$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json) Hash identifier: 8W3QV4/TLgg28//KefUmi+wOJmAnyIZlcyafuw6XX7g= Subject key identifier: DD:DE:89:91:AA:C5:A1:E2:80:16:6C:1F:EE:41:DF:52:FF:FB:E1:23 Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft Manifest number: 0914 Signing time: Fri 22 Nov 2024 20:22:37 +0000 Manifest this update: Fri 22 Nov 2024 20:22:37 +0000 Manifest next update: Fri 29 Nov 2024 20:22:37 +0000 Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: vwrEkM1ivkr2OcDa0lwZkzfS20J6CpGsjP9ZejQWAdE=) 2: F1F41742F91711EEB4D4960FC4F9AE02.roa (hash: mvRnKDmDedNBvqDLXoynNj96PT2TR1yHm2QmcBcjWmY=) 3: 2EC10CF4071C11EFAD19C863C4F9AE02.roa (hash: Y+jK0YiITj1fWstmg7VEHVKcSXHK5MXXLGNw5LXxFzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Validity Not Before: Nov 22 20:22:37 2024 GMT Not After : Nov 29 20:22:37 2024 GMT Subject: CN=6740e80d-36e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:40:01:10:80:bd:33:30:9e:b5:b7:06:f7:29: cb:78:11:e9:e1:a0:45:ec:a0:c0:81:84:b7:29:04: c6:a1:de:18:78:6b:3b:5a:48:ab:7a:cd:5f:bc:5e: 50:fd:0b:8a:7d:1c:ef:d0:d7:da:4b:a4:f8:10:22: 83:81:c7:e4:c7:a3:8c:6e:87:02:9d:90:ef:92:d8: cb:19:96:98:b6:72:a5:12:44:57:56:97:5f:28:85: a8:f9:3b:dd:96:d8:a3:f9:08:2b:27:ac:10:93:38: 67:1d:ca:df:8c:70:94:5f:9e:4e:b3:b7:a7:8a:d3: ac:97:14:78:d6:cb:2e:bd:c6:ab:6a:67:f5:1f:50: c1:8d:46:1a:0b:bf:d5:61:62:f2:1f:d4:f2:4e:ce: a5:69:ac:cf:42:40:c1:18:0b:01:06:d0:e1:28:09: ff:93:e3:5f:13:8e:c4:c5:19:b8:e0:d3:f2:44:b1: 29:42:c3:2e:7f:04:0e:f3:bd:30:6e:6a:25:a8:fd: 30:d5:ad:ff:0e:4d:b9:1b:a6:6f:2c:2c:f1:e4:26: 03:ae:10:72:35:d7:94:e7:13:9d:f7:42:a5:07:26: 9a:ce:8d:af:92:ce:f8:e9:7c:ae:09:a0:17:e1:47: 88:66:06:c7:a8:9f:a2:b8:25:22:82:41:d4:01:73: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DE:89:91:AA:C5:A1:E2:80:16:6C:1F:EE:41:DF:52:FF:FB:E1:23 X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:bc:e3:7d:62:65:d2:cc:02:08:bd:c1:58:9f:2c:9a:e9:81: 8e:7c:36:d4:b5:f8:e8:8c:89:8a:75:fe:64:da:45:d2:ca:47: c2:05:d7:7e:11:fd:c3:12:b1:38:7a:d6:06:c4:f6:b0:f2:30: fa:7a:38:78:5b:36:eb:94:fa:3f:83:e7:8c:45:7e:87:5e:6b: 2b:d2:40:69:50:7d:0c:7a:fa:3b:31:bc:bb:c9:3a:f3:de:21: e8:ec:e2:87:72:2f:ec:e8:e1:06:40:23:12:cb:be:b1:c7:4b: 0e:ac:ff:b1:73:fc:cd:42:42:ee:30:24:09:ae:d5:06:d4:97: a9:be:3c:5f:e4:13:8d:a6:1a:81:f7:cc:b1:90:1f:a4:f4:f6: 31:3e:e1:62:3f:73:f7:8f:c4:e4:26:a4:42:35:34:aa:5a:0f: fb:f3:1f:69:0a:6a:5e:63:99:cc:e1:fe:98:6a:33:1a:be:f8: ac:73:5d:f4:82:8e:ea:da:8d:97:3e:d9:3b:98:62:48:01:96: 2d:ba:1f:35:7c:a2:4d:07:c1:64:0d:eb:fd:2a:75:ec:29:f8: 7a:81:3e:93:0d:dc:05:f4:8a:c3:9f:21:e0:cd:af:34:0c:87: cb:20:ed:20:7c:56:42:af:a5:31:d3:55:2f:94:a0:13:7c:29: 5f:f2:bc:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlBQ0I4MDY2NjNGQjBGQ0Y2RUJDNDNDMDEwQjkzNUUw NTIxNEZDOUYwHhcNMjQxMTIyMjAyMjM3WhcNMjQxMTI5MjAyMjM3WjAYMRYwFAYD VQQDEw02NzQwZTgwZC0zNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EABEIC9MzCetbcG9ynLeBHp4aBF7KDAgYS3KQTGod4YeGs7Wkires1fvF5Q /QuKfRzv0NfaS6T4ECKDgcfkx6OMbocCnZDvktjLGZaYtnKlEkRXVpdfKIWo+Tvd ltij+QgrJ6wQkzhnHcrfjHCUX55Os7enitOslxR41ssuvcaramf1H1DBjUYaC7/V YWLyH9TyTs6laazPQkDBGAsBBtDhKAn/k+NfE47ExRm44NPyRLEpQsMufwQO870w bmolqP0w1a3/Dk25G6ZvLCzx5CYDrhByNdeU5xOd90KlByaazo2vks746XyuCaAX 4UeIZgbHqJ+iuCUigkHUAXPOewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3eiZGq xaHigBZsH+5B31L/++EjMB8GA1UdIwQYMBaAFJrLgGZj+w/PbrxDwBC5NeBSFPyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4OXV2RVBBRUxrMTRGSVVf SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4 OXV2RVBBRUxrMTRGSVVfSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSvON9YmXSzAIIvcFYnyya6YGOfDbUtfjojImKdf5k2kXSykfCBdd+ Ef3DErE4etYGxPaw8jD6ejh4WzbrlPo/g+eMRX6HXmsr0kBpUH0Mevo7Mby7yTrz 3iHo7OKHci/s6OEGQCMSy76xx0sOrP+xc/zNQkLuMCQJrtUG1Jepvjxf5BONphqB 98yxkB+k9PYxPuFiP3P3j8TkJqRCNTSqWg/78x9pCmpeY5nM4f6YajMavvisc130 go7q2o2XPtk7mGJIAZYtuh81fKJNB8FkDev9KnXsKfh6gT6TDdwF9IrDnyHgza80 DIfLIO0gfFZCr6Ux01UvlKATfClf8ryI -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org