$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json) Hash identifier: AwWGkahNS4Q4Hlvb2DkyHXU+bS6WX2VAupWuLUpHKSY= Subject key identifier: 76:07:E3:66:EB:9B:D6:60:24:C1:94:28:B8:10:16:32:2A:42:F4:11 Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft Manifest number: 016A Signing time: Sat 23 Nov 2024 02:17:45 +0000 Manifest this update: Sat 23 Nov 2024 02:17:45 +0000 Manifest next update: Sat 30 Nov 2024 02:17:45 +0000 Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: pvw8OfmaSu9i7Hx5CRs5H1hSRZiHzKnD1VAKAQ2ubcY=) 2: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: O+0diP1NN2sNjxwB1I26KY0g98dCGDnYbn9P30v6lyY=) 3: F69540BA810811ED9EA03683C4F9AE02.roa (hash: AmVibyk3kyTCjjmayzEhVr/vWHjKhAHUPjsO+1Nf/Sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: Nov 23 02:17:45 2024 GMT Not After : Nov 30 02:17:45 2024 GMT Subject: CN=67413b49-2d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:77:df:8c:50:3d:a9:32:64:98:67:02:3d: 97:55:8d:69:55:d8:56:e7:c1:58:bd:14:3e:42:d5: 21:9f:3c:0f:15:fe:8f:4a:45:a8:f5:fc:cc:1c:69: 2b:5f:15:a7:b0:36:3a:ac:44:e8:5c:e5:62:73:7e: 2c:4c:c1:bd:e3:07:4b:48:fc:2a:4c:ad:47:4f:65: 99:37:97:cf:a4:8d:ec:b4:f7:2d:a0:61:31:77:2f: 8d:7f:89:bc:99:a5:9b:3c:c9:3c:5d:de:3b:9e:6b: 02:af:ec:50:b2:5b:65:32:df:b6:48:70:df:f8:03: 70:5b:c9:b1:c3:97:da:be:24:26:d5:1d:ee:1f:5b: 84:f1:2c:49:94:c5:d5:c4:39:a2:dc:08:f6:78:a8: 57:1a:a9:54:d4:66:a1:48:39:16:3e:3c:d5:5f:ba: c8:f3:bc:94:02:bf:c1:8d:da:40:d5:2b:89:20:4a: 1e:28:a7:e0:8d:f7:20:65:37:24:23:da:b5:6b:d9: 4c:36:b1:de:1b:84:4c:36:92:05:85:7e:59:1b:f6: b0:04:c7:93:bc:39:88:c4:48:1a:84:ff:8e:4d:54: db:43:2c:eb:cc:3d:69:de:0d:d4:4c:41:5f:94:88: 85:b9:23:2b:23:42:03:d9:44:7a:82:e1:2d:b8:5c: d8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:07:E3:66:EB:9B:D6:60:24:C1:94:28:B8:10:16:32:2A:42:F4:11 X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:1d:d6:5e:56:40:2f:fb:3d:1d:f7:8f:ca:3e:9b:2c:98:85: 72:ba:26:f7:7b:5d:e0:30:2d:05:af:8d:70:f2:77:89:29:d5: 0b:3e:a7:06:58:81:3e:fb:a6:a2:c5:9b:51:7d:d7:2a:01:93: 1b:2e:db:a7:4a:9d:d4:c6:4d:e1:22:23:74:79:3c:4e:d8:5b: 0b:6c:3a:2f:e0:97:75:d5:59:85:14:31:3c:2f:17:34:f8:09: de:71:90:11:bb:63:e5:fa:15:a4:1a:d9:82:6e:87:a3:0d:98: c0:20:7a:f3:9e:a3:40:9a:10:5d:46:f2:8e:09:09:fe:91:e3: 1a:90:28:fa:c5:96:cc:d5:68:51:02:df:a1:55:b6:2f:4d:31: d0:9d:2d:e6:f1:70:05:74:24:83:32:7e:d0:6b:a1:21:a9:11: ef:22:aa:e0:d3:ae:89:5d:03:8c:1c:06:6f:e8:b4:a2:6d:e0: d1:4f:35:7c:c6:65:c4:c1:35:f0:60:9c:62:8f:d7:0c:fe:4a: bd:5a:27:81:ca:16:c6:94:90:42:7b:d4:48:90:f9:96:c9:ec: 23:98:86:2a:ca:da:97:2f:9a:ac:e8:23:53:c7:db:bb:9a:c8: 7b:2f:ee:c1:02:7b:81:33:6b:42:6f:2f:e6:52:18:4a:63:e7: f1:fd:1e:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjQxMTIzMDIxNzQ1WhcNMjQxMTMwMDIxNzQ1WjAYMRYwFAYD VQQDEw02NzQxM2I0OS0yZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15Z334xQPakyZJhnAj2XVY1pVdhW58FYvRQ+QtUhnzwPFf6PSkWo9fzMHGkr XxWnsDY6rEToXOVic34sTMG94wdLSPwqTK1HT2WZN5fPpI3stPctoGExdy+Nf4m8 maWbPMk8Xd47nmsCr+xQsltlMt+2SHDf+ANwW8mxw5faviQm1R3uH1uE8SxJlMXV xDmi3Aj2eKhXGqlU1GahSDkWPjzVX7rI87yUAr/BjdpA1SuJIEoeKKfgjfcgZTck I9q1a9lMNrHeG4RMNpIFhX5ZG/awBMeTvDmIxEgahP+OTVTbQyzrzD1p3g3UTEFf lIiFuSMrI0ID2UR6guEtuFzYBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYH42br m9ZgJMGUKLgQFjIqQvQRMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm SjdfWExPZFM5YzFYNk1FODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhHdZeVkAv+z0d94/KPpssmIVyuib3e13gMC0Fr41w8neJKdULPqcG WIE++6aixZtRfdcqAZMbLtunSp3Uxk3hIiN0eTxO2FsLbDov4Jd11VmFFDE8Lxc0 +AnecZARu2Pl+hWkGtmCboejDZjAIHrznqNAmhBdRvKOCQn+keMakCj6xZbM1WhR At+hVbYvTTHQnS3m8XAFdCSDMn7Qa6EhqRHvIqrg066JXQOMHAZv6LSibeDRTzV8 xmXEwTXwYJxij9cM/kq9WieByhbGlJBCe9RIkPmWyewjmIYqytqXL5qs6CNTx9u7 msh7L+7BAnuBM2tCby/mUhhKY+fx/R6z -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:43 2024 by rpki-client on console-ams.rpki-client.org