$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json) Hash identifier: EF9IX3aBBqB4wuQ1TBfqG1EVNvXM8OJ+l4j0Wf+v/kg= Subject key identifier: 4E:ED:65:54:A5:E8:7A:DC:80:12:A5:6D:E3:E1:EA:7E:89:ED:9E:02 Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft Manifest number: 24 Signing time: Wed 23 Oct 2024 06:28:25 +0000 Manifest this update: Wed 23 Oct 2024 06:28:25 +0000 Manifest next update: Wed 30 Oct 2024 06:28:25 +0000 Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: vTqSaCqvn5JcvYGZ9T823LZIo4QC594zNKMH4cPqclc=) 2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: LeRLBY5GVV/98SK5vi8TCaYTzwu/LK8xBT06nPBMuiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Validity Not Before: Oct 23 06:28:25 2024 GMT Not After : Oct 30 06:28:25 2024 GMT Subject: CN=67189789-59c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:bf:e1:19:94:7f:34:57:fc:54:d0:45:10: 45:c0:91:d1:00:82:dc:c2:d9:3d:69:cf:85:1c:b1: a9:be:74:a7:1b:db:58:3d:e1:a0:7f:1d:56:a1:36: f1:a4:a9:c9:c0:f8:4b:4d:5f:43:33:89:59:5e:45: 05:d1:a3:f7:3e:8b:5e:5a:d9:35:14:e8:85:8e:85: e7:af:3b:79:56:89:93:b7:7d:3b:10:61:a4:e1:b9: 9e:f9:0f:0f:29:e5:07:38:0b:bf:3a:4a:ca:38:0d: 34:d0:62:02:d5:7f:2d:31:89:7b:c2:bc:57:0e:ae: eb:09:e5:2a:30:b9:e0:e8:14:f7:48:ef:9b:4d:2b: 81:e5:59:e6:42:6e:9c:0e:0d:5d:8f:eb:89:f6:67: 2a:89:03:eb:ec:e5:e6:19:9a:a9:d8:e2:7a:5c:ad: f4:e6:81:bd:1e:17:3b:75:04:82:98:4d:68:0b:c0: 50:22:b6:3e:e7:8c:77:c4:89:2b:fd:27:74:39:3c: b6:90:da:d5:0a:8d:08:28:93:0e:41:03:e5:9e:c3: 2f:c0:97:51:90:de:64:98:bf:d1:30:e8:53:e0:33: 19:9d:03:95:26:e0:6a:4e:83:90:f3:5a:6f:1b:28: 40:f1:96:72:b6:1b:e6:67:25:62:a7:3b:ce:b9:a5: 38:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:ED:65:54:A5:E8:7A:DC:80:12:A5:6D:E3:E1:EA:7E:89:ED:9E:02 X509v3 Authority Key Identifier: keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:36:f2:90:79:9f:34:a9:99:cc:4a:37:6c:35:b5:de:41:74: ea:87:6c:9b:30:3b:0d:18:94:78:80:03:03:ff:5b:ee:53:48: 15:e6:32:ce:9d:54:8d:4c:9e:35:ee:04:19:3f:e3:67:9d:d4: 65:cb:61:ed:26:fd:45:f7:84:31:97:35:cf:ae:12:7d:2d:6c: c7:47:2a:45:04:14:e3:45:8c:46:6c:20:9d:be:c7:cd:e3:ae: 12:78:be:2d:4e:ee:38:48:20:99:5a:07:90:45:f3:80:a8:1f: 8e:c6:16:ce:cf:ba:30:cd:9c:36:34:83:16:6f:1e:27:6a:df: 30:d9:01:1e:df:dd:8f:af:28:79:52:1d:ac:0a:29:82:fc:8d: b1:08:42:1b:e1:31:94:07:ec:30:24:71:04:77:53:ab:24:7f: bd:d9:35:aa:c1:70:d7:3a:39:04:7c:57:fb:2c:c2:a7:c9:24: 25:a4:e6:e9:d4:1c:6a:1f:69:1f:2e:de:2b:30:5f:e1:7f:9c: 0d:cc:a8:d4:67:75:41:00:b4:52:da:76:90:af:f2:55:3d:78: 1c:d2:69:20:cf:c3:47:bb:bc:f8:7e:da:0a:aa:ac:b2:df:ab: 6c:33:60:b8:ee:7f:da:d3:ba:2b:80:92:f9:a7:8c:e2:34:4d: f2:89:51:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjczQjExMC8GA1UEBRMoMTVDRjUwREI1MkIwRjEyRjFBNkUzQjM5NjMzRDQ4MkUw OUNGRTM1QzAeFw0yNDEwMjMwNjI4MjVaFw0yNDEwMzAwNjI4MjVaMBgxFjAUBgNV BAMTDTY3MTg5Nzg5LTU5YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpDb/hGZR/NFf8VNBFEEXAkdEAgtzC2T1pz4Ucsam+dKcb21g94aB/HVahNvGk qcnA+EtNX0MziVleRQXRo/c+i15a2TUU6IWOheevO3lWiZO3fTsQYaThuZ75Dw8p 5Qc4C786Sso4DTTQYgLVfy0xiXvCvFcOrusJ5SowueDoFPdI75tNK4HlWeZCbpwO DV2P64n2ZyqJA+vs5eYZmqnY4npcrfTmgb0eFzt1BIKYTWgLwFAitj7njHfEiSv9 J3Q5PLaQ2tUKjQgokw5BA+Wewy/Al1GQ3mSYv9Ew6FPgMxmdA5Um4GpOg5DzWm8b KEDxlnK2G+ZnJWKnO865pTjHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTu1lVKXo etyAEqVt4+HqfontngIwHwYDVR0jBBgwFoAUFc9Q21Kw8S8abjs5Yz1ILgnP41ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2NzNCLzgxMkYyMTM2NURG RTExRUY4QzdFODE3QkM0RjlBRTAyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQx dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRmM5UTIxS3c4UzhhYmpzNVl6MUlMZ25QNDF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 NzNCLzgxMkYyMTM2NURGRTExRUY4QzdFODE3QkM0RjlBRTAyL0ZjOVEyMUt3OFM4 YWJqczVZejFJTGduUDQxdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFc28pB5nzSpmcxKN2w1td5BdOqHbJswOw0YlHiAAwP/W+5TSBXmMs6d VI1MnjXuBBk/42ed1GXLYe0m/UX3hDGXNc+uEn0tbMdHKkUEFONFjEZsIJ2+x83j rhJ4vi1O7jhIIJlaB5BF84CoH47GFs7PujDNnDY0gxZvHidq3zDZAR7f3Y+vKHlS HawKKYL8jbEIQhvhMZQH7DAkcQR3U6skf73ZNarBcNc6OQR8V/sswqfJJCWk5unU HGofaR8u3iswX+F/nA3MqNRndUEAtFLadpCv8lU9eBzSaSDPw0e7vPh+2gqqrLLf q2wzYLjuf9rTuiuAkvmnjOI0TfKJUYo= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:02 2024 by rpki-client on console-ams.rpki-client.org