$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft File: PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json) Hash identifier: 7ZCxxPyeQoXSbofZZm5Wiu4i46yqd2WjrEurZeTLytM= Subject key identifier: FB:52:13:60:1F:F4:68:17:23:B1:46:A5:0A:A3:1A:58:D1:7F:69:86 Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft Manifest number: 29 Signing time: Wed 23 Oct 2024 06:20:55 +0000 Manifest this update: Wed 23 Oct 2024 06:20:54 +0000 Manifest next update: Wed 30 Oct 2024 06:20:54 +0000 Files and hashes: 1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: tgOZw2e+0j58uGnDUYhWKer47gZGPmXI12C5CG7RpBE=) 2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: MkKraPCVKYSh4EUGWEmc6lPBWcmV9tHqmd6kNTqMDpY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Validity Not Before: Oct 23 06:20:54 2024 GMT Not After : Oct 30 06:20:54 2024 GMT Subject: CN=671895c7-613b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:0a:82:8f:6e:23:d0:d7:13:40:31:91:c6: c4:20:09:82:1e:6e:38:b6:2d:52:55:f3:f5:f9:e8: d8:58:34:62:ca:23:6c:d6:57:64:86:08:ad:0e:40: 23:35:1a:0f:13:52:1f:96:3f:10:5b:24:ef:0c:a5: 92:2f:f8:77:e2:53:fd:ba:d6:04:60:6b:fd:9a:55: f4:84:09:65:d2:8e:cf:f0:56:97:db:54:19:91:4e: 31:db:4f:c9:e1:52:54:8a:05:e0:b9:32:9b:08:c7: 64:d5:df:1e:b3:f4:93:1b:c6:e5:19:4e:6d:c3:df: 22:ca:ac:86:51:8a:8a:23:fd:d1:cc:d1:7a:d8:13: 47:0c:85:a7:00:90:b9:47:38:1f:22:49:c1:2d:a3: f0:31:4e:5a:b1:ae:b0:12:ce:f4:b5:5c:36:70:e2: db:1e:c8:5e:b1:52:dc:fe:34:37:ee:6b:91:8e:13: 62:1b:70:81:3b:5d:54:7c:b4:e0:f9:02:72:6d:63: 47:67:29:42:c2:e1:3e:8b:01:05:6f:f2:78:8b:1c: 58:09:39:55:34:d5:fb:fb:33:35:ba:f9:75:af:b5: fa:c8:3a:f9:dd:5d:78:c5:66:17:55:37:c9:0c:bd: c8:0c:b5:54:ed:0b:3e:82:56:84:24:f3:35:7e:3b: dd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:52:13:60:1F:F4:68:17:23:B1:46:A5:0A:A3:1A:58:D1:7F:69:86 X509v3 Authority Key Identifier: keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4c:ab:9c:5a:35:9d:a6:68:1a:a4:05:f4:75:6f:89:66:f3: 39:c1:e0:d0:c0:b7:07:a8:61:33:9d:74:66:26:5e:6e:19:be: 85:3a:36:5d:fc:73:8a:70:1e:31:29:3d:bd:60:dc:a7:e0:1c: a9:2d:72:b2:a9:99:30:a5:f7:44:51:0f:cb:52:e3:d3:5f:63: 0d:fe:8a:34:d5:11:70:09:52:2b:11:c4:5b:91:2c:55:95:0a: 5d:c2:1a:9e:87:53:be:8c:ca:5f:e1:75:ae:24:7b:9a:29:57: 6c:5f:f8:c1:2f:69:0a:02:d9:f7:3f:ad:42:a6:2d:61:05:39: 96:9e:08:30:f4:b2:a4:b0:d8:a5:40:14:b0:1f:8c:b1:55:e6: b5:3e:aa:1d:79:5f:1d:36:49:33:5f:ad:dc:e3:0f:43:e5:9a: 0c:94:46:13:d0:64:f2:2a:58:cc:a5:90:b0:32:9c:16:62:1b: 56:ed:b7:42:c2:74:7b:1b:19:18:12:a7:ef:61:38:5c:0f:9c: 1e:2a:74:20:91:f5:0a:2c:42:7b:e1:eb:e8:73:5a:c6:0e:69: aa:66:64:3b:59:f7:67:cf:ec:bc:97:40:63:d2:5f:d9:24:29: 72:88:3a:fb:81:34:bf:12:e5:cc:4c:40:5e:cf:55:af:20:d6: 97:6b:01:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 M0VCOTExMC8GA1UEBRMoM0NDNzc5MEUyMDM3NjY1RUY0OTYyQjgxREFEMkZEMDdF RDQ2RjhCMjAeFw0yNDEwMjMwNjIwNTRaFw0yNDEwMzAwNjIwNTRaMBgxFjAUBgNV BAMTDTY3MTg5NWM3LTYxM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIswqCj24j0NcTQDGRxsQgCYIebji2LVJV8/X56NhYNGLKI2zWV2SGCK0OQCM1 Gg8TUh+WPxBbJO8MpZIv+HfiU/261gRga/2aVfSECWXSjs/wVpfbVBmRTjHbT8nh UlSKBeC5MpsIx2TV3x6z9JMbxuUZTm3D3yLKrIZRiooj/dHM0XrYE0cMhacAkLlH OB8iScEto/AxTlqxrrASzvS1XDZw4tseyF6xUtz+NDfua5GOE2IbcIE7XVR8tOD5 AnJtY0dnKULC4T6LAQVv8niLHFgJOVU01fv7MzW6+XWvtfrIOvndXXjFZhdVN8kM vcgMtVTtCz6CVoQk8zV+O937AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+1ITYB/0 aBcjsUalCqMaWNF/aYYwHwYDVR0jBBgwFoAUPMd5DiA3Zl70liuB2tL9B+1G+LIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYzRUI5LzA1MUM5RTY0NTRB MDExRUY4NkFFNTkyMkM0RjlBRTAyL1BNZDVEaUEzWmw3MGxpdUIydEw5Qi0xRy1M SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUE1kNURpQTNabDcwbGl1QjJ0TDlCLTFHLUxJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYz RUI5LzA1MUM5RTY0NTRBMDExRUY4NkFFNTkyMkM0RjlBRTAyL1BNZDVEaUEzWmw3 MGxpdUIydEw5Qi0xRy1MSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGpMq5xaNZ2maBqkBfR1b4lm8znB4NDAtweoYTOddGYmXm4ZvoU6Nl38 c4pwHjEpPb1g3KfgHKktcrKpmTCl90RRD8tS49NfYw3+ijTVEXAJUisRxFuRLFWV Cl3CGp6HU76Myl/hda4ke5opV2xf+MEvaQoC2fc/rUKmLWEFOZaeCDD0sqSw2KVA FLAfjLFV5rU+qh15Xx02STNfrdzjD0PlmgyURhPQZPIqWMylkLAynBZiG1btt0LC dHsbGRgSp+9hOFwPnB4qdCCR9QosQnvh6+hzWsYOaapmZDtZ92fP7LyXQGPSX9kk KXKIOvuBNL8S5cxMQF7PVa8g1pdrAbU= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:54 2024 by rpki-client on console-ams.rpki-client.org