$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: a3pn8EgD6nu0fuuU+Xp0EorHXj7jJftVWfSGyYmVZvk= Subject key identifier: 79:9B:13:F5:BA:98:66:28:9B:C5:7A:49:56:77:AC:2B:8E:3D:8E:06 Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0CFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0CF6 Signing time: Fri 22 Nov 2024 18:00:10 +0000 Manifest this update: Fri 22 Nov 2024 18:00:09 +0000 Manifest next update: Fri 29 Nov 2024 18:00:09 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: +rPkDTP++x0KkA1U9OZTSvm/K8PnpY4Vd1QkaXOsmgU=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: kI5JnSJu06qgqTZp/9lZiT474okX7X5b01wQ0iP2l+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Nov 22 18:00:09 2024 GMT Not After : Nov 29 18:00:09 2024 GMT Subject: CN=6740c6a9-a923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:94:58:7e:2b:26:2f:d9:a6:94:5c:6a:90: 17:2c:a8:a3:32:ec:e9:54:a7:ac:d1:6b:ff:20:da: 45:85:72:f2:c6:80:b6:6f:68:e3:a2:82:26:18:1c: 7f:0c:b8:cf:15:1b:9b:3f:38:9b:e7:5c:d4:48:ac: 5a:9e:82:e6:5c:58:1d:27:54:44:a1:e6:08:07:43: 5d:f4:fa:39:4e:1e:45:08:5a:3c:18:b2:82:e3:82: 4e:c1:14:bd:e0:bb:cf:dd:0e:cc:47:57:fd:9d:83: b6:bc:6c:7c:42:bd:51:13:65:5a:cc:54:ec:78:30: d0:d5:56:56:df:a9:6e:78:d7:bf:c2:85:70:2f:3b: fe:20:c1:b3:df:b9:3b:8e:1b:99:95:83:1f:c9:08: 63:4a:d6:5e:66:b8:be:25:d2:99:06:5c:03:7d:76: 8d:77:a2:98:59:74:50:29:60:5d:c8:3f:8d:64:96: 6b:42:b6:6d:02:aa:0d:68:fc:cb:c9:5c:24:37:eb: e8:37:5f:84:31:d0:24:76:6d:85:2f:50:57:b2:4c: e7:cf:fb:86:f6:e7:68:56:00:fa:f0:3f:63:04:99: 58:f7:67:f6:e3:3e:64:2d:95:08:88:81:67:d5:e4: dd:50:1c:d8:ec:b7:ba:6a:b7:c4:7e:e3:e9:c3:e1: e5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9B:13:F5:BA:98:66:28:9B:C5:7A:49:56:77:AC:2B:8E:3D:8E:06 X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:66:01:e6:f0:63:3a:aa:6f:f2:fb:87:27:2d:5b:26:b3:d9: d6:69:64:1f:29:7f:35:b6:7b:41:9d:21:94:a8:33:fc:10:75: 36:29:db:bf:02:24:84:f5:da:3b:2c:f6:46:fb:1b:38:e0:d0: 1a:82:53:cf:4b:d9:1f:12:f1:7b:de:2b:bd:d2:2a:8d:cd:f3: b0:5d:cf:e0:44:de:f7:04:98:f9:d4:fd:92:9b:65:98:db:e1: 7c:b4:96:b8:e5:60:0e:9b:c9:9c:e0:74:05:61:35:1c:fb:19: 95:2e:77:0e:f9:81:27:a6:0a:b5:f2:6d:5e:57:91:a8:14:c4: df:9e:cf:e7:74:43:74:96:16:f7:28:97:83:d9:2f:6d:5c:73: 6f:b7:66:86:69:bb:ef:a0:da:80:ac:b0:9c:34:e1:33:b8:1b: 6d:b9:32:d6:a3:fa:aa:f0:bb:f9:7f:56:21:6d:09:9b:43:22: ef:af:be:3e:ed:21:f3:e0:a5:e7:35:e1:7d:08:f3:85:ff:1a: 3a:c2:ef:66:62:b7:45:8b:6c:5b:83:a6:fb:71:d9:41:bc:e7: 95:9b:f0:f4:84:f4:87:07:19:6b:21:9f:c3:95:27:f8:4b:0f: 51:9b:40:9d:a8:cd:a2:e0:bd:29:2d:5b:6c:09:74:50:0e:8d: 5e:ad:b8:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjQxMTIyMTgwMDA5WhcNMjQxMTI5MTgwMDA5WjAYMRYwFAYD VQQDEw02NzQwYzZhOS1hOTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3r6UWH4rJi/ZppRcapAXLKijMuzpVKes0Wv/INpFhXLyxoC2b2jjooImGBx/ DLjPFRubPzib51zUSKxanoLmXFgdJ1REoeYIB0Nd9Po5Th5FCFo8GLKC44JOwRS9 4LvP3Q7MR1f9nYO2vGx8Qr1RE2VazFTseDDQ1VZW36lueNe/woVwLzv+IMGz37k7 jhuZlYMfyQhjStZeZri+JdKZBlwDfXaNd6KYWXRQKWBdyD+NZJZrQrZtAqoNaPzL yVwkN+voN1+EMdAkdm2FL1BXskznz/uG9udoVgD68D9jBJlY92f24z5kLZUIiIFn 1eTdUBzY7Le6arfEfuPpw+HlkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmbE/W6 mGYom8V6SVZ3rCuOPY4GMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQZgHm8GM6qm/y+4cnLVsms9nWaWQfKX81tntBnSGUqDP8EHU2Kdu/ AiSE9do7LPZG+xs44NAaglPPS9kfEvF73iu90iqNzfOwXc/gRN73BJj51P2Sm2WY 2+F8tJa45WAOm8mc4HQFYTUc+xmVLncO+YEnpgq18m1eV5GoFMTfns/ndEN0lhb3 KJeD2S9tXHNvt2aGabvvoNqArLCcNOEzuBttuTLWo/qq8Lv5f1YhbQmbQyLvr74+ 7SHz4KXnNeF9CPOF/xo6wu9mYrdFi2xbg6b7cdlBvOeVm/D0hPSHBxlrIZ/DlSf4 Sw9Rm0CdqM2i4L0pLVtsCXRQDo1erbgG -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org