$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft File: acCJt6SOfabuTwH-xqmOCtL6gQs.mft (raw, json) Hash identifier: Zs/XVXgnFOR7uNTMX9HBz8CP/GHu0Bg/HP9+8eVhEfI= Subject key identifier: 6C:9E:8A:9C:6F:16:D2:7D:44:D4:EE:5B:66:19:CC:24:F4:41:51:15 Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B Certificate issuer: /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft Manifest number: 0192 Signing time: Thu 21 Nov 2024 01:57:19 +0000 Manifest this update: Thu 21 Nov 2024 01:57:18 +0000 Manifest next update: Thu 28 Nov 2024 01:57:18 +0000 Files and hashes: 1: acCJt6SOfabuTwH-xqmOCtL6gQs.crl (hash: amd/D99i2ud9Vkq/65E+bY2hMsHwL1vKJbtcN1gbYJY=) 2: 350CDCB44ED611ED84336740C4F9AE02.roa (hash: Egpt85Bsf5kWSWtNXpqMNLatnMSOJIPanv27yDq/XqU=) 3: 4214E284606911EFBDF1A71AC4F9AE02.roa (hash: ADxX0D+lzszOhRPseNyCwu5NvY04yEDNXyF78vVWZ4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Validity Not Before: Nov 21 01:57:18 2024 GMT Not After : Nov 28 01:57:18 2024 GMT Subject: CN=673e937f-9ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2a:d6:ee:83:53:6e:bf:b9:df:53:34:b2:f2: 79:9a:e9:fc:96:90:69:20:f9:79:f8:40:7e:f8:b0: 17:25:dd:32:54:55:ba:99:5c:57:ac:1d:54:d8:48: d9:73:16:f1:7f:d7:e0:dd:c2:8e:35:96:33:f2:5a: c7:3c:ff:38:1f:8f:88:72:1d:ba:5e:4d:94:54:52: 52:9b:0f:3a:22:cc:3d:a0:16:ee:e2:c8:5b:89:33: d8:61:a5:98:5c:f4:73:d3:40:36:50:dc:91:ec:43: 52:b2:78:06:fb:00:d1:38:8b:89:73:8e:a5:3a:f2: 2b:99:5b:4f:58:dd:b0:30:86:65:e9:5d:33:9b:15: fd:4a:45:89:8b:79:eb:36:a3:9f:fc:f1:05:57:a9: 9c:0a:c9:f4:78:50:29:4a:de:75:24:a8:e0:d1:dd: 22:76:40:00:a8:ff:3f:e9:81:da:50:26:a5:f0:05: f7:77:7d:26:9d:c3:25:03:8c:33:44:f4:83:dc:57: ac:5c:c9:69:9e:94:a2:c3:5c:49:e2:97:b8:90:37: 94:13:5c:13:5a:60:e9:55:1d:9e:f0:51:71:39:68: 2a:7a:7a:b6:ce:a4:6a:3d:a3:1d:ad:ff:ba:23:9a: 7d:7e:27:39:8a:0d:f8:f1:13:2b:f0:82:ca:14:ae: be:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9E:8A:9C:6F:16:D2:7D:44:D4:EE:5B:66:19:CC:24:F4:41:51:15 X509v3 Authority Key Identifier: keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:eb:ce:41:70:90:b5:e1:18:4d:95:ad:18:76:39:44:83:2e: d6:ce:cb:01:bd:80:f2:ca:9c:2e:f5:e0:b3:1c:23:5d:3e:6e: f4:99:87:38:d8:34:01:5c:02:80:15:01:5f:32:3f:a1:de:b1: 61:20:c9:77:b9:44:c9:18:5e:48:e9:c9:f8:f7:ac:fc:76:3a: 53:e4:c8:8f:09:50:7d:ed:84:1f:0e:6f:18:af:f1:4c:a2:82: 4f:50:d5:2c:37:63:cc:b6:f0:c8:e7:2b:3e:55:f4:5e:88:39: 3f:fc:37:d4:bb:5a:da:58:73:12:61:58:5b:43:ac:f9:75:95: 60:0d:37:b9:5c:24:2e:f3:6b:a0:26:2d:aa:42:72:c6:32:1e: 5a:93:6b:ef:dd:b5:98:9f:b5:c7:86:a5:58:ba:54:18:ae:8b: 36:98:fd:2a:64:6a:c5:c3:95:0b:dd:c4:e1:a7:f5:86:e0:8b: 4f:53:a2:8e:c9:c5:99:d0:4a:88:d8:44:e6:30:6b:76:42:1b: d8:ce:05:ad:76:2a:20:86:58:4a:a3:ee:5b:4a:ff:b2:6f:2b: 99:81:d2:a8:4f:a2:46:62:a6:eb:67:2d:52:f1:f7:5b:04:ca: 3c:36:5e:f4:12:55:4d:47:1d:02:11:8d:0b:be:ff:30:1b:d0: 6e:25:aa:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyRjQxMTAvBgNVBAUTKDY5QzA4OUI3QTQ4RTdEQTZFRTRGMDFGRUM2QTk4RTBB RDJGQTgxMEIwHhcNMjQxMTIxMDE1NzE4WhcNMjQxMTI4MDE1NzE4WjAYMRYwFAYD VQQDEw02NzNlOTM3Zi05Y2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCrW7oNTbr+531M0svJ5mun8lpBpIPl5+EB++LAXJd0yVFW6mVxXrB1U2EjZ cxbxf9fg3cKONZYz8lrHPP84H4+Ich26Xk2UVFJSmw86Isw9oBbu4shbiTPYYaWY XPRz00A2UNyR7ENSsngG+wDROIuJc46lOvIrmVtPWN2wMIZl6V0zmxX9SkWJi3nr NqOf/PEFV6mcCsn0eFApSt51JKjg0d0idkAAqP8/6YHaUCal8AX3d30mncMlA4wz RPSD3FesXMlpnpSiw1xJ4pe4kDeUE1wTWmDpVR2e8FFxOWgqenq2zqRqPaMdrf+6 I5p9fic5ig348RMr8ILKFK6+lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyeipxv FtJ9RNTuW2YZzCT0QVEVMB8GA1UdIwQYMBaAFGnAibekjn2m7k8B/sapjgrS+oEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzJGNC9CNENBNzc5NjRE RTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2ZhYnVUd0gteHFtT0N0TDZn UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjQ0p0NlNPZmFidVR3SC14cW1PQ3RMNmdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzJGNC9CNENBNzc5NjRERTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2Zh YnVUd0gteHFtT0N0TDZnUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz685BcJC14RhNla0YdjlEgy7WzssBvYDyypwu9eCzHCNdPm70mYc4 2DQBXAKAFQFfMj+h3rFhIMl3uUTJGF5I6cn496z8djpT5MiPCVB97YQfDm8Yr/FM ooJPUNUsN2PMtvDI5ys+VfReiDk//DfUu1raWHMSYVhbQ6z5dZVgDTe5XCQu82ug Ji2qQnLGMh5ak2vv3bWYn7XHhqVYulQYros2mP0qZGrFw5UL3cThp/WG4ItPU6KO ycWZ0EqI2ETmMGt2QhvYzgWtdioghlhKo+5bSv+ybyuZgdKoT6JGYqbrZy1S8fdb BMo8Nl70ElVNRx0CEY0Lvv8wG9BuJars -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:05 2024 by rpki-client on console-fra.rpki-client.org