$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft File: xUK94Lg0fDed4d4dgkOpLLlMh00.mft (raw, json) Hash identifier: EKtLPm84FSKGOC/RCx0SiSo9AMFZzTt1MmlhZOnSz4M= Subject key identifier: 8E:BA:4D:77:E8:64:E1:AA:19:E5:F3:90:C8:09:35:6B:AE:8F:9E:B4 Authority key identifier: C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D Certificate issuer: /CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft Manifest number: A0 Signing time: Sat 23 Nov 2024 04:19:47 +0000 Manifest this update: Sat 23 Nov 2024 04:19:46 +0000 Manifest next update: Sat 30 Nov 2024 04:19:46 +0000 Files and hashes: 1: xUK94Lg0fDed4d4dgkOpLLlMh00.crl (hash: Y7PzZGnIgqXECWrUscCOp7HWFAvWLfwDmmT9nuWHyzE=) 2: FE9EA8D4B67A11EEB24FA643C4F9AE02.roa (hash: yVJ5vVhcvh07DTWMIUUrXFoLzgDKRoP+ZXjLJb156dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB297/serialNumber=C542BDE0B8347C379DE1DE1D8243A92CB94C874D Validity Not Before: Nov 23 04:19:46 2024 GMT Not After : Nov 30 04:19:46 2024 GMT Subject: CN=674157e3-e4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:51:40:0d:15:cc:84:20:e5:f2:c0:95:74: f9:2c:dd:c7:ec:50:c9:18:f0:6c:5a:be:57:ba:cd: 54:d8:a7:ed:3f:0f:78:a6:48:3d:c4:60:60:be:c2: 5e:a5:51:af:c3:1c:db:89:16:2f:ee:54:e3:3c:f5: 52:07:84:ab:43:6c:a9:9c:f0:e9:1b:28:25:13:ba: 76:b2:55:da:11:df:46:24:50:16:7c:f3:46:e1:e3: 67:69:89:d8:41:aa:63:18:d1:0e:e5:2c:3a:16:d8: d1:c5:cf:5e:c4:fa:f8:34:2f:f5:1b:bf:45:43:3c: a3:aa:2e:f1:bf:69:5b:f8:c8:fb:bb:98:f7:60:b3: d2:19:d1:a2:61:67:d7:27:d0:8a:a2:a8:45:80:71: d7:33:cb:60:8b:59:b9:61:b1:ec:4f:94:a0:44:81: 85:9b:ad:21:91:98:d2:69:eb:6b:2a:18:b2:eb:71: b0:cc:31:39:51:13:9c:c9:60:ef:6e:39:ff:09:f0: 3c:e1:75:bd:24:06:a5:fe:df:d0:87:22:90:b3:97: 36:b5:19:05:c0:76:b3:8b:73:6f:c3:81:da:17:54: 80:be:4c:7a:e9:c7:2e:8d:f1:df:38:dc:35:a1:df: c2:51:fa:fb:c4:4d:84:6e:b8:28:4b:5f:34:ba:f1: 59:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BA:4D:77:E8:64:E1:AA:19:E5:F3:90:C8:09:35:6B:AE:8F:9E:B4 X509v3 Authority Key Identifier: keyid:C5:42:BD:E0:B8:34:7C:37:9D:E1:DE:1D:82:43:A9:2C:B9:4C:87:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUK94Lg0fDed4d4dgkOpLLlMh00.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/9A890E6EB5E111EEA0A6176DC4F9AE02/xUK94Lg0fDed4d4dgkOpLLlMh00.