$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: xFF4hBmZK7VckAzDsA8CRo4W6sH2ty53TTffAm22LVQ= Subject key identifier: A1:18:10:AF:00:71:64:08:3E:70:F7:C6:7A:88:3B:69:D8:BE:B5:15 Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 017A Signing time: Sat 23 Nov 2024 02:04:51 +0000 Manifest this update: Sat 23 Nov 2024 02:04:50 +0000 Manifest next update: Sat 30 Nov 2024 02:04:50 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: GqqJ6OHFLD8DjQQqc9dgCGI02gQw3/mZSd050pH21D8=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: bQGRo+BKv1VXRi3jWhiN4sfYJGpMkN3hIT4uTMt1AFA=) 3: B360BB9689AD11ED93CAB75FC4F9AE02.roa (hash: phCaH2hmKn9csgEA/K+CD2iFkrWqLhy3OCLIe+VLrHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: Nov 23 02:04:50 2024 GMT Not After : Nov 30 02:04:50 2024 GMT Subject: CN=67413843-c8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:54:67:af:32:85:57:22:a6:4a:e9:64:0e:78: 85:62:4e:bd:64:b1:3e:68:f0:00:f5:7e:e3:0e:d4: af:bf:4d:a7:79:c4:3f:48:4f:e1:12:7d:a9:0e:cd: 85:5a:fa:c8:20:9e:ef:1b:db:79:9e:43:34:33:0f: 9b:32:43:7c:85:6e:11:2c:0d:ac:22:3b:a2:7d:2b: 7e:65:e1:84:ec:30:3d:48:41:4b:63:0e:1a:9d:ff: 38:e8:ad:6e:37:8e:2e:b7:49:d7:03:d0:e2:23:71: 4e:03:16:91:59:3e:86:6a:fc:37:0d:c4:cb:89:c4: 29:e0:83:c3:17:20:e3:da:94:3b:f9:02:bc:06:5d: 9c:a3:6c:10:bf:e3:1c:52:06:14:ee:58:08:77:4b: 82:24:07:f4:75:5e:24:08:bb:3f:c8:cb:ab:19:40: ce:c3:e0:1e:a8:48:28:b1:2a:21:5c:78:a2:62:31: 34:5a:ba:87:44:6b:73:62:c8:2c:64:15:1b:3e:a0: ae:51:8f:0f:e8:8d:90:c7:29:5b:a1:50:2b:f7:90: 50:0c:80:95:fe:df:da:c1:5c:3d:af:11:16:96:08: b1:43:0b:2a:4d:00:8a:97:b8:5b:dd:1f:30:4f:68: 02:6d:76:27:bd:b9:a5:d7:41:d6:e8:f4:8d:53:5d: 57:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:18:10:AF:00:71:64:08:3E:70:F7:C6:7A:88:3B:69:D8:BE:B5:15 X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b3:b9:e1:ff:26:15:14:b3:88:0d:a6:ed:39:8b:18:bb:71: 5b:73:3d:65:48:a1:0d:f5:56:f5:ec:b5:8e:e6:6b:4a:fa:a9: c1:c6:a7:8f:11:e8:83:38:41:48:fd:3a:0b:27:b6:ac:c0:37: 1c:91:b6:6c:03:c6:11:09:65:05:b8:e1:08:21:58:dc:02:7d: d6:84:08:b8:60:50:f7:d0:93:7e:19:e0:bc:4c:2b:41:d8:3d: b0:f8:80:ab:ed:b8:27:41:fd:45:3c:4a:8f:93:82:00:61:22: 55:45:a3:d0:72:38:c4:a6:2d:a6:cf:89:0b:66:58:55:b6:a0: 1a:ec:d5:b9:f4:22:42:dd:49:0e:e8:46:59:2d:f8:88:06:f0: 33:23:57:18:01:28:70:67:21:07:d4:33:fc:fb:7b:61:09:fc: 50:45:30:63:45:ed:43:d8:17:09:bc:d1:a9:4d:ca:b6:07:1b: f7:e0:6f:46:74:94:84:8e:25:f3:7c:fa:00:ce:88:34:77:3b: b5:38:23:9c:f5:41:fb:26:53:e3:6b:ed:55:20:77:ef:69:f6: 5e:bf:f6:92:1a:fc:54:f3:de:3b:2e:ae:fe:5d:e2:c0:7e:cf: fe:3b:fd:11:5f:6c:4d:0c:1c:82:63:24:82:24:ca:a0:80:a2: b4:98:5b:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjQxMTIzMDIwNDUwWhcNMjQxMTMwMDIwNDUwWjAYMRYwFAYD VQQDEw02NzQxMzg0My1jOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+VRnrzKFVyKmSulkDniFYk69ZLE+aPAA9X7jDtSvv02necQ/SE/hEn2pDs2F WvrIIJ7vG9t5nkM0Mw+bMkN8hW4RLA2sIjuifSt+ZeGE7DA9SEFLYw4anf846K1u N44ut0nXA9DiI3FOAxaRWT6Gavw3DcTLicQp4IPDFyDj2pQ7+QK8Bl2co2wQv+Mc UgYU7lgId0uCJAf0dV4kCLs/yMurGUDOw+AeqEgosSohXHiiYjE0WrqHRGtzYsgs ZBUbPqCuUY8P6I2QxylboVAr95BQDICV/t/awVw9rxEWlgixQwsqTQCKl7hb3R8w T2gCbXYnvbml10HW6PSNU11X9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEYEK8A cWQIPnD3xnqIO2nYvrUVMB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7s7nh/yYVFLOIDabtOYsYu3Fbcz1lSKEN9Vb17LWO5mtK+qnBxqeP EeiDOEFI/ToLJ7aswDcckbZsA8YRCWUFuOEIIVjcAn3WhAi4YFD30JN+GeC8TCtB 2D2w+ICr7bgnQf1FPEqPk4IAYSJVRaPQcjjEpi2mz4kLZlhVtqAa7NW59CJC3UkO 6EZZLfiIBvAzI1cYAShwZyEH1DP8+3thCfxQRTBjRe1D2BcJvNGpTcq2Bxv34G9G dJSEjiXzfPoAzog0dzu1OCOc9UH7JlPja+1VIHfvafZev/aSGvxU8947Lq7+XeLA fs/+O/0RX2xNDByCYySCJMqggKK0mFua -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:53 2024 by rpki-client on console-ams.rpki-client.org