$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: ablhDdFn3vlxEuBQU4hrP3uP2wjnO7NbHCS2zTZV9No= Subject key identifier: 24:81:3F:4C:C3:15:88:B3:A4:85:00:42:63:D3:68:01:90:42:4B:70 Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0C95 Signing time: Fri 22 Nov 2024 18:06:34 +0000 Manifest this update: Fri 22 Nov 2024 18:06:34 +0000 Manifest next update: Fri 29 Nov 2024 18:06:34 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: FBZfU/L3MOq7vhVnecrvoTdHU1Pwyqdbn3Pk1VKHpL4=) 2: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: /DiL7fsaC6fY9lff2JZZK7Yh+rRZRWI9dVgzlNELU4U=) 3: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: DjLvleFkqk2UcBaYlPkFuqLKT/dYJjEENGItR2OkX0A=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: bSOKtCqELVOl/SRyiuzpOoESsu/f4pkne0nYfp2NKDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Nov 22 18:06:34 2024 GMT Not After : Nov 29 18:06:34 2024 GMT Subject: CN=6740c82a-82ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:3a:47:97:00:47:7d:e2:7f:bb:49:50:dc: ed:48:1e:f2:f8:a8:22:76:34:d7:c5:1f:3f:e5:2c: dd:94:2c:80:07:db:05:19:08:e9:17:fc:ef:26:5a: eb:53:2a:fb:3a:64:d9:3a:8d:4d:a6:49:2d:3b:33: 94:56:61:ea:24:06:51:e8:f4:23:23:7a:2b:29:13: 34:26:aa:c9:a8:2b:5f:ee:78:74:91:bb:6b:61:0d: 21:25:9d:9a:d0:e1:35:da:f8:28:0c:25:1e:7b:74: e8:74:49:b5:99:0d:ce:f9:35:ec:08:3d:bf:15:55: c2:68:15:f9:5b:b7:c9:68:38:13:4e:ae:d7:ea:cf: 84:3c:6c:a1:34:ae:b2:f7:c4:a7:d7:1e:87:a0:92: 3f:34:9b:13:17:20:98:00:da:3d:bd:8c:be:91:fe: 46:ff:9f:4e:0d:42:47:5f:d6:29:a6:56:39:93:9a: 2c:d8:34:7e:1d:ce:51:bc:e4:1d:58:e7:c0:13:02: fe:60:d7:3f:92:b0:5f:b3:2b:d6:34:47:bf:6a:9b: 88:8b:47:d8:1c:f1:af:ec:8e:64:0d:8e:a6:cf:ec: 4a:1d:9a:08:24:b4:46:4c:e4:a4:19:3c:a0:c0:16: e8:43:50:f4:e9:8e:e2:70:46:0e:8e:8b:9b:2a:7c: 00:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:81:3F:4C:C3:15:88:B3:A4:85:00:42:63:D3:68:01:90:42:4B:70 X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d4:ce:24:4b:39:3a:6b:0c:ec:97:5a:40:df:22:8c:43:f0: 75:e9:75:b7:2e:39:5c:df:ee:3a:a7:14:cc:e9:42:19:dd:f0: 83:c2:13:6e:7a:ae:04:4f:ba:75:3c:ef:02:78:05:38:a3:1c: 1d:e4:0e:01:fc:4a:99:06:e6:1f:52:a0:de:e3:4e:8b:d0:a9: 63:3c:7f:33:f7:85:c9:66:2c:74:67:f8:91:a6:57:aa:3e:45: 49:d8:ba:6c:fe:5b:61:00:7b:23:1b:c8:72:e9:65:d4:be:aa: a4:79:40:39:98:72:41:b5:d1:28:8f:d7:78:92:85:d4:d4:46: f1:24:82:4a:4a:54:13:07:2a:ef:8e:38:19:31:e4:93:3d:7f: 79:dd:70:f0:92:d5:54:5d:62:e1:cf:fe:55:96:12:e2:30:4f: 29:67:17:1a:58:ab:86:c1:25:9d:ad:bd:53:34:4f:62:ee:20: eb:ab:6e:65:95:5e:6f:05:09:32:d2:ab:56:b1:36:67:d6:18: b8:6d:a9:0f:a9:f7:b5:b4:b5:b2:5f:1b:3e:9d:f9:db:69:15: 5c:03:c9:82:43:6c:a4:77:97:f3:18:70:6a:a4:47:0d:81:a9: 52:83:11:a0:02:16:c4:f6:98:20:fe:72:3b:89:62:a1:f6:29: 14:64:ae:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjQxMTIyMTgwNjM0WhcNMjQxMTI5MTgwNjM0WjAYMRYwFAYD VQQDEw02NzQwYzgyYS04MmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQw6R5cAR33if7tJUNztSB7y+KgidjTXxR8/5SzdlCyAB9sFGQjpF/zvJlrr Uyr7OmTZOo1NpkktOzOUVmHqJAZR6PQjI3orKRM0JqrJqCtf7nh0kbtrYQ0hJZ2a 0OE12vgoDCUee3TodEm1mQ3O+TXsCD2/FVXCaBX5W7fJaDgTTq7X6s+EPGyhNK6y 98Sn1x6HoJI/NJsTFyCYANo9vYy+kf5G/59ODUJHX9YpplY5k5os2DR+Hc5RvOQd WOfAEwL+YNc/krBfsyvWNEe/apuIi0fYHPGv7I5kDY6mz+xKHZoIJLRGTOSkGTyg wBboQ1D06Y7icEYOjoubKnwANwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSBP0zD FYizpIUAQmPTaAGQQktwMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu1M4kSzk6awzsl1pA3yKMQ/B16XW3Ljlc3+46pxTM6UIZ3fCDwhNu eq4ET7p1PO8CeAU4oxwd5A4B/EqZBuYfUqDe406L0KljPH8z94XJZix0Z/iRpleq PkVJ2Lps/lthAHsjG8hy6WXUvqqkeUA5mHJBtdEoj9d4koXU1EbxJIJKSlQTByrv jjgZMeSTPX953XDwktVUXWLhz/5VlhLiME8pZxcaWKuGwSWdrb1TNE9i7iDrq25l lV5vBQky0qtWsTZn1hi4bakPqfe1tLWyXxs+nfnbaRVcA8mCQ2ykd5fzGHBqpEcN galSgxGgAhbE9pgg/nI7iWKh9ikUZK7A -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org