$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft File: ABc0faPzW3U5Ub30sbB_dh49nr8.mft (raw, json) Hash identifier: VtMDjddZlUZBRDmq2P6SSQfGQ0ccK73ThNFO2urQdc0= Subject key identifier: C7:46:AC:09:0B:B8:05:4E:E6:1E:0A:BA:F0:35:10:C8:28:03:AF:95 Authority key identifier: 00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF Certificate issuer: /CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF Certificate serial: 03A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft Manifest number: 039A Signing time: Sat 23 Nov 2024 00:20:59 +0000 Manifest this update: Sat 23 Nov 2024 00:20:58 +0000 Manifest next update: Sat 30 Nov 2024 00:20:58 +0000 Files and hashes: 1: ABc0faPzW3U5Ub30sbB_dh49nr8.crl (hash: ygxaaiztsv0OH8HVhNYw7ubyGKVArtrNwjY8EARo5yo=) 2: 0BE6F39E79E611EC99DA1B51C4F9AE02.roa (hash: 5M3eaY8LFqQSHIxb7L7m75NuysFwBQx/uG4MI/FA6H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 930 (0x3a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0AAD/serialNumber=0017347DA3F35B753951BDF4B1B07F761E3D9EBF Validity Not Before: Nov 23 00:20:58 2024 GMT Not After : Nov 30 00:20:58 2024 GMT Subject: CN=67411fea-0d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:d5:84:40:d1:ae:d0:53:f4:28:46:f1:c1: 60:95:47:d2:03:06:d8:15:aa:40:89:15:0f:80:42: ce:b9:1f:03:87:50:d3:15:42:34:e1:bd:4d:59:ee: 81:16:f4:14:8e:de:31:f7:08:c9:38:69:8b:c0:22: e5:74:f1:99:a8:c3:d1:00:83:31:65:58:8e:70:9c: d0:3b:7a:6e:01:5c:1b:c0:d5:32:30:dc:8a:df:98: c3:64:5b:95:5a:f6:86:dd:81:96:92:13:8b:55:1b: de:19:4c:e4:ed:07:5a:04:b5:42:23:07:8e:94:70: 0e:d2:99:18:5b:26:cd:db:4a:89:b7:23:64:61:38: 8c:1d:cd:c8:92:45:e9:c4:d8:a7:c9:29:98:1c:7c: 22:27:c6:88:06:b7:9a:eb:29:42:82:39:98:68:56: 8e:0b:57:5d:d2:31:d9:bd:73:f1:ff:a8:bb:d5:7a: 8e:40:52:32:a4:7f:34:b2:fe:00:fc:cb:16:54:7f: 3c:f3:59:0d:86:d7:3e:26:18:17:60:97:a6:8f:f1: 8b:16:38:1e:c7:8e:16:c9:03:04:c4:a9:f8:ba:a0: a1:17:2f:7c:2b:9e:fe:3e:fb:88:c9:1e:c4:36:0c: 41:c7:3c:b6:df:11:fe:71:62:cb:bc:aa:0f:ba:03: 76:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:46:AC:09:0B:B8:05:4E:E6:1E:0A:BA:F0:35:10:C8:28:03:AF:95 X509v3 Authority Key Identifier: keyid:00:17:34:7D:A3:F3:5B:75:39:51:BD:F4:B1:B0:7F:76:1E:3D:9E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABc0faPzW3U5Ub30sbB_dh49nr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0AAD/0DE5B40E79E211ECB5013148C4F9AE02/ABc0faPzW3U5Ub30sbB_dh49nr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:91:d9:c9:e8:82:69:a0:e4:1d:b2:7d:c5:2f:78:a4:36:25: 