$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft File: povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json) Hash identifier: REq4T8fGgyuB5GloLOro1/O0dGPHWMKVCVDm50+2tTw= Subject key identifier: B0:68:14:0E:55:A7:3C:4D:80:19:EF:C3:DF:7E:07:B3:BF:BC:08:F0 Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 Certificate issuer: /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Certificate serial: 05CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft Manifest number: 05C8 Signing time: Fri 22 Nov 2024 22:34:49 +0000 Manifest this update: Fri 22 Nov 2024 22:34:48 +0000 Manifest next update: Fri 29 Nov 2024 22:34:48 +0000 Files and hashes: 1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: dwN50nDw3XsKo7mMoOFedExMGlIt3RUo+MNb/f0AFps=) 2: E6F39362983B11EBBDA9EC64C4F9AE02.roa (hash: 7YHVzUjF5bpdBZPdZI94Q5Pcl5r21oJ6Xy3gjX6ma8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1484 (0x5cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Validity Not Before: Nov 22 22:34:48 2024 GMT Not After : Nov 29 22:34:48 2024 GMT Subject: CN=67410709-e797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:94:3f:6f:0c:57:84:93:84:79:86:70:c1: d8:c0:5b:a2:6d:9e:f4:a5:d1:0d:63:d4:e6:22:1a: 4c:66:a3:82:cf:6c:6f:1b:83:3b:79:79:77:ba:90: 31:6a:de:92:6b:c4:c3:75:86:c1:ff:e9:06:ce:85: e1:50:1b:21:bd:48:db:9f:4d:d3:24:22:25:be:c9: ef:90:51:d8:39:77:d8:11:4d:aa:f4:4c:c2:94:8e: b1:9c:45:13:f9:6f:9e:45:13:2c:49:5d:52:37:c4: fe:94:d4:d8:74:cc:33:12:f3:3b:07:d9:69:9a:a4: bd:24:65:42:86:30:3b:5e:7b:12:71:cc:b2:89:16: 83:8c:8c:9e:11:f0:35:2b:55:09:fd:5e:29:08:b0: 04:2b:15:dc:00:ce:d9:88:5f:65:3f:b4:1b:06:9d: 9a:4f:ec:02:59:49:cf:c9:34:30:8c:50:dd:7c:8c: dd:e3:e6:bc:05:f9:79:bb:64:f0:56:76:3d:33:cf: bc:60:40:a0:1e:ef:d3:a0:e9:a3:d4:3d:30:df:04: 5d:1d:b6:34:1d:c8:24:ee:25:c7:48:bf:02:6b:c2: b5:cb:30:46:b9:df:80:af:17:2c:2c:39:c6:c5:96: 18:69:ea:7a:2b:2c:3c:36:73:a9:b4:a3:7c:af:0b: b3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:68:14:0E:55:A7:3C:4D:80:19:EF:C3:DF:7E:07:B3:BF:BC:08:F0 X509v3 Authority Key Identifier: keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:4f:28:8a:6b:c8:b3:a3:61:50:35:1d:92:1f:62:28:fb:ee: b1:38:86:80:6a:b2:83:ef:06:84:3c:21:74:8a:73:86:35:53: eb:78:51:e3:ea:60:ee:30:bf:a4:97:a3:4b:29:0f:ac:6f:ff: 36:2b:56:b0:ab:25:c7:65:cd:07:28:69:72:02:53:54:2a:c7: 85:04:d1:fb:4c:09:58:fa:0a:e8:c5:7b:73:7f:1c:60:51:92: c3:49:40:81:b6:01:c0:01:e8:1d:f8:f4:98:f3:d6:e6:2b:6a: c6:45:91:d4:97:14:3a:95:ed:04:9f:da:1a:74:a3:6a:f0:1e: ff:8d:0d:43:2e:70:35:7f:dd:9e:19:a4:0c:cb:d6:59:eb:e9: f3:cd:c9:06:15:c2:f3:b1:0d:fa:80:25:2e:a2:d2:7a:ae:2c: d2:13:52:07:c5:f1:13:ec:e5:85:20:d0:36:e1:8f:6f:67:a1: df:c1:fb:57:a3:07:07:cb:11:42:f1:69:f9:6a:3f:94:d3:62: e0:63:22:f9:8a:37:75:74:86:b4:02:a9:5c:28:3b:60:86:59: 0a:ac:4e:2c:bc:19:d6:e2:f0:9b:c8:30:2b:7e:92:9a:d7:59: cf:78:17:cc:10:07:7e:77:83:7e:07:04:fa:92:cf:7e:e4:09: 50:24:1b:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2RkMxMTAvBgNVBAUTKEE2OEJDMDkxMEY4MzFERUM4MThBNTBBMzIxNDVGNzQz NTVDRTYzQzAwHhcNMjQxMTIyMjIzNDQ4WhcNMjQxMTI5MjIzNDQ4WjAYMRYwFAYD VQQDEw02NzQxMDcwOS1lNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeaUP28MV4SThHmGcMHYwFuibZ70pdENY9TmIhpMZqOCz2xvG4M7eXl3upAx at6Sa8TDdYbB/+kGzoXhUBshvUjbn03TJCIlvsnvkFHYOXfYEU2q9EzClI6xnEUT +W+eRRMsSV1SN8T+lNTYdMwzEvM7B9lpmqS9JGVChjA7XnsSccyyiRaDjIyeEfA1 K1UJ/V4pCLAEKxXcAM7ZiF9lP7QbBp2aT+wCWUnPyTQwjFDdfIzd4+a8Bfl5u2Tw VnY9M8+8YECgHu/ToOmj1D0w3wRdHbY0Hcgk7iXHSL8Ca8K1yzBGud+ArxcsLDnG xZYYaep6Kyw8NnOptKN8rwuztwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBoFA5V pzxNgBnvw99+B7O/vAjwMB8GA1UdIwQYMBaAFKaLwJEPgx3sgYpQoyFF90NVzmPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjZGQy84ODkyQ0M0QTk4 MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhleUJpbENqSVVYM1ExWE9Z OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvdkFrUS1ESGV5QmlsQ2pJVVgzUTFYT1k4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjZGQy84ODkyQ0M0QTk4MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhl eUJpbENqSVVYM1ExWE9ZOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCTyiKa8izo2FQNR2SH2Io++6xOIaAarKD7waEPCF0inOGNVPreFHj 6mDuML+kl6NLKQ+sb/82K1awqyXHZc0HKGlyAlNUKseFBNH7TAlY+groxXtzfxxg UZLDSUCBtgHAAegd+PSY89bmK2rGRZHUlxQ6le0En9oadKNq8B7/jQ1DLnA1f92e GaQMy9ZZ6+nzzckGFcLzsQ36gCUuotJ6rizSE1IHxfET7OWFINA24Y9vZ6HfwftX owcHyxFC8Wn5aj+U02LgYyL5ijd1dIa0AqlcKDtghlkKrE4svBnW4vCbyDArfpKa 11nPeBfMEAd+d4N+BwT6ks9+5AlQJBvF -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:46 2024 by rpki-client on console-ams.rpki-client.org