$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft File: fKdQzAmQd9S0MpCnYoOre_C2Smg.mft (raw, json) Hash identifier: Cc54wXjdXy6MIFClkCI0z7rH4UoeGbSfaF9gGoPtiwI= Subject key identifier: 08:E3:1E:52:89:6F:04:DE:54:F0:8B:89:18:9E:66:33:C3:4E:8C:B9 Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 Certificate issuer: /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Certificate serial: 065A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft Manifest number: 0655 Signing time: Fri 22 Nov 2024 22:00:07 +0000 Manifest this update: Fri 22 Nov 2024 22:00:07 +0000 Manifest next update: Fri 29 Nov 2024 22:00:07 +0000 Files and hashes: 1: fKdQzAmQd9S0MpCnYoOre_C2Smg.crl (hash: FRkxiJFzJdpSvgWylcwKpNNuzFRAb/akA7PYPlc1Otw=) 2: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (hash: 3jLF9eGaw1FaBCZ3IF1mgPL+uokkd/4XtJL3l6kO2Tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1626 (0x65a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Validity Not Before: Nov 22 22:00:07 2024 GMT Not After : Nov 29 22:00:07 2024 GMT Subject: CN=6740fee7-cf22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:60:a7:d7:d4:08:33:54:04:b8:1a:9e:3f:75: e7:63:4f:16:c0:2b:51:d9:82:b1:f2:4c:42:38:19: 96:a4:11:bb:23:0f:28:ea:51:bf:e2:cd:ef:aa:f6: 5a:c3:1a:96:b6:c6:7d:bc:8c:ff:b7:b1:89:7a:a5: 6f:09:37:6a:81:54:34:fa:c6:17:fc:06:94:68:38: 84:09:65:00:81:24:22:49:db:85:6a:30:be:fb:4c: b8:ce:e7:9e:86:76:b0:06:4d:b4:cb:5c:48:89:b6: 0a:46:df:c2:6e:70:c0:1a:6e:5b:f9:e1:6d:ad:45: 2c:cf:b8:ee:f5:48:dd:d2:de:ed:dd:3c:40:3e:b3: 70:e3:00:77:ce:03:7c:66:37:cf:a3:c1:fc:03:22: 41:69:2f:35:44:4c:dc:43:45:19:63:b5:34:0a:e1: 94:61:ac:98:8e:df:13:7b:a0:48:b4:6c:99:1c:84: 0c:52:89:5d:92:d4:60:e6:41:d2:49:37:48:3d:e9: 9e:3b:7c:54:46:19:8a:76:06:85:69:5a:e1:1d:23: 32:ac:a8:91:b4:1f:6a:5d:47:03:05:94:f8:1e:93: d2:7e:b8:be:9f:a2:42:21:6e:e9:55:3a:9b:37:54: a1:94:63:11:4d:e2:70:78:cd:b3:32:ff:c4:f9:30: b6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E3:1E:52:89:6F:04:DE:54:F0:8B:89:18:9E:66:33:C3:4E:8C:B9 X509v3 Authority Key Identifier: keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c5:06:55:c2:42:c8:3b:d5:b3:52:3a:e2:64:09:bb:9a:7c: bc:68:8c:4e:ff:c0:36:89:eb:57:1a:3a:52:61:15:c5:5c:f7: 1c:a8:4b:9d:c9:35:3b:3e:cf:5a:ce:8d:50:95:9f:cc:bd:43: 37:5a:d1:e7:be:62:70:14:9e:9e:80:b7:29:78:9a:5f:cb:0b: 8a:18:0e:ab:7d:16:19:c4:dd:9f:2a:14:49:c3:05:fc:ea:64: 78:2f:91:7c:8a:35:c7:34:45:8c:52:cc:01:48:66:b2:8e:2c: 7e:fc:4c:23:5c:54:d2:76:7f:2b:42:54:1e:68:c4:b6:ef:36: eb:5f:3f:7f:a5:7b:c3:64:46:cd:ae:b1:90:62:f2:71:4f:d1: 7f:ed:5a:10:93:6b:e9:f0:4b:c8:3f:7c:da:4b:58:24:4f:4c: 96:85:73:3f:37:74:6c:f8:66:d6:7f:29:d0:73:79:d2:a8:f1: 20:b5:d3:0b:7f:ae:56:9f:63:6b:b7:50:c1:bc:6a:a1:3a:f4: 00:20:b3:d8:6d:54:1d:ad:16:a0:d2:93:c7:8d:0a:c6:30:07: 16:06:8b:ac:5c:a1:ad:01:10:f1:05:85:4d:ae:9e:06:fe:99: 92:60:22:da:83:99:4d:34:ce:b6:03:35:8d:3f:fd:a7:fd:a2: cf:1e:2a:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAwRUQxMTAvBgNVBAUTKDdDQTc1MENDMDk5MDc3RDRCNDMyOTBBNzYyODNBQjdC RjBCNjRBNjgwHhcNMjQxMTIyMjIwMDA3WhcNMjQxMTI5MjIwMDA3WjAYMRYwFAYD VQQDEw02NzQwZmVlNy1jZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GCn19QIM1QEuBqeP3XnY08WwCtR2YKx8kxCOBmWpBG7Iw8o6lG/4s3vqvZa wxqWtsZ9vIz/t7GJeqVvCTdqgVQ0+sYX/AaUaDiECWUAgSQiSduFajC++0y4zuee hnawBk20y1xIibYKRt/CbnDAGm5b+eFtrUUsz7ju9Ujd0t7t3TxAPrNw4wB3zgN8 ZjfPo8H8AyJBaS81REzcQ0UZY7U0CuGUYayYjt8Te6BItGyZHIQMUoldktRg5kHS STdIPemeO3xURhmKdgaFaVrhHSMyrKiRtB9qXUcDBZT4HpPSfri+n6JCIW7pVTqb N1ShlGMRTeJweM2zMv/E+TC2vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjjHlKJ bwTeVPCLiRieZjPDToy5MB8GA1UdIwQYMBaAFHynUMwJkHfUtDKQp2KDq3vwtkpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDBFRC8wRUM5NEE4ODYy MjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5UzBNcENuWW9PcmVfQzJT bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZLZFF6QW1RZDlTME1wQ25Zb09yZV9DMlNtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDBFRC8wRUM5NEE4ODYyMjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5 UzBNcENuWW9PcmVfQzJTbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTxQZVwkLIO9WzUjriZAm7mny8aIxO/8A2ietXGjpSYRXFXPccqEud yTU7Ps9azo1QlZ/MvUM3WtHnvmJwFJ6egLcpeJpfywuKGA6rfRYZxN2fKhRJwwX8 6mR4L5F8ijXHNEWMUswBSGayjix+/EwjXFTSdn8rQlQeaMS27zbrXz9/pXvDZEbN rrGQYvJxT9F/7VoQk2vp8EvIP3zaS1gkT0yWhXM/N3Rs+GbWfynQc3nSqPEgtdML f65Wn2Nrt1DBvGqhOvQAILPYbVQdrRag0pPHjQrGMAcWBousXKGtARDxBYVNrp4G /pmSYCLag5lNNM62AzWNP/2n/aLPHiqN -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:37 2024 by rpki-client on console-ams.rpki-client.org