$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: Q70bNpn/wI8fAGZG999lb8Y9DPu52vDlKn8n65CK8Kk= Subject key identifier: 8A:01:95:36:D6:A9:86:84:26:F8:DE:23:63:46:66:A4:3D:8D:FE:B4 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0C50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0C38 Signing time: Fri 22 Nov 2024 18:14:27 +0000 Manifest this update: Fri 22 Nov 2024 18:14:26 +0000 Manifest next update: Fri 29 Nov 2024 18:14:26 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: t9MGikWm56eiFzXgSUomhOLTQv4GgR1m8gOZMokgJx4=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: uH0p9W6gyErJqwQXUobMQ4l4IHk3TpFXVC4lxSYw/yc=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: aWVyhl403G+qwJ6jO2cb4Y7Az8v/lQUgKxECmfe73fI=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: u+aZe6lXhjFNUVJNVlssesIeVBxkNnY96Z5bKTISH7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3152 (0xc50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Nov 22 18:14:26 2024 GMT Not After : Nov 29 18:14:26 2024 GMT Subject: CN=6740ca02-812e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:ae:b3:1b:87:48:99:56:43:ef:d7:cc:d1: 8b:0f:5f:e5:0f:fb:80:8b:81:91:20:60:af:80:bf: c0:b6:dd:3d:6b:f3:f9:d4:b7:3a:09:c7:88:7c:60: 85:98:82:8c:98:fe:c3:1a:81:21:5c:ab:91:6e:e2: fc:4a:86:62:76:c6:ee:4c:4b:6d:5d:19:49:7d:07: 25:5f:df:53:34:de:78:41:2d:73:98:d4:6d:ae:ac: bc:d6:5d:77:8d:df:17:3d:52:e5:3c:73:7f:b6:55: 75:2f:ab:40:82:e0:55:f1:27:a1:9b:cc:eb:86:df: 0c:2c:72:c8:3f:82:ef:38:61:3a:a1:15:1e:cd:31: f2:11:25:0c:93:52:9e:52:ce:fc:5f:21:ff:db:03: a4:09:56:12:e7:a8:6b:fe:15:ba:8d:8c:89:5f:d9: ea:3a:eb:b3:d3:6d:04:07:5a:a2:8f:87:11:a2:8b: 2f:9a:d5:00:e5:17:78:af:56:9b:e1:79:f6:22:9b: e0:5c:e1:a8:db:84:8c:81:6e:5c:a8:c5:1f:ae:57: 4e:15:16:07:1b:55:25:f2:4b:52:ff:a0:b8:3b:f9: a4:a1:c6:f6:f4:8b:84:27:3d:b6:47:38:c3:c1:c0: 77:b8:9d:39:16:a8:50:24:1f:a9:0e:09:51:97:72: 7b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:01:95:36:D6:A9:86:84:26:F8:DE:23:63:46:66:A4:3D:8D:FE:B4 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:45:68:79:dd:df:5d:58:33:6f:12:74:af:e4:d7:a3:70:1c: 41:16:8c:3d:70:b6:e8:3e:c3:a8:98:98:89:ec:6b:77:2b:1d: e9:01:94:73:75:a7:84:95:4a:24:f3:f2:b0:b1:1d:b4:8f:64: c7:c2:d5:72:8d:e8:a2:91:75:21:4d:15:c5:da:5a:99:a6:2d: 0c:26:48:25:7c:2d:d5:7e:52:8c:53:71:b2:e2:21:b7:93:d1: 4d:c0:db:ee:d0:60:9c:13:1b:c4:b0:1a:4e:42:4f:23:d2:d4: 6f:bd:49:79:d9:5d:8a:40:5f:e5:bc:a3:a5:e5:95:80:b4:4d: 91:3d:1b:7f:cc:12:64:09:81:ba:76:c2:3e:d4:4e:7a:5c:5b: cf:fc:4a:0c:65:5b:5f:43:0e:65:48:ab:77:ac:04:1f:72:a2: 00:d5:bf:00:75:5f:1d:ac:af:be:4a:fd:ff:d6:09:1a:3f:8f: 29:05:91:5a:76:98:12:aa:13:f3:fc:51:32:76:12:14:3a:b3: 72:5d:b4:cd:95:27:18:e1:7c:ef:42:14:75:5a:a2:21:9a:03: 0b:27:0b:d4:00:fa:be:bf:a3:9a:a2:bb:31:75:5b:9b:2a:22: 57:e9:bf:9e:eb:1b:d1:bf:85:a2:5d:4a:04:99:40:49:5f:72: e8:74:56:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjQxMTIyMTgxNDI2WhcNMjQxMTI5MTgxNDI2WjAYMRYwFAYD VQQDEw02NzQwY2EwMi04MTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwquusxuHSJlWQ+/XzNGLD1/lD/uAi4GRIGCvgL/Att09a/P51Lc6CceIfGCF mIKMmP7DGoEhXKuRbuL8SoZidsbuTEttXRlJfQclX99TNN54QS1zmNRtrqy81l13 jd8XPVLlPHN/tlV1L6tAguBV8Sehm8zrht8MLHLIP4LvOGE6oRUezTHyESUMk1Ke Us78XyH/2wOkCVYS56hr/hW6jYyJX9nqOuuz020EB1qij4cRoosvmtUA5Rd4r1ab 4Xn2IpvgXOGo24SMgW5cqMUfrldOFRYHG1Ul8ktS/6C4O/mkocb29IuEJz22RzjD wcB3uJ05FqhQJB+pDglRl3J7WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoBlTbW qYaEJvjeI2NGZqQ9jf60MB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoRWh53d9dWDNvEnSv5NejcBxBFow9cLboPsOomJiJ7Gt3Kx3pAZRz daeElUok8/KwsR20j2THwtVyjeiikXUhTRXF2lqZpi0MJkglfC3VflKMU3Gy4iG3 k9FNwNvu0GCcExvEsBpOQk8j0tRvvUl52V2KQF/lvKOl5ZWAtE2RPRt/zBJkCYG6 dsI+1E56XFvP/EoMZVtfQw5lSKt3rAQfcqIA1b8AdV8drK++Sv3/1gkaP48pBZFa dpgSqhPz/FEydhIUOrNyXbTNlScY4XzvQhR1WqIhmgMLJwvUAPq+v6OaorsxdVub KiJX6b+e6xvRv4WiXUoEmUBJX3LodFYb -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org