$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json) Hash identifier: KC6SOkOfF2jU6y7XKd5I/KKvp0IT3ISqUQmCfD7ralk= Subject key identifier: 5B:6F:60:45:82:6B:A6:03:DB:8D:20:9B:90:88:A0:9B:78:90:44:DD Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft Manifest number: 0156 Signing time: Sat 23 Nov 2024 02:28:58 +0000 Manifest this update: Sat 23 Nov 2024 02:28:57 +0000 Manifest next update: Sat 30 Nov 2024 02:28:57 +0000 Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: TmbooX0gdkEh6di8eAkWJ0lHswmTWOoNjAn6SvRk8Jo=) 2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: xyz/02ryzl16W4qrT07+J5xASQFDNUQalvA+EHdQsOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Nov 23 02:28:57 2024 GMT Not After : Nov 30 02:28:57 2024 GMT Subject: CN=67413dea-1421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:84:ec:5d:fa:d1:6d:ea:2c:0b:33:c6:7f: 4f:34:84:ad:c8:0b:39:ec:e7:7b:01:8e:b6:1c:4c: 18:c4:93:3c:cc:ce:6c:50:f3:51:48:35:71:07:bb: f5:fb:51:20:fb:53:4d:41:1c:a3:fb:7f:8b:33:2c: c2:98:8e:41:98:8f:19:7d:c9:dc:dc:f9:ce:f1:8d: 47:7c:a7:d8:56:02:7e:ab:fb:e2:89:05:f8:bb:bf: 41:de:1a:14:63:e5:4d:3e:e3:a5:d8:fd:51:1a:23: 5c:45:2f:31:95:ab:be:9b:be:92:e8:8c:f3:59:b0: b8:3d:b0:b4:16:04:9e:2b:06:8d:d6:88:d3:f3:e6: 8b:30:e8:3e:7c:f6:db:8f:08:4f:c6:24:90:11:fa: d1:8a:a3:4c:1b:c2:75:0a:ac:5b:15:4b:e4:96:9f: 59:2e:d2:8a:03:5b:b4:9c:70:2a:d8:03:57:01:1d: 11:3c:48:ca:86:cd:ad:6a:dd:71:d1:b5:dc:f8:d3: f4:b8:70:2d:91:df:bd:b5:eb:d5:c7:c4:0b:a8:b9: e3:7d:c3:62:db:77:ec:8e:47:87:db:8b:26:47:ef: db:be:92:9e:f5:60:9a:8d:9e:eb:3b:d1:5f:4d:23: 63:3d:4a:ad:5b:15:f0:bf:b6:62:9d:a6:3e:c1:f0: e8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6F:60:45:82:6B:A6:03:DB:8D:20:9B:90:88:A0:9B:78:90:44:DD X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:21:03:fb:9e:68:c3:79:57:31:85:dd:55:5e:5b:c2:05:0c: b5:06:c0:3b:17:b1:fc:03:de:cc:7b:0b:1f:dc:66:d5:84:7b: 06:a5:4a:90:1c:ce:21:ee:6e:8f:74:b2:2b:2d:f9:a9:7a:ca: b4:57:ea:fe:2d:20:01:93:70:51:90:3c:e5:43:8f:8a:8b:9a: cb:b0:d6:e3:4f:16:f5:fa:a1:d4:3a:35:ee:de:45:ad:91:72: 33:2e:4b:25:d2:22:92:23:00:f6:95:8a:f8:a1:29:cd:81:70: 41:ec:b0:6e:36:7f:62:d5:a3:48:5b:7f:12:27:11:2c:11:b0: b1:cb:1c:79:77:b1:3d:2d:a3:d8:df:c9:b7:d1:23:b5:5a:41: 2b:6e:19:49:e4:5f:2c:c7:3f:21:1b:4f:be:2b:01:20:5b:38: 71:e4:a7:3d:d5:89:3c:6f:4e:3a:1b:cf:69:1f:80:49:25:99: 96:0d:7c:4e:80:37:17:a0:0a:49:89:22:e0:af:5b:7a:1d:f6: f2:f5:d6:b3:1e:38:ea:4b:9f:e6:ac:f7:48:f5:ab:85:a0:dd: 08:03:29:a8:91:74:17:66:16:9d:d2:ee:60:c2:71:02:9f:82: c2:ef:4c:06:8e:50:cb:f1:29:a0:9a:5e:a9:96:39:d7:95:68: 7c:44:a8:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjQxMTIzMDIyODU3WhcNMjQxMTMwMDIyODU3WjAYMRYwFAYD VQQDEw02NzQxM2RlYS0xNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvOE7F360W3qLAszxn9PNIStyAs57Od7AY62HEwYxJM8zM5sUPNRSDVxB7v1 +1Eg+1NNQRyj+3+LMyzCmI5BmI8Zfcnc3PnO8Y1HfKfYVgJ+q/viiQX4u79B3hoU Y+VNPuOl2P1RGiNcRS8xlau+m76S6IzzWbC4PbC0FgSeKwaN1ojT8+aLMOg+fPbb jwhPxiSQEfrRiqNMG8J1CqxbFUvklp9ZLtKKA1u0nHAq2ANXAR0RPEjKhs2tat1x 0bXc+NP0uHAtkd+9tevVx8QLqLnjfcNi23fsjkeH24smR+/bvpKe9WCajZ7rO9Ff TSNjPUqtWxXwv7ZinaY+wfDo8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtvYEWC a6YD240gm5CIoJt4kETdMB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIxQi8yQUQxMzk4NkE2NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9a X1RRckVreXZqZWplUl9jdzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/IQP7nmjDeVcxhd1VXlvCBQy1BsA7F7H8A97Mewsf3GbVhHsGpUqQ HM4h7m6PdLIrLfmpesq0V+r+LSABk3BRkDzlQ4+Ki5rLsNbjTxb1+qHUOjXu3kWt kXIzLksl0iKSIwD2lYr4oSnNgXBB7LBuNn9i1aNIW38SJxEsEbCxyxx5d7E9LaPY 38m30SO1WkErbhlJ5F8sxz8hG0++KwEgWzhx5Kc91Yk8b046G89pH4BJJZmWDXxO gDcXoApJiSLgr1t6Hfby9dazHjjqS5/mrPdI9auFoN0IAymokXQXZhad0u5gwnEC n4LC70wGjlDL8Smgml6pljnXlWh8RKgG -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:57 2024 by rpki-client on console-fra.rpki-client.org