash: HpPML1igM6nukloEviOSwvtkO/Cgiu8ba1tFR5xUQ7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1550 (0x60e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160BD2/serialNumber=E6E7E0BAF34F20C3D9C9EF26776805F382463B86 Validity Not Before: Nov 22 22:13:13 2024 GMT Not After : Nov 29 22:13:13 2024 GMT Subject: CN=674101fa-15f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:47:bf:dc:c4:70:d5:79:f5:3d:51:de:30: 1b:4f:f9:e4:3b:df:69:25:ce:86:70:b5:fd:07:cb: ae:86:69:ec:14:a5:e6:1b:60:04:1b:f0:fe:39:ab: 62:b2:e7:4c:63:95:9a:de:28:36:fd:c2:6c:50:d9: 10:90:4d:a3:93:31:89:8f:60:28:b8:be:10:7e:96: 73:e5:11:f5:56:1e:80:43:86:c6:80:d0:9e:74:a8: 65:ec:77:6e:cc:8c:ca:c5:41:1d:48:e6:17:e5:f6: d0:ba:63:38:fc:74:fb:f7:01:2c:3d:20:f0:24:55: 5f:71:bc:74:57:76:2e:e1:c1:52:14:22:95:08:fb: d3:91:b5:84:33:45:62:f8:bd:39:dd:59:f1:6d:59: 9f:11:b5:c5:06:34:24:81:ce:cd:92:b3:d2:d1:fc: ad:6b:af:be:7a:fc:50:86:ba:8e:e3:09:27:bd:b2: 4c:87:b2:1c:31:7f:4e:88:94:60:2c:8a:df:2c:d8: 47:46:2a:30:9c:9d:f9:6c:46:ef:b8:85:fc:6c:e0: 2b:06:60:ff:85:4f:fe:ab:6f:1c:c5:0b:f1:49:67: b7:a0:5e:51:58:ed:dd:88:34:f0:f5:2e:e4:61:66: e4:4d:d3:bf:9d:42:1a:7f:17:e2:2c:80:c7:38:e8: 60:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6C:42:C5:AA:7D:F3:44:F0:DD:EC:74:8A:94:81:06:8A:36:AD:01 X509v3 Authority Key Identifier: keyid:E6:E7:E0:BA:F3:4F:20:C3:D9:C9:EF:26:77:68:05:F3:82:46:3B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ufguvNPIMPZye8md2gF84JGO4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BD2/E7E904007D6F11EB86111147C4F9AE02/5ufguvNPIMPZye8md2gF84JGO4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a9:95:2c:96:c6:f7:ae:5c:58:2d:55:fb:f7:01:b8:59:56: a5:44:c9:07:a7:a1:71:9b:75:a6:12:19:72:b3:cc:6c:00:1b: 74:4d:b4:82:4b:47:8c:24:0d:e7:dc:a3:65:b2:20:42:67:b2: 05:a3:ce:ef:89:64:83:82:28:88:18:88:45:d8:cf:22:a7:5f: 4c:57:3f:f4:a4:df:f5:b2:2e:3f:91:96:5a:94:7a:e9:8a:ba: 62:6d:cb:68:eb:4c:ae:3e:66:22:7a:9c:7f:56:72:79:0c:77: 9a:8c:33:d8:a6:d7:ec:8f:84:19:ec:00:83:f2:27:d1:0b:3c: 40:98:ef:34:19:52:c4:06:43:ca:03:3a:7d:db:95:4f:d7:b5: a8:7d:63:9d:6d:38:ac:a9:13:ef:22:66:d2:48:62:7e:07:44: f4:bb:46:76:f5:18:86:d4:49:5d:ec:18:06:ff:f8:ca:b5:f2: 2a:3e:d1:21:13:99:a9:da:b7:63:c7:a5:e6:bd:94:44:e6:c8: fc:5d:9b:99:85:bf:cc:3d:f6:01:9e:57:e7:ab:db:50:7e:d5: 32:e5:2c:0b:78:06:8b:64:37:fd:4a:3a:13:da:ea:1d:b5:dc: 53:d7:17:a4:a9:ad:a7:ae:07:65:5f:48:1d:36:93:6c:2a:84: a1:99:6e:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBCRDIxMTAvBgNVBAUTKEU2RTdFMEJBRjM0RjIwQzNEOUM5RUYyNjc3NjgwNUYz ODI0NjNCODYwHhcNMjQxMTIyMjIxMzEzWhcNMjQxMTI5MjIxMzEzWjAYMRYwFAYD VQQDEw02NzQxMDFmYS0xNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc9Hv9zEcNV59T1R3jAbT/nkO99pJc6GcLX9B8uuhmnsFKXmG2AEG/D+Oati sudMY5Wa3ig2/cJsUNkQkE2jkzGJj2AouL4QfpZz5RH1Vh6AQ4bGgNCedKhl7Hdu zIzKxUEdSOYX5fbQumM4/HT79wEsPSDwJFVfcbx0V3Yu4cFSFCKVCPvTkbWEM0Vi +L053VnxbVmfEbXFBjQkgc7NkrPS0fyta6++evxQhrqO4wknvbJMh7IcMX9OiJRg LIrfLNhHRiownJ35bEbvuIX8bOArBmD/hU/+q28cxQvxSWe3oF5RWO3diDTw9S7k YWbkTdO/nUIafxfiLIDHOOhgewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxsQsWq ffNE8N3sdIqUgQaKNq0BMB8GA1UdIwQYMBaAFObn4LrzTyDD2cnvJndoBfOCRjuG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEJEMi9FN0U5MDQwMDdE NkYxMUVCODYxMTExNDdDNEY5QUUwMi81dWZndXZOUElNUFp5ZThtZDJnRjg0SkdP NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV1Zmd1dk5QSU1QWnllOG1kMmdGODRKR080WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEJEMi9FN0U5MDQwMDdENkYxMUVCODYxMTExNDdDNEY5QUUwMi81dWZndXZOUElN UFp5ZThtZDJnRjg0SkdPNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFqZUslsb3rlxYLVX79wG4WValRMkHp6Fxm3WmEhlys8xsABt0TbSC S0eMJA3n3KNlsiBCZ7IFo87viWSDgiiIGIhF2M8ip19MVz/0pN/1si4/kZZalHrp irpibcto60yuPmYiepx/VnJ5DHeajDPYptfsj4QZ7ACD8ifRCzxAmO80GVLEBkPK Azp925VP17WofWOdbTisqRPvImbSSGJ+B0T0u0Z29RiG1Eld7BgG//jKtfIqPtEh E5mp2rdjx6XmvZRE5sj8XZuZhb/MPfYBnlfnq9tQftUy5SwLeAaLZDf9SjoT2uod tdxT1xekqa2nrgdlX0gdNpNsKoShmW6B -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org