$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft File: 1M9fCWc28k6iQQeSpgPNut2Cfc0.mft (raw, json) Hash identifier: fzgZY0rtw4zv+a9lGmu7mHq/UEk64dTq/il2eXSI1xg= Subject key identifier: EB:A2:A3:B6:E4:D7:48:CC:75:49:DD:4E:45:0A:90:8D:B5:40:EF:00 Authority key identifier: D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD Certificate issuer: /CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Certificate serial: 0BE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft Manifest number: 0BDB Signing time: Fri 22 Nov 2024 18:30:37 +0000 Manifest this update: Fri 22 Nov 2024 18:30:36 +0000 Manifest next update: Fri 29 Nov 2024 18:30:36 +0000 Files and hashes: 1: 1M9fCWc28k6iQQeSpgPNut2Cfc0.crl (hash: GNLO7I7VdmgT97TCv1j+PpKZFAxLvZjsDo6EC0pPIWY=) 2: 97BB54A2070E11EA80718B7BC4F9AE02.roa (hash: d2AEQk5w3NurRVGhpZSG1nxkoC612NCAz7ZDhZGIagU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3043 (0xbe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D50FB/serialNumber=D4CF5F096736F24EA2410792A603CDBADD827DCD Validity Not Before: Nov 22 18:30:36 2024 GMT Not After : Nov 29 18:30:36 2024 GMT Subject: CN=6740cdcc-5786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:26:77:29:81:bf:54:b0:aa:9d:e0:f5:56: ea:79:11:65:8d:6f:48:b7:b6:1f:e0:9d:91:4f:3d: 6a:ee:55:9d:00:a9:fa:f5:92:da:85:02:ac:13:04: 91:1d:49:d7:76:4f:a7:fe:f4:1a:cb:c7:fa:c8:eb: 70:fc:d3:98:9e:73:8d:cc:bc:98:da:73:8b:3a:35: 2c:44:82:97:79:0e:10:d0:23:26:37:b4:6a:2f:3e: 27:a6:ec:20:04:b3:48:85:e0:c8:4a:95:6f:c0:b9: 62:bf:11:9f:68:5e:23:78:9b:b3:34:ff:4d:fe:2e: 18:b3:e8:e1:cc:7b:6e:e8:99:08:6b:32:90:93:73: 89:d3:55:1d:92:db:ab:b8:b6:3c:6d:2a:df:a8:3d: 68:fe:a4:0b:d9:b2:8f:e3:b6:7c:04:a8:ca:ce:86: b0:49:7e:e0:b7:49:2c:7a:90:a0:12:2f:c5:46:b6: 56:85:d8:a8:0c:c2:9c:14:ce:90:48:c6:a6:89:20: de:81:11:64:8c:85:48:16:1b:13:bf:f0:cc:5a:1a: b7:08:8d:f2:f2:b6:ea:84:8b:f2:24:84:b1:f1:f6: 13:59:6b:54:cc:84:83:95:d0:d9:a0:e4:55:bb:8b: 14:33:f8:d2:9b:db:e6:e9:23:50:63:5c:15:d4:b7: a8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A2:A3:B6:E4:D7:48:CC:75:49:DD:4E:45:0A:90:8D:B5:40:EF:00 X509v3 Authority Key Identifier: keyid:D4:CF:5F:09:67:36:F2:4E:A2:41:07:92:A6:03:CD:BA:DD:82:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1M9fCWc28k6iQQeSpgPNut2Cfc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50FB/257BB2C4070E11EAA613727BC4F9AE02/1M9fCWc28k6iQQeSpgPNut2Cfc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:21:1d:41:5b:24:9a:35:38:07:8d:01:de:6b:59:ca:66:15: