$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft File: 9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json) Hash identifier: PHr6x5/45VgP9M/IDm1t4+OxUD0aUJPrYPOM2D7CRlY= Subject key identifier: 0D:CB:EA:9C:78:8A:97:C7:88:6C:02:DA:B9:76:B9:6B:4D:0D:B5:92 Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A Certificate issuer: /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft Manifest number: 011A Signing time: Thu 21 Nov 2024 03:12:02 +0000 Manifest this update: Thu 21 Nov 2024 03:12:01 +0000 Manifest next update: Thu 28 Nov 2024 03:12:01 +0000 Files and hashes: 1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: MlcFmV+Db3A/Gee+criRRWDsFsHHkmEUyyWTMbMUDLw=) 2: 5509870E6B6911EFA634B086C4F9AE02.roa (hash: asEJPU7qXLCzqaXYCgM2ewsC/Ljdl61VbAkeSxk2z2Y=) 3: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: M0DuUC9dZlW1rJ9Ex1QdPrWmmcntHnV78typE7HBTbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Validity Not Before: Nov 21 03:12:01 2024 GMT Not After : Nov 28 03:12:01 2024 GMT Subject: CN=673ea501-77de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c2:c3:f2:91:d3:47:86:c0:3f:c4:f4:1c:e4: ab:c3:d9:bf:5d:00:94:44:1b:0f:ac:d1:64:b0:a0: 9f:28:ce:b7:98:1d:9d:35:9d:cf:c1:e9:46:ab:4f: 4f:9f:06:d3:1b:64:7a:26:96:9c:31:b4:00:37:d5: 25:f9:b2:7f:38:bc:e7:a6:6e:35:1b:5a:62:5b:d6: 00:e8:83:f0:3b:97:a0:28:ac:f8:82:74:5a:01:a3: 67:ba:e0:61:e6:6c:2d:5c:e7:30:d0:43:03:6b:24: f4:ef:4c:cf:ab:5e:f4:1b:66:33:b6:4a:72:31:eb: 55:7a:18:a7:6d:9f:38:35:3f:69:b5:1e:84:0d:f0: c0:e7:a4:7d:f3:7b:d0:06:4d:b5:01:92:8c:86:18: c4:4b:9b:24:0e:1e:0f:b9:b1:c6:95:b1:8b:82:69: 4b:6f:f3:30:9d:3c:94:59:7f:db:5e:b4:df:0d:8d: dc:0b:df:44:5c:aa:66:2a:a7:35:48:0a:e7:fc:87: 8c:28:8e:fd:90:17:33:95:8a:fe:46:bf:80:d9:d2: 47:e1:18:05:bc:1b:a6:83:33:02:fc:1d:1c:a4:1e: 3e:26:cb:5f:93:27:07:10:da:e8:ef:b2:fd:9c:44: 1f:1a:24:ae:48:41:27:99:a3:cb:57:9d:b2:aa:ae: 43:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CB:EA:9C:78:8A:97:C7:88:6C:02:DA:B9:76:B9:6B:4D:0D:B5:92 X509v3 Authority Key Identifier: keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9e:2a:9e:59:86:ac:3f:61:ee:6d:fb:ef:25:3c:33:d8:43: 7d:27:9a:28:8e:23:12:b9:75:4c:7b:c3:01:e9:39:5d:ee:59: 22:43:86:47:5e:eb:48:4d:0a:55:23:4e:ec:f1:8f:50:35:07: ce:54:d4:68:fc:d1:1e:60:dd:d9:a9:ab:18:15:c4:91:c0:e3: 27:03:50:9a:f5:88:a4:77:11:3e:e9:61:79:81:16:16:9f:43: b8:78:93:07:5d:bf:a6:78:3b:a9:4e:d7:97:66:a3:bb:a1:dc: 80:16:d2:90:13:ad:85:30:e3:da:08:b9:5d:bf:7c:96:15:59: 4b:c2:4e:0f:42:2d:2c:65:b2:31:5b:ca:51:89:5c:32:86:97: 69:22:38:8a:56:cb:1c:f1:f1:6e:90:b5:06:82:59:6c:42:39: 67:3a:02:33:39:ed:8f:cd:54:35:45:a9:90:58:7c:e6:ed:0a: a0:94:c5:b1:2b:c5:11:37:50:62:91:c3:e9:26:3e:7d:02:ab: d7:5e:3f:0f:a1:85:b4:4e:25:aa:77:af:16:23:10:b4:b7:11: 36:64:3e:52:1b:68:e6:31:50:35:6b:49:c8:da:05:1c:ea:73: e9:78:14:0b:10:f3:62:fa:00:89:e8:0f:a5:9b:aa:36:ab:59: bf:8e:36:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNkExMTAvBgNVBAUTKEY1NDU5Q0JBMzFGOTMzRjkwNzNCNTE0QzlDQkJFQzM0 RjZFRDJFNEEwHhcNMjQxMTIxMDMxMjAxWhcNMjQxMTI4MDMxMjAxWjAYMRYwFAYD VQQDEw02NzNlYTUwMS03N2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMLD8pHTR4bAP8T0HOSrw9m/XQCURBsPrNFksKCfKM63mB2dNZ3PwelGq09P nwbTG2R6JpacMbQAN9Ul+bJ/OLznpm41G1piW9YA6IPwO5egKKz4gnRaAaNnuuBh 5mwtXOcw0EMDayT070zPq170G2YztkpyMetVehinbZ84NT9ptR6EDfDA56R983vQ Bk21AZKMhhjES5skDh4PubHGlbGLgmlLb/MwnTyUWX/bXrTfDY3cC99EXKpmKqc1 SArn/IeMKI79kBczlYr+Rr+A2dJH4RgFvBumgzMC/B0cpB4+JstfkycHENro77L9 nEQfGiSuSEEnmaPLV52yqq5D6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3L6px4 ipfHiGwC2rl2uWtNDbWSMB8GA1UdIwQYMBaAFPVFnLox+TP5BztRTJy77DT27S5K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU2QS80QzI4MUJCRTEx QTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1fa0hPMUZNbkx2c05QYnRM a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVV2N1akg1TV9rSE8xRk1uTHZzTlBidExrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU2QS80QzI4MUJCRTExQTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1f a0hPMUZNbkx2c05QYnRMa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPniqeWYasP2HubfvvJTwz2EN9J5oojiMSuXVMe8MB6Tld7lkiQ4ZH XutITQpVI07s8Y9QNQfOVNRo/NEeYN3ZqasYFcSRwOMnA1Ca9YikdxE+6WF5gRYW n0O4eJMHXb+meDupTteXZqO7odyAFtKQE62FMOPaCLldv3yWFVlLwk4PQi0sZbIx W8pRiVwyhpdpIjiKVssc8fFukLUGgllsQjlnOgIzOe2PzVQ1RamQWHzm7QqglMWx K8URN1BikcPpJj59AqvXXj8PoYW0TiWqd68WIxC0txE2ZD5SG2jmMVA1a0nI2gUc 6nPpeBQLEPNi+gCJ6A+lm6o2q1m/jjZS -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:04 2024 by rpki-client on console-fra.rpki-client.org