$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft File: h1tC98YnJXePVtlRtxLriHk0ikU.mft (raw, json) Hash identifier: vy1W9OwMG+sHiGFpPn5grpq9oA8avTm9kUgY08A85EU= Subject key identifier: 0E:F3:AE:D1:F1:09:CC:5E:30:26:F2:A8:4B:6E:35:F0:92:C2:09:F5 Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 Certificate issuer: /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Certificate serial: 0742 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft Manifest number: 0739 Signing time: Fri 22 Nov 2024 21:13:18 +0000 Manifest this update: Fri 22 Nov 2024 21:13:18 +0000 Manifest next update: Fri 29 Nov 2024 21:13:18 +0000 Files and hashes: 1: h1tC98YnJXePVtlRtxLriHk0ikU.crl (hash: dDKt5CvXSqZH56MTBUwjzl5KgCJu83c63n8DZhdEQqw=) 2: 8C6AAF380AC511EB890DE026C4F9AE02.roa (hash: a4ANf8uGuOcHttQZdM48a5efk77lhvSIMBktbozPiW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1858 (0x742) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45 Validity Not Before: Nov 22 21:13:18 2024 GMT Not After : Nov 29 21:13:18 2024 GMT Subject: CN=6740f3ee-1a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6d:6f:40:43:49:b5:e3:15:c1:c9:da:33:84: 10:97:ac:46:27:a7:3d:05:59:1b:aa:80:6d:1b:d1: d1:cf:94:96:c4:d0:c6:df:bd:02:2f:e0:65:04:f4: 3b:9c:cd:20:1c:91:8a:9a:a9:2d:20:3e:e2:4b:10: 57:0c:8c:de:23:d1:2c:0b:b2:b6:94:a3:fd:63:7f: f4:ad:22:d6:77:a5:3c:35:f5:20:67:0b:ab:17:98: 7a:60:77:a4:a4:1d:6b:74:53:5c:9a:db:2c:de:14: 16:15:b4:9b:ce:4d:6a:3c:63:4d:90:c6:01:db:22: fc:3c:55:c1:3a:16:9c:22:90:c0:a6:d8:62:be:ad: f3:9b:f4:5a:84:c9:65:80:33:20:ae:a3:ce:ef:4e: af:f9:1b:47:50:e9:a4:34:60:c5:54:80:9a:52:b0: 30:f3:35:a1:6b:5b:53:52:7a:28:8c:13:83:d3:63: 53:98:09:0a:bd:a3:98:27:0f:f9:d8:12:75:4f:4b: 74:93:26:19:dc:6f:b5:2b:9d:40:e8:64:64:32:7c: 97:de:31:e5:00:58:d0:d5:62:a8:8f:ab:6f:fe:44: f2:6c:60:f2:27:4d:4d:8c:39:10:59:84:7d:58:8e: 65:72:69:42:8d:71:04:53:cd:e8:56:e5:80:64:08: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F3:AE:D1:F1:09:CC:5E:30:26:F2:A8:4B:6E:35:F0:92:C2:09:F5 X509v3 Authority Key Identifier: keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b7:a5:7c:9d:b6:d7:15:bf:83:4c:bf:26:e5:82:cd:80:03: 35:46:44:0a:a1:ef:b1:6c:06:b9:f9:d9:51:cd:98:9d:5b:1f: 92:b0:2e:69:51:ae:91:06:20:32:59:76:5d:65:f4:a2:64:f7: c2:c1:59:01:28:e0:9f:21:87:4c:74:60:28:8d:da:1a:d8:d3: 23:5a:9d:3c:af:fc:72:f5:ad:9f:a4:e6:e9:59:1d:0b:1c:b1: ac:75:ba:ba:2f:a7:c2:bd:39:1a:83:8c:ec:0a:48:99:31:d2: 54:f1:e7:98:5b:77:53:65:b4:2a:42:7c:81:71:49:aa:23:0c: 42:6f:47:a2:ec:95:47:42:a9:88:fd:76:c2:c6:0c:5b:2e:d5: fb:dd:ea:1b:c6:24:3d:40:d7:fe:63:06:7a:16:b2:84:88:ea: 77:14:d1:8f:ed:11:f7:14:d6:09:00:b1:48:ad:5f:7a:58:96: 10:da:1c:53:af:a2:66:81:39:20:41:06:5f:9c:97:a1:81:80: ca:f0:c9:bd:c8:d9:2d:ae:7d:b6:9f:48:55:8b:d1:b7:cc:d4: 18:fd:73:f0:ef:fa:84:f5:99:4f:2c:d2:f7:17:7e:02:1a:db: 82:03:8d:20:e9:16:39:72:6f:f9:06:0e:6f:77:c2:cd:6e:32: c6:aa:14:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4 NzkzNDhBNDUwHhcNMjQxMTIyMjExMzE4WhcNMjQxMTI5MjExMzE4WjAYMRYwFAYD VQQDEw02NzQwZjNlZS0xYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4W1vQENJteMVwcnaM4QQl6xGJ6c9BVkbqoBtG9HRz5SWxNDG370CL+BlBPQ7 nM0gHJGKmqktID7iSxBXDIzeI9EsC7K2lKP9Y3/0rSLWd6U8NfUgZwurF5h6YHek pB1rdFNcmtss3hQWFbSbzk1qPGNNkMYB2yL8PFXBOhacIpDApthivq3zm/RahMll gDMgrqPO706v+RtHUOmkNGDFVICaUrAw8zWha1tTUnoojBOD02NTmAkKvaOYJw/5 2BJ1T0t0kyYZ3G+1K51A6GRkMnyX3jHlAFjQ1WKoj6tv/kTybGDyJ01NjDkQWYR9 WI5lcmlCjXEEU83oVuWAZAjJ/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7zrtHx CcxeMCbyqEtuNfCSwgn1MB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMyRC9FQUE5NzlGQTBBQzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpY ZVBWdGxSdHhMcmlIazBpa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXt6V8nbbXFb+DTL8m5YLNgAM1RkQKoe+xbAa5+dlRzZidWx+SsC5p Ua6RBiAyWXZdZfSiZPfCwVkBKOCfIYdMdGAojdoa2NMjWp08r/xy9a2fpObpWR0L HLGsdbq6L6fCvTkag4zsCkiZMdJU8eeYW3dTZbQqQnyBcUmqIwxCb0ei7JVHQqmI /XbCxgxbLtX73eobxiQ9QNf+YwZ6FrKEiOp3FNGP7RH3FNYJALFIrV96WJYQ2hxT r6JmgTkgQQZfnJehgYDK8Mm9yNktrn22n0hVi9G3zNQY/XPw7/qE9ZlPLNL3F34C GtuCA40g6RY5cm/5Bg5vd8LNbjLGqhRz -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org