a0:4a:33:b2:5d:be:bb:f4:5f:ec:d4:2d:7a:b5:31:04:24:ed: 77:97:a7:ba:00:24:52:d7:b0:a3:9c:12:5c:77:9a:c9:03:88: aa:05:a4:69:3b:f1:5a:7e:86:07:25:82:6e:38:37:6b:3d:f8: 25:03:4d:ac:16:86:a0:cc:85:fb:96:fe:29:00:c6:29:60:87: 12:07:b1:92:d4:f2:a7:4a:8e:45:da:cd:09:bf:e4:dc:40:b9: ac:40:11:14:a6:59:08:4d:78:3b:ba:c7:a8:45:11:b0:4e:94: 52:c6:4d:92:20:35:b8:24:5a:12:bf:55:1e:29:6b:a3:12:a1: b0:54:33:f1:37:6a:a9:67:91:16:f5:00:a4:0f:74:e2:15:b6: f7:78:6d:95:86:20:95:86:72:63:e2:3d:d9:a4:ae:8b:48:81: 97:9d:eb:b0:15:18:d8:d1:49:f1:65:6d:3a:72:75:c6:95:fb: a5:af:1c:6c:a5:a2:60:8e:85:39:16:21:23:9d:1e:9e:81:27: 66:07:2e:95:11:6d:de:03:ee:7d:85:b1:5e:59:62:88:81:08: d6:d3:1e:9f:25:8e:ca:90:45:f7:c7:32:3d:d7:86:ce:5a:b2: f6:02:45:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwRkIxMTAvBgNVBAUTKEQ0Q0Y1RjA5NjczNkYyNEVBMjQxMDc5MkE2MDNDREJB REQ4MjdEQ0QwHhcNMjQxMTIyMTgzMDM2WhcNMjQxMTI5MTgzMDM2WjAYMRYwFAYD VQQDEw02NzQwY2RjYy01Nzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnUmdymBv1Swqp3g9VbqeRFljW9It7Yf4J2RTz1q7lWdAKn69ZLahQKsEwSR HUnXdk+n/vQay8f6yOtw/NOYnnONzLyY2nOLOjUsRIKXeQ4Q0CMmN7RqLz4npuwg BLNIheDISpVvwLlivxGfaF4jeJuzNP9N/i4Ys+jhzHtu6JkIazKQk3OJ01Udktur uLY8bSrfqD1o/qQL2bKP47Z8BKjKzoawSX7gt0ksepCgEi/FRrZWhdioDMKcFM6Q SMamiSDegRFkjIVIFhsTv/DMWhq3CI3y8rbqhIvyJISx8fYTWWtUzISDldDZoORV u4sUM/jSm9vm6SNQY1wV1LeoIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuio7bk 10jMdUndTkUKkI21QO8AMB8GA1UdIwQYMBaAFNTPXwlnNvJOokEHkqYDzbrdgn3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTBGQi8yNTdCQjJDNDA3 MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhrNmlRUWVTcGdQTnV0MkNm YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFNOWZDV2MyOGs2aVFRZVNwZ1BOdXQyQ2ZjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTBGQi8yNTdCQjJDNDA3MEUxMUVBQTYxMzcyN0JDNEY5QUUwMi8xTTlmQ1djMjhr NmlRUWVTcGdQTnV0MkNmYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATIR1BWySaNTgHjQHea1nKZhWgSjOyXb679F/s1C16tTEEJO13l6e6 ACRS17CjnBJcd5rJA4iqBaRpO/FafoYHJYJuODdrPfglA02sFoagzIX7lv4pAMYp YIcSB7GS1PKnSo5F2s0Jv+TcQLmsQBEUplkITXg7useoRRGwTpRSxk2SIDW4JFoS v1UeKWujEqGwVDPxN2qpZ5EW9QCkD3TiFbb3eG2VhiCVhnJj4j3ZpK6LSIGXneuw FRjY0UnxZW06cnXGlfulrxxspaJgjoU5FiEjnR6egSdmBy6VEW3eA+59hbFeWWKI gQjW0x6fJY7KkEX3xzI914bOWrL2AkW0 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org