$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft File: rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json) Hash identifier: Hau7SPMdRcx/HuJW+kKImb4l86Qt85j+ivHaRjgat6g= Subject key identifier: D9:32:FA:21:4A:8F:AF:61:39:7A:D7:6D:9D:E3:BB:51:AF:8F:05:34 Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 Certificate issuer: /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Certificate serial: 2AA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft Manifest number: 9DB8 Signing time: Fri 22 Nov 2024 14:29:37 +0000 Manifest this update: Fri 22 Nov 2024 14:29:37 +0000 Manifest next update: Fri 29 Nov 2024 14:29:37 +0000 Files and hashes: 1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: MCQUOGW+U9rPskdjh33635SvN4mZP4kOTt+c6y5LSC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10919 (0x2aa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Validity Not Before: Nov 22 14:29:37 2024 GMT Not After : Nov 29 14:29:37 2024 GMT Subject: CN=67409551-f119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a7:9b:ff:93:e2:d4:cd:df:6b:51:ae:4b:12: 26:9d:7c:1e:d9:48:ea:92:bb:d9:7b:6e:f4:48:fc: 04:17:20:15:bc:dc:62:67:f2:39:d0:44:2e:04:e4: d5:be:cc:6f:2e:24:bb:92:44:30:cd:2f:8e:3c:7e: 9d:82:5e:d2:1f:17:2a:21:db:14:65:40:c0:0f:30: 84:f0:1d:a3:49:1f:21:4b:ad:76:e2:cf:68:f5:75: 7c:84:1f:fb:e3:c5:bd:58:35:8e:b7:64:57:89:20: d7:f8:fa:2b:31:6d:5e:82:ac:91:5f:a6:c6:fb:15: 18:98:02:92:8a:e2:5b:95:0d:ef:a0:35:30:13:ad: dd:45:5a:a5:17:89:f6:7b:66:69:1b:bf:fd:e7:bb: e5:24:ac:58:f6:89:f7:a6:42:99:8d:7b:0b:16:a8: fc:69:19:eb:8e:9a:69:ce:53:05:ec:52:d2:80:a4: 22:f4:51:e1:88:3b:b2:bb:d1:67:a8:f9:eb:07:2a: 31:33:57:e1:51:c2:bf:70:48:a6:7f:fb:4c:98:71: 6a:b1:27:b5:f7:41:3d:d0:37:c6:23:a0:ca:9b:bb: e3:5b:a9:51:26:3b:b5:0e:bb:39:ef:42:07:35:2c: 6d:c8:a1:23:17:a5:ea:3c:a2:15:20:47:89:bd:24: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:32:FA:21:4A:8F:AF:61:39:7A:D7:6D:9D:E3:BB:51:AF:8F:05:34 X509v3 Authority Key Identifier: keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:93:da:e1:e9:2a:9b:9e:d1:92:59:73:09:e7:51:b1:a3:a3: e5:5c:f3:bb:1a:e4:2c:21:6a:68:07:5a:25:63:a3:59:22:be: e3:a2:3b:13:6b:9b:c4:e2:25:ed:87:1f:d3:1b:50:0a:d3:f3: 94:74:e1:eb:11:fc:4a:4d:06:87:5f:8d:c0:60:49:60:6a:d5: 4f:a2:bf:56:7a:fa:d1:fc:31:75:c7:7b:36:63:46:4e:b4:1f: aa:4d:5c:72:1c:3e:43:2d:c2:27:3b:02:28:c6:f7:88:24:27: e6:71:72:c4:99:a3:1d:b6:de:8c:20:b1:a7:63:db:a0:66:dd: 50:0f:c6:20:2f:6a:b1:fe:95:be:6b:4b:15:75:67:c9:d6:d2: 2a:0f:71:85:a7:37:48:7a:3a:b7:1d:59:cf:a2:42:5c:a5:68: bd:8d:68:98:88:63:c3:4f:9e:ed:d8:93:7c:90:5a:a9:79:c1: 20:19:52:2c:d3:df:a2:32:6a:8c:5f:00:a1:96:ad:b9:5a:eb: 24:84:cd:16:d4:3f:46:9a:d2:7b:10:08:4a:49:be:83:77:9f: a4:74:a1:d1:b1:3a:5a:b9:e3:be:54:d7:e3:58:7a:81:73:d5: a5:32:38:dc:fb:e4:97:b7:b0:89:a5:04:70:5e:53:3e:1a:cd: 10:d8:14:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKEFFQzhBODMyODFGRThCMjc1QUVFMDQxQkUzM0NDREQ4 NDkzQkFDMDAwHhcNMjQxMTIyMTQyOTM3WhcNMjQxMTI5MTQyOTM3WjAYMRYwFAYD VQQDEw02NzQwOTU1MS1mMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnaeb/5Pi1M3fa1GuSxImnXwe2UjqkrvZe270SPwEFyAVvNxiZ/I50EQuBOTV vsxvLiS7kkQwzS+OPH6dgl7SHxcqIdsUZUDADzCE8B2jSR8hS6124s9o9XV8hB/7 48W9WDWOt2RXiSDX+PorMW1egqyRX6bG+xUYmAKSiuJblQ3voDUwE63dRVqlF4n2 e2ZpG7/957vlJKxY9on3pkKZjXsLFqj8aRnrjpppzlMF7FLSgKQi9FHhiDuyu9Fn qPnrByoxM1fhUcK/cEimf/tMmHFqsSe190E90DfGI6DKm7vjW6lRJju1Drs570IH NSxtyKEjF6XqPKIVIEeJvSTD5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNky+iFK j69hOXrXbZ3ju1GvjwU0MB8GA1UdIwQYMBaAFK7IqDKB/osnWu4EG+M8zdhJO6wA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5ZGE3Z1FiNHp6TjJFazdy QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzaW9Nb0gtaXlkYTdnUWI0enpOMkVrN3JBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5 ZGE3Z1FiNHp6TjJFazdyQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAk9rh6SqbntGSWXMJ51Gxo6PlXPO7GuQsIWpoB1olY6NZIr7jojsT a5vE4iXthx/TG1AK0/OUdOHrEfxKTQaHX43AYElgatVPor9WevrR/DF1x3s2Y0ZO tB+qTVxyHD5DLcInOwIoxveIJCfmcXLEmaMdtt6MILGnY9ugZt1QD8YgL2qx/pW+ a0sVdWfJ1tIqD3GFpzdIejq3HVnPokJcpWi9jWiYiGPDT57t2JN8kFqpecEgGVIs 09+iMmqMXwChlq25WuskhM0W1D9GmtJ7EAhKSb6Dd5+kdKHRsTpaueO+VNfjWHqB c9WlMjjc++SXt7CJpQRwXlM+Gs0Q2BTv -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:05 2024 by rpki-client on console-ams.rpki-client.org