$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft File: 5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json) Hash identifier: DWFmYpLCmXGyfGDmxnyUbT9RIGec0O4Bt2hYYvn4PE8= Subject key identifier: E1:27:5C:72:C3:28:90:02:CE:AA:68:87:F0:39:64:7A:61:62:DA:ED Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 Certificate issuer: /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Certificate serial: 0D69 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft Manifest number: 0D56 Signing time: Fri 22 Nov 2024 14:43:01 +0000 Manifest this update: Fri 22 Nov 2024 14:43:01 +0000 Manifest next update: Fri 29 Nov 2024 14:43:01 +0000 Files and hashes: 1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: NuK3AuIjf13TC5KFiTM39o8GwRicCkyK3MAYBD6QJQA=) 2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: maGIW10auxPqCj749VnwJ932XyvRLeAm2wgEbABGHH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3433 (0xd69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827 Validity Not Before: Nov 22 14:43:01 2024 GMT Not After : Nov 29 14:43:01 2024 GMT Subject: CN=67409875-d062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8c:31:74:d1:da:bd:9d:82:bd:00:6a:a6:bc: 17:01:81:69:e2:c5:5d:16:88:35:8b:6e:d5:de:7a: 43:28:20:15:d1:8c:51:ef:88:18:0b:71:ee:49:33: 77:30:23:e4:af:7f:c8:ca:32:ae:9f:6e:74:54:9e: 58:ab:18:7f:18:76:3e:8a:5c:06:b4:74:ad:cc:16: 41:a3:c7:20:ad:59:1e:7d:97:d5:f9:8a:f6:27:a8: be:69:47:5f:44:68:e9:c5:08:5c:e1:3f:7d:e5:d6: 3e:66:67:f1:4f:47:a5:b2:5c:f1:8d:0f:ae:0c:99: 53:6c:0b:25:ab:df:1e:3e:73:79:76:cc:c9:f5:48: 7b:a0:08:fa:12:c2:b9:d6:f9:8a:9c:20:d6:45:9b: 34:1e:26:fb:21:71:d3:99:d0:56:3d:6c:2b:45:b1: bf:62:fd:01:39:5a:7c:a2:a8:f1:45:a4:4b:46:b5: 99:06:09:1f:30:79:17:8c:f4:7f:b6:51:51:49:1a: 40:ea:24:fc:ed:e3:66:77:77:69:94:78:e5:4c:71: ae:29:41:98:74:98:c8:d7:0b:ea:f5:f0:c4:77:f9: c7:48:a8:ba:77:f3:70:2c:93:7e:86:a0:ec:d9:a0: f8:8e:47:c6:39:cf:60:49:fb:c1:39:7c:2f:22:20: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:27:5C:72:C3:28:90:02:CE:AA:68:87:F0:39:64:7A:61:62:DA:ED X509v3 Authority Key Identifier: keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6d:c0:f0:e7:e4:ea:41:4b:79:05:22:10:70:98:80:b0:cd: 74:e1:2b:b8:ba:49:d7:9d:32:f9:37:55:4d:18:39:76:55:66: 40:23:30:47:6d:b4:70:da:cc:64:f6:1c:7e:ab:e1:50:e3:dc: 94:3c:02:1b:36:eb:c3:a7:a6:b2:ba:d2:20:24:07:a3:58:16: ae:d3:3d:7c:d0:f2:db:d8:53:39:ce:e6:44:f5:b5:6e:bd:f4: d6:a5:92:ca:b3:0a:40:f6:7b:85:2f:13:e2:55:ac:dc:dc:74: 11:b5:0d:d4:d2:74:f4:1f:f4:98:83:89:5e:91:75:e1:48:b5: a9:9f:65:2f:e1:05:7a:79:16:5a:e1:5f:de:ec:85:da:d7:2d: 2b:71:17:64:50:00:c3:11:35:ee:7d:c9:93:c4:5d:f3:0c:a0: 44:48:6e:d8:67:c3:18:24:c3:3f:76:a4:21:9c:b7:c9:64:fc: c4:d9:6a:80:60:4d:63:bc:dc:db:1d:63:83:39:3b:57:1d:52: e1:6d:2e:cc:48:24:a8:02:4e:80:da:92:3c:2f:f7:69:6c:77: dd:2a:b2:06:14:7b:39:e5:6c:e3:52:4f:6e:7d:6f:1d:8a:bf: 4a:5b:c0:ff:be:f8:53:a9:da:8b:c8:6f:79:65:9a:89:a1:74: c1:13:75:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEU2OEVEMTI0RUY2NTdCNjc5QkQxMkE1OEZBMDM1MDE0 RTBERkU4MjcwHhcNMjQxMTIyMTQ0MzAxWhcNMjQxMTI5MTQ0MzAxWjAYMRYwFAYD VQQDEw02NzQwOTg3NS1kMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyowxdNHavZ2CvQBqprwXAYFp4sVdFog1i27V3npDKCAV0YxR74gYC3HuSTN3 MCPkr3/IyjKun250VJ5Yqxh/GHY+ilwGtHStzBZBo8cgrVkefZfV+Yr2J6i+aUdf RGjpxQhc4T995dY+ZmfxT0elslzxjQ+uDJlTbAslq98ePnN5dszJ9Uh7oAj6EsK5 1vmKnCDWRZs0Hib7IXHTmdBWPWwrRbG/Yv0BOVp8oqjxRaRLRrWZBgkfMHkXjPR/ tlFRSRpA6iT87eNmd3dplHjlTHGuKUGYdJjI1wvq9fDEd/nHSKi6d/NwLJN+hqDs 2aD4jkfGOc9gSfvBOXwvIiBVYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEnXHLD KJACzqpoh/A5ZHphYtrtMB8GA1UdIwQYMBaAFOaO0STvZXtnm9EqWPoDUBTg3+gn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS8zQzQxMkMzNkJG MzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUyZWIwU3BZLWdOUUZPRGY2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzVvN1JKTzlsZTJlYjBTcFktZ05RRk9EZjZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS8zQzQxMkMzNkJGMzkxMUU5ODk3RDdDMkVDNEY5QUUwMi81bzdSSk85bGUy ZWIwU3BZLWdOUUZPRGY2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrbcDw5+TqQUt5BSIQcJiAsM104Su4uknXnTL5N1VNGDl2VWZAIzBH bbRw2sxk9hx+q+FQ49yUPAIbNuvDp6ayutIgJAejWBau0z180PLb2FM5zuZE9bVu vfTWpZLKswpA9nuFLxPiVazc3HQRtQ3U0nT0H/SYg4lekXXhSLWpn2Uv4QV6eRZa 4V/e7IXa1y0rcRdkUADDETXufcmTxF3zDKBESG7YZ8MYJMM/dqQhnLfJZPzE2WqA YE1jvNzbHWODOTtXHVLhbS7MSCSoAk6A2pI8L/dpbHfdKrIGFHs55WzjUk9ufW8d ir9KW8D/vvhTqdqLyG95ZZqJoXTBE3UC -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:38 2024 by rpki-client on console-fra.rpki-client.org