$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: 63YyAh0MdPWfHTZ+iIt1crvD0clT1rEpQaH1ogFO380= Subject key identifier: 89:29:D3:4B:8B:1F:6B:B7:88:42:7E:25:1C:65:8F:93:E4:FE:36:A2 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 01D3 Signing time: Thu 21 Nov 2024 01:48:09 +0000 Manifest this update: Thu 21 Nov 2024 01:48:08 +0000 Manifest next update: Thu 28 Nov 2024 01:48:08 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: 7NbHgUQ3lxh1KtDf5KyxU3p7gNTKIpmKakdmHYlLxkw=) 2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: y/yqA+YfkslOmOrwS/VYytcbFmbJaH+u4LRMv4+OOSQ=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: WDbglvOn95tuIlpktbaG0blllFtFk0P6mtQAsNXqVlI=) 4: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: 1Lnaosa/OY0RTGhcXjsPmYkBR63tS7Qpn/EZaqAxnaM=) 5: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: gVDLzFxD2tTXT3/N7woH15fz8r/mQqWD4IXL5ujPovo=) 6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: nuueDOx0/+apmDU7DZPGRGBg+qRwYmEeSxZjhAXG0Z4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Nov 21 01:48:08 2024 GMT Not After : Nov 28 01:48:08 2024 GMT Subject: CN=673e9158-4b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:d8:db:b6:2a:26:0c:18:ff:d9:90:cd:04: fc:dd:80:47:7d:43:88:64:35:e0:01:fc:fb:90:7d: de:47:04:2d:97:e5:c2:b4:d5:db:e4:af:58:80:55: 13:5a:0a:fb:88:d6:13:1d:f7:08:b5:96:3a:8b:00: 85:e8:fb:71:1b:aa:ba:55:8f:bb:b3:27:5c:71:a9: 58:a6:fa:e7:1a:14:ac:aa:ba:04:3d:0f:53:be:f2: 81:75:ce:35:65:aa:0d:88:1b:42:a7:9a:68:84:b2: c7:89:a5:8c:4a:80:ac:77:f1:85:08:3b:6d:66:33: 8e:48:7c:93:07:80:9a:d0:e0:a8:aa:96:21:2a:b8: df:de:8f:77:d9:82:32:eb:ef:3b:5d:70:b0:9e:39: d9:76:98:d7:2d:56:13:42:e4:7d:96:93:c2:e5:d9: b9:3a:a4:49:1f:b9:85:f0:91:0e:5f:2c:b0:35:d6: ae:f3:67:5d:54:ec:bc:b2:c8:5b:96:02:0c:fa:52: ee:06:9f:47:1e:48:7a:6a:ec:e9:34:c9:93:a2:ee: b1:6c:f3:f6:14:0e:6e:9e:66:3c:16:fb:67:bd:e2: 0f:08:e7:c4:86:ef:08:61:9c:d2:ac:ee:4f:a1:b5: d1:f4:b3:18:cc:b7:7b:2c:c8:9b:e1:1f:56:e5:0b: 07:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:29:D3:4B:8B:1F:6B:B7:88:42:7E:25:1C:65:8F:93:E4:FE:36:A2 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:fa:52:22:90:44:45:d2:50:14:10:fc:df:be:95:cd:d5:fd: 0d:2d:68:06:43:a3:31:96:9b:e8:ea:d0:f6:46:03:d4:b1:a1: 59:e0:19:ce:dd:58:de:40:11:8f:3b:5e:2b:46:cf:0d:e6:5a: 8a:87:6b:8c:40:6a:44:a0:79:88:c2:e7:6a:60:f1:35:95:86: 65:e0:d8:f6:2f:69:ba:98:f5:08:9e:fd:8b:bb:66:ee:a6:16: de:cd:30:3a:90:1c:6f:15:ee:bc:f4:27:8e:a0:e0:28:50:20: 83:7e:7e:19:a3:ef:04:ef:e0:94:c7:7e:61:5d:04:ba:d9:18: 7d:63:d2:73:7c:35:31:1d:ce:5a:15:d6:ca:53:e2:e9:6d:36: 69:52:b2:83:4d:bf:06:a2:a9:7e:27:bf:dc:70:b0:b2:1f:60: ae:17:dc:7e:b8:1c:16:6c:d0:01:16:52:c1:a4:f4:be:71:8e: e8:d1:ec:51:d4:80:58:08:87:e7:2d:b6:e9:04:43:e7:12:1b: d4:fe:ac:b7:00:7b:33:18:39:a5:34:80:bd:65:ed:0e:96:38: 5a:69:62:a0:da:e4:e6:e1:1b:09:53:38:bd:24:9a:86:38:0b: 81:4f:8c:bf:01:8d:93:c9:22:f7:bd:0a:f2:e3:d2:68:ae:00: 21:00:8c:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjQxMTIxMDE0ODA4WhcNMjQxMTI4MDE0ODA4WjAYMRYwFAYD VQQDEw02NzNlOTE1OC00YjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s/Y27YqJgwY/9mQzQT83YBHfUOIZDXgAfz7kH3eRwQtl+XCtNXb5K9YgFUT Wgr7iNYTHfcItZY6iwCF6PtxG6q6VY+7sydccalYpvrnGhSsqroEPQ9TvvKBdc41 ZaoNiBtCp5pohLLHiaWMSoCsd/GFCDttZjOOSHyTB4Ca0OCoqpYhKrjf3o932YIy 6+87XXCwnjnZdpjXLVYTQuR9lpPC5dm5OqRJH7mF8JEOXyywNdau82ddVOy8sshb lgIM+lLuBp9HHkh6auzpNMmTou6xbPP2FA5unmY8FvtnveIPCOfEhu8IYZzSrO5P obXR9LMYzLd7LMib4R9W5QsHkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkp00uL H2u3iEJ+JRxlj5Pk/jaiMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj+lIikERF0lAUEPzfvpXN1f0NLWgGQ6Mxlpvo6tD2RgPUsaFZ4BnO 3VjeQBGPO14rRs8N5lqKh2uMQGpEoHmIwudqYPE1lYZl4Nj2L2m6mPUInv2Lu2bu phbezTA6kBxvFe689CeOoOAoUCCDfn4Zo+8E7+CUx35hXQS62Rh9Y9JzfDUxHc5a FdbKU+LpbTZpUrKDTb8Goql+J7/ccLCyH2CuF9x+uBwWbNABFlLBpPS+cY7o0exR 1IBYCIfnLbbpBEPnEhvU/qy3AHszGDmlNIC9Ze0OljhaaWKg2uTm4RsJUzi9JJqG OAuBT4y/AY2TySL3vQry49JorgAhAIwi -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:56 2024 by rpki-client on console-ams.rpki-client.org