$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json) Hash identifier: pd3Am34NCg/ZOJrTRLZC4KlXM+LZNTpVTZSg3jePjP0= Subject key identifier: 02:21:98:17:67:92:05:E1:DD:37:D3:67:3B:20:38:D3:6E:49:BD:3E Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft Manifest number: 0201 Signing time: Sat 23 Nov 2024 01:38:08 +0000 Manifest this update: Sat 23 Nov 2024 01:38:07 +0000 Manifest next update: Sat 30 Nov 2024 01:38:07 +0000 Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: dX8eHb31W/fp9Z5fXUVA+Su2FjfuTsLZNcCaLuFaAeU=) 2: 4D05FAAC61A111ED83B4EF11C4F9AE02.roa (hash: u65joMfLTVK7Gv663p0kjHwKkE0yP9mKJ7HABAXYM6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Validity Not Before: Nov 23 01:38:07 2024 GMT Not After : Nov 30 01:38:07 2024 GMT Subject: CN=674131ff-3932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:c5:84:b3:e9:65:49:17:b7:5c:92:4c:97: b2:27:72:b3:01:ba:ee:92:5d:22:4f:b3:df:7a:21: 58:db:9e:64:49:9a:fd:fb:60:c5:cd:08:e5:1a:e9: 1a:2f:e5:98:11:32:20:40:15:19:b7:5a:e9:67:9d: 71:c5:16:98:15:95:72:96:0e:e2:94:67:9b:34:5d: 03:d5:df:3b:18:61:01:59:45:a6:d1:39:54:a8:d1: f0:25:db:0d:90:33:41:63:34:8c:7d:97:2c:24:4a: ec:fe:5f:e8:73:21:52:06:e6:33:43:24:88:eb:c4: 08:12:af:67:62:f1:3e:7c:cf:2f:39:0c:af:5d:d1: 52:1c:51:60:26:04:75:47:26:d2:3b:58:c0:d6:a1: 48:6e:2e:8f:e1:07:6c:47:c9:6d:ae:72:0b:c5:7c: 59:8e:63:ed:66:ae:5b:3e:d9:b2:2f:31:71:90:bb: 68:58:f7:e4:d7:e2:6f:46:5b:0e:63:d0:30:32:b8: 9d:06:90:4c:1e:10:1f:11:1a:91:37:22:92:fa:32: 67:00:32:7b:be:aa:73:28:8d:04:33:45:bb:94:eb: 11:71:cd:70:b4:8f:ce:1e:cf:8f:e8:8e:9d:c7:59: fc:77:b9:c0:28:b2:ff:ce:71:1d:b8:09:11:98:90: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:21:98:17:67:92:05:E1:DD:37:D3:67:3B:20:38:D3:6E:49:BD:3E X509v3 Authority Key Identifier: keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d2:0b:da:9f:53:52:bb:7e:84:ef:bd:b2:d3:83:d6:59:68: ab:f6:ca:fc:18:b5:ee:15:34:80:8b:2b:ff:df:4f:2e:66:dd: e3:2a:c6:aa:7f:9a:eb:c3:49:1b:52:41:b7:b1:23:7a:ac:54: a9:9b:d8:20:4e:28:84:08:2f:4e:6d:f6:ea:c0:e0:6a:82:da: 88:8c:ab:6e:72:4b:50:1c:84:fe:2c:45:43:0d:f2:d5:3f:1d: a9:42:9d:a3:d4:d6:f9:e3:81:39:d2:af:d4:96:54:a0:87:56: 1f:90:d9:d8:bc:a9:98:41:d7:ed:68:fa:fc:de:fa:33:33:34: de:0d:69:18:87:81:ec:03:1c:a5:3d:3b:0d:f0:3e:b4:6b:0d: e6:be:f9:d5:24:40:0d:31:5e:b2:c6:15:04:e2:bb:3c:8a:03: af:00:12:f4:c4:b3:b5:be:e5:ef:02:65:9c:a1:7b:2a:a1:84: 6c:ff:d6:70:6c:44:d8:65:0b:05:02:8e:e8:f8:13:ff:9f:bc: 33:58:b5:83:a1:2f:85:2d:9b:06:42:ca:d2:d5:13:ba:5d:66: e1:db:07:57:0f:5b:18:f1:81:50:b9:f1:b1:40:e4:bc:c9:19: 2f:f6:07:ee:51:b7:8f:fc:e3:59:37:7a:11:5d:c1:39:d2:38: a0:ff:3d:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0MTExMTAvBgNVBAUTKDcyMDM4QTg4QTYxRDI1QzRGNDA2NTAyNUZDMjZCOENF M0I4QTdBMDIwHhcNMjQxMTIzMDEzODA3WhcNMjQxMTMwMDEzODA3WjAYMRYwFAYD VQQDEw02NzQxMzFmZi0zOTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+vFhLPpZUkXt1ySTJeyJ3KzAbrukl0iT7PfeiFY255kSZr9+2DFzQjlGuka L+WYETIgQBUZt1rpZ51xxRaYFZVylg7ilGebNF0D1d87GGEBWUWm0TlUqNHwJdsN kDNBYzSMfZcsJErs/l/ocyFSBuYzQySI68QIEq9nYvE+fM8vOQyvXdFSHFFgJgR1 RybSO1jA1qFIbi6P4QdsR8ltrnILxXxZjmPtZq5bPtmyLzFxkLtoWPfk1+JvRlsO Y9AwMridBpBMHhAfERqRNyKS+jJnADJ7vqpzKI0EM0W7lOsRcc1wtI/OHs+P6I6d x1n8d7nAKLL/znEduAkRmJCg3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIhmBdn kgXh3TfTZzsgONNuSb0+MB8GA1UdIwQYMBaAFHIDioimHSXE9AZQJfwmuM47inoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQxMS85MTg1M0EwNjE4 QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpjVDBCbEFsX0NhNHpqdUtl Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NnT0tpS1lkSmNUMEJsQWxfQ2E0emp1S2VnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTQxMS85MTg1M0EwNjE4QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpj VDBCbEFsX0NhNHpqdUtlZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM0gvan1NSu36E772y04PWWWir9sr8GLXuFTSAiyv/308uZt3jKsaq f5rrw0kbUkG3sSN6rFSpm9ggTiiECC9ObfbqwOBqgtqIjKtucktQHIT+LEVDDfLV Px2pQp2j1Nb544E50q/UllSgh1YfkNnYvKmYQdftaPr83vozMzTeDWkYh4HsAxyl PTsN8D60aw3mvvnVJEANMV6yxhUE4rs8igOvABL0xLO1vuXvAmWcoXsqoYRs/9Zw bETYZQsFAo7o+BP/n7wzWLWDoS+FLZsGQsrS1RO6XWbh2wdXD1sY8YFQufGxQOS8 yRkv9gfuUbeP/ONZN3oRXcE50jig/z23 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:40 2024 by rpki-client on console-ams.rpki-client.org