$ rpki-client -vvf rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft File: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft (raw, json) Hash identifier: fDPQYSSPXlXG7cw9MfeYvZXy5FO6fJDFUE4bkjVv4lc= Subject key identifier: D6:B0:19:0B:37:DE:99:30:9B:14:05:A0:F2:5E:54:92:BE:B9:1C:BE Authority key identifier: 03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4 Certificate issuer: /CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4 Certificate serial: 0B76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft Manifest number: 0B6F Signing time: Fri 22 Nov 2024 18:48:53 +0000 Manifest this update: Fri 22 Nov 2024 18:48:53 +0000 Manifest next update: Fri 29 Nov 2024 18:48:53 +0000 Files and hashes: 1: A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl (hash: a0tjI0dF22yVKR2iiwUpqV8cCLv9B/8tZR7qh4bAf3U=) 2: 37EA3E261ADC11EA8EB46F37C4F9AE02.roa (hash: 3kGetLo0/1T2TeuK7e4cz2fvy6XLEBwpuyaFMSSdmUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2934 (0xb76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91822BF/serialNumber=0377B93C91FDAF469A591B4C52D24CB1555D2BD4 Validity Not Before: Nov 22 18:48:53 2024 GMT Not After : Nov 29 18:48:53 2024 GMT Subject: CN=6740d215-41ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:c2:82:4f:94:4b:ad:fc:c7:0d:0f:fa:f1: 32:b7:b9:6f:72:64:ec:75:05:82:bb:43:fa:f6:2a: dc:73:32:fb:30:48:7f:af:6a:8b:b6:ca:b2:2b:9f: 7d:07:00:75:89:97:59:f2:fc:70:07:95:f0:0c:bd: 7d:fa:b8:53:c7:22:a7:5d:40:98:3c:ca:7d:02:aa: 8b:49:d8:e2:6e:ae:28:ad:3e:77:f3:3e:39:8d:3f: dd:86:8b:c4:9f:1c:be:65:0f:2b:d4:02:97:4b:95: c8:68:9b:39:dd:fe:93:22:a7:97:7a:17:63:c6:25: b2:10:63:8d:71:22:f2:2f:ee:af:86:90:5c:7d:79: 85:12:e7:7c:61:f5:23:30:67:61:45:ed:a4:f9:26: 8e:df:f9:9e:b0:02:dc:45:c5:bc:4c:1a:19:66:d8: c2:b6:8f:0f:35:62:e2:34:d4:44:34:18:ef:62:78: 7e:c0:fb:ae:6e:ea:c5:49:a0:46:b8:3c:e7:d5:9e: ef:41:e0:e2:2e:67:52:49:9a:07:95:0c:00:b3:d4: 95:8d:3e:fd:c9:72:92:2d:e5:f4:db:d3:c5:af:69: 0a:82:bb:1c:64:38:1f:af:2f:ae:d4:23:ba:49:53: a5:96:50:07:31:61:cf:b6:b3:d6:4f:3b:d7:4a:6a: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B0:19:0B:37:DE:99:30:9B:14:05:A0:F2:5E:54:92:BE:B9:1C:BE X509v3 Authority Key Identifier: keyid:03:77:B9:3C:91:FD:AF:46:9A:59:1B:4C:52:D2:4C:B1:55:5D:2B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91822BF/1039BC401ADB11EAAA3A8235C4F9AE02/A3e5PJH9r0aaWRtMUtJMsVVdK9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e1:f8:34:03:88:b9:61:22:d7:14:cb:13:f3:3f:93:5c:6b: