$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft File: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft (raw, json) Hash identifier: IyatNkdCuQr1SC582fVPB7PK08ISUdSWOYA1+AxWk2w= Subject key identifier: 86:A5:B1:4D:E8:0E:D7:C2:3B:08:44:6C:99:A2:48:EA:F5:B3:A4:07 Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC Certificate issuer: /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft Manifest number: 01C7 Signing time: Thu 21 Nov 2024 01:45:36 +0000 Manifest this update: Thu 21 Nov 2024 01:45:35 +0000 Manifest next update: Thu 28 Nov 2024 01:45:35 +0000 Files and hashes: 1: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl (hash: F9RhpcfcsL/pl24TcjGahnsaDyjd3x5hftW9nbwPZzc=) 2: FA957D0A80FA11ED9B35954DC4F9AE02.roa (hash: cB+yZz7NXLEFl+NAyUDxFvEYEWhBfd/lLd6SEh+qscM=) 3: F9F81E3480FA11ED9B35954DC4F9AE02.roa (hash: uF//tcko2WVqVVcNN8K7d2s/1bV6GiNlBkTpEaTcZJA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC Validity Not Before: Nov 21 01:45:35 2024 GMT Not After : Nov 28 01:45:35 2024 GMT Subject: CN=673e90bf-f2f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:50:89:d1:59:78:8e:47:da:73:9a:4d:4c: e1:85:33:73:c3:aa:c0:d3:66:3b:b4:b3:16:77:a2: 68:7c:0a:67:b1:fb:9a:8e:3a:ae:1c:af:38:be:74: 77:89:08:4a:77:a3:4b:ba:b2:58:88:fe:53:3c:78: 14:fe:1c:33:1c:37:80:63:1c:ee:3b:7d:09:0a:19: e7:0f:91:79:1d:3d:e3:eb:5b:26:47:a1:77:83:f4: a9:fa:8f:51:ee:98:65:90:34:2d:39:07:c5:eb:1a: 5d:80:3b:ce:35:0e:27:8d:95:0c:18:3a:c4:7e:2c: 5e:f9:dc:18:f0:14:47:36:77:47:d7:5e:1d:63:70: 64:24:1d:7b:a3:49:28:76:8f:c9:90:5d:28:80:b7: 76:3f:d0:b2:47:c1:ff:4c:a6:23:91:7e:11:e2:94: 96:07:ab:2f:52:41:6f:2a:76:9e:f0:31:56:6a:c2: 83:a1:fe:7f:60:6c:e8:80:c0:4c:d6:08:db:cb:0f: ee:b3:13:23:84:86:f4:4d:35:86:49:2a:8e:02:bc: 8d:2a:24:08:78:c8:ec:3d:ef:2f:1d:34:88:85:30: 71:ae:d0:cb:17:36:b7:06:11:4f:27:fa:a1:c3:c7: 9b:a6:80:2a:4a:b5:db:e0:3e:fb:eb:43:3f:5a:d9: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A5:B1:4D:E8:0E:D7:C2:3B:08:44:6C:99:A2:48:EA:F5:B3:A4:07 X509v3 Authority Key Identifier: keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e9:27:cf:af:20:be:6f:9b:7c:1b:37:9f:04:53:2b:40:fa: 98:e2:72:c5:15:5a:b5:d2:6a:bb:bd:cc:03:10:20:fd:0e:44: 20:62:c3:04:c5:3b:bf:0d:d6:2e:29:7d:73:3b:3a:11:ae:61: e7:70:fc:e7:29:86:e6:61:dd:f6:c8:dc:3b:74:e3:88:8a:fb: cc:25:60:e9:74:30:41:db:a2:82:d6:71:23:36:96:3d:b3:e6: 2f:45:be:19:8a:67:9d:b5:42:03:62:b2:f7:0b:45:bc:f7:0a: 9e:06:4e:88:44:95:34:91:62:22:b7:b8:45:53:e8:6b:1b:ea: 8d:55:2e:ef:f8:b3:3c:d1:85:75:67:bf:e1:bd:9a:5f:b5:ac: 11:fb:b5:42:70:ef:ff:7e:4e:a2:ab:8b:a3:b3:86:b7:54:cf: 04:ec:59:8a:5e:43:56:ae:7d:39:f5:c8:5b:6c:04:13:8e:55: 77:2e:1d:59:64:3f:65:36:47:2b:a0:42:41:d8:0d:56:1c:f6: c4:af:3d:b1:53:cf:ec:5d:09:1d:a4:c8:a4:4b:a6:d9:42:14: eb:1f:c0:eb:16:29:60:40:26:a1:c0:fd:2a:8d:18:0f:03:6c: 5d:24:e9:b9:08:3e:f2:7d:37:42:a1:b2:cd:17:88:12:5f:11: 5d:72:21:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxQUQxMTAvBgNVBAUTKEE0Q0QzRTY3RDFCMjI0RjMyNTA0N0U5RjVFNDg0QUNE QzRGNjYzRUMwHhcNMjQxMTIxMDE0NTM1WhcNMjQxMTI4MDE0NTM1WjAYMRYwFAYD VQQDEw02NzNlOTBiZi1mMmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tNQidFZeI5H2nOaTUzhhTNzw6rA02Y7tLMWd6JofApnsfuajjquHK84vnR3 iQhKd6NLurJYiP5TPHgU/hwzHDeAYxzuO30JChnnD5F5HT3j61smR6F3g/Sp+o9R 7phlkDQtOQfF6xpdgDvONQ4njZUMGDrEfixe+dwY8BRHNndH114dY3BkJB17o0ko do/JkF0ogLd2P9CyR8H/TKYjkX4R4pSWB6svUkFvKnae8DFWasKDof5/YGzogMBM 1gjbyw/usxMjhIb0TTWGSSqOAryNKiQIeMjsPe8vHTSIhTBxrtDLFza3BhFPJ/qh w8ebpoAqSrXb4D7760M/Wtn8MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIalsU3o DtfCOwhEbJmiSOr1s6QHMB8GA1UdIwQYMBaAFKTNPmfRsiTzJQR+n15ISs3E9mPs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80Q0NCMDA5MDJD QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQTWxCSDZmWGtoS3pjVDJZ LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BNMC1aOUd5SlBNbEJINmZYa2hLemNUMlktdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODFBRC80Q0NCMDA5MDJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQ TWxCSDZmWGtoS3pjVDJZLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP6SfPryC+b5t8GzefBFMrQPqY4nLFFVq10mq7vcwDECD9DkQgYsME xTu/DdYuKX1zOzoRrmHncPznKYbmYd32yNw7dOOIivvMJWDpdDBB26KC1nEjNpY9 s+YvRb4ZimedtUIDYrL3C0W89wqeBk6IRJU0kWIit7hFU+hrG+qNVS7v+LM80YV1 Z7/hvZpftawR+7VCcO//fk6iq4ujs4a3VM8E7FmKXkNWrn059chbbAQTjlV3Lh1Z ZD9lNkcroEJB2A1WHPbErz2xU8/sXQkdpMikS6bZQhTrH8DrFilgQCahwP0qjRgP A2xdJOm5CD7yfTdCobLNF4gSXxFdciE/ -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:09 2024 by rpki-client on console-fra.rpki-client.org