$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft File: 9Jo51DCJcORwLfKfHU3PUh8KUTU.mft (raw, json) Hash identifier: Gl9Dhi0wLstcF1VZcNZxrOK8RNOUn/U31Y6yvcKGiIA= Subject key identifier: 38:3A:C1:C8:89:3A:9C:1B:8D:AD:08:EE:EF:C2:38:9F:AC:7F:8C:40 Authority key identifier: F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 Certificate issuer: /CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Certificate serial: 02C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft Manifest number: 02C2 Signing time: Sat 23 Nov 2024 00:58:55 +0000 Manifest this update: Sat 23 Nov 2024 00:58:55 +0000 Manifest next update: Sat 30 Nov 2024 00:58:55 +0000 Files and hashes: 1: 9Jo51DCJcORwLfKfHU3PUh8KUTU.crl (hash: ALL3nSqyXpsYjyanorBBzkGgikDTxfXWOpAhGe0dvu0=) 2: E27CA57ECA9111EC9F9A7513C4F9AE02.roa (hash: CvNhNif2kexa5t8nfd9T8e8mIo+X5t5p7RUz7Ta3UhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2258/serialNumber=F49A39D4308970E4702DF29F1D4DCF521F0A5135 Validity Not Before: Nov 23 00:58:55 2024 GMT Not After : Nov 30 00:58:55 2024 GMT Subject: CN=674128cf-d4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:d9:b6:8c:38:eb:88:c0:3d:c5:18:c5:aa: 5d:7e:15:55:f1:7e:62:fe:63:92:01:58:25:7b:9f: 41:7f:ec:01:4b:25:a1:58:92:ed:6d:62:5b:a3:77: 88:53:b9:46:54:29:6d:d1:54:6e:83:f6:1b:59:b1: 33:59:28:6a:d0:2b:34:36:89:42:f4:90:46:66:8f: b9:23:e1:21:25:89:81:0d:5d:4f:56:ea:44:b6:f6: c4:49:3f:35:54:e8:b6:7f:9f:7e:dc:bc:cc:51:6d: bb:b9:98:5c:37:10:8c:ec:c8:e5:a5:e0:6c:5e:9a: 32:0d:28:76:db:30:36:4d:8d:95:66:67:4e:b6:dd: 4c:a5:db:e7:4d:07:02:08:4c:15:13:85:b1:25:8d: 58:02:6c:b2:5f:b4:04:d1:e0:70:15:ba:53:c6:4c: 68:97:50:a7:f7:e1:c9:f5:88:b1:46:ea:a5:74:8e: f5:6d:ce:79:e2:25:a7:7f:ca:f3:0b:8d:70:04:0f: 85:89:d7:65:88:bd:fb:08:90:24:ec:d0:40:e6:8d: e2:66:95:18:86:78:f0:86:03:e8:08:d9:05:5b:29: 05:11:b6:b7:11:d8:8c:e5:29:08:e4:a8:b0:e5:80: 63:e0:4a:fb:72:a5:5d:d4:c5:53:02:56:5a:53:19: ec:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3A:C1:C8:89:3A:9C:1B:8D:AD:08:EE:EF:C2:38:9F:AC:7F:8C:40 X509v3 Authority Key Identifier: keyid:F4:9A:39:D4:30:89:70:E4:70:2D:F2:9F:1D:4D:CF:52:1F:0A:51:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Jo51DCJcORwLfKfHU3PUh8KUTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2258/638C3844CA8F11EC933AB211C4F9AE02/9Jo51DCJcORwLfKfHU3PUh8KUTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:a6:40:c2:41:70:d0:ae:c1:09:32:d0:2a:ef:62:be:78:71: 