$ rpki-client -vvf rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft File: 9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft (raw, json) Hash identifier: oq88HTUOjeWNl+f5eCPKcpweQSL8nNI3evO0zeRPLZE= Subject key identifier: 09:DB:33:61:C4:3C:EC:1B:2C:1D:1A:3D:80:EA:1D:BA:F5:7C:18:03 Authority key identifier: F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94 Certificate issuer: /CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194 Certificate serial: 0590 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft Manifest number: 057F Signing time: Wed 20 Nov 2024 22:50:31 +0000 Manifest this update: Wed 20 Nov 2024 22:50:31 +0000 Manifest next update: Wed 27 Nov 2024 22:50:31 +0000 Files and hashes: 1: 9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl (hash: AGWlSnvrYXgiW+MPVR2mmZLzWNTjFihbSafYyhePPUw=) 2: E8C597A6CAC311EC910B8C20C4F9AE02.roa (hash: ca8WhLHbBa7EcZLiVkbwKc/O4N20Afp/5/zNnD+5YJY=) 3: DB5A14DED46911ECBA5B5F41C4F9AE02.roa (hash: AUr7V0EIgEALueuFSq5XM/MsO85yQ02h1CJnq/h0usU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1424 (0x590) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194 Validity Not Before: Nov 20 22:50:31 2024 GMT Not After : Nov 27 22:50:31 2024 GMT Subject: CN=673e67b7-cc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:0b:56:a8:22:3a:7c:a3:6f:85:7c:84:fb: 36:95:e4:d9:70:e6:9b:22:52:ad:03:11:3e:61:57: 12:17:98:8a:0b:86:c9:89:28:ea:ef:22:ec:98:50: 28:dd:d1:30:d7:e1:ec:da:0d:13:6e:c5:2c:45:17: b7:12:66:01:1b:c5:9c:35:0b:9b:86:9f:63:b2:55: 77:8f:91:39:73:df:54:c4:7e:e6:79:24:4d:0c:19: 09:88:ac:01:00:7e:e3:cf:0c:89:cb:04:d6:a8:0f: a6:e6:2e:b1:83:a2:7c:44:43:71:10:4f:61:a1:ee: 24:a8:81:b1:88:00:d0:44:07:59:bd:39:a5:cc:8f: 4a:cc:9d:58:7e:c5:de:ae:3f:de:9d:d4:8a:3e:68: 34:25:7f:01:38:e5:68:85:e2:aa:69:b4:c1:26:30: 65:e9:c8:1c:47:29:b3:d2:8c:7f:2a:53:9b:8a:c9: 79:d2:95:61:36:b9:36:7d:86:6a:e5:45:11:c5:af: 3c:8d:8e:b5:75:1e:f0:54:a9:36:9a:09:69:67:b2: 93:d0:71:47:97:ed:0c:24:b9:fd:5d:d1:41:aa:fd: 2f:79:41:90:cc:d7:cb:e3:7c:9a:51:7c:d8:0f:07: 54:07:56:11:81:b8:ff:4c:36:96:fc:f6:83:f7:66: 81:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DB:33:61:C4:3C:EC:1B:2C:1D:1A:3D:80:EA:1D:BA:F5:7C:18:03 X509v3 Authority Key Identifier: keyid:F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c3:a0:41:e8:3f:91:35:b0:f1:96:0c:d7:a1:f4:b4:1a:f3: 0b:24:f8:d2:2b:f7:a5:17:63:5d:60:53:3a:95:58:f7:3e:ad: 84:1f:82:bc:60:5f:e9:3d:13:3f:2b:08:8d:ce:ea:a9:0c:a8: ab:78:84:d0:8e:46:fa:0b:7b:f7:eb:ed:22:b8:bb:a8:62:22: 87:4b:b1:e6:cc:65:f1:35:48:24:cc:34:d4:c0:d7:4a:d9:18: 02:e5:27:82:ad:95:76:ca:a5:d4:f6:90:f2:84:ad:5f:c4:f8: 7b:45:7d:b4:5e:4b:35:3a:4e:d2:67:87:31:f3:b8:00:af:36: 05:2e:23:84:44:83:a1:25:b6:db:b0:c2:2e:fe:b7:d3:fe:e4: 09:25:aa:4b:f5:ce:76:91:57:73:d8:89:a3:8a:7c:4f:79:82: cb:87:91:48:3c:d5:bf:72:ef:d5:73:3e:55:ad:17:db:83:6a: a0:b2:9d:24:c4:b0:97:0e:81:59:2f:81:61:a5:6c:ee:ad:53: e7:1f:58:c7:da:64:b2:2d:1c:0d:5f:59:5a:57:f3:94:62:87: 98:7c:a7:92:5f:8a:f9:e1:46:29:da:b9:f3:a1:3c:90:90:90: 04:7b:27:b3:fc:db:93:7d:7f:25:3a:54:c7:99:c0:dd:64:52: 14:91:8f:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjczNEQxMTAvBgNVBAUTKEY0QzMzMjQ1OEJFREM4NzhCOTZBMDdFMUUwODFFNUJG NEE5MUExOTQwHhcNMjQxMTIwMjI1MDMxWhcNMjQxMTI3MjI1MDMxWjAYMRYwFAYD VQQDEw02NzNlNjdiNy1jYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IALVqgiOnyjb4V8hPs2leTZcOabIlKtAxE+YVcSF5iKC4bJiSjq7yLsmFAo 3dEw1+Hs2g0TbsUsRRe3EmYBG8WcNQubhp9jslV3j5E5c99UxH7meSRNDBkJiKwB AH7jzwyJywTWqA+m5i6xg6J8RENxEE9hoe4kqIGxiADQRAdZvTmlzI9KzJ1YfsXe rj/endSKPmg0JX8BOOVoheKqabTBJjBl6cgcRymz0ox/KlObisl50pVhNrk2fYZq 5UURxa88jY61dR7wVKk2mglpZ7KT0HFHl+0MJLn9XdFBqv0veUGQzNfL43yaUXzY DwdUB1YRgbj/TDaW/PaD92aBBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnbM2HE POwbLB0aPYDqHbr1fBgDMB8GA1UdIwQYMBaAFPTDMkWL7ch4uWoH4eCB5b9KkaGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzM0RC8xMTU4NDMyNkI5 NEYxMUVCOUE2QUVGMzJDNEY5QUUwMi85TU15Ull2dHlIaTVhZ2ZoNElIbHYwcVJv WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNTXlSWXZ0eUhpNWFnZmg0SUhsdjBxUm9aUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzM0RC8xMTU4NDMyNkI5NEYxMUVCOUE2QUVGMzJDNEY5QUUwMi85TU15Ull2dHlI aTVhZ2ZoNElIbHYwcVJvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClw6BB6D+RNbDxlgzXofS0GvMLJPjSK/elF2NdYFM6lVj3Pq2EH4K8 YF/pPRM/KwiNzuqpDKireITQjkb6C3v36+0iuLuoYiKHS7HmzGXxNUgkzDTUwNdK 2RgC5SeCrZV2yqXU9pDyhK1fxPh7RX20Xks1Ok7SZ4cx87gArzYFLiOERIOhJbbb sMIu/rfT/uQJJapL9c52kVdz2ImjinxPeYLLh5FIPNW/cu/Vcz5VrRfbg2qgsp0k xLCXDoFZL4FhpWzurVPnH1jH2mSyLRwNX1laV/OUYoeYfKeSX4r54UYp2rnzoTyQ kJAEeyez/NuTfX8lOlTHmcDdZFIUkY/i -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:23 2024 by rpki-client on console-fra.rpki-client.org