$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft File: CekFd0f2O6Ciga54ATZozt6kCrQ.mft (raw, json) Hash identifier: QdAXUhsg26OtQ8d3WCSZ/yl/4jnCb8yQbuBqbIiYVro= Subject key identifier: 44:62:38:59:BD:16:17:7B:17:A9:54:A3:5F:67:FB:01:BB:C8:12:63 Authority key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 Certificate issuer: /CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft Manifest number: 0113 Signing time: Sat 23 Nov 2024 03:02:56 +0000 Manifest this update: Sat 23 Nov 2024 03:02:55 +0000 Manifest next update: Sat 30 Nov 2024 03:02:55 +0000 Files and hashes: 1: CekFd0f2O6Ciga54ATZozt6kCrQ.crl (hash: vlNCTP6FRfT/A/FKLnEiZbHJBRAW3/bLYqsULmO/3Js=) 2: 2815D106041A11EEA67A6B4DC4F9AE02.roa (hash: BGY/uPAB8s6bOk+iTJOiyTH1PPXIxJM6rQPQkuaz0DI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Validity Not Before: Nov 23 03:02:55 2024 GMT Not After : Nov 30 03:02:55 2024 GMT Subject: CN=674145e0-b866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:55:0c:05:44:33:51:ee:a9:ae:6b:9e:bd:9e: 4a:75:96:0d:3a:6a:91:44:8f:bc:03:59:a0:20:7e: 8c:88:96:57:ac:34:fc:83:58:43:52:4f:05:67:dc: 55:d7:5e:f1:66:49:20:af:e7:ae:dd:7c:40:62:64: 30:13:7e:0e:6b:49:2e:94:72:2c:1a:d3:b5:23:61: df:1b:55:21:cf:4a:ec:3d:3f:b7:a5:00:99:96:af: 32:a3:32:2c:0d:7a:2d:6d:07:c6:c1:4d:c1:f8:82: 00:98:c3:0c:34:88:ad:4a:91:87:ea:f1:a5:33:b8: ad:74:91:59:88:c9:d8:d3:ec:51:bf:1d:61:8d:8b: b5:ae:07:88:6a:91:d8:ae:f1:28:09:c9:dc:e8:fa: c6:3f:4e:0d:c9:5d:06:d2:1b:49:75:2d:1f:b2:be: e1:66:f9:39:7f:fd:c5:5c:f4:e2:dd:f1:ba:dc:03: f4:1f:3c:c0:ba:4c:f8:d4:08:8f:88:fa:c0:66:60: da:87:53:82:b2:cf:95:1f:3b:32:1a:9b:89:c7:dd: 52:4f:86:4c:2c:4b:e4:a5:b2:d9:69:b6:bc:f0:9c: c1:6f:c1:db:31:68:16:e9:64:75:70:51:66:fe:d3: 92:48:f6:2a:21:be:ce:34:0e:85:53:3d:72:84:2c: 1b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:62:38:59:BD:16:17:7B:17:A9:54:A3:5F:67:FB:01:BB:C8:12:63 X509v3 Authority Key Identifier: keyid:09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:0b:c1:32:a3:4c:70:5c:ce:0e:28:9a:16:c6:0b:de:e5:9d: bd:e8:09:84:4a:df:d9:3f:3b:31:d5:b0:57:58:6a:8f:3b:fd: 6d:4b:1e:2b:95:86:2a:33:63:36:94:e9:0e:91:00:fe:c8:da: 5c:db:13:1a:45:f0:05:70:e8:77:84:9c:5e:ba:95:4e:ac:34: e7:54:3c:4f:ed:60:8a:d3:ff:a4:26:c0:a9:4d:73:e0:d1:01: 9c:93:90:5f:69:14:29:48:62:66:27:c4:59:9b:23:8a:6a:8a: 6c:0e:f6:55:22:6a:46:b4:65:9f:0e:ec:f7:14:f1:31:28:81: c6:d9:05:a8:69:a0:81:08:7d:36:c8:b1:60:25:90:0b:1f:e1: 1d:0b:d7:88:f7:94:2e:04:12:06:ed:14:67:17:20:e2:d3:c3: d5:e0:1d:fc:df:78:ab:ac:1a:7a:dc:92:b4:3b:c2:b3:c4:74: d4:a7:b6:29:65:16:d6:92:8a:d1:18:52:1d:e2:d2:10:25:ab: 62:ad:09:ee:84:14:be:4b:83:34:79:d9:fb:8e:62:02:04:27: 4a:6f:80:57:98:fc:dd:5e:81:b5:19:48:b9:d8:43:21:7c:49: ff:88:19:6b:6e:26:d2:76:a7:d3:10:e4:b6:bc:ba:48:56:27: 4d:08:b4:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RBRkIxMTAvBgNVBAUTKDA5RTkwNTc3NDdGNjNCQTBBMjgxQUU3ODAxMzY2OENF REVBNDBBQjQwHhcNMjQxMTIzMDMwMjU1WhcNMjQxMTMwMDMwMjU1WjAYMRYwFAYD VQQDEw02NzQxNDVlMC1iODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9VUMBUQzUe6prmuevZ5KdZYNOmqRRI+8A1mgIH6MiJZXrDT8g1hDUk8FZ9xV 117xZkkgr+eu3XxAYmQwE34Oa0kulHIsGtO1I2HfG1Uhz0rsPT+3pQCZlq8yozIs DXotbQfGwU3B+IIAmMMMNIitSpGH6vGlM7itdJFZiMnY0+xRvx1hjYu1rgeIapHY rvEoCcnc6PrGP04NyV0G0htJdS0fsr7hZvk5f/3FXPTi3fG63AP0HzzAukz41AiP iPrAZmDah1OCss+VHzsyGpuJx91ST4ZMLEvkpbLZaba88JzBb8HbMWgW6WR1cFFm /tOSSPYqIb7ONA6FUz1yhCwbSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERiOFm9 Fhd7F6lUo19n+wG7yBJjMB8GA1UdIwQYMBaAFAnpBXdH9jugooGueAE2aM7epAq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREFGQi9FQzBGNkEzODAz NDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82Q2lnYTU0QVRab3p0NmtD clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nla0ZkMGYyTzZDaWdhNTRBVFpvenQ2a0NyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REFGQi9FQzBGNkEzODAzNDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82 Q2lnYTU0QVRab3p0NmtDclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0C8Eyo0xwXM4OKJoWxgve5Z296AmESt/ZPzsx1bBXWGqPO/1tSx4r lYYqM2M2lOkOkQD+yNpc2xMaRfAFcOh3hJxeupVOrDTnVDxP7WCK0/+kJsCpTXPg 0QGck5BfaRQpSGJmJ8RZmyOKaopsDvZVImpGtGWfDuz3FPExKIHG2QWoaaCBCH02 yLFgJZALH+EdC9eI95QuBBIG7RRnFyDi08PV4B3833irrBp63JK0O8KzxHTUp7Yp ZRbWkorRGFId4tIQJatirQnuhBS+S4M0edn7jmICBCdKb4BXmPzdXoG1GUi52EMh fEn/iBlrbibSdqfTEOS2vLpIVidNCLR7 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:52 2024 by rpki-client on console-ams.rpki-client.org