$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft File: AgWcvp-GRsVguhhH2euIPY0dRJ0.mft (raw, json) Hash identifier: U/4O3owLqNAQOxsBtoY6U6V+fVVHXGQqvch07rgvirQ= Subject key identifier: 9A:FD:7C:EE:0A:CB:AF:B3:CD:E8:04:6D:4B:F8:A8:CB:A3:A1:1A:C9 Authority key identifier: 02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D Certificate issuer: /CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Certificate serial: 036E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft Manifest number: 036B Signing time: Sat 23 Nov 2024 00:29:17 +0000 Manifest this update: Sat 23 Nov 2024 00:29:16 +0000 Manifest next update: Sat 30 Nov 2024 00:29:16 +0000 Files and hashes: 1: AgWcvp-GRsVguhhH2euIPY0dRJ0.crl (hash: jkL4gYQhIE8AVeMzYLlltaxm567uOG4Igh0NGZ1LUys=) 2: 3D2A9DB0897D11ECAE8A760BC4F9AE02.roa (hash: ZhHVqRfjUTG6IoZU0e/IjUfz93SIgyKZrFjBx0NRxRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 878 (0x36e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A0/serialNumber=02059CBE9F8646C560BA1847D9EB883D8D1D449D Validity Not Before: Nov 23 00:29:16 2024 GMT Not After : Nov 30 00:29:16 2024 GMT Subject: CN=674121dd-694f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:35:c8:ae:dc:c5:b7:2a:de:d0:24:a9:fa:d5: 07:81:64:20:6c:3a:9f:0a:1d:f5:13:5a:90:d1:6f: b1:ec:33:96:64:7d:93:e6:e8:d7:3f:51:1a:d6:d9: 2e:71:6a:79:ad:c1:dc:08:db:35:4c:e0:57:e3:76: bc:bb:ae:40:0f:33:97:8c:61:bc:5f:2c:b9:52:2f: be:65:1f:f9:85:5e:98:91:24:7f:33:91:75:d1:9e: b5:d6:4a:a5:2f:4d:19:13:3b:fd:83:76:5c:cf:da: ab:d2:7a:17:82:87:b2:aa:42:00:89:3e:98:67:94: 83:6e:3d:0d:27:9d:84:bd:61:91:83:3f:a9:31:37: a0:63:19:54:58:3b:37:f7:f0:5f:be:b4:0b:c3:60: 9e:eb:4b:a5:37:6a:bf:89:5b:74:00:f3:39:9a:9a: 11:16:58:e3:39:0d:46:e6:08:73:4c:3d:e5:d0:95: 8e:22:40:91:1f:a0:aa:5c:e2:45:a1:18:a1:19:52: bf:16:0a:dc:45:88:2d:21:dd:1a:a7:15:07:05:1e: 42:d9:be:b4:43:60:b0:56:ae:36:38:0c:92:ed:56: 97:be:2c:d3:b9:1e:16:8e:b2:bd:3c:72:c7:d0:9f: b5:de:8a:03:4b:29:d8:4c:ff:13:ab:8c:9f:ae:71: e2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FD:7C:EE:0A:CB:AF:B3:CD:E8:04:6D:4B:F8:A8:CB:A3:A1:1A:C9 X509v3 Authority Key Identifier: keyid:02:05:9C:BE:9F:86:46:C5:60:BA:18:47:D9:EB:88:3D:8D:1D:44:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AgWcvp-GRsVguhhH2euIPY0dRJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A0/14061936897911EC95CF1D82C4F9AE02/AgWcvp-GRsVguhhH2euIPY0dRJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:db:d1:27:2b:da:12:3f:de:1a:76:93:37:23:dc:82:a2:ac: