$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft File: cV0939fSp5kTexOT1KjPorHU02Q.mft (raw, json) Hash identifier: 8yTi39rsls9WrdZY5yxEH9C8W3PggRjtOpb4EyzCaWs= Subject key identifier: 1C:4D:27:59:9E:2A:28:04:F2:A1:EF:50:10:88:14:DA:D1:CD:2B:9A Authority key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64 Certificate issuer: /CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft Manifest number: 1C Signing time: Wed 23 Oct 2024 06:34:29 +0000 Manifest this update: Wed 23 Oct 2024 06:34:29 +0000 Manifest next update: Wed 30 Oct 2024 06:34:29 +0000 Files and hashes: 1: cV0939fSp5kTexOT1KjPorHU02Q.crl (hash: PW7QjsJb0yfp2PMOvEPhSJycvB5aQbwXjs0mqTdYgBo=) 2: 8BAFDC4C691E11EF9AC4F168C4F9AE02.roa (hash: ho9e+hBvfRrUv61HQybAcXR0qZ4hUME6WoyxclRolHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364 Validity Not Before: Oct 23 06:34:29 2024 GMT Not After : Oct 30 06:34:29 2024 GMT Subject: CN=671898f5-193e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:71:27:0d:fb:3a:c3:d6:b4:6d:b8:44:c7: 9a:1f:f0:6e:27:5d:25:fb:a1:5d:98:bd:a4:a8:cd: 87:ab:75:b9:68:5a:c6:91:86:1f:78:0b:df:21:3c: f4:4c:2d:20:58:b5:7d:c7:18:87:4e:1c:e0:c8:46: 51:c3:2c:40:2d:c9:cd:bd:58:24:54:88:ab:ca:75: c6:39:aa:43:95:b7:e6:a7:fc:cb:c4:50:17:1f:20: ec:ac:61:40:91:c6:31:40:bf:a6:c4:c5:7e:f4:5f: 3c:df:46:87:3a:28:c6:f2:b8:cf:78:d5:ce:b1:e3: a5:59:a0:c5:52:e2:cc:94:ac:08:e3:4e:33:36:e7: 4a:e2:54:dd:4f:d7:3b:56:eb:e7:00:20:a8:df:9c: 30:14:aa:c1:38:72:dd:ea:bc:04:7c:c3:4f:b8:2e: 93:9c:67:77:86:37:e7:f8:80:85:27:95:cd:04:9d: a2:d4:e3:07:5d:ef:18:dd:5f:f0:16:73:9c:7c:bc: c4:88:36:49:ed:eb:ae:a2:61:99:f2:22:74:1e:f7: 35:91:75:2c:a0:51:89:cc:fa:51:16:88:06:a6:bf: 25:f2:14:aa:fa:db:8e:81:f5:e9:80:11:b5:ac:ab: 44:ad:17:32:d8:09:1a:38:52:ed:2d:54:10:59:58: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4D:27:59:9E:2A:28:04:F2:A1:EF:50:10:88:14:DA:D1:CD:2B:9A X509v3 Authority Key Identifier: keyid:71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:42:16:76:52:90:cf:4c:a6:89:88:b3:29:1f:26:b7:f0:4c: 5b:19:ef:86:51:98:23:c9:42:bf:43:ad:01:6f:27:64:0f:31: 8e:3f:94:6a:ab:20:b4:df:6a:8b:b1:d9:1d:78:06:54:c5:2a: 37:a4:73:d4:a6:b1:59:65:97:a1:83:9b:13:ea:d2:78:c6:e0: ad:d2:de:ec:19:a3:3a:a6:4f:12:7b:7d:f5:33:e9:da:1e:18: 37:80:cd:fd:d2:13:cb:e7:13:ef:92:4a:e1:55:cd:75:9d:23: ee:ef:0d:eb:fd:3d:72:38:e0:5f:20:6a:d2:0a:d4:66:e9:c6: 4a:9d:64:bf:e7:ca:e9:71:0c:cc:78:fc:20:de:97:42:a9:5b: f7:55:60:84:9f:84:da:ae:98:2c:f8:82:31:a7:df:f5:27:c1: 2b:4c:11:eb:31:24:6b:23:76:be:5d:39:43:4a:5a:23:ef:a1: 70:dc:76:1b:d5:2f:1c:30:4a:96:f3:5e:53:6e:d2:57:4b:f5: dd:37:7e:d7:83:e4:1e:90:8f:62:3c:a5:87:23:9c:a7:65:61: 7b:7d:b1:43:43:ea:57:56:1a:fc:c3:7c:a2:63:ca:58:60:df: ea:a6:65:19:73:e4:d1:21:8a:3b:95:78:08:1c:3b:c2:47:46: ae:ae:c2:3f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTY5NTExMC8GA1UEBRMoNzE1RDNEREZEN0QyQTc5OTEzN0IxMzkzRDRBOENGQTJC MUQ0RDM2NDAeFw0yNDEwMjMwNjM0MjlaFw0yNDEwMzAwNjM0MjlaMBgxFjAUBgNV BAMTDTY3MTg5OGY1LTE5M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOvHEnDfs6w9a0bbhEx5of8G4nXSX7oV2YvaSozYerdbloWsaRhh94C98hPPRM LSBYtX3HGIdOHODIRlHDLEAtyc29WCRUiKvKdcY5qkOVt+an/MvEUBcfIOysYUCR xjFAv6bExX70XzzfRoc6KMbyuM941c6x46VZoMVS4syUrAjjTjM250riVN1P1ztW 6+cAIKjfnDAUqsE4ct3qvAR8w0+4LpOcZ3eGN+f4gIUnlc0EnaLU4wdd7xjdX/AW c5x8vMSINknt666iYZnyInQe9zWRdSygUYnM+lEWiAamvyXyFKr6246B9emAEbWs q0StFzLYCRo4Uu0tVBBZWBPrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHE0nWZ4q KATyoe9QEIgU2tHNK5owHwYDVR0jBBgwFoAUcV0939fSp5kTexOT1KjPorHU02Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNjk1Lzk2QkRGMzRBNjkx RDExRUZCOEZEMUU2NEM0RjlBRTAyL2NWMDkzOWZTcDVrVGV4T1QxS2pQb3JIVTAy US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY1YwOTM5ZlNwNWtUZXhPVDFLalBvckhVMDJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB Njk1Lzk2QkRGMzRBNjkxRDExRUZCOEZEMUU2NEM0RjlBRTAyL2NWMDkzOWZTcDVr VGV4T1QxS2pQb3JIVTAyUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADpCFnZSkM9MpomIsykfJrfwTFsZ74ZRmCPJQr9DrQFvJ2QPMY4/lGqr ILTfaoux2R14BlTFKjekc9SmsVlll6GDmxPq0njG4K3S3uwZozqmTxJ7ffUz6doe GDeAzf3SE8vnE++SSuFVzXWdI+7vDev9PXI44F8gatIK1GbpxkqdZL/nyulxDMx4 /CDel0KpW/dVYISfhNqumCz4gjGn3/UnwStMEesxJGsjdr5dOUNKWiPvoXDcdhvV LxwwSpbzXlNu0ldL9d03fteD5B6Qj2I8pYcjnKdlYXt9sUND6ldWGvzDfKJjylhg 3+qmZRlz5NEhijuVeAgcO8JHRq6uwj8= -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:57 2024 by rpki-client on console-ams.rpki-client.org