$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft File: 90n3b5KhbSqHFDf3LIbQ0F3imtU.mft (raw, json) Hash identifier: hbrwO1uIGr2r+akfmg5vzQ+ChqaQeUrk6S7noJtjZn4= Subject key identifier: 14:A8:EB:31:47:93:18:C2:BC:E6:4A:DA:1B:75:F6:21:0A:7F:8F:D7 Authority key identifier: F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 Certificate issuer: /CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft Manifest number: 0154 Signing time: Sat 23 Nov 2024 02:27:41 +0000 Manifest this update: Sat 23 Nov 2024 02:27:40 +0000 Manifest next update: Sat 30 Nov 2024 02:27:40 +0000 Files and hashes: 1: 90n3b5KhbSqHFDf3LIbQ0F3imtU.crl (hash: rPR3QcmLBHfR5hz92UT47vjTfv6awdofXph0ikdkEPE=) 2: 69B6C14A9DF611ED8D51D272C4F9AE02.roa (hash: EOM0FWbEMad8JTUCseZOxf5a+Kkz8yoPl4Vr42b3Qr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDED/serialNumber=F749F76F92A16D2A871437F72C86D0D05DE29AD5 Validity Not Before: Nov 23 02:27:40 2024 GMT Not After : Nov 30 02:27:40 2024 GMT Subject: CN=67413d9d-0469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:e8:3a:09:18:65:f9:09:e4:3d:03:6b:b5: a2:a4:05:cd:20:19:7c:5e:dc:f7:00:02:4e:4e:f3: ae:3e:7f:4c:f0:7f:9d:c7:ee:1d:01:9f:57:0e:cd: 0c:a5:e2:5d:7a:00:ca:68:fe:ea:b4:d5:b0:d2:da: 2b:8c:e8:17:cb:33:c4:69:a1:c3:c0:8c:00:13:f0: a4:f7:3c:b8:b9:b3:b4:a6:10:81:58:ae:38:fa:e5: df:29:0b:88:75:c2:d5:d9:dd:92:ff:39:dd:03:c5: 8f:73:a5:72:55:fe:05:d7:ef:5d:39:d4:78:6d:09: f8:f1:0b:9d:2e:cd:70:54:1c:6a:e8:0b:c8:2b:ce: d8:d6:dd:f9:28:4d:5d:0f:25:09:c6:45:34:f7:9d: 85:d2:1f:26:2f:57:61:b6:ff:34:e7:04:42:18:b3: ae:ba:66:c2:b9:14:28:30:56:80:ac:10:01:4e:2b: 25:22:8a:c0:2e:5c:b6:e3:5e:72:6f:e4:ec:c1:05: 0e:fc:f0:17:3d:7d:75:dd:6a:27:fa:6e:c7:04:17: fe:fa:78:d6:e0:35:c1:d7:88:56:8c:23:33:20:1e: c9:8a:3d:19:9a:d3:09:f5:73:04:e1:d3:c9:d8:d4: 05:89:80:25:61:ce:02:04:55:11:d4:d2:3a:e5:1c: 53:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A8:EB:31:47:93:18:C2:BC:E6:4A:DA:1B:75:F6:21:0A:7F:8F:D7 X509v3 Authority Key Identifier: keyid:F7:49:F7:6F:92:A1:6D:2A:87:14:37:F7:2C:86:D0:D0:5D:E2:9A:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/90n3b5KhbSqHFDf3LIbQ0F3imtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDED/79CC01669DF211ED95949F57C4F9AE02/90n3b5KhbSqHFDf3LIbQ0F3imtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:52:df:11:23:36:16:6c:0e:3c:11:80:3e:aa:29:7c:90:d3: 