$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: VwyNJu4H8QGnk2gD4uheNh+JeP70cSUoI8VZGWSdDTg= Subject key identifier: 99:53:4D:F0:B9:DB:E5:4A:E2:7D:36:96:A9:75:20:CB:D5:1F:AA:3B Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: FC Signing time: Sat 23 Nov 2024 03:17:41 +0000 Manifest this update: Sat 23 Nov 2024 03:17:40 +0000 Manifest next update: Sat 30 Nov 2024 03:17:40 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: peieC512XzT4VSBbuz7l0b6JEygCj2zNo7OYigSoGDM=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: Q1Ci8XSusOlbJiaQgnsA9zwbSmyc3pDAXKY43VYpnTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: Nov 23 03:17:40 2024 GMT Not After : Nov 30 03:17:40 2024 GMT Subject: CN=67414954-32b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0b:3b:0e:f4:5c:83:5e:c7:b6:ff:e8:f5:8c: 14:dc:7d:6f:cf:d8:06:3f:9e:70:2f:50:84:15:82: d6:47:4e:fb:01:ed:1d:b5:85:5d:7a:c0:69:9d:98: 95:58:76:c3:e6:ec:25:02:d4:ba:a8:2a:b5:73:b8: 3a:ff:10:9f:ac:64:af:1d:c6:52:a5:c1:70:72:3a: 37:26:53:0e:21:5c:1a:20:08:3e:39:5d:e6:ba:44: 79:56:e8:3f:a9:2f:7e:70:64:8e:0b:f4:fa:4a:c6: 8a:46:67:2f:2f:09:4f:1d:6b:1e:be:76:39:4b:84: e0:8a:63:b2:79:52:7a:67:3f:dd:e7:6d:2d:3a:ee: 7d:fe:52:2e:18:ff:a6:2d:2e:d6:5c:5f:b0:8d:11: 30:0f:7a:c6:84:fb:be:3e:c3:3b:30:6b:49:c3:26: 46:c0:71:c9:dc:32:8b:2d:03:c1:79:28:36:89:af: 8c:43:58:3c:3a:6d:aa:4f:ae:3c:1b:6d:b2:9d:10: 15:20:5b:49:6a:f4:2e:61:7f:2f:77:c9:39:9f:50: 8a:21:14:29:8a:11:98:d7:c4:8c:6f:41:90:fa:be: 36:5a:d5:e0:33:46:01:33:e5:bd:1e:a5:6f:aa:e9: 81:80:dc:01:14:6e:af:9b:a8:93:38:29:b3:33:75: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:53:4D:F0:B9:DB:E5:4A:E2:7D:36:96:A9:75:20:CB:D5:1F:AA:3B X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:0a:08:be:37:15:72:5b:71:1e:da:ef:b3:19:d1:a3:db:cc: 1d:83:4a:46:1b:62:50:18:36:3f:42:0e:40:72:7f:1f:8d:52: 45:90:db:5e:30:84:78:28:ee:9a:3d:28:22:28:ae:13:9d:ab: 87:fd:70:87:60:29:cf:43:98:f6:47:fb:28:71:66:71:91:f6: fb:29:03:ae:5c:d8:09:d1:86:e1:14:93:4e:56:09:17:53:ef: af:1c:1e:68:58:22:22:7e:7f:c1:9e:f1:90:10:de:46:f0:a9: 5c:ac:6f:07:d0:6c:70:eb:e5:d8:ed:80:32:26:a3:5a:e9:3c: c8:2c:5c:4c:03:66:7a:c3:d0:49:61:81:d3:07:be:14:d9:ae: 1a:13:0b:d1:e2:69:d5:c4:54:08:48:2a:68:d8:b7:19:d0:ae: 57:c6:22:db:23:5e:49:11:c0:7f:41:91:33:7c:91:be:30:4e: d9:67:f4:57:b1:76:d7:3e:b9:2f:19:82:ee:b0:37:12:dd:3f: 05:a8:c8:7a:09:84:57:94:3a:4d:aa:3a:09:58:bc:e2:f1:eb: c8:c6:eb:0c:e6:73:41:ef:f4:a4:d8:64:d4:38:d1:e5:15:de: 14:b3:8b:fb:c6:9e:07:34:2e:93:cb:c5:c7:b3:10:ec:49:fc: 85:18:9e:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjQxMTIzMDMxNzQwWhcNMjQxMTMwMDMxNzQwWjAYMRYwFAYD VQQDEw02NzQxNDk1NC0zMmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gs7DvRcg17Htv/o9YwU3H1vz9gGP55wL1CEFYLWR077Ae0dtYVdesBpnZiV WHbD5uwlAtS6qCq1c7g6/xCfrGSvHcZSpcFwcjo3JlMOIVwaIAg+OV3mukR5Vug/ qS9+cGSOC/T6SsaKRmcvLwlPHWsevnY5S4TgimOyeVJ6Zz/d520tOu59/lIuGP+m LS7WXF+wjREwD3rGhPu+PsM7MGtJwyZGwHHJ3DKLLQPBeSg2ia+MQ1g8Om2qT648 G22ynRAVIFtJavQuYX8vd8k5n1CKIRQpihGY18SMb0GQ+r42WtXgM0YBM+W9HqVv qumBgNwBFG6vm6iTOCmzM3US4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlTTfC5 2+VK4n02lql1IMvVH6o7MB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwCgi+NxVyW3Ee2u+zGdGj28wdg0pGG2JQGDY/Qg5Acn8fjVJFkNte MIR4KO6aPSgiKK4TnauH/XCHYCnPQ5j2R/socWZxkfb7KQOuXNgJ0YbhFJNOVgkX U++vHB5oWCIifn/BnvGQEN5G8KlcrG8H0Gxw6+XY7YAyJqNa6TzILFxMA2Z6w9BJ YYHTB74U2a4aEwvR4mnVxFQISCpo2LcZ0K5XxiLbI15JEcB/QZEzfJG+ME7ZZ/RX sXbXPrkvGYLusDcS3T8FqMh6CYRXlDpNqjoJWLzi8evIxusM5nNB7/Sk2GTUONHl Fd4Us4v7xp4HNC6Ty8XHsxDsSfyFGJ6b -----END CERTIFICATE-----Generated at Sat Nov 23 05:03:00 2024 by rpki-client on console-fra.rpki-client.org