$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft File: pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json) Hash identifier: s/Y0WAfB2FtHnjCWuZ9wd7uArAA3k2IZlq2wq2thrmc= Subject key identifier: 9F:7E:F9:4F:33:C6:84:A1:61:CC:F9:39:5C:86:67:B0:DE:73:38:65 Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB Certificate issuer: /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Certificate serial: 071F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft Manifest number: 071A Signing time: Fri 22 Nov 2024 21:21:12 +0000 Manifest this update: Fri 22 Nov 2024 21:21:12 +0000 Manifest next update: Fri 29 Nov 2024 21:21:12 +0000 Files and hashes: 1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: VHkXhjhcNidlNqjHztvxrdF7wNEu+H+TwBJabt8P7CE=) 2: A3205106142511EB8FED0427C4F9AE02.roa (hash: VDZMZq0ravcenOYyOeGNgLAMJ2KdcwQBXJSf2fEc5SM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1823 (0x71f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB Validity Not Before: Nov 22 21:21:12 2024 GMT Not After : Nov 29 21:21:12 2024 GMT Subject: CN=6740f5c8-a7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:4a:58:d0:a2:ac:27:28:40:85:bc:8e:ed: e0:3c:a3:5e:68:69:56:78:66:f1:83:b0:5a:16:bc: b4:33:83:95:36:f1:1a:e7:65:12:4f:34:5e:53:c3: e5:cd:e7:92:4b:93:4f:d8:6e:c9:fa:f6:ed:0a:39: 1a:36:ef:94:71:48:e7:b3:13:8d:15:97:bd:45:67: 98:d3:fc:c2:09:85:cc:03:1e:33:0b:28:3b:42:59: c6:d1:03:3b:93:aa:f0:c0:ea:6d:1c:62:5a:29:de: e8:c5:48:ef:61:e8:3a:eb:f2:f1:4e:2e:9a:cd:a3: c8:06:2d:63:b6:53:bc:09:d5:bf:eb:08:5b:30:4f: 3b:58:09:97:43:42:d2:5f:21:16:bb:95:45:f9:be: fa:74:b2:2b:5b:0c:90:1d:12:9c:ef:6e:9e:3a:80: 00:af:db:f8:5c:66:f9:83:49:a4:c5:bd:10:f0:ab: 60:0c:c4:bc:c2:27:a1:e0:51:88:c2:c3:02:2d:0e: 3a:31:7f:d8:03:30:d5:f6:10:cd:c5:0e:40:99:5e: ff:63:c2:6f:e8:44:d8:fe:f8:6e:c1:67:6f:23:1f: 04:e7:ae:b0:cc:1b:83:a6:23:71:f0:9f:0e:de:d1: 14:d1:54:79:09:f2:b4:df:09:ad:b9:19:5d:09:5f: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7E:F9:4F:33:C6:84:A1:61:CC:F9:39:5C:86:67:B0:DE:73:38:65 X509v3 Authority Key Identifier: keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:72:9a:e2:65:87:2f:88:0f:22:c4:10:e7:8e:3b:c1:84:a4: e4:ea:96:40:34:52:db:20:76:29:cf:f4:dc:5c:0e:a1:db:3c: 87:f2:a8:94:a3:b4:34:3d:88:45:ae:99:6e:1d:00:77:d9:58: 42:93:3b:34:5d:48:eb:13:31:b8:d7:2e:20:26:c2:32:8f:3f: 4d:8b:81:63:b1:95:d4:03:a6:e5:ff:f5:41:5d:72:98:4d:17: ea:5d:96:79:be:2b:dd:8b:4c:a0:3f:07:b9:7f:28:c8:1d:b3: 65:80:95:aa:1a:52:a7:80:3e:68:f7:06:79:1a:48:de:9a:c0: c4:3c:9e:11:a6:a8:54:58:ec:0b:04:77:44:75:b3:8b:72:3a: 00:21:f1:3d:a5:a2:c3:e5:94:a0:2c:1e:4f:49:79:13:eb:3a: 47:ca:7e:1a:fc:a6:23:e9:c8:d2:71:86:2b:1e:d9:13:78:55: 12:35:c3:13:b4:18:b6:1d:89:a5:cd:cf:ba:d3:5f:4d:4f:2f: fa:38:09:ea:5e:12:07:4e:ff:e1:b7:48:a1:6f:c4:ae:40:05: fb:a4:c8:04:e8:a6:c3:0b:ed:db:0c:71:b6:81:11:97:50:05: 35:db:49:e5:71:62:d4:b7:ad:27:04:01:69:5c:dd:48:2f:58: 56:d5:41:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI4NEUxMTAvBgNVBAUTKEE1NjcwODFEQTY2OTVERDM3QjJDMkIxQjE3QTAxQkEz REU1OTFFQ0IwHhcNMjQxMTIyMjEyMTEyWhcNMjQxMTI5MjEyMTEyWjAYMRYwFAYD VQQDEw02NzQwZjVjOC1hN2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUlKWNCirCcoQIW8ju3gPKNeaGlWeGbxg7BaFry0M4OVNvEa52USTzReU8Pl zeeSS5NP2G7J+vbtCjkaNu+UcUjnsxONFZe9RWeY0/zCCYXMAx4zCyg7QlnG0QM7 k6rwwOptHGJaKd7oxUjvYeg66/LxTi6azaPIBi1jtlO8CdW/6whbME87WAmXQ0LS XyEWu5VF+b76dLIrWwyQHRKc726eOoAAr9v4XGb5g0mkxb0Q8KtgDMS8wieh4FGI wsMCLQ46MX/YAzDV9hDNxQ5AmV7/Y8Jv6ETY/vhuwWdvIx8E566wzBuDpiNx8J8O 3tEU0VR5CfK03wmtuRldCV8PUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9++U8z xoShYcz5OVyGZ7DeczhlMB8GA1UdIwQYMBaAFKVnCB2maV3TeywrGxegG6PeWR7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjg0RS9FOTA1RENCMDE0 MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhkTjdMQ3NiRjZBYm85NVpI c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXY0lIYVpwWGRON0xDc2JGNkFibzk1Wkhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjg0RS9FOTA1RENCMDE0MjMxMUVCOUZDNEMyMjRDNEY5QUUwMi9wV2NJSGFacFhk TjdMQ3NiRjZBYm85NVpIc3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1cpriZYcviA8ixBDnjjvBhKTk6pZANFLbIHYpz/TcXA6h2zyH8qiU o7Q0PYhFrpluHQB32VhCkzs0XUjrEzG41y4gJsIyjz9Ni4FjsZXUA6bl//VBXXKY TRfqXZZ5vivdi0ygPwe5fyjIHbNlgJWqGlKngD5o9wZ5GkjemsDEPJ4RpqhUWOwL BHdEdbOLcjoAIfE9paLD5ZSgLB5PSXkT6zpHyn4a/KYj6cjScYYrHtkTeFUSNcMT tBi2HYmlzc+6019NTy/6OAnqXhIHTv/ht0ihb8SuQAX7pMgE6KbDC+3bDHG2gRGX UAU120nlcWLUt60nBAFpXN1IL1hW1UEl -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:46 2024 by rpki-client on console-ams.rpki-client.org