$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json) Hash identifier: AVIpJZAlIs9dDdvWv0lH4MmLUAt1r6/giGURDuskagM= Subject key identifier: 42:90:13:29:9C:8E:87:45:FD:40:4B:9B:4B:B1:F2:E5:A8:13:4F:4D Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft Manifest number: 09 Signing time: Wed 23 Oct 2024 06:52:48 +0000 Manifest this update: Wed 23 Oct 2024 06:52:48 +0000 Manifest next update: Wed 30 Oct 2024 06:52:48 +0000 Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: RH5BqqUc8Zj0cSjun0i27jTudC+/ImMHayyLjwaCTkk=) 2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: cHJy1BLtElHS3p1bo+4QsrHmfc/col4vczERE1sjyMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Validity Not Before: Oct 23 06:52:48 2024 GMT Not After : Oct 30 06:52:48 2024 GMT Subject: CN=67189d40-48d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:94:e3:28:cc:65:4b:6c:96:93:cb:ef:48: fd:ef:2a:51:c4:4d:a0:6c:e4:67:f0:41:ed:ee:f4: db:c0:c8:55:e1:d5:ab:b7:32:ca:ec:3a:fd:27:88: c3:c9:1e:40:0a:0f:6f:ef:b0:a8:cb:59:1d:46:ad: 17:fb:c0:66:4f:05:10:a7:32:00:15:5d:d3:37:df: 03:df:4c:c1:37:d6:4f:7c:3e:53:7b:65:ae:b3:86: 06:16:5b:65:88:b0:4c:b7:2e:c7:80:dc:83:df:9f: 14:f8:4f:0c:82:aa:f8:0c:e9:f4:ed:8f:49:81:04: 27:ba:50:7c:15:b0:5d:ef:94:cd:0d:62:4e:e4:8a: c7:a5:7e:a8:11:d3:86:88:4f:c1:b4:f4:6d:11:39: d6:db:58:16:a3:b3:2c:00:87:c0:b8:e1:b1:8d:e2: d1:b1:22:1a:04:c6:3d:37:b2:2c:79:68:e2:15:7b: 61:c5:20:e7:39:81:b7:0a:1b:7d:38:f2:af:e3:82: 57:64:ed:91:bc:e4:2e:80:69:ac:24:26:85:ff:b5: 9c:91:ed:4a:f9:25:89:f7:51:4b:bb:07:d2:35:b2: e0:c4:e7:ef:f0:46:8a:79:8b:3c:3e:cd:1f:d2:99: 3d:f5:a9:4d:e8:ad:73:dd:15:e5:a3:6d:c7:eb:ba: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:90:13:29:9C:8E:87:45:FD:40:4B:9B:4B:B1:F2:E5:A8:13:4F:4D X509v3 Authority Key Identifier: keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a9:6e:1d:9d:ad:2c:dc:88:26:e9:58:32:f8:c6:9f:7e:8f: 48:6b:bc:16:e4:10:e0:f9:8a:f2:b7:68:c3:c1:8f:68:17:15: 98:ee:ee:82:a8:0f:25:0e:2e:2a:2f:ea:4f:f9:8d:fa:36:f4: 62:91:c4:49:db:9c:5a:c9:2c:d6:78:e6:dd:ca:bc:3e:45:cd: f8:06:0f:2d:c9:e0:6c:ee:16:bc:9d:c0:cb:76:5e:89:39:5c: 2a:fc:be:25:b0:4b:24:f1:49:5c:fe:32:fb:6c:33:53:dc:a7: 5d:a5:cf:13:d6:46:05:36:3f:dc:e1:3a:b7:e7:89:7a:c3:9f: 2a:81:a4:5a:f8:a8:f9:d6:06:c1:e3:58:78:83:bc:dc:76:3f: 61:34:8c:a9:f8:4a:c3:74:30:ab:50:49:5f:c1:a9:1a:5f:d8: 70:19:f0:c9:85:e6:70:fd:21:25:13:fc:c4:ae:d1:fe:a3:ed: 2d:97:53:94:72:01:9a:9b:67:cd:43:98:9a:23:04:06:ed:17: a9:ac:84:6c:47:87:4a:c8:f9:09:92:c5:cf:b4:59:ba:b1:4f: ce:c3:a4:12:c3:95:42:3d:c2:a0:57:dd:92:da:4e:04:96:db: 02:e1:b4:5f:66:69:d3:c0:7a:7a:8f:ba:71:7e:4c:ce:24:c7: a7:ab:96:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkYwQzExMC8GA1UEBRMoQUUwRTRCRUM1NjhGRTZGRUU0OTJGNzJFNEQzQUNCOTI4 RDlDMUU0RjAeFw0yNDEwMjMwNjUyNDhaFw0yNDEwMzAwNjUyNDhaMBgxFjAUBgNV BAMTDTY3MTg5ZDQwLTQ4ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Z5TjKMxlS2yWk8vvSP3vKlHETaBs5GfwQe3u9NvAyFXh1au3MsrsOv0niMPJ HkAKD2/vsKjLWR1GrRf7wGZPBRCnMgAVXdM33wPfTME31k98PlN7Za6zhgYWW2WI sEy3LseA3IPfnxT4TwyCqvgM6fTtj0mBBCe6UHwVsF3vlM0NYk7kiselfqgR04aI T8G09G0ROdbbWBajsywAh8C44bGN4tGxIhoExj03six5aOIVe2HFIOc5gbcKG304 8q/jgldk7ZG85C6AaawkJoX/tZyR7Ur5JYn3UUu7B9I1suDE5+/wRop5izw+zR/S mT31qU3orXPdFeWjbcfrutyVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQpATKZyO h0X9QEubS7Hy5agTT00wHwYDVR0jBBgwFoAUrg5L7FaP5v7kkvcuTTrLko2cHk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCRjBDLzQxNDg1MDcwOEM1 QjExRUZBNzA2NzU3RkM0RjlBRTAyL3JnNUw3RmFQNXY3a2t2Y3VUVHJMa28yY0hr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcmc1TDdGYVA1djdra3ZjdVRUckxrbzJjSGs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC RjBDLzQxNDg1MDcwOEM1QjExRUZBNzA2NzU3RkM0RjlBRTAyL3JnNUw3RmFQNXY3 a2t2Y3VUVHJMa28yY0hrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE2pbh2drSzciCbpWDL4xp9+j0hrvBbkEOD5ivK3aMPBj2gXFZju7oKo DyUOLiov6k/5jfo29GKRxEnbnFrJLNZ45t3KvD5FzfgGDy3J4GzuFrydwMt2Xok5 XCr8viWwSyTxSVz+MvtsM1Pcp12lzxPWRgU2P9zhOrfniXrDnyqBpFr4qPnWBsHj WHiDvNx2P2E0jKn4SsN0MKtQSV/BqRpf2HAZ8MmF5nD9ISUT/MSu0f6j7S2XU5Ry AZqbZ81DmJojBAbtF6mshGxHh0rI+QmSxc+0WbqxT87DpBLDlUI9wqBX3ZLaTgSW 2wLhtF9madPAenqPunF+TM4kx6erlsA= -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:03 2024 by rpki-client on console-ams.rpki-client.org