$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json) Hash identifier: oKn4aT/FT0RiF0Ewb9h6kNPcguM2ozKQAMHprYK2ebA= Subject key identifier: 7F:C3:46:21:6F:5E:F5:0B:D3:AB:E2:78:A5:5F:1E:63:7D:45:3B:53 Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Certificate serial: 0AC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft Manifest number: 0ABE Signing time: Fri 22 Nov 2024 19:12:29 +0000 Manifest this update: Fri 22 Nov 2024 19:12:28 +0000 Manifest next update: Fri 29 Nov 2024 19:12:28 +0000 Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: PEbjsX5li6E2wIiiAHYUSrRUFSnWLu6h0fp1byc9h34=) 2: 3BFE8CEC3F4911EAA91D9A7FC4F9AE02.roa (hash: oiK5YLleabN+NeoxXizXAp1S2T+O/v09kEtABrFayP0=) 3: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: YJ76HhaPfBCtCqTNn8tqhJhNOJ+Bfaxx/ZJ3mQYsBwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2761 (0xac9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Validity Not Before: Nov 22 19:12:28 2024 GMT Not After : Nov 29 19:12:28 2024 GMT Subject: CN=6740d79d-a624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8e:b9:a8:da:e0:62:54:e3:c9:db:36:10:27: 94:a7:c9:3d:65:e7:66:c5:55:c0:df:fb:de:49:f3: e4:ff:b6:cf:49:fb:7c:8a:7c:db:3a:48:35:da:7a: eb:57:80:21:b1:3b:ad:c3:05:17:24:56:53:ec:a3: 7d:25:71:7d:37:ae:ee:f3:8f:5a:b3:98:44:db:f2: 8b:da:09:d2:39:12:8e:f4:a4:e6:34:78:c5:46:37: ac:ef:df:76:66:21:00:44:58:54:97:c7:82:88:1b: 41:da:84:5a:49:26:bf:cb:99:0d:c0:75:3a:0b:2a: 34:02:da:4b:56:fe:de:62:45:3f:06:0e:dd:70:51: f3:b0:d4:1b:d2:da:23:32:0c:55:06:d5:a3:f8:9b: ab:a6:2a:72:b0:62:4a:99:21:6a:c2:ed:3b:c7:51: 86:50:e2:70:39:0d:11:f4:25:e8:8f:40:12:e4:49: 69:8c:d4:f8:5c:4c:b6:e0:0d:f0:a5:44:e9:83:3d: 80:43:19:60:12:76:83:67:a0:53:43:d6:b7:2d:20: 18:da:7b:cf:39:01:a7:59:1d:f6:32:28:5e:f6:07: e2:c8:4d:76:4f:99:07:cd:8d:f2:05:57:43:89:30: aa:d0:8f:ee:3d:b9:e2:b1:2a:ea:22:5b:a5:a3:cc: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C3:46:21:6F:5E:F5:0B:D3:AB:E2:78:A5:5F:1E:63:7D:45:3B:53 X509v3 Authority Key Identifier: keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:91:fe:b3:a6:30:da:94:ec:13:e0:79:25:d9:05:c1:30:b5: 20:d8:0d:b5:37:f5:6a:2c:ab:3c:d4:5e:e6:c6:ae:74:b2:2c: 7b:cd:e1:a1:aa:07:a7:fb:e2:96:57:c6:d1:7c:ce:64:8a:de: 79:4e:b3:7f:d1:3a:9b:17:08:42:27:d2:97:c9:d5:ec:b6:27: fa:c1:b8:c6:3b:82:04:48:31:48:bb:d2:2a:df:a2:ec:f0:e4: 6e:40:89:b4:3b:9d:e1:b9:e9:61:3b:2d:3e:e9:6d:30:1c:c8: 71:2e:2b:c6:e8:ca:49:8d:4d:2a:5d:fa:96:73:21:34:ca:88: 51:49:f8:ea:0b:c7:f7:11:47:06:48:7c:6d:31:06:06:21:54: ad:fa:35:27:a9:87:f3:3b:18:b8:ba:b2:72:dc:08:f9:31:2a: df:90:23:da:37:94:dc:33:fc:30:67:41:3d:ae:d4:77:b3:2e: 60:d3:1b:3b:09:4c:49:fe:f0:9f:71:68:ea:eb:e6:16:dd:9e: 77:f2:c3:c6:ef:4d:a0:8c:2d:fd:e3:03:b8:24:f1:e5:b0:ec: 32:f0:65:b7:29:09:23:08:c4:08:41:0f:8c:24:d4:ef:42:c5: 5a:40:d7:ed:97:4b:6e:80:03:a8:00:60:7a:59:1f:d2:9e:49: 0b:8d:0c:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA2RjIxMTAvBgNVBAUTKEU3NEY0NjRDNDA4NjU5RUQyNTg5REI2NjRDRThFRjZB NkM2MDBDNDcwHhcNMjQxMTIyMTkxMjI4WhcNMjQxMTI5MTkxMjI4WjAYMRYwFAYD VQQDEw02NzQwZDc5ZC1hNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Y65qNrgYlTjyds2ECeUp8k9ZedmxVXA3/veSfPk/7bPSft8inzbOkg12nrr V4AhsTutwwUXJFZT7KN9JXF9N67u849as5hE2/KL2gnSORKO9KTmNHjFRjes7992 ZiEARFhUl8eCiBtB2oRaSSa/y5kNwHU6Cyo0AtpLVv7eYkU/Bg7dcFHzsNQb0toj MgxVBtWj+JurpipysGJKmSFqwu07x1GGUOJwOQ0R9CXoj0AS5ElpjNT4XEy24A3w pUTpgz2AQxlgEnaDZ6BTQ9a3LSAY2nvPOQGnWR32Mihe9gfiyE12T5kHzY3yBVdD iTCq0I/uPbnisSrqIlulo8z23QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/DRiFv XvUL06vieKVfHmN9RTtTMB8GA1UdIwQYMBaAFOdPRkxAhlntJYnbZkzo72psYAxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDZGMi84QjhDNEREMjNG NDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dlMGxpZHRtVE9qdmFteGdE RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUwOUdURUNHV2UwbGlkdG1UT2p2YW14Z0RFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDZGMi84QjhDNEREMjNGNDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dl MGxpZHRtVE9qdmFteGdERWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0kf6zpjDalOwT4Hkl2QXBMLUg2A21N/VqLKs81F7mxq50six7zeGh qgen++KWV8bRfM5kit55TrN/0TqbFwhCJ9KXydXstif6wbjGO4IESDFIu9Iq36Ls 8ORuQIm0O53huelhOy0+6W0wHMhxLivG6MpJjU0qXfqWcyE0yohRSfjqC8f3EUcG SHxtMQYGIVSt+jUnqYfzOxi4urJy3Aj5MSrfkCPaN5TcM/wwZ0E9rtR3sy5g0xs7 CUxJ/vCfcWjq6+YW3Z538sPG702gjC394wO4JPHlsOwy8GW3KQkjCMQIQQ+MJNTv QsVaQNftl0tugAOoAGB6WR/SnkkLjQxp -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:36 2024 by rpki-client on console-ams.rpki-client.org