$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json) Hash identifier: 2c9YZi9edaS0bS57j9RI67WYoFlsYBDTF31VeimSyyo= Subject key identifier: B6:3C:22:69:1B:C2:5A:DD:2C:C4:E3:6A:A7:3F:D0:A7:EA:55:DA:9A Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft Manifest number: CC Signing time: Sat 23 Nov 2024 03:50:23 +0000 Manifest this update: Sat 23 Nov 2024 03:50:22 +0000 Manifest next update: Sat 30 Nov 2024 03:50:22 +0000 Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: bcmOVnv6hgYUoPf6kXEcXdoGgOfmhiWDB5jKDuc3aDA=) 2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: hb2FHylcedOLhWNEILcVg0+JejqVxPKA1QnSPd3ZdS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Validity Not Before: Nov 23 03:50:22 2024 GMT Not After : Nov 30 03:50:22 2024 GMT Subject: CN=674150fe-2c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1b:43:97:05:1e:d7:15:6e:cc:d2:c2:5e:34: dd:37:1b:f1:81:6a:83:59:fa:57:83:85:23:fa:5c: c4:2a:8f:b8:05:92:64:e1:4a:43:7e:9e:12:06:7d: 97:a0:5b:dc:36:1b:55:3d:87:b2:62:c3:a1:20:fd: c5:2c:8e:59:56:e3:c9:c9:de:57:76:b6:41:b2:0d: b8:ad:53:21:b7:ec:24:33:38:89:36:c7:55:b9:71: 4f:d7:96:c1:ee:cd:46:78:eb:71:7f:e3:44:ff:6b: 5f:01:a9:b8:5e:aa:f3:51:ab:bd:49:72:dc:10:1c: 6c:85:b2:84:cb:ce:59:2a:95:04:a5:02:5e:5e:f4: a7:66:aa:d9:10:6c:60:a3:97:69:54:b4:5a:f9:ca: 58:f4:ea:f7:0e:51:17:ac:ab:61:df:bc:04:dd:e9: d4:5c:74:c1:34:3c:ec:43:e7:71:6a:d5:6b:a4:d7: d3:24:81:d3:ed:ee:07:44:32:d0:be:50:ef:08:23: 3f:20:e3:85:f7:1f:5a:06:18:aa:e3:82:82:e1:b2: 5a:78:63:27:24:ec:27:ce:a1:a9:07:f6:8b:11:e6: 43:cd:9a:09:2e:25:10:78:38:4f:2d:42:b4:40:e4: df:9e:28:d1:2d:16:93:af:b4:d6:4b:44:26:61:c0: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3C:22:69:1B:C2:5A:DD:2C:C4:E3:6A:A7:3F:D0:A7:EA:55:DA:9A X509v3 Authority Key Identifier: keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:be:4e:4d:aa:fd:1a:42:13:dc:a2:ed:1a:41:0e:34:43:35: 72:db:fc:9d:32:62:5a:ed:44:65:9f:96:87:ef:36:76:66:b5: 6f:f9:19:48:01:69:3d:cc:a5:97:4b:6b:f5:63:93:bd:31:4f: c0:a6:fe:ca:03:cc:22:b8:08:50:55:b0:fb:80:73:a7:a2:68: 4e:6f:b5:22:9f:b0:ee:bd:27:74:75:61:dc:e5:9c:e5:15:89: 31:bd:95:c7:c4:61:ab:ee:31:65:f5:7b:17:5d:b7:9d:f0:a5: 81:5a:bc:63:ec:00:81:fc:c8:59:06:e7:d2:ef:d9:5a:35:a2: 4a:5b:d1:8b:06:b9:4e:18:2c:e9:d4:97:1e:83:97:40:bc:11: c8:86:14:cd:29:0c:9b:39:8e:80:a9:d1:3a:a8:18:49:f4:96: 0f:53:64:52:41:67:a3:5f:58:53:bf:5a:c1:65:c7:ad:ef:e8: ba:20:37:d4:cc:36:a9:78:39:49:6c:d5:c3:be:c0:31:5b:64: 86:4a:99:8e:7b:37:62:b0:56:99:50:5c:de:1e:4c:38:fa:56: 5f:9f:6f:0e:a7:a2:b3:a0:db:90:80:a2:b5:0d:20:2b:51:10: ff:0c:1f:28:b5:7b:d0:03:0a:d6:83:3a:b9:43:4c:83:24:03: 28:47:f6:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz NkQxN0QwNEIwHhcNMjQxMTIzMDM1MDIyWhcNMjQxMTMwMDM1MDIyWjAYMRYwFAYD VQQDEw02NzQxNTBmZS0yYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhtDlwUe1xVuzNLCXjTdNxvxgWqDWfpXg4Uj+lzEKo+4BZJk4UpDfp4SBn2X oFvcNhtVPYeyYsOhIP3FLI5ZVuPJyd5XdrZBsg24rVMht+wkMziJNsdVuXFP15bB 7s1GeOtxf+NE/2tfAam4XqrzUau9SXLcEBxshbKEy85ZKpUEpQJeXvSnZqrZEGxg o5dpVLRa+cpY9Or3DlEXrKth37wE3enUXHTBNDzsQ+dxatVrpNfTJIHT7e4HRDLQ vlDvCCM/IOOF9x9aBhiq44KC4bJaeGMnJOwnzqGpB/aLEeZDzZoJLiUQeDhPLUK0 QOTfnijRLRaTr7TWS0QmYcA6hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLY8Imkb wlrdLMTjaqc/0KfqVdqaMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0 NTh4MmR4bTZaOUEyMFgwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCavk5Nqv0aQhPcou0aQQ40QzVy2/ydMmJa7URln5aH7zZ2ZrVv+RlI AWk9zKWXS2v1Y5O9MU/Apv7KA8wiuAhQVbD7gHOnomhOb7Uin7DuvSd0dWHc5Zzl FYkxvZXHxGGr7jFl9XsXXbed8KWBWrxj7ACB/MhZBufS79laNaJKW9GLBrlOGCzp 1Jceg5dAvBHIhhTNKQybOY6AqdE6qBhJ9JYPU2RSQWejX1hTv1rBZcet7+i6IDfU zDapeDlJbNXDvsAxW2SGSpmOezdisFaZUFzeHkw4+lZfn28Op6KzoNuQgKK1DSAr URD/DB8otXvQAwrWgzq5Q0yDJAMoR/a/ -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:12 2024 by rpki-client on console-ams.rpki-client.org