$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft File: -9GoSKH4mo0k2wtoF6CH-y313wg.mft (raw, json) Hash identifier: Fajm53CeYgB8Yc4BSyl8JZFJASDrppXOBQFeHeTNd+4= Subject key identifier: 48:B1:59:86:96:C3:83:49:13:0D:E7:04:BC:A9:5D:4F:CE:37:9D:3C Authority key identifier: FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 Certificate issuer: /CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft Manifest number: 0147 Signing time: Thu 21 Nov 2024 02:35:48 +0000 Manifest this update: Thu 21 Nov 2024 02:35:47 +0000 Manifest next update: Thu 28 Nov 2024 02:35:47 +0000 Files and hashes: 1: -9GoSKH4mo0k2wtoF6CH-y313wg.crl (hash: EQbhHrOvU8oIVR2UBJBsGvbLEM0Jq3ciOFfhwzaUvuE=) 2: 37C8FE80B2A211ED9A5C4B53C4F9AE02.roa (hash: 0N+/z4kTKX8NyMAex9FH+ekMrAx1yYCVrWXAZK9y2fI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAFCE/serialNumber=FBD1A848A1F89A8D24DB0B6817A087FB2DF5DF08 Validity Not Before: Nov 21 02:35:47 2024 GMT Not After : Nov 28 02:35:47 2024 GMT Subject: CN=673e9c84-6fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:80:29:bd:74:c0:8c:3e:93:f3:60:d8:45:9a: 1b:3a:d1:75:49:8a:89:5c:1d:97:58:e8:b5:f7:29: 8d:69:9f:f0:f8:9a:ab:26:eb:8e:fd:b0:97:af:7e: 71:00:9d:c9:05:cd:63:a2:da:30:39:b3:cd:e8:d0: 3c:3e:89:84:b7:ba:ea:36:c9:82:d7:6d:34:2e:10: 47:da:2b:a7:e7:a8:62:09:35:3c:38:9d:f5:c3:d8: d1:67:76:b6:b4:e8:59:04:1c:10:8b:be:a5:7c:b2: 43:97:00:bb:89:1f:2b:e4:69:c4:fa:e5:6f:9a:a8: 8b:6e:25:92:f4:e8:57:b4:fd:f1:d7:7d:d7:e2:71: d5:66:11:38:2c:1f:4d:ce:21:84:7e:87:88:db:52: fe:32:f7:ba:4b:f0:c0:a2:30:4a:9e:64:f9:1a:10: 76:be:02:8c:cb:13:bc:fc:5c:e5:8c:80:c5:b9:c0: 86:45:e3:1d:2e:f8:3d:5c:03:e5:82:dd:2e:3f:b7: 0e:5d:4a:8e:51:85:03:03:54:6a:c9:8c:59:76:8f: 33:9d:05:ba:2e:c7:f5:b1:cf:89:92:26:5d:88:38: 72:80:57:f9:39:19:13:ea:d1:bb:b5:84:ee:53:58: 76:1c:fa:42:ad:6b:1d:88:3a:f6:ba:9b:25:27:f8: af:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B1:59:86:96:C3:83:49:13:0D:E7:04:BC:A9:5D:4F:CE:37:9D:3C X509v3 Authority Key Identifier: keyid:FB:D1:A8:48:A1:F8:9A:8D:24:DB:0B:68:17:A0:87:FB:2D:F5:DF:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9GoSKH4mo0k2wtoF6CH-y313wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAFCE/2D34C392B29C11ED98A8314AC4F9AE02/-9GoSKH4mo0k2wtoF6CH-y313wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:cc:65:1f:e6:83:a0:26:8d:09:1f:ae:51:14:5e:8d:67:38: 