22:f1:d8:0b:ec:6a:3e:89:27:19:7d:68:cf:5d:db:03:a1:ee: 11:f8:15:15:8a:13:03:78:85:8f:60:09:e0:f0:bd:8b:a7:46: 77:b7:8c:4f:52:f1:58:23:52:62:80:85:5b:b6:79:3d:ab:f0: 61:c6:35:3c:11:1a:8f:84:27:b1:f9:6f:db:71:48:4f:64:d2: 53:0b:a4:85:d2:8f:2b:1b:4d:3e:fc:06:09:45:dd:1d:55:ba: 87:3b:5a:e2:7f:5e:03:89:b8:10:0c:44:00:79:b0:e6:d5:0b: 6d:ec:27:b9:ee:bc:ba:50:0e:6b:87:20:91:ef:d0:f4:ad:34: c9:15:2a:61:d3:60:43:00:c6:e9:5b:18:f2:ed:2b:bc:5e:cc: 14:25:b2:2e:b9:b3:a1:69:f8:a8:1c:a8:b8:3a:c7:dc:ce:45: ed:4d:97:c5:c6:e9:27:f2:af:1a:61:eb:9e:6e:34:b7:a2:bc: 5b:d6:2c:67:7d:41:ec:af:ca:5e:d2:0f:da:d8:41:b5:09:6b: 6a:62:96:90:ae:bd:15:7c:3a:01:61:6e:26:28:c5:be:67:29: 22:ff:ab:a1:ce:54:32:64:45:bf:df:11:26:9c:13:d3:26:5d: 93:42:c6:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERERUQxMTAvBgNVBAUTKEY3NDlGNzZGOTJBMTZEMkE4NzE0MzdGNzJDODZEMEQw NURFMjlBRDUwHhcNMjQxMTIzMDIyNzQwWhcNMjQxMTMwMDIyNzQwWjAYMRYwFAYD VQQDEw02NzQxM2Q5ZC0wNDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8/oOgkYZfkJ5D0Da7WipAXNIBl8Xtz3AAJOTvOuPn9M8H+dx+4dAZ9XDs0M peJdegDKaP7qtNWw0torjOgXyzPEaaHDwIwAE/Ck9zy4ubO0phCBWK44+uXfKQuI dcLV2d2S/zndA8WPc6VyVf4F1+9dOdR4bQn48QudLs1wVBxq6AvIK87Y1t35KE1d DyUJxkU0952F0h8mL1dhtv805wRCGLOuumbCuRQoMFaArBABTislIorALly2415y b+TswQUO/PAXPX113Won+m7HBBf++njW4DXB14hWjCMzIB7Jij0ZmtMJ9XME4dPJ 2NQFiYAlYc4CBFUR1NI65RxTyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSo6zFH kxjCvOZK2ht19iEKf4/XMB8GA1UdIwQYMBaAFPdJ92+SoW0qhxQ39yyG0NBd4prV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERFRC83OUNDMDE2NjlE RjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJTcUhGRGYzTEliUTBGM2lt dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkwbjNiNUtoYlNxSEZEZjNMSWJRMEYzaW10VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERFRC83OUNDMDE2NjlERjIxMUVEOTU5NDlGNTdDNEY5QUUwMi85MG4zYjVLaGJT cUhGRGYzTEliUTBGM2ltdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHUt8RIzYWbA48EYA+qil8kNMi8dgL7Go+iScZfWjPXdsDoe4R+BUV ihMDeIWPYAng8L2Lp0Z3t4xPUvFYI1JigIVbtnk9q/BhxjU8ERqPhCex+W/bcUhP ZNJTC6SF0o8rG00+/AYJRd0dVbqHO1rif14DibgQDEQAebDm1Qtt7Ce57ry6UA5r hyCR79D0rTTJFSph02BDAMbpWxjy7Su8XswUJbIuubOhafioHKi4OsfczkXtTZfF xukn8q8aYeuebjS3orxb1ixnfUHsr8pe0g/a2EG1CWtqYpaQrr0VfDoBYW4mKMW+ Zyki/6uhzlQyZEW/3xEmnBPTJl2TQsa6 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org