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ce:5c:46:fa:98:e4:88:b4:21:a6:f2:b8:de:63:da:9e:a6: 8a:2a:cf:2f:d0:2b:c9:f8:55:df:f2:7c:87:c2:8f:b5:08:c3: 59:85:fb:24:08:5d:9b:2b:3d:2f:84:a7:28:6a:2b:29:8c:3e: f9:4b:15:77:74:88:4c:70:a1:61:12:a2:48:2c:d0:ed:da:21: fb:83:dd:0b:e2:19:41:61:fb:16:a8:57:c1:a1:20:71:90:9e: ed:b1:a0:65:9e:94:cc:80:35:09:af:ec:07:9a:87:3d:d1:b6: da:51:6c:40:0a:ec:1b:20:77:21:96:8d:0f:aa:fd:fe:c6:e8: 34:34:35:a8:22:78:2a:f6:7a:42:d5:95:ca:a0:86:cf:9a:fe: 9e:0f:96:09:12:94:aa:58:04:2f:89:17:f1:be:bf:f6:bd:29: f3:bc:73:27:99:74:05:5e:6f:5d:de:a8:93:de:53:a6:cf:6e: d6:20:db:82:a4:7a:af:da:01:c1:ce:0d:f2:57:2b:9a:f4:12: a9:81:66:72:d6:60:30:76:63:0d:b6:60:b0:bd:32:7d:38:58: 96:44:7b:f1:22:54:4d:4c:09:13:c8:85:8b:05:07:fb:4a:3e: e4:02:95:62:23:bb:d4:a5:4a:f4:d8:8d:ab:94:23:88:a4:47: 51:f5:f3:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIyOTcxMTAvBgNVBAUTKEM1NDJCREUwQjgzNDdDMzc5REUxREUxRDgyNDNBOTJD Qjk0Qzg3NEQwHhcNMjQxMTIzMDQxOTQ2WhcNMjQxMTMwMDQxOTQ2WjAYMRYwFAYD VQQDEw02NzQxNTdlMy1lNGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyb9RQA0VzIQg5fLAlXT5LN3H7FDJGPBsWr5Xus1U2KftPw94pkg9xGBgvsJe pVGvwxzbiRYv7lTjPPVSB4SrQ2ypnPDpGyglE7p2slXaEd9GJFAWfPNG4eNnaYnY QapjGNEO5Sw6FtjRxc9exPr4NC/1G79FQzyjqi7xv2lb+Mj7u5j3YLPSGdGiYWfX J9CKoqhFgHHXM8tgi1m5YbHsT5SgRIGFm60hkZjSaetrKhiy63GwzDE5UROcyWDv bjn/CfA84XW9JAal/t/QhyKQs5c2tRkFwHazi3Nvw4HaF1SAvkx66ccujfHfONw1 od/CUfr7xE2EbrgoS180uvFZbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI66TXfo ZOGqGeXzkMgJNWuuj560MB8GA1UdIwQYMBaAFMVCveC4NHw3neHeHYJDqSy5TIdN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjI5Ny85QTg5MEU2RUI1 RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZEZWQ0ZDRkZ2tPcExMbE1o MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hVSzk0TGcwZkRlZDRkNGRna09wTExsTWgwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjI5Ny85QTg5MEU2RUI1RTExMUVFQTBBNjE3NkRDNEY5QUUwMi94VUs5NExnMGZE ZWQ0ZDRkZ2tPcExMbE1oMDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8zlxG+pjkiLQhpvK43mPanqaKKs8v0CvJ+FXf8nyHwo+1CMNZhfsk CF2bKz0vhKcoaispjD75SxV3dIhMcKFhEqJILNDt2iH7g90L4hlBYfsWqFfBoSBx kJ7tsaBlnpTMgDUJr+wHmoc90bbaUWxACuwbIHchlo0Pqv3+xug0NDWoIngq9npC 1ZXKoIbPmv6eD5YJEpSqWAQviRfxvr/2vSnzvHMnmXQFXm9d3qiT3lOmz27WINuC pHqv2gHBzg3yVyua9BKpgWZy1mAwdmMNtmCwvTJ9OFiWRHvxIlRNTAkTyIWLBQf7 Sj7kApViI7vUpUr02I2rlCOIpEdR9fM2 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:27 2024 by rpki-client on console-ams.rpki-client.org