$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft File: CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json) Hash identifier: 6/rt1tnSvjdZTecjOoX1TdGnfvHJu/V1ITEQUGqm9u4= Subject key identifier: 24:10:FD:CF:1D:C4:4B:9F:0E:8B:46:3C:CE:10:34:20:81:7E:0A:DF Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft Manifest number: E9 Signing time: Thu 21 Nov 2024 03:33:40 +0000 Manifest this update: Thu 21 Nov 2024 03:33:40 +0000 Manifest next update: Thu 28 Nov 2024 03:33:40 +0000 Files and hashes: 1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: I69OwjHCv1IEad10umrDbk/KQlIX+vnZRdWGXa+PREo=) 2: C1B91228477711EEB1D76A7FC4F9AE02.roa (hash: xf35Rt9HKRX/xo925LqoqkXmAJHqGVXvyNm/ND5XLGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: Nov 21 03:33:40 2024 GMT Not After : Nov 28 03:33:40 2024 GMT Subject: CN=673eaa14-d93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5e:1e:d3:9e:22:d5:21:e6:94:61:c5:b1:e8: 82:1b:7e:19:e8:7a:f0:96:26:18:b9:fe:64:e3:4e: 96:57:eb:d5:82:13:20:01:3d:a0:9f:d0:13:62:01: 5a:2c:22:83:23:62:9e:37:42:c6:ef:25:1e:ce:2a: 56:29:a8:da:7b:b9:bb:15:4d:08:b5:b1:c7:9b:83: 32:0f:85:63:1e:eb:33:0e:9e:7a:fe:ba:98:b9:4c: b5:e3:0b:5c:5b:79:11:75:4e:94:3e:1b:d7:c0:e0: a1:34:db:75:33:91:1e:b8:24:80:11:ee:7d:93:70: 57:49:12:ea:a4:01:46:c7:b9:bf:c7:a2:bb:81:16: ea:2d:77:e5:83:14:cc:df:75:da:e7:4d:81:55:a8: 31:c8:05:2e:c9:7b:cd:c4:71:98:da:0a:f6:fe:35: f3:20:dc:3f:02:38:55:8a:bb:ee:09:36:a7:cf:ba: 57:5c:75:98:8d:05:ce:9a:cf:8c:68:ce:e0:81:be: b0:c1:d5:57:83:b2:cb:a8:a7:4d:d1:c0:2f:90:ba: 17:6c:60:f9:bf:97:f3:df:8f:25:c9:7a:0b:67:67: 78:48:e8:cd:e2:d2:d4:db:75:eb:46:31:6c:7c:d1: 53:58:92:7c:95:60:ca:a0:e0:f4:61:95:36:d8:2f: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:10:FD:CF:1D:C4:4B:9F:0E:8B:46:3C:CE:10:34:20:81:7E:0A:DF X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3a:13:d6:f5:be:ff:0d:b8:db:e3:7b:17:44:2f:fc:76:e7: 9d:fc:0a:fa:ab:67:ce:c9:5a:d0:93:12:b4:38:24:55:d5:1e: 49:88:9f:d1:f8:0f:64:d9:0a:79:bb:bf:bf:45:4d:ef:e9:2b: cf:65:a7:14:e8:61:b6:05:7c:bb:b4:d8:ce:2f:12:60:2b:c5: 41:a6:22:8d:dc:77:e0:dc:22:1e:fb:08:96:55:16:75:23:89: 21:f8:c7:e2:9b:20:10:d7:e6:96:d4:ad:65:b6:a6:cb:08:27: f1:bc:25:98:68:3c:59:99:a2:a7:7c:17:c1:e9:a2:21:7b:88: 1f:a8:e6:c1:0c:82:c2:76:0c:ea:3d:b6:70:39:fa:e3:fa:89: 0a:11:e0:91:54:5d:5a:48:69:83:04:bc:bc:6b:96:e5:97:ba: ba:64:99:33:c4:69:cf:92:86:b0:7e:65:85:10:d3:40:b8:bb: 42:68:9e:6c:c7:f6:08:6a:a8:6b:35:a8:d0:ef:35:08:8b:ea: cd:ee:73:8a:58:30:93:38:1e:17:d0:ee:95:f0:79:ab:74:5a: d3:16:71:ed:1a:74:0c:97:ee:84:ca:20:a6:d6:b2:00:da:ab: 86:2d:ae:39:2f:ee:8f:53:c9:50:b8:08:51:02:2e:6b:39:11: 19:6b:dc:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjQxMTIxMDMzMzQwWhcNMjQxMTI4MDMzMzQwWjAYMRYwFAYD VQQDEw02NzNlYWExNC1kOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2F4e054i1SHmlGHFseiCG34Z6HrwliYYuf5k406WV+vVghMgAT2gn9ATYgFa LCKDI2KeN0LG7yUezipWKajae7m7FU0ItbHHm4MyD4VjHuszDp56/rqYuUy14wtc W3kRdU6UPhvXwOChNNt1M5EeuCSAEe59k3BXSRLqpAFGx7m/x6K7gRbqLXflgxTM 33Xa502BVagxyAUuyXvNxHGY2gr2/jXzINw/AjhVirvuCTanz7pXXHWYjQXOms+M aM7ggb6wwdVXg7LLqKdN0cAvkLoXbGD5v5fz348lyXoLZ2d4SOjN4tLU23XrRjFs fNFTWJJ8lWDKoOD0YZU22C/2iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQQ/c8d xEufDotGPM4QNCCBfgrfMB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQzMy81OTYyNjcxMDQ3NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJU ZGY4c3hZUzZYNzVYZS00ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkOhPW9b7/Dbjb43sXRC/8dued/Ar6q2fOyVrQkxK0OCRV1R5JiJ/R +A9k2Qp5u7+/RU3v6SvPZacU6GG2BXy7tNjOLxJgK8VBpiKN3Hfg3CIe+wiWVRZ1 I4kh+MfimyAQ1+aW1K1ltqbLCCfxvCWYaDxZmaKnfBfB6aIhe4gfqObBDILCdgzq PbZwOfrj+okKEeCRVF1aSGmDBLy8a5bll7q6ZJkzxGnPkoawfmWFENNAuLtCaJ5s x/YIaqhrNajQ7zUIi+rN7nOKWDCTOB4X0O6V8HmrdFrTFnHtGnQMl+6EyiCm1rIA 2quGLa45L+6PU8lQuAhRAi5rOREZa9zb -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:16 2024 by rpki-client on console-ams.rpki-client.org