$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft File: Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json) Hash identifier: z/NuuyYAFIOguRZO9mm0puXa6uiO0nGiv6bJKXCeIH8= Subject key identifier: DC:D0:05:D5:7D:24:BE:BA:DC:6F:C1:36:13:E1:B5:D9:E5:ED:BE:41 Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75 Certificate issuer: /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75 Certificate serial: 02C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft Manifest number: 02C0 Signing time: Thu 21 Nov 2024 01:01:14 +0000 Manifest this update: Thu 21 Nov 2024 01:01:13 +0000 Manifest next update: Thu 28 Nov 2024 01:01:13 +0000 Files and hashes: 1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: nCxxBPMPJ9ljn5WuNivt6yhLSuy+pQrfE4I0x2J5Sn8=) 2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: d8hKEngO/LeUHQoe5AIEcocjfTWcuilabUG2KLlGFLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 711 (0x2c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75 Validity Not Before: Nov 21 01:01:13 2024 GMT Not After : Nov 28 01:01:13 2024 GMT Subject: CN=673e8659-7480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bf:18:4e:0e:06:81:78:8e:90:6a:16:c0:80: 1c:1a:57:6b:bf:ec:9a:51:b0:8c:ea:28:6c:ab:0a: 49:9d:10:e6:4e:8c:8e:dd:1a:39:d4:86:8e:6c:fd: d1:f8:37:1b:e4:4b:a4:e4:e7:20:90:dd:5b:d4:d2: b9:0d:9c:70:5a:9c:40:06:72:fc:13:4a:4c:3e:2d: e0:d7:b6:be:7f:c5:eb:c7:cf:5a:8f:60:35:f3:fb: 59:b0:8f:4e:76:54:82:84:61:97:bd:04:bd:a2:a9: 44:f7:15:7f:de:e4:ac:cb:02:62:56:21:b4:2d:84: 46:5b:0e:6d:ae:d2:5b:85:34:13:b3:6c:0f:ce:a5: 2f:0d:3c:8c:c5:79:5a:67:d4:58:7e:77:49:05:f3: 55:5f:09:df:cb:40:a8:69:68:41:38:fa:46:4f:1e: 4e:7f:01:5e:89:cd:aa:11:7d:94:66:97:4c:a2:a8: 3d:e9:1a:a2:66:23:48:d3:de:51:f5:7d:7c:55:7d: fd:2a:1d:ee:41:9a:8a:85:16:1e:49:de:98:f7:b9: 02:b6:d3:7e:9c:33:c8:d3:a7:b2:3c:ab:82:08:bc: aa:64:01:ee:46:05:17:0f:f5:6d:cf:ec:5a:7a:79: 94:e3:35:83:9f:16:e0:72:af:21:9d:e8:19:5b:ef: b5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D0:05:D5:7D:24:BE:BA:DC:6F:C1:36:13:E1:B5:D9:E5:ED:BE:41 X509v3 Authority Key Identifier: keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:f7:a2:bd:11:83:0a:32:3f:62:27:2a:c0:cf:1f:77:a6:43: b2:8f:ea:f2:b7:f6:9d:27:b5:a8:a7:b5:79:3e:6a:85:b0:88: e3:e1:28:5c:52:df:2a:6b:41:b2:02:65:4b:f9:1e:9d:c7:8a: 45:85:45:7b:89:e0:9a:a5:ed:f4:3d:02:8f:70:65:e9:b9:89: 86:29:d6:51:14:18:71:23:e4:c5:ad:3e:8b:5e:91:1b:7e:cf: 06:ef:fb:df:3c:00:67:72:bb:86:8a:e8:79:e3:bd:51:3e:6b: f8:0d:44:aa:a2:01:69:5f:80:09:cb:e5:88:9f:f5:01:5f:48: b4:34:fe:c0:d9:52:95:e0:70:74:3c:dd:d9:e2:ec:72:4b:22: df:8b:41:13:21:2f:96:d1:32:d5:d8:d0:c0:b0:0f:77:56:1c: b0:ae:0b:49:66:d4:d5:68:56:c7:8b:c8:31:0b:bb:f0:e6:bb: a8:b3:30:33:7e:a2:37:95:5f:cd:00:28:11:55:eb:31:57:75: da:4b:08:d1:de:50:3d:ac:3a:6a:18:82:76:52:7c:8d:15:4a: 3c:b5:0b:ee:10:70:ea:34:2b:5b:95:13:72:2a:77:b8:ab:ce: 33:3f:d3:0b:54:d3:96:46:a7:a6:48:65:0b:d0:bc:86:d0:49: ae:4e:17:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyNjkxMTAvBgNVBAUTKDIyNkY3Mjg5RDRFMzdGRUNFMjI2MEM2NEQzQkNCQTdB QzAzMTVBNzUwHhcNMjQxMTIxMDEwMTEzWhcNMjQxMTI4MDEwMTEzWjAYMRYwFAYD VQQDEw02NzNlODY1OS03NDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAob8YTg4GgXiOkGoWwIAcGldrv+yaUbCM6ihsqwpJnRDmToyO3Ro51IaObP3R +Dcb5Euk5OcgkN1b1NK5DZxwWpxABnL8E0pMPi3g17a+f8Xrx89aj2A18/tZsI9O dlSChGGXvQS9oqlE9xV/3uSsywJiViG0LYRGWw5trtJbhTQTs2wPzqUvDTyMxXla Z9RYfndJBfNVXwnfy0CoaWhBOPpGTx5OfwFeic2qEX2UZpdMoqg96RqiZiNI095R 9X18VX39Kh3uQZqKhRYeSd6Y97kCttN+nDPI06eyPKuCCLyqZAHuRgUXD/Vtz+xa enmU4zWDnxbgcq8hnegZW++1lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzQBdV9 JL663G/BNhPhtdnl7b5BMB8GA1UdIwQYMBaAFCJvconU43/s4iYMZNO8unrAMVp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzI2OS9CMTYxMzExOENG RTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYtemlKZ3hrMDd5NmVzQXhX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ltOXlpZFRqZi16aUpneGswN3k2ZXNBeFduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzI2OS9CMTYxMzExOENGRTUxMUVDOTRCQkM3NUFDNEY5QUUwMi9JbTl5aWRUamYt emlKZ3hrMDd5NmVzQXhXblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz96K9EYMKMj9iJyrAzx93pkOyj+ryt/adJ7Wop7V5PmqFsIjj4Shc Ut8qa0GyAmVL+R6dx4pFhUV7ieCape30PQKPcGXpuYmGKdZRFBhxI+TFrT6LXpEb fs8G7/vfPABncruGiuh5471RPmv4DUSqogFpX4AJy+WIn/UBX0i0NP7A2VKV4HB0 PN3Z4uxySyLfi0ETIS+W0TLV2NDAsA93VhywrgtJZtTVaFbHi8gxC7vw5ruoszAz fqI3lV/NACgRVesxV3XaSwjR3lA9rDpqGIJ2UnyNFUo8tQvuEHDqNCtblRNyKne4 q84zP9MLVNOWRqemSGUL0LyG0EmuTheB -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:50 2024 by rpki-client on console-ams.rpki-client.org