$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft File: mom7N8VDhtqah6ZP8AlEKKMXGkc.mft (raw, json) Hash identifier: xteXuT9lj5Tjd8WET0FN/D6CJof2BnPJqR662yzgLaQ= Subject key identifier: A8:0F:C6:42:50:62:F9:3C:D1:6A:A4:24:70:7D:C2:F3:5B:57:A1:E1 Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 Certificate issuer: /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft Manifest number: A0 Signing time: Thu 21 Nov 2024 04:37:07 +0000 Manifest this update: Thu 21 Nov 2024 04:37:07 +0000 Manifest next update: Thu 28 Nov 2024 04:37:07 +0000 Files and hashes: 1: mom7N8VDhtqah6ZP8AlEKKMXGkc.crl (hash: XJLGAfvlDqF0EX/Vt4o89qbAALVKe3jHOY3AqKcXV+I=) 2: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (hash: tThNJYbUDEGX7l9BePqZBqRS3H5vx42AJaOXqIGJAP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Validity Not Before: Nov 21 04:37:07 2024 GMT Not After : Nov 28 04:37:07 2024 GMT Subject: CN=673eb8f3-1b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:91:54:22:40:09:f8:18:99:51:c3:95:f0: 32:1f:e2:2e:a9:12:3f:a5:ae:24:e0:41:89:46:dd: ac:6c:6f:55:57:d4:8c:23:d5:eb:ab:61:c9:6b:86: db:2a:26:eb:9a:5c:6a:67:af:b3:da:78:ab:a1:cb: 11:74:e2:02:da:fe:a4:6d:9b:29:5a:2f:2d:8d:02: 1f:3b:2e:af:f9:3c:90:4c:4a:9f:7f:ec:8f:a6:10: 45:eb:36:56:7a:23:28:02:5c:99:64:33:dd:cb:9f: 29:e5:ee:98:a4:af:42:d6:48:07:fe:69:12:7a:fc: f1:1c:9f:db:56:35:08:83:8a:fd:eb:c9:06:35:81: 53:8b:83:a8:31:11:a7:41:1a:2d:49:fc:a5:60:e2: bf:e0:b4:4b:3a:80:ee:45:85:70:09:1b:22:ac:8e: 78:7e:69:4e:c0:d2:eb:45:fa:42:d0:2b:a2:c2:61: b2:e0:5e:00:b3:40:2a:87:17:ae:5e:75:79:f4:79: e6:55:80:13:f1:33:b1:03:1f:b0:9e:2c:be:b8:f0: d1:da:47:b0:6f:04:5b:cb:69:83:ec:b5:f6:b1:6e: d5:83:9a:44:a1:a3:45:59:eb:72:e8:17:4b:50:59: 04:8f:39:66:f4:f0:ab:8f:a2:ba:12:43:12:42:61: 0c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0F:C6:42:50:62:F9:3C:D1:6A:A4:24:70:7D:C2:F3:5B:57:A1:E1 X509v3 Authority Key Identifier: keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:4a:b9:b1:61:9a:00:2e:de:33:41:82:4b:a1:8c:0b:57:c8: 97:b8:48:81:72:b3:f9:24:af:6e:5d:7c:17:ea:d5:cd:36:25: 26:f2:dc:7d:3e:db:e5:90:fb:e9:16:3a:30:7c:2e:ff:6e:05: b3:cd:b9:de:37:12:d7:d1:3b:7d:74:41:d0:66:b1:d3:2a:06: d8:b1:a5:57:30:01:f5:df:fb:9f:7f:c3:93:d0:dd:a0:29:df: f0:a5:df:01:f0:4e:d3:54:ea:25:c9:57:af:80:45:72:1a:91: 0a:39:40:d4:01:7a:61:79:77:ac:44:c9:0c:57:8b:83:e6:a6: e2:c9:8e:34:da:30:20:ed:28:06:4b:a3:21:89:f8:5c:6a:c2: cf:9f:0e:f9:f0:3a:4b:b1:9f:4b:a8:63:d0:ec:67:8b:a9:81: 4c:38:0d:a0:a9:cf:df:e6:c4:e0:a9:56:62:31:3c:10:16:a6: 64:62:9d:f2:66:73:37:d8:c9:db:90:aa:f8:84:ba:24:a6:d9: 11:df:76:10:68:67:97:3d:02:92:37:23:03:4a:d5:e2:07:95: 1f:17:9b:a0:bd:ab:91:47:b2:d9:c7:f6:4a:cf:89:25:de:26: 4b:76:a7:a1:96:47:45:f8:e9:1d:9a:b2:fb:1b:8d:8f:98:53: db:07:83:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0QxMTAvBgNVBAUTKDlBODlCQjM3QzU0Mzg2REE5QTg3QTY0RkYwMDk0NDI4 QTMxNzFBNDcwHhcNMjQxMTIxMDQzNzA3WhcNMjQxMTI4MDQzNzA3WjAYMRYwFAYD VQQDEw02NzNlYjhmMy0xYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyb6RVCJACfgYmVHDlfAyH+IuqRI/pa4k4EGJRt2sbG9VV9SMI9Xrq2HJa4bb KibrmlxqZ6+z2nirocsRdOIC2v6kbZspWi8tjQIfOy6v+TyQTEqff+yPphBF6zZW eiMoAlyZZDPdy58p5e6YpK9C1kgH/mkSevzxHJ/bVjUIg4r968kGNYFTi4OoMRGn QRotSfylYOK/4LRLOoDuRYVwCRsirI54fmlOwNLrRfpC0CuiwmGy4F4As0Aqhxeu XnV59HnmVYAT8TOxAx+wniy+uPDR2kewbwRby2mD7LX2sW7Vg5pEoaNFWety6BdL UFkEjzlm9PCrj6K6EkMSQmEMmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgPxkJQ Yvk80WqkJHB9wvNbV6HhMB8GA1UdIwQYMBaAFJqJuzfFQ4bamoemT/AJRCijFxpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9DOTJCMzIzMkNF MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9tb203TjhWRGh0cWFoNlpQOEFsRUtLTVhH a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21vbTdOOFZEaHRxYWg2WlA4QWxFS0tNWEdrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczRC9DOTJCMzIzMkNFMUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9tb203TjhWRGh0 cWFoNlpQOEFsRUtLTVhHa2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDSrmxYZoALt4zQYJLoYwLV8iXuEiBcrP5JK9uXXwX6tXNNiUm8tx9 PtvlkPvpFjowfC7/bgWzzbneNxLX0Tt9dEHQZrHTKgbYsaVXMAH13/uff8OT0N2g Kd/wpd8B8E7TVOolyVevgEVyGpEKOUDUAXpheXesRMkMV4uD5qbiyY402jAg7SgG S6MhifhcasLPnw758DpLsZ9LqGPQ7GeLqYFMOA2gqc/f5sTgqVZiMTwQFqZkYp3y ZnM32MnbkKr4hLokptkR33YQaGeXPQKSNyMDStXiB5UfF5ugvauRR7LZx/ZKz4kl 3iZLdqehlkdF+OkdmrL7G42PmFPbB4MQ -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:19 2024 by rpki-client on console-ams.rpki-client.org