$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft File: ho7LZCXagzKIkuV7sN9kThrrc7M.mft (raw, json) Hash identifier: M8+9FNLc41ABRZNr9tE2fc7zeJ5ihVFUwivGgkTgb0I= Subject key identifier: 1B:A2:C1:DF:EC:6E:3E:CB:5A:90:35:98:11:C0:8B:9C:1E:64:55:1B Authority key identifier: 86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 Certificate issuer: /CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft Manifest number: 027A Signing time: Mon 25 Nov 2024 01:05:36 +0000 Manifest this update: Mon 25 Nov 2024 01:05:35 +0000 Manifest next update: Mon 02 Dec 2024 01:05:35 +0000 Files and hashes: 1: ho7LZCXagzKIkuV7sN9kThrrc7M.crl (hash: naR7xx45QXIarKkDkgr0xi4W4QPB5xCsOBAmbDM/84Y=) 2: 5C7085CA929811ED9C3F4163C4F9AE02.roa (hash: jre2vqEbptB4xJwOL59Axq+r7br5KETLkmyJEM9TLFk=) 3: 2E73B40089CA11EF9D45F344C4F9AE02.roa (hash: AC9qL1JmCHG5dg0vjJNKY7KJG1pWhEheRkBl8uBeh7M=) 4: D40753E8F6C411EEAFF62079C4F9AE02.roa (hash: 7rGtfoGtmNjkgpBebj5AN23TDyFs8EyElxm7Ay6opxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9945/serialNumber=868ECB6425DA83328892E57BB0DF644E1AEB73B3 Validity Not Before: Nov 25 01:05:35 2024 GMT Not After : Dec 2 01:05:35 2024 GMT Subject: CN=6743cd60-56b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:e3:96:3a:40:22:16:98:ea:6f:76:46:d9: 0f:9f:89:88:3b:64:bd:e0:ab:e4:99:23:80:68:e0: 1e:5e:6e:74:48:1d:0e:0e:aa:d5:ec:55:84:64:ac: cf:71:46:26:82:61:a9:50:d5:4f:75:7b:bc:39:43: 28:5d:8f:1e:83:75:82:ba:17:df:7b:fe:42:90:2b: 13:5a:dd:24:95:78:ad:9f:99:f6:ad:2b:b8:a0:dd: 25:30:80:c4:87:53:cf:2a:99:5c:2e:28:bd:fb:dc: 97:95:c3:ba:6d:84:44:51:93:14:bd:b8:72:20:0d: 1f:ff:14:0e:5d:88:9b:4c:c3:77:51:5c:4f:68:7d: 4e:ae:39:c5:af:1e:2e:28:91:73:a8:e2:4e:c7:c5: 23:6c:ad:c7:6d:33:70:9a:c1:bd:b3:66:6c:29:3a: 58:ac:f7:91:f6:5d:ba:56:24:0d:05:1f:a9:7b:31: 4e:94:51:51:f9:b1:34:18:8b:bf:cc:0a:73:d4:ad: 23:7d:d1:fc:0b:be:0d:26:47:bf:7c:6a:c8:8c:99: fc:cc:ec:8e:79:b6:0e:f3:28:b2:08:ee:98:c0:f6: 05:27:67:ce:fd:c9:d4:39:f4:94:4e:0b:01:20:0a: be:b5:82:ba:63:43:30:62:d8:8c:1f:f2:f2:56:be: 55:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A2:C1:DF:EC:6E:3E:CB:5A:90:35:98:11:C0:8B:9C:1E:64:55:1B X509v3 Authority Key Identifier: keyid:86:8E:CB:64:25:DA:83:32:88:92:E5:7B:B0:DF:64:4E:1A:EB:73:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ho7LZCXagzKIkuV7sN9kThrrc7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9945/BC00C8F2F09E11ECAEE73E19C4F9AE02/ho7LZCXagzKIkuV7sN9kThrrc7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:bc:10:4e:ac:68:7f:57:75:49:f3:0c:25:f4:2c:25:29:c7: 