8a:f7:db:70:cb:ef:85:39:5c:78:6f:8a:8b:18:17:2a:9c:87: 6b:6d:24:b5:14:06:9f:c8:ad:ea:26:1d:30:e7:be:f7:dc:03: 35:14:72:d8:23:fd:bf:37:a2:78:7f:40:6a:4e:b5:25:1b:48: 5b:11:5d:ec:47:eb:c0:37:f5:2e:85:b6:05:04:20:23:a2:08: ff:4f:48:00:33:fd:1b:b4:5b:90:c8:48:8d:ac:70:f5:d2:c0: f9:73:3e:ca:18:d9:61:1c:d3:ab:fa:60:43:66:f2:e1:d8:2d: 70:fb:9a:9d:91:b6:f5:e7:72:8f:25:4b:56:e9:88:9a:ad:b2: b9:95:42:d0:4a:4f:cb:45:31:34:01:16:63:33:70:9d:af:b6: da:e1:e3:73:9a:24:6f:d1:e2:f0:45:aa:e7:16:06:c8:c2:79: 30:a4:0d:84:1f:0b:81:53:2d:54:cc:c6:7a:62:bd:49:76:cd: 6c:94:10:07:76:04:35:e4:e8:ec:3f:af:52:59:70:3f:2d:02: 39:b0:cc:90:e6:db:aa:bc:36:b4:8a:83:dd:d8:76:1b:1b:aa: e6:be:0b:a7:ee:c5:16:c7:02:2e:79:cd:02:68:88:e4:17:9b: 14:a0:8e:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFGQ0UxMTAvBgNVBAUTKEZCRDFBODQ4QTFGODlBOEQyNERCMEI2ODE3QTA4N0ZC MkRGNURGMDgwHhcNMjQxMTIxMDIzNTQ3WhcNMjQxMTI4MDIzNTQ3WjAYMRYwFAYD VQQDEw02NzNlOWM4NC02ZmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34ApvXTAjD6T82DYRZobOtF1SYqJXB2XWOi19ymNaZ/w+JqrJuuO/bCXr35x AJ3JBc1jotowObPN6NA8PomEt7rqNsmC1200LhBH2iun56hiCTU8OJ31w9jRZ3a2 tOhZBBwQi76lfLJDlwC7iR8r5GnE+uVvmqiLbiWS9OhXtP3x133X4nHVZhE4LB9N ziGEfoeI21L+Mve6S/DAojBKnmT5GhB2vgKMyxO8/FzljIDFucCGReMdLvg9XAPl gt0uP7cOXUqOUYUDA1RqyYxZdo8znQW6Lsf1sc+JkiZdiDhygFf5ORkT6tG7tYTu U1h2HPpCrWsdiDr2upslJ/iv3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEixWYaW w4NJEw3nBLypXU/ON508MB8GA1UdIwQYMBaAFPvRqEih+JqNJNsLaBegh/st9d8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUZDRS8yRDM0QzM5MkIy OUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1vMGsyd3RvRjZDSC15MzEz d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05R29TS0g0bW8wazJ3dG9GNkNILXkzMTN3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUZDRS8yRDM0QzM5MkIyOUMxMUVEOThBODMxNEFDNEY5QUUwMi8tOUdvU0tING1v MGsyd3RvRjZDSC15MzEzd2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlzGUf5oOgJo0JH65RFF6NZziK99twy++FOVx4b4qLGBcqnIdrbSS1 FAafyK3qJh0w57733AM1FHLYI/2/N6J4f0BqTrUlG0hbEV3sR+vAN/UuhbYFBCAj ogj/T0gAM/0btFuQyEiNrHD10sD5cz7KGNlhHNOr+mBDZvLh2C1w+5qdkbb153KP JUtW6YiarbK5lULQSk/LRTE0ARZjM3Cdr7ba4eNzmiRv0eLwRarnFgbIwnkwpA2E HwuBUy1UzMZ6Yr1Jds1slBAHdgQ15OjsP69SWXA/LQI5sMyQ5tuqvDa0ioPd2HYb G6rmvgun7sUWxwIuec0CaIjkF5sUoI5X -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:50 2024 by rpki-client on console-ams.rpki-client.org