4d:29:55:8a:81:9b:2c:a9:dc:6f:af:d6:8d:c8:ba:a1:5d:92: ba:b5:e4:a5:71:1a:2d:64:7e:43:c7:ff:4b:bf:64:f2:f9:0d: f3:f4:ed:f8:69:cf:a6:81:9b:b4:32:1c:43:02:31:a7:ff:33: 7a:08:29:ae:dd:05:aa:92:e3:9b:2c:7c:d1:5a:ab:01:68:0f: ee:f4:77:25:3c:2f:d7:34:79:1d:1c:e3:83:18:7e:fd:5d:8c: 5c:55:d0:44:fd:d6:5f:6e:be:45:8d:bd:62:e3:10:53:57:cc: 00:bf:ef:cd:fc:42:e6:7c:77:57:f0:4e:d7:ef:5e:31:42:41: b3:de:57:60:b9:16:2a:ae:f6:ed:a8:a3:c8:1e:08:13:1e:0c: df:7f:45:a3:45:5d:f5:8d:4d:e8:59:dc:17:6d:56:1f:8f:a2: 59:05:61:be:ee:0d:dd:5e:7e:15:06:e0:00:2a:4f:76:18:84: 35:3e:33:65:77:85:69:a1:2d:a5:dd:ca:62:6e:8b:5f:ab:64: 8c:6f:a1:4d:88:ae:e6:7d:be:d9:b2:f1:4f:7b:ee:47:2a:ee: 5a:c8:4b:a1:ed:33:41:41:5d:d9:e6:e0:75:c0:4c:2b:10:74: 6a:17:ae:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIyNTgxMTAvBgNVBAUTKEY0OUEzOUQ0MzA4OTcwRTQ3MDJERjI5RjFENERDRjUy MUYwQTUxMzUwHhcNMjQxMTIzMDA1ODU1WhcNMjQxMTMwMDA1ODU1WjAYMRYwFAYD VQQDEw02NzQxMjhjZi1kNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDTZtow464jAPcUYxapdfhVV8X5i/mOSAVgle59Bf+wBSyWhWJLtbWJbo3eI U7lGVClt0VRug/YbWbEzWShq0Cs0NolC9JBGZo+5I+EhJYmBDV1PVupEtvbEST81 VOi2f59+3LzMUW27uZhcNxCM7MjlpeBsXpoyDSh22zA2TY2VZmdOtt1MpdvnTQcC CEwVE4WxJY1YAmyyX7QE0eBwFbpTxkxol1Cn9+HJ9YixRuqldI71bc554iWnf8rz C41wBA+FiddliL37CJAk7NBA5o3iZpUYhnjwhgPoCNkFWykFEba3EdiM5SkI5Kiw 5YBj4Er7cqVd1MVTAlZaUxnsBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDg6wciJ Opwbja0I7u/COJ+sf4xAMB8GA1UdIwQYMBaAFPSaOdQwiXDkcC3ynx1Nz1IfClE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjI1OC82MzhDMzg0NENB OEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNPUndMZktmSFUzUFVoOEtV VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKbzUxRENKY09Sd0xmS2ZIVTNQVWg4S1VUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjI1OC82MzhDMzg0NENBOEYxMUVDOTMzQUIyMTFDNEY5QUUwMi85Sm81MURDSmNP UndMZktmSFUzUFVoOEtVVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9pkDCQXDQrsEJMtAq72K+eHFNKVWKgZssqdxvr9aNyLqhXZK6teSl cRotZH5Dx/9Lv2Ty+Q3z9O34ac+mgZu0MhxDAjGn/zN6CCmu3QWqkuObLHzRWqsB aA/u9HclPC/XNHkdHOODGH79XYxcVdBE/dZfbr5Fjb1i4xBTV8wAv+/N/ELmfHdX 8E7X714xQkGz3ldguRYqrvbtqKPIHggTHgzff0WjRV31jU3oWdwXbVYfj6JZBWG+ 7g3dXn4VBuAAKk92GIQ1PjNld4VpoS2l3cpibotfq2SMb6FNiK7mfb7ZsvFPe+5H Ku5ayEuh7TNBQV3Z5uB1wEwrEHRqF644 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:52 2024 by rpki-client on console-ams.rpki-client.org