$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: AyjAuVx9DBL8K5hoGyyQ8KbRfVVVvuBYlzqJPatHfDs= Subject key identifier: 4D:45:8D:8F:53:45:A1:B2:B5:4E:5B:33:48:CB:4F:1C:BB:55:14:FE Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: C0 Signing time: Mon 25 Nov 2024 04:04:19 +0000 Manifest this update: Mon 25 Nov 2024 04:04:18 +0000 Manifest next update: Mon 02 Dec 2024 04:04:18 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: hs0Azuw9o5fb+RjOAV3osbAI9/+30vEfSWtTgr3Xbqs=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: 3GMLAnJmDhhd0m1larMtwrwk1UPsDhh/qmpaA5+afTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 03:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Nov 25 04:04:18 2024 GMT Not After : Dec 2 04:04:18 2024 GMT Subject: CN=6743f742-08d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:20:41:77:02:3c:13:5e:93:69:e6:4b:96: fe:fa:20:5d:ae:f7:a8:e3:03:f2:b4:a9:9e:7a:97: e5:1e:a4:e6:59:29:4d:09:3c:6b:14:7d:72:2c:bf: 11:13:e7:af:e5:f1:21:03:60:22:58:8f:a2:e2:8a: a4:cc:29:6d:5d:0e:d8:7d:68:1c:34:6e:11:a2:16: 55:27:05:4e:a2:0a:f6:1a:84:63:16:32:c1:9f:4e: 34:d8:ca:0e:30:e8:0b:48:e8:97:38:3f:84:ad:67: ad:5a:bd:fd:6b:de:b3:60:6f:2b:5a:f8:9c:a6:41: 5d:88:a2:a5:f1:8d:1e:33:1c:a2:68:9d:52:73:a4: e2:97:d2:91:74:cb:f9:76:11:7e:1b:33:b5:a9:20: 59:ad:75:09:8d:dd:ba:55:5b:1d:b6:4a:b4:d5:33: 67:af:6a:3e:03:ae:b3:09:02:f0:45:b9:9f:af:ac: e6:45:72:42:81:15:24:bb:59:7d:49:fc:e4:62:52: 55:12:86:67:49:dc:03:df:20:55:8a:e1:16:98:e0: 17:f6:27:54:97:c0:2a:cb:c4:31:f8:be:56:87:20: 7c:30:9e:49:7d:12:fc:50:4d:13:d0:66:c2:1c:b3: 0b:21:d0:49:a4:67:48:d3:c5:ca:52:34:7b:ec:8d: 8f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:45:8D:8F:53:45:A1:B2:B5:4E:5B:33:48:CB:4F:1C:BB:55:14:FE X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:29:4b:85:57:d8:fb:ac:8d:a3:33:d7:1c:a2:54:93:07:21: 7a:51:2a:64:a2:a4:b9:ae:e3:0f:5c:3d:d1:e6:ba:24:a0:b8: 8c:b8:d3:b5:86:e0:f3:47:a9:a6:8f:53:71:f3:f8:5a:9f:7c: ca:84:bf:35:c3:98:43:a6:bb:8a:7d:6b:69:34:4d:e0:2c:5f: b8:a5:29:d1:a3:3b:82:3f:e4:55:a5:f6:7e:5d:68:29:cb:6d: b9:4a:75:4a:d7:1b:fb:9a:bb:6a:df:b2:27:0b:86:0c:80:54: 5c:4b:46:ad:a4:d7:8e:d9:d9:35:2b:07:86:44:a5:0b:93:22: 2b:b4:ab:f0:de:cc:b1:8b:9a:69:a4:39:ad:ad:37:fa:ed:64: 4d:40:f7:19:3b:a7:91:b3:c3:46:70:16:8d:9c:1e:8f:44:4f: 61:11:1e:65:75:44:fc:cd:73:f9:2d:74:b9:77:87:52:a7:28: 2d:be:39:30:2c:49:ce:41:64:85:a1:cf:5e:64:19:6a:80:dd: cf:0b:c0:08:3e:8a:43:76:1e:ec:21:6d:27:55:01:2d:22:74: c7:5a:0f:6c:f9:5c:cc:03:a6:da:b7:e9:d2:5d:c6:50:9f:4f: 79:0d:ef:ac:94:34:49:f7:a5:ce:64:c0:87:d1:db:fc:2a:46: 07:53:ce:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjQxMTI1MDQwNDE4WhcNMjQxMjAyMDQwNDE4WjAYMRYwFAYD VQQDEw02NzQzZjc0Mi0wOGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn8gQXcCPBNek2nmS5b++iBdrveo4wPytKmeepflHqTmWSlNCTxrFH1yLL8R E+ev5fEhA2AiWI+i4oqkzCltXQ7YfWgcNG4RohZVJwVOogr2GoRjFjLBn0402MoO MOgLSOiXOD+ErWetWr39a96zYG8rWvicpkFdiKKl8Y0eMxyiaJ1Sc6Til9KRdMv5 dhF+GzO1qSBZrXUJjd26VVsdtkq01TNnr2o+A66zCQLwRbmfr6zmRXJCgRUku1l9 SfzkYlJVEoZnSdwD3yBViuEWmOAX9idUl8Aqy8Qx+L5WhyB8MJ5JfRL8UE0T0GbC HLMLIdBJpGdI08XKUjR77I2P6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1FjY9T RaGytU5bM0jLTxy7VRT+MB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7KUuFV9j7rI2jM9ccolSTByF6USpkoqS5ruMPXD3R5rokoLiMuNO1 huDzR6mmj1Nx8/han3zKhL81w5hDpruKfWtpNE3gLF+4pSnRozuCP+RVpfZ+XWgp y225SnVK1xv7mrtq37InC4YMgFRcS0atpNeO2dk1KweGRKULkyIrtKvw3syxi5pp pDmtrTf67WRNQPcZO6eRs8NGcBaNnB6PRE9hER5ldUT8zXP5LXS5d4dSpygtvjkw LEnOQWSFoc9eZBlqgN3PC8AIPopDdh7sIW0nVQEtInTHWg9s+VzMA6bat+nSXcZQ n095De+slDRJ96XOZMCH0dv8KkYHU87l -----END CERTIFICATE-----Generated at Mon Nov 25 04:44:02 2024 by rpki-client on console-ams.rpki-client.org