b9:5d:31:77:27:82:11:61:78:16:50:6a:38:26:74:f8:1a:19: 47:98:7b:f7:c5:93:2e:74:da:cd:44:0b:d2:2d:27:64:4c:7a: 7e:78:5d:cd:52:24:c4:35:f1:34:95:76:5d:b1:82:a1:b1:dc: 7c:89:89:7c:13:09:6a:b9:bf:42:12:94:77:94:f5:30:80:9d: d9:a6:42:70:33:95:14:62:13:9e:24:78:d8:dd:6b:7a:e5:47: eb:fc:6a:9d:6a:c4:14:de:24:54:1f:1a:02:d3:7a:da:8a:70: 3e:60:51:84:51:4d:31:ed:42:f2:42:d5:79:25:58:e3:bb:1a: 03:87:30:bc:d7:5c:da:61:86:d3:45:23:df:69:1f:0a:8c:3b: 08:97:be:ac:43:df:6f:d4:b5:9d:d0:d9:07:6b:5f:b2:91:d2: a5:22:b7:6b:5c:d7:e7:26:16:5b:25:60:e2:2f:15:41:39:c0: 85:52:15:53:91:30:75:3b:f8:85:7d:9e:af:b3:78:7c:17:8c: 16:18:3a:31:bd:af:f8:c1:65:77:16:4c:5f:73:e9:f0:d0:bc: 60:ff:07:fd:08:b1:fc:bf:25:d5:2d:da:8b:ad:cc:90:93:32: 7a:1c:32:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIyQkYxMTAvBgNVBAUTKDAzNzdCOTNDOTFGREFGNDY5QTU5MUI0QzUyRDI0Q0Ix NTU1RDJCRDQwHhcNMjQxMTIyMTg0ODUzWhcNMjQxMTI5MTg0ODUzWjAYMRYwFAYD VQQDEw02NzQwZDIxNS00MWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyTCgk+US638xw0P+vEyt7lvcmTsdQWCu0P69ircczL7MEh/r2qLtsqyK599 BwB1iZdZ8vxwB5XwDL19+rhTxyKnXUCYPMp9AqqLSdjibq4orT538z45jT/dhovE nxy+ZQ8r1AKXS5XIaJs53f6TIqeXehdjxiWyEGONcSLyL+6vhpBcfXmFEud8YfUj MGdhRe2k+SaO3/mesALcRcW8TBoZZtjCto8PNWLiNNRENBjvYnh+wPuuburFSaBG uDzn1Z7vQeDiLmdSSZoHlQwAs9SVjT79yXKSLeX029PFr2kKgrscZDgfry+u1CO6 SVOlllAHMWHPtrPWTzvXSmptuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNawGQs3 3pkwmxQFoPJeVJK+uRy+MB8GA1UdIwQYMBaAFAN3uTyR/a9GmlkbTFLSTLFVXSvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjJCRi8xMDM5QkM0MDFB REIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIwYWFXUnRNVXRKTXNWVmRL OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzZTVQSkg5cjBhYVdSdE1VdEpNc1ZWZEs5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjJCRi8xMDM5QkM0MDFBREIxMUVBQUEzQTgyMzVDNEY5QUUwMi9BM2U1UEpIOXIw YWFXUnRNVXRKTXNWVmRLOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB34fg0A4i5YSLXFMsT8z+TXGu5XTF3J4IRYXgWUGo4JnT4GhlHmHv3 xZMudNrNRAvSLSdkTHp+eF3NUiTENfE0lXZdsYKhsdx8iYl8Ewlqub9CEpR3lPUw gJ3ZpkJwM5UUYhOeJHjY3Wt65Ufr/GqdasQU3iRUHxoC03rainA+YFGEUU0x7ULy QtV5JVjjuxoDhzC811zaYYbTRSPfaR8KjDsIl76sQ99v1LWd0NkHa1+ykdKlIrdr XNfnJhZbJWDiLxVBOcCFUhVTkTB1O/iFfZ6vs3h8F4wWGDoxva/4wWV3Fkxfc+nw 0Lxg/wf9CLH8vyXVLdqLrcyQkzJ6HDJC -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:00 2024 by rpki-client on console-fra.rpki-client.org