$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft File: u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json) Hash identifier: +hFOD3uH07mxMTxZOUgKoYT/lwRaTbafFzrMd3wxLLw= Subject key identifier: 99:B1:71:42:77:14:60:BC:06:2F:06:B9:F5:A8:BA:2F:4E:12:F1:D6 Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 Certificate issuer: /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Certificate serial: 08A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft Manifest number: 08A3 Signing time: Fri 22 Nov 2024 20:16:01 +0000 Manifest this update: Fri 22 Nov 2024 20:16:00 +0000 Manifest next update: Fri 29 Nov 2024 20:16:00 +0000 Files and hashes: 1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: MQvhrXy57V8tys4bdWCcSOMnyWqda1t9/CeVJdrx31w=) 2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: ggnDaBNF34HQg+n5+et1BdldDeh00Zq26oas41hsO6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2216 (0x8a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Validity Not Before: Nov 22 20:16:00 2024 GMT Not After : Nov 29 20:16:00 2024 GMT Subject: CN=6740e681-4c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fb:f0:3a:ca:e3:fe:7b:08:e7:7f:a3:b0:9a: 46:64:6b:a6:32:eb:02:b2:9f:45:c6:02:a3:0a:45: 40:84:3b:40:f4:86:7a:db:27:a1:2b:6c:e3:ce:b2: 90:68:03:df:64:d5:16:75:8a:01:1f:23:22:b9:25: c5:95:68:8a:11:41:a4:e6:7c:fb:95:66:6d:22:e1: 33:12:33:9d:75:78:a7:11:83:ab:27:cd:3a:06:6b: bc:da:6b:ba:83:b9:27:52:bc:fc:fe:6d:80:12:c1: 25:b2:50:df:6c:b5:bd:1f:a5:ab:19:50:54:af:e5: b8:a0:ef:41:b0:08:51:85:bf:3b:85:a8:74:9b:fb: 8a:d5:b4:54:7d:53:79:b3:30:14:da:1d:67:3d:5c: 9c:38:9d:98:f7:ec:c1:b7:c4:cb:f4:f2:cd:7c:fc: 13:62:4b:2b:dd:c6:ee:e5:6f:93:46:0e:7a:a9:ad: 1b:c6:f9:47:c2:93:78:26:54:14:c8:c2:e7:e2:c2: 1e:7e:51:ad:4b:7a:f4:cb:5e:b2:5b:05:b9:5b:97: c5:03:92:a8:53:ab:3a:61:65:7d:a5:16:20:2f:ae: ae:2b:cb:ea:eb:36:54:4b:c9:53:81:61:e8:52:bf: ae:35:5a:d4:50:33:e0:b6:3e:e7:c3:7f:73:b0:7c: c5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B1:71:42:77:14:60:BC:06:2F:06:B9:F5:A8:BA:2F:4E:12:F1:D6 X509v3 Authority Key Identifier: keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:5b:c8:ea:2f:88:79:af:01:cb:6f:49:a8:c4:8f:2b:a9:05: b8:c0:5b:f8:18:8a:46:47:3d:3b:18:c8:e2:c4:dc:37:33:18: 20:3e:de:c0:bd:37:db:36:df:75:0f:27:75:d8:d9:32:4b:b0: 77:8e:92:88:84:4f:5f:2e:9e:f7:c9:19:b3:3a:7f:1a:eb:7a: d6:ad:ba:29:14:fc:de:30:4f:cd:12:31:94:24:07:b6:f5:41: 50:e3:85:a4:27:a3:86:60:9c:45:80:8d:41:44:f7:a4:ec:ca: a4:73:b7:95:4b:e6:93:54:04:3c:68:b1:eb:33:6d:0a:3e:1e: da:47:a6:70:8b:40:a5:a8:d8:c0:de:22:fc:6a:e1:70:3e:7e: 7f:ee:81:95:05:0f:12:67:80:01:9e:98:87:5b:09:d4:14:de: 7f:55:b7:99:cd:30:08:8e:39:86:21:33:61:14:4d:99:55:0a: f0:45:c3:2e:70:88:b8:bc:26:90:10:54:c6:da:01:74:b5:e6: fc:05:92:82:52:8b:e1:0d:16:46:fb:97:15:1e:a7:f4:fc:71: 6c:b1:b6:a4:0e:a4:fd:25:db:33:1e:fc:e3:63:b5:04:79:1c: 15:85:ef:3e:a3:0e:3f:d0:59:af:0f:d0:85:4f:3b:3a:29:8e: 32:18:74:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI4MjQxMTAvBgNVBAUTKEJCREI3QkQwQjhFOTY1NkU3MUUxOTk0RTE5NjE4NzQ1 NzA4RkNFRjEwHhcNMjQxMTIyMjAxNjAwWhcNMjQxMTI5MjAxNjAwWjAYMRYwFAYD VQQDEw02NzQwZTY4MS00YzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fvwOsrj/nsI53+jsJpGZGumMusCsp9FxgKjCkVAhDtA9IZ62yehK2zjzrKQ aAPfZNUWdYoBHyMiuSXFlWiKEUGk5nz7lWZtIuEzEjOddXinEYOrJ806Bmu82mu6 g7knUrz8/m2AEsElslDfbLW9H6WrGVBUr+W4oO9BsAhRhb87hah0m/uK1bRUfVN5 szAU2h1nPVycOJ2Y9+zBt8TL9PLNfPwTYksr3cbu5W+TRg56qa0bxvlHwpN4JlQU yMLn4sIeflGtS3r0y16yWwW5W5fFA5KoU6s6YWV9pRYgL66uK8vq6zZUS8lTgWHo Ur+uNVrUUDPgtj7nw39zsHzF/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmxcUJ3 FGC8Bi8GufWoui9OEvHWMB8GA1UdIwQYMBaAFLvbe9C46WVuceGZThlhh0Vwj87x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjgyNC83MzRCQUQxNkE2 QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpXNXg0WmxPR1dHSFJYQ1B6 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5dDcwTGpwWlc1eDRabE9HV0dIUlhDUHp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjgyNC83MzRCQUQxNkE2QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpX NXg0WmxPR1dHSFJYQ1B6dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyW8jqL4h5rwHLb0moxI8rqQW4wFv4GIpGRz07GMjixNw3MxggPt7A vTfbNt91Dyd12NkyS7B3jpKIhE9fLp73yRmzOn8a63rWrbopFPzeME/NEjGUJAe2 9UFQ44WkJ6OGYJxFgI1BRPek7Mqkc7eVS+aTVAQ8aLHrM20KPh7aR6Zwi0ClqNjA 3iL8auFwPn5/7oGVBQ8SZ4ABnpiHWwnUFN5/VbeZzTAIjjmGITNhFE2ZVQrwRcMu cIi4vCaQEFTG2gF0teb8BZKCUovhDRZG+5cVHqf0/HFssbakDqT9JdszHvzjY7UE eRwVhe8+ow4/0FmvD9CFTzs6KY4yGHTz -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:36 2024 by rpki-client on console-ams.rpki-client.org