$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft File: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft (raw, json) Hash identifier: kVQBjKqnTkIL0RwGtVG49LBK8r10Wl5ryxGBSoYbVeY= Subject key identifier: 76:C1:9C:AF:F6:59:EA:7D:0E:C9:59:B2:62:86:A3:50:0E:F7:C9:06 Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft Manifest number: 08EC Signing time: Fri 22 Nov 2024 20:09:45 +0000 Manifest this update: Fri 22 Nov 2024 20:09:44 +0000 Manifest next update: Fri 29 Nov 2024 20:09:44 +0000 Files and hashes: 1: AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl (hash: Hs2txHfSXHIUdYlzSO2e2Q/IR0SZgHg5uoDO3qpEJM8=) 2: 84D32F2AE32411EA800C6724C4F9AE02.roa (hash: QM6yiuNN4HsQC994z+CdWb6oLYSKQw2/aCC7nDolw/E=) 3: 38EC4D321F2711EB93A71042C4F9AE02.roa (hash: OKqVFD1uZroQnXYiHQdFbraVnh1GYUqvC3EFoMwpZqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Validity Not Before: Nov 22 20:09:44 2024 GMT Not After : Nov 29 20:09:44 2024 GMT Subject: CN=6740e509-2547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:83:84:12:44:2f:04:c0:16:7c:9a:2c:6d: 34:bb:9e:d8:1a:cf:14:ce:88:94:ca:66:c7:3c:42: a1:a9:38:56:a3:ed:05:94:95:03:13:d0:47:16:f3: d9:a2:c8:46:a6:6b:b8:e4:08:39:7a:da:5b:77:db: 9f:d4:74:65:14:64:92:99:1e:59:ef:ac:fd:52:35: c1:f0:6f:5c:40:21:78:e5:3e:cc:af:e7:7c:41:f1: 22:f5:5b:52:81:aa:e8:2c:88:a1:90:4c:ac:a8:21: 10:8e:1e:9a:92:3b:ff:be:d5:d0:6f:82:9e:89:3f: 56:67:a6:9d:22:93:2c:0b:c7:e9:8c:e3:c4:b8:46: 62:a6:01:e0:9a:21:9e:b3:e9:65:3e:b3:0d:f7:19: 3f:ca:38:81:5d:a1:b1:63:e1:fa:0d:5e:b2:fb:77: 1d:a7:f6:8b:c3:83:88:07:c2:ca:2a:f0:88:e8:73: 7f:cf:c1:d5:4d:73:b8:01:ea:99:15:48:05:1e:3f: cd:b3:4e:f7:16:8e:5c:be:ba:61:0a:79:5c:11:1a: 80:45:3e:92:41:5f:bc:a7:d9:2a:4d:05:e7:3a:13: a8:b0:84:20:a7:e9:b4:d4:0d:67:2f:d9:fc:8c:f9: 89:2c:e6:22:9c:5d:99:9b:cc:f7:7b:51:29:05:24: 76:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C1:9C:AF:F6:59:EA:7D:0E:C9:59:B2:62:86:A3:50:0E:F7:C9:06 X509v3 Authority Key Identifier: keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:94:62:d3:d4:7a:b7:80:8c:d4:ac:40:3b:0c:e6:55:cc:2f: b6:ab:f5:42:1c:71:f1:b3:83:92:ab:8b:69:ce:a3:04:aa:c9: 35:a0:4f:2d:98:55:ca:ce:f0:87:9c:26:a0:f1:ea:26:b6:8d: de:86:e2:c9:c4:68:f7:01:ad:a6:c5:c8:a6:f7:52:ff:bf:df: 14:19:bd:b6:6a:42:1c:c1:e1:f4:cd:e3:85:f7:64:35:79:79: dd:07:dc:2e:52:f2:1d:d2:af:5a:a9:67:f0:4e:72:d9:66:df: 66:d8:e0:16:a5:3a:99:9c:ed:4a:27:cf:0d:4e:06:fc:0f:fe: ae:e4:73:ce:48:c8:48:3d:3f:77:94:ef:1f:0d:d0:17:c5:54: 18:89:1e:7f:2e:64:a2:2b:29:31:10:38:7b:0c:e0:6f:e1:c0: 6d:1d:37:87:35:19:56:56:c2:68:0b:34:68:b1:ed:d5:1d:d6: 43:79:b8:06:27:56:ac:18:05:29:34:07:41:ea:15:c9:b0:dd: d6:92:56:25:4e:1c:7b:06:e5:aa:fe:f3:ad:5b:a1:96:81:56: db:55:3d:25:2e:05:58:52:5d:6d:94:d5:f5:b1:00:2b:98:db: 3b:78:c6:6a:52:79:55:7b:3c:a5:23:01:53:7c:ec:ce:44:02: 3f:7b:39:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3 NTYzOTAwMTYwHhcNMjQxMTIyMjAwOTQ0WhcNMjQxMTI5MjAwOTQ0WjAYMRYwFAYD VQQDEw02NzQwZTUwOS0yNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBODhBJELwTAFnyaLG00u57YGs8UzoiUymbHPEKhqThWo+0FlJUDE9BHFvPZ oshGpmu45Ag5etpbd9uf1HRlFGSSmR5Z76z9UjXB8G9cQCF45T7Mr+d8QfEi9VtS garoLIihkEysqCEQjh6akjv/vtXQb4KeiT9WZ6adIpMsC8fpjOPEuEZipgHgmiGe s+llPrMN9xk/yjiBXaGxY+H6DV6y+3cdp/aLw4OIB8LKKvCI6HN/z8HVTXO4AeqZ FUgFHj/Ns073Fo5cvrphCnlcERqART6SQV+8p9kqTQXnOhOosIQgp+m01A1nL9n8 jPmJLOYinF2Zm8z3e1EpBSR2SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbBnK/2 Wep9DslZsmKGo1AO98kGMB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5 MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDdFRi84QTI5MTA0Njk5MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNI SWRmNFQzVE5Cd3QxWTVBQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8lGLT1Hq3gIzUrEA7DOZVzC+2q/VCHHHxs4OSq4tpzqMEqsk1oE8t mFXKzvCHnCag8eomto3ehuLJxGj3Aa2mxcim91L/v98UGb22akIcweH0zeOF92Q1 eXndB9wuUvId0q9aqWfwTnLZZt9m2OAWpTqZnO1KJ88NTgb8D/6u5HPOSMhIPT93 lO8fDdAXxVQYiR5/LmSiKykxEDh7DOBv4cBtHTeHNRlWVsJoCzRose3VHdZDebgG J1asGAUpNAdB6hXJsN3WklYlThx7BuWq/vOtW6GWgVbbVT0lLgVYUl1tlNX1sQAr mNs7eMZqUnlVezylIwFTfOzORAI/ezmX -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org