$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json) Hash identifier: rqNxdU2e+unsSrCd+XELHPI2A2iilsasNs+scmtLpW4= Subject key identifier: 26:BD:5E:67:AA:A3:32:25:78:51:AA:F7:54:9D:F1:00:F8:CA:7E:09 Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Certificate serial: 0BEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft Manifest number: 0BD6 Signing time: Fri 22 Nov 2024 18:35:38 +0000 Manifest this update: Fri 22 Nov 2024 18:35:38 +0000 Manifest next update: Fri 29 Nov 2024 18:35:38 +0000 Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: INqSvbUwM7C31qfCQ21Y15pgS7+Oe3Ujz4/0WQqgR/0=) 2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: Tra2m9br+70DR7E4OQkNdt1e6QXjZmJJfqTvZfV9wL0=) 3: 3762D3A44BA311EEA33D4B34C4F9AE02.roa (hash: 7jGf0oL08kyRPkfbbjOTxtmf2H3WTL9jhNs8s/Yud9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3054 (0xbee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Validity Not Before: Nov 22 18:35:38 2024 GMT Not After : Nov 29 18:35:38 2024 GMT Subject: CN=6740cefa-a547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:71:a3:3a:4d:f2:0d:ae:c3:48:a6:7b:b0: b9:59:65:19:da:b4:74:2d:87:ac:56:43:2b:25:b1: 37:2f:1d:c9:65:84:c0:38:aa:29:1e:cd:0e:f4:4b: a2:33:8c:72:e2:45:7d:b7:a7:9e:d7:dc:29:8a:df: 96:df:42:4d:fa:c3:f6:69:f3:8b:3d:ec:e0:31:da: 9e:2f:0d:8d:f5:7e:e0:ec:bd:bd:5d:cc:1e:f1:49: 64:34:09:72:9f:20:21:ad:e3:0a:22:8f:2b:b3:ce: 6b:b5:77:64:02:9d:fc:39:d4:62:61:15:a0:26:70: 77:34:56:c9:6a:0e:69:f6:ac:19:c8:5c:55:da:3c: 0c:da:08:06:5e:c8:72:47:14:1c:95:4d:85:e5:eb: 1a:1e:5c:00:34:52:50:6d:2a:f0:fb:34:e1:21:e5: 43:7e:50:fc:2f:df:6c:6c:f5:f5:52:bf:7f:d9:7f: 42:92:1f:5a:20:47:59:ab:ea:be:91:24:19:8e:65: d6:a3:30:a9:4e:6e:37:75:a3:61:ee:40:4b:53:13: 15:14:d1:49:e4:e3:11:6c:63:c9:bb:c0:f3:81:0d: 9b:71:30:a7:5c:5d:64:3d:33:cd:b6:38:5e:06:f4: ab:2f:71:4f:3d:9f:9c:4b:46:33:ce:ed:d5:be:d3: 2f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BD:5E:67:AA:A3:32:25:78:51:AA:F7:54:9D:F1:00:F8:CA:7E:09 X509v3 Authority Key Identifier: keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b0:0c:4b:1a:a6:20:52:60:28:e3:e0:e6:c6:86:c4:02:f2: 4e:c7:2e:d4:a4:5a:b1:8b:ba:8e:9c:e7:4c:b8:90:6e:09:5c: 3e:25:5b:2c:7c:40:ea:1c:de:ea:81:5a:08:72:ce:2d:35:34: 80:d1:1e:13:1b:e8:58:f2:54:6d:03:2c:59:1c:62:db:27:82: 59:82:f5:c3:da:7a:5b:5d:c9:42:c1:03:2f:4f:4c:1c:d0:21: 06:6c:bb:17:c5:e4:b8:c6:f7:15:7d:1f:dc:46:52:72:bd:f1: f8:91:84:95:fd:21:86:d3:07:d5:d8:0e:f4:74:ca:b8:04:a7: 58:45:ad:2d:fc:76:b2:43:5a:e8:3b:c0:bf:54:03:1a:24:4f: 82:2c:f9:07:92:07:a6:32:cd:64:23:b4:8b:a2:19:f5:08:e9: 08:05:9c:0e:09:bd:59:34:b0:56:82:c8:33:c2:69:87:91:da: 76:1d:2e:02:aa:97:aa:30:d4:4b:8b:df:01:1e:02:49:9d:b7: 10:21:39:4b:81:78:22:02:2f:59:e4:1c:ea:a5:e2:0b:8d:52: d3:92:45:4d:ef:59:49:76:39:0b:19:ea:15:cd:0b:c5:b9:c9: eb:e5:3b:51:b6:1f:26:2c:ba:fc:aa:be:36:0c:53:68:79:80: 5b:3f:38:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy NTNBQkQwMjYwHhcNMjQxMTIyMTgzNTM4WhcNMjQxMTI5MTgzNTM4WjAYMRYwFAYD VQQDEw02NzQwY2VmYS1hNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxlxozpN8g2uw0ime7C5WWUZ2rR0LYesVkMrJbE3Lx3JZYTAOKopHs0O9Eui M4xy4kV9t6ee19wpit+W30JN+sP2afOLPezgMdqeLw2N9X7g7L29Xcwe8UlkNAly nyAhreMKIo8rs85rtXdkAp38OdRiYRWgJnB3NFbJag5p9qwZyFxV2jwM2ggGXshy RxQclU2F5esaHlwANFJQbSrw+zThIeVDflD8L99sbPX1Ur9/2X9Ckh9aIEdZq+q+ kSQZjmXWozCpTm43daNh7kBLUxMVFNFJ5OMRbGPJu8DzgQ2bcTCnXF1kPTPNtjhe BvSrL3FPPZ+cS0Yzzu3VvtMvywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCa9Xmeq ozIleFGq91Sd8QD4yn4JMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAssAxLGqYgUmAo4+DmxobEAvJOxy7UpFqxi7qOnOdMuJBuCVw+JVss fEDqHN7qgVoIcs4tNTSA0R4TG+hY8lRtAyxZHGLbJ4JZgvXD2npbXclCwQMvT0wc 0CEGbLsXxeS4xvcVfR/cRlJyvfH4kYSV/SGG0wfV2A70dMq4BKdYRa0t/HayQ1ro O8C/VAMaJE+CLPkHkgemMs1kI7SLohn1COkIBZwOCb1ZNLBWgsgzwmmHkdp2HS4C qpeqMNRLi98BHgJJnbcQITlLgXgiAi9Z5BzqpeILjVLTkkVN71lJdjkLGeoVzQvF ucnr5TtRth8mLLr8qr42DFNoeYBbPzjI -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org