$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json) Hash identifier: a4qoiJRff0Sl5Vi/iNSRKL3djkE+bN9ogyfiQLSrK28= Subject key identifier: 6D:E6:45:8C:85:CD:AB:53:91:4F:29:26:8C:C9:59:32:6F:8E:A5:30 Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Certificate serial: 0B51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft Manifest number: 0B3F Signing time: Fri 22 Nov 2024 18:57:22 +0000 Manifest this update: Fri 22 Nov 2024 18:57:21 +0000 Manifest next update: Fri 29 Nov 2024 18:57:21 +0000 Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: GFGd1ZVCE6LVBXeXcMY5yAY5CHdYY5jiczYUbnA0Uw8=) 2: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: dh5ymVZvIc7FqFzTtBzYEQEIMygfVmNQaVU/qA2YVgE=) 3: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: K2Zxx9ME49vXDeg1Ffdf+j0UFdQqBnMUQi0IozP8thk=) 4: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: W6nL3EukqFE9RFLXXry6g4CH+1Dbd14zPnwD38PnUxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2897 (0xb51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Validity Not Before: Nov 22 18:57:21 2024 GMT Not After : Nov 29 18:57:21 2024 GMT Subject: CN=6740d412-eb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:63:1c:72:84:39:e2:ed:ab:26:b1:bc:ff: e2:4a:41:6a:30:2c:70:e1:aa:74:3c:d8:92:6f:c7: 14:0d:3e:01:22:3d:12:09:bd:09:87:c0:55:52:59: 38:43:7d:07:ce:2f:f8:10:bf:99:ae:6e:e1:ae:aa: 61:49:d8:3f:7f:7c:67:e2:ca:42:6a:ab:2b:cf:cf: 30:e9:be:6d:8e:ca:8e:d6:55:77:2a:f5:73:38:d3: e5:b0:fc:4e:14:6a:4d:17:0e:e0:81:3e:39:4f:d9: e2:ad:ee:e5:cb:0b:4f:c1:12:84:a8:e0:e5:f7:4a: 23:db:54:0d:8e:0d:bd:37:96:00:81:c2:20:55:18: 14:b1:a9:97:6a:88:52:28:15:85:12:a3:51:88:e5: f3:1d:96:ce:b5:d7:4d:ef:60:50:1d:0a:0b:88:c0: 61:d7:8c:b6:35:1c:22:5b:7a:3b:ef:0e:a9:32:f5: bf:d4:ae:21:49:47:fa:6b:fb:f8:f8:21:d3:10:35: 3e:33:be:33:d8:32:ad:45:ca:53:bf:27:a5:71:55: d5:62:32:d1:45:5b:45:03:44:1f:16:c7:af:c8:75: e4:bc:b3:ce:02:e6:61:a8:0c:fb:ff:67:75:9e:dc: b2:37:aa:06:5b:51:be:e2:23:5b:ca:d6:9f:2e:55: 0e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E6:45:8C:85:CD:AB:53:91:4F:29:26:8C:C9:59:32:6F:8E:A5:30 X509v3 Authority Key Identifier: keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f0:4c:f1:20:fe:cb:99:25:ca:54:cc:01:3f:34:15:1c:83: 02:4c:98:3a:a6:bb:44:12:60:6e:e8:62:73:56:dd:bf:55:fb: 9b:3a:15:bd:2f:2a:9f:f5:d1:e8:bf:b4:f8:08:d3:6b:97:d3: ce:1a:49:dc:39:b4:98:33:6b:a2:b2:fb:da:25:3a:7a:34:02: 7e:60:a4:6d:45:76:9e:4a:a3:0f:f8:20:24:22:34:b4:20:0e: d2:e4:56:3a:69:85:a9:d4:80:fd:d7:0f:da:8d:2d:91:d5:d0: 83:20:0e:bb:24:db:27:c3:fe:25:8d:8f:ac:72:2b:dd:11:d5: 91:f9:37:ca:a0:c3:d5:45:21:0a:b2:2d:95:ef:b4:64:0d:8c: e8:31:f3:49:66:1d:81:07:58:39:64:2f:64:ec:11:ad:cb:10: 7e:d7:70:f6:74:74:88:e2:c0:c5:38:5d:79:44:66:d9:b2:fc: af:da:87:16:1b:b4:ea:79:d4:4e:f8:9b:e9:69:ed:50:1d:89: 3b:35:21:89:5f:f6:28:07:24:dd:66:3b:29:fb:50:d6:a0:c7: b5:5a:ae:93:89:3f:c4:21:3a:47:fa:61:67:e9:fd:42:a6:c9: 2f:a9:f6:2d:f0:38:66:29:56:df:c9:72:04:9d:e2:2a:ca:98: b4:48:d6:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFOUIxMTAvBgNVBAUTKDk3NDk1ODE2RDZEQjQ5REZFREVBQzRDMTc0MjkxMjZG RTNERjk3RkIwHhcNMjQxMTIyMTg1NzIxWhcNMjQxMTI5MTg1NzIxWjAYMRYwFAYD VQQDEw02NzQwZDQxMi1lYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS5jHHKEOeLtqyaxvP/iSkFqMCxw4ap0PNiSb8cUDT4BIj0SCb0Jh8BVUlk4 Q30Hzi/4EL+Zrm7hrqphSdg/f3xn4spCaqsrz88w6b5tjsqO1lV3KvVzONPlsPxO FGpNFw7ggT45T9nire7lywtPwRKEqODl90oj21QNjg29N5YAgcIgVRgUsamXaohS KBWFEqNRiOXzHZbOtddN72BQHQoLiMBh14y2NRwiW3o77w6pMvW/1K4hSUf6a/v4 +CHTEDU+M74z2DKtRcpTvyelcVXVYjLRRVtFA0QfFsevyHXkvLPOAuZhqAz7/2d1 ntyyN6oGW1G+4iNbytafLlUO3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3mRYyF zatTkU8pJozJWTJvjqUwMB8GA1UdIwQYMBaAFJdJWBbW20nf7erEwXQpEm/j35f7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU5Qi83QTUzQTYxODI1 QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNkX3Q2c1RCZENrU2ItUGZs X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwbFlGdGJiU2RfdDZzVEJkQ2tTYi1QZmxfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU5Qi83QTUzQTYxODI1QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNk X3Q2c1RCZENrU2ItUGZsX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH8EzxIP7LmSXKVMwBPzQVHIMCTJg6prtEEmBu6GJzVt2/VfubOhW9 Lyqf9dHov7T4CNNrl9POGkncObSYM2uisvvaJTp6NAJ+YKRtRXaeSqMP+CAkIjS0 IA7S5FY6aYWp1ID91w/ajS2R1dCDIA67JNsnw/4ljY+scivdEdWR+TfKoMPVRSEK si2V77RkDYzoMfNJZh2BB1g5ZC9k7BGtyxB+13D2dHSI4sDFOF15RGbZsvyv2ocW G7TqedRO+Jvpae1QHYk7NSGJX/YoByTdZjsp+1DWoMe1Wq6TiT/EITpH+mFn6f1C pskvqfYt8DhmKVbfyXIEneIqypi0SNav -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:29 2024 by rpki-client on console-ams.rpki-client.org