30:dd:1c:fb:a9:0b:e4:08:0d:08:2f:05:44:4e:1e:6a:60:70: 2e:df:86:71:71:b2:ac:1a:0c:71:f7:ef:6c:45:a9:b3:9f:cd: 29:ae:e3:4d:ea:5f:7e:94:cb:32:ef:38:0a:f4:25:28:40:fe: a9:65:1b:fc:15:ec:23:4c:48:5d:d2:71:ac:6f:3a:e7:a8:e5: 45:86:f1:2e:da:54:1e:3c:24:2e:1a:e8:e2:cd:fa:bb:ef:ba: e2:76:b7:0f:f7:a9:f4:f5:fe:60:8f:3b:61:e7:eb:cc:7d:3f: e1:06:f9:df:99:0f:34:0e:de:31:3a:97:f8:e7:9d:97:56:dc: 75:01:94:48:f0:7a:39:24:b3:2c:a6:6f:b9:3c:a3:31:a0:f9: c3:c9:b8:cc:35:7d:06:a1:9c:32:19:2e:92:94:e4:f4:87:13: 00:85:88:11:de:4e:ee:e4:0f:d9:c2:5e:59:7f:64:54:3a:be: a8:6d:4b:9e:c5:ab:a0:77:a1:11:a6:3a:7e:f5:41:12:97:f5: 5b:4b:7a:4f:82:ae:24:ef:78:90:c3:ca:d5:5e:71:15:86:ee: bb:20:92:05:e9:c8:ef:61:d7:d4:b4:a6:bf:0e:7e:27:67:50: 7f:c1:a9:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5NDUxMTAvBgNVBAUTKDg2OEVDQjY0MjVEQTgzMzI4ODkyRTU3QkIwREY2NDRF MUFFQjczQjMwHhcNMjQxMTI1MDEwNTM1WhcNMjQxMjAyMDEwNTM1WjAYMRYwFAYD VQQDEw02NzQzY2Q2MC01NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsnjljpAIhaY6m92RtkPn4mIO2S94KvkmSOAaOAeXm50SB0ODqrV7FWEZKzP cUYmgmGpUNVPdXu8OUMoXY8eg3WCuhffe/5CkCsTWt0klXitn5n2rSu4oN0lMIDE h1PPKplcLii9+9yXlcO6bYREUZMUvbhyIA0f/xQOXYibTMN3UVxPaH1OrjnFrx4u KJFzqOJOx8UjbK3HbTNwmsG9s2ZsKTpYrPeR9l26ViQNBR+pezFOlFFR+bE0GIu/ zApz1K0jfdH8C74NJke/fGrIjJn8zOyOebYO8yiyCO6YwPYFJ2fO/cnUOfSUTgsB IAq+tYK6Y0MwYtiMH/LyVr5V8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuiwd/s bj7LWpA1mBHAi5weZFUbMB8GA1UdIwQYMBaAFIaOy2Ql2oMyiJLle7DfZE4a63Oz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTk0NS9CQzAwQzhGMkYw OUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6S0lrdVY3c045a1RocnJj N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvN0xaQ1hhZ3pLSWt1VjdzTjlrVGhycmM3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTk0NS9CQzAwQzhGMkYwOUUxMUVDQUVFNzNFMTlDNEY5QUUwMi9obzdMWkNYYWd6 S0lrdVY3c045a1RocnJjN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWvBBOrGh/V3VJ8wwl9CwlKccw3Rz7qQvkCA0ILwVETh5qYHAu34Zx cbKsGgxx9+9sRamzn80pruNN6l9+lMsy7zgK9CUoQP6pZRv8FewjTEhd0nGsbzrn qOVFhvEu2lQePCQuGujizfq777ridrcP96n09f5gjzth5+vMfT/hBvnfmQ80Dt4x Opf4552XVtx1AZRI8Ho5JLMspm+5PKMxoPnDybjMNX0GoZwyGS6SlOT0hxMAhYgR 3k7u5A/Zwl5Zf2RUOr6obUuexaugd6ERpjp+9UESl/VbS3pPgq4k73iQw8rVXnEV hu67IJIF6cjvYdfUtKa/Dn4nZ1B/walt -----END CERTIFICATE-----Generated at Mon Nov 25 02:49:05 2024 by rpki-client on console-ams.rpki-client.org