db:e4:e2:bb:c5:91:b1:b5:45:35:af:cf:68:e7:f2:dd:3a:93: bc:e4:22:ab:40:f9:33:58:79:51:9c:52:c3:d5:48:b3:19:5f: 1b:21:43:d2:bc:3f:42:b6:d8:fc:60:66:02:d4:ca:f3:e9:e0: ca:9c:c7:8e:eb:bc:af:46:69:93:99:a1:9b:71:5a:54:11:85: 34:1a:ed:66:4b:91:bb:9c:a1:af:5b:89:ce:82:01:57:44:2f: c5:02:32:a9:72:ad:b3:01:40:d8:82:20:c8:6c:6c:4b:3d:4c: 94:76:19:02:f5:a6:6d:e6:59:89:f4:cf:b6:6c:71:de:e7:50: cf:44:c9:36:62:a6:6b:e5:3a:50:01:50:2b:e5:58:04:36:8d: 45:07:47:dc:c8:24:d1:eb:e7:6c:b2:a4:b2:1b:a0:1c:2d:a2: 9c:64:26:be:d4:98:ed:61:46:e8:cd:2b:a5:66:07:e4:5e:ba: 0c:29:76:f8:c8:ff:c8:38:36:5d:fc:69:a1:00:9b:82:1e:2c: 62:36:b3:cb:3d:8d:5d:67:c8:99:da:b8:6b:49:b3:f1:44:36: 29:60:ab:ed:98:56:c1:d0:bf:74:2f:c2:aa:06:55:bd:01:4e: 7a:d0:3b:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTAxMTAvBgNVBAUTKDAyMDU5Q0JFOUY4NjQ2QzU2MEJBMTg0N0Q5RUI4ODNE OEQxRDQ0OUQwHhcNMjQxMTIzMDAyOTE2WhcNMjQxMTMwMDAyOTE2WjAYMRYwFAYD VQQDEw02NzQxMjFkZC02OTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTXIrtzFtyre0CSp+tUHgWQgbDqfCh31E1qQ0W+x7DOWZH2T5ujXP1Ea1tku cWp5rcHcCNs1TOBX43a8u65ADzOXjGG8Xyy5Ui++ZR/5hV6YkSR/M5F10Z611kql L00ZEzv9g3Zcz9qr0noXgoeyqkIAiT6YZ5SDbj0NJ52EvWGRgz+pMTegYxlUWDs3 9/BfvrQLw2Ce60ulN2q/iVt0APM5mpoRFljjOQ1G5ghzTD3l0JWOIkCRH6CqXOJF oRihGVK/FgrcRYgtId0apxUHBR5C2b60Q2CwVq42OAyS7VaXvizTuR4WjrK9PHLH 0J+13ooDSynYTP8Tq4yfrnHipQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJr9fO4K y6+zzegEbUv4qMujoRrJMB8GA1UdIwQYMBaAFAIFnL6fhkbFYLoYR9nriD2NHUSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBMC8xNDA2MTkzNjg5 NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1JzVmd1aGhIMmV1SVBZMGRS SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FnV2N2cC1HUnNWZ3VoaEgyZXVJUFkwZFJKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBMC8xNDA2MTkzNjg5NzkxMUVDOTVDRjFEODJDNEY5QUUwMi9BZ1djdnAtR1Jz Vmd1aGhIMmV1SVBZMGRSSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+29EnK9oSP94adpM3I9yCoqzb5OK7xZGxtUU1r89o5/LdOpO85CKr QPkzWHlRnFLD1UizGV8bIUPSvD9Cttj8YGYC1Mrz6eDKnMeO67yvRmmTmaGbcVpU EYU0Gu1mS5G7nKGvW4nOggFXRC/FAjKpcq2zAUDYgiDIbGxLPUyUdhkC9aZt5lmJ 9M+2bHHe51DPRMk2YqZr5TpQAVAr5VgENo1FB0fcyCTR6+dssqSyG6AcLaKcZCa+ 1JjtYUbozSulZgfkXroMKXb4yP/IODZd/GmhAJuCHixiNrPLPY1dZ8iZ2rhrSbPx RDYpYKvtmFbB0L90L8KqBlW9AU560DuE -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org