$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json) Hash identifier: UpozyTV4x42pZMYRTzYi+lCT5KgCWC1z2h8sgtd9rEw= Subject key identifier: B6:6D:81:01:5F:CE:96:42:2A:AA:CA:71:15:B2:05:39:90:06:9A:AE Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0AAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft Manifest number: 0AA0 Signing time: Fri 22 Nov 2024 19:19:00 +0000 Manifest this update: Fri 22 Nov 2024 19:18:59 +0000 Manifest next update: Fri 29 Nov 2024 19:18:59 +0000 Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: 9H4QuD/02gp5ibUeY/kfUg7XQzhjyEyLU4stybYaZOI=) 2: FE836A62B19D11EC86ADF246C4F9AE02.roa (hash: QXqLhSGDZF+DtJ6p9go76wpNIwevUBavVoyccuwJbig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: Nov 22 19:18:59 2024 GMT Not After : Nov 29 19:18:59 2024 GMT Subject: CN=6740d924-581a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:ef:a3:d6:f2:6a:a7:0c:d8:45:6f:44:43: a9:c3:dd:eb:9e:df:b5:77:4f:20:25:bb:c6:e4:c4: a0:f7:ed:8e:ed:b5:3d:a0:87:30:4f:5c:0a:c1:c4: bb:21:5e:d0:25:a7:49:30:d0:f6:d8:c2:da:12:4d: ca:14:a5:9e:3f:e7:53:92:88:a6:4c:d7:a7:60:04: 67:2f:3a:f4:19:89:01:36:cc:5c:a8:da:2e:06:8e: 89:fc:0b:e7:1a:53:9f:81:4f:86:a2:af:3b:ca:75: c5:ca:68:73:06:74:1a:a1:38:5a:ed:aa:2c:80:da: 6a:79:5b:8e:11:49:94:7c:bb:7c:ca:d6:bf:cc:dc: 2f:d0:9f:f9:51:57:15:7c:a0:2d:59:22:4f:c8:98: e6:33:00:5b:e0:28:7e:1c:c0:9f:f2:c1:88:9d:c0: 5c:74:34:5c:2d:1e:c7:dc:f4:99:90:50:2d:df:3a: 25:ec:85:33:9c:46:7e:d1:55:62:1a:5c:4d:95:cc: 7a:4b:ea:ec:0a:36:50:ef:29:f0:86:8b:ac:33:3a: 78:0f:70:c3:54:9b:3a:a9:bd:20:ed:8d:0b:49:9b: a6:ab:e4:5b:f9:1c:0d:97:2f:4f:9c:f1:cc:1d:6c: 4f:cc:04:28:d0:d6:cb:04:9e:f0:35:ce:82:77:9c: fd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6D:81:01:5F:CE:96:42:2A:AA:CA:71:15:B2:05:39:90:06:9A:AE X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ce:f6:76:17:95:93:05:8d:6b:e6:81:c5:88:9d:6e:d5:ee: 61:c0:c4:09:a3:42:98:1b:f6:32:90:49:ae:ce:b0:0c:b3:98: cc:0b:e9:43:19:95:e7:b6:98:2e:32:a2:71:a3:a9:67:a1:93: 08:68:5c:60:91:46:58:15:22:ad:76:89:42:c6:72:64:d0:58: 4e:94:a8:e9:0f:f8:da:29:5a:74:56:e1:0d:29:57:09:76:7b: 69:24:13:23:3a:01:22:a0:c1:ad:23:59:72:c4:d9:12:73:07: 2e:04:49:ad:14:cd:52:6b:ef:cf:94:00:f0:46:dd:2b:cb:a9: 08:c0:6e:11:e7:ff:d9:70:2b:2a:8e:08:0a:d7:4f:8a:fa:6e: a2:90:b0:00:c3:1b:c4:01:e0:36:15:1e:c3:81:99:d6:f7:f2: eb:30:bc:e1:b3:29:db:07:a8:5d:bc:cd:66:5d:b9:fc:12:e9: 27:df:f8:41:84:b3:09:a0:dd:b0:b5:7d:b1:21:04:37:1d:c3: 87:5f:ac:4b:ff:a6:13:fa:35:d0:1b:81:c2:0d:d4:4f:bf:21: a4:99:8c:80:5e:bf:86:ef:d2:6d:d4:15:5a:99:8b:d5:41:ab: 4b:f3:05:60:55:f4:40:4c:4f:66:6d:2a:dc:84:9b:f3:e9:1a: 75:2a:94:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjQxMTIyMTkxODU5WhcNMjQxMTI5MTkxODU5WjAYMRYwFAYD VQQDEw02NzQwZDkyNC01ODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1I/vo9byaqcM2EVvREOpw93rnt+1d08gJbvG5MSg9+2O7bU9oIcwT1wKwcS7 IV7QJadJMND22MLaEk3KFKWeP+dTkoimTNenYARnLzr0GYkBNsxcqNouBo6J/Avn GlOfgU+Goq87ynXFymhzBnQaoTha7aosgNpqeVuOEUmUfLt8yta/zNwv0J/5UVcV fKAtWSJPyJjmMwBb4Ch+HMCf8sGIncBcdDRcLR7H3PSZkFAt3zol7IUznEZ+0VVi GlxNlcx6S+rsCjZQ7ynwhousMzp4D3DDVJs6qb0g7Y0LSZumq+Rb+RwNly9PnPHM HWxPzAQo0NbLBJ7wNc6Cd5z91wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZtgQFf zpZCKqrKcRWyBTmQBpquMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ TFRWMzRTSWU2eHRxMGl3MFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfzvZ2F5WTBY1r5oHFiJ1u1e5hwMQJo0KYG/YykEmuzrAMs5jMC+lD GZXntpguMqJxo6lnoZMIaFxgkUZYFSKtdolCxnJk0FhOlKjpD/jaKVp0VuENKVcJ dntpJBMjOgEioMGtI1lyxNkScwcuBEmtFM1Sa+/PlADwRt0ry6kIwG4R5//ZcCsq jggK10+K+m6ikLAAwxvEAeA2FR7DgZnW9/LrMLzhsynbB6hdvM1mXbn8Eukn3/hB hLMJoN2wtX2xIQQ3HcOHX6xL/6YT+jXQG4HCDdRPvyGkmYyAXr+G79Jt1BVamYvV QatL8wVgVfRATE9mbSrchJvz6Rp1KpST -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:28 2024 by rpki-client on console-fra.rpki-client.org