33:38:b7:7d:39:36:12:ae:8c:99:1c:a1:95:03:ad:83:d1:11: 52:47:34:da:b8:dc:1a:ef:93:d4:ed:ef:a5:fc:65:a3:78:d3: ab:35:f9:db:7d:ff:09:0b:9e:4d:36:5a:00:c7:4c:24:c0:3b: db:47:2f:6f:39:14:7f:36:48:d1:e1:3f:85:03:39:83:06:c3: 0b:4e:e1:9e:1b:00:3b:c0:29:87:21:88:33:6e:02:98:ab:74: 6a:74:c8:80:12:47:45:c4:1f:53:17:0a:ed:60:dd:af:eb:a0: 0b:5e:0a:bc:ca:d1:04:5a:44:e8:06:76:05:f3:4b:2e:a4:e4: ed:dc:5c:0d:66:3b:36:32:d0:ba:ed:a8:b2:9d:01:fd:38:3a: d4:5c:2b:5b:a0:5c:c3:7e:7d:12:f8:57:de:ba:e1:f9:be:9d: f7:b0:1c:fb:d9:c2:dd:ac:a2:fa:31:b4:05:98:db:ee:8b:de: 24:f5:73:82:89:76:9b:23:e7:2b:a3:89:2c:12:10:bd:2c:68: cd:9b:bb:99:f8:72:ca:d7:8b:62:cb:32:b6:c4:54:00:8f:39: 49:0b:87:00:93:3b:57:a0:d3:1e:c7:76:63:e8:5c:59:9d:7f: b5:d7:dc:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBBQUQxMTAvBgNVBAUTKDAwMTczNDdEQTNGMzVCNzUzOTUxQkRGNEIxQjA3Rjc2 MUUzRDlFQkYwHhcNMjQxMTIzMDAyMDU4WhcNMjQxMTMwMDAyMDU4WjAYMRYwFAYD VQQDEw02NzQxMWZlYS0wZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpbVhEDRrtBT9ChG8cFglUfSAwbYFapAiRUPgELOuR8Dh1DTFUI04b1NWe6B FvQUjt4x9wjJOGmLwCLldPGZqMPRAIMxZViOcJzQO3puAVwbwNUyMNyK35jDZFuV WvaG3YGWkhOLVRveGUzk7QdaBLVCIweOlHAO0pkYWybN20qJtyNkYTiMHc3IkkXp xNinySmYHHwiJ8aIBrea6ylCgjmYaFaOC1dd0jHZvXPx/6i71XqOQFIypH80sv4A /MsWVH8881kNhtc+JhgXYJemj/GLFjgex44WyQMExKn4uqChFy98K57+PvuIyR7E NgxBxzy23xH+cWLLvKoPugN2DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdGrAkL uAVO5h4KuvA1EMgoA6+VMB8GA1UdIwQYMBaAFAAXNH2j81t1OVG99LGwf3YePZ6/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEFBRC8wREU1QjQwRTc5 RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelczVTVVYjMwc2JCX2RoNDlu cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCYzBmYVB6VzNVNVViMzBzYkJfZGg0OW5yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEFBRC8wREU1QjQwRTc5RTIxMUVDQjUwMTMxNDhDNEY5QUUwMi9BQmMwZmFQelcz VTVVYjMwc2JCX2RoNDlucjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzkdnJ6IJpoOQdsn3FL3ikNiUzOLd9OTYSroyZHKGVA62D0RFSRzTa uNwa75PU7e+l/GWjeNOrNfnbff8JC55NNloAx0wkwDvbRy9vORR/NkjR4T+FAzmD BsMLTuGeGwA7wCmHIYgzbgKYq3RqdMiAEkdFxB9TFwrtYN2v66ALXgq8ytEEWkTo BnYF80supOTt3FwNZjs2MtC67aiynQH9ODrUXCtboFzDfn0S+FfeuuH5vp33sBz7 2cLdrKL6MbQFmNvui94k9XOCiXabI+cro4ksEhC9LGjNm7uZ+HLK14tiyzK2xFQA jzlJC4cAkztXoNMex3Zj6FxZnX+119xW -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org