$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: TWYPKBcNLPqo0k7zQFf6ZGhgN+b3Xz+Qf2E2HLnENEo= Subject key identifier: 87:F8:78:43:98:7D:D8:1C:08:C5:11:73:D3:92:88:23:E5:D6:E2:84 Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0C43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0C3B Signing time: Fri 22 Nov 2024 18:12:02 +0000 Manifest this update: Fri 22 Nov 2024 18:12:01 +0000 Manifest next update: Fri 29 Nov 2024 18:12:01 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: W4M8rYDI2issh0gFKkCLhPwS1JmkLyZntE7ramhRZTU=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: 2oxrZykX6FImkgj0+sEn3YTkG/5Ks+ROCEDtHP8d+xs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3139 (0xc43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: Nov 22 18:12:01 2024 GMT Not After : Nov 29 18:12:01 2024 GMT Subject: CN=6740c972-a56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ce:e6:61:b9:0b:a1:68:e9:d0:58:76:b9:70: dc:4b:09:78:ee:a3:d9:c9:ed:3a:2d:5d:09:9f:19: 9e:26:e0:0d:0b:db:32:d3:e3:dc:56:73:e4:e7:dc: b3:67:c6:df:e0:9c:76:9e:eb:88:fb:83:7d:a1:9b: 72:41:11:50:f0:d6:fd:62:2c:a5:1e:cf:0c:c5:30: 31:30:f9:8d:b8:47:97:80:4b:4e:7e:d0:1d:a8:19: c8:a8:ef:f2:35:0b:0f:e3:63:1d:40:26:ed:77:18: cb:0c:c0:13:d6:27:b0:10:c5:7c:c0:de:a8:58:ca: 95:33:25:67:33:98:2d:da:59:24:dc:e9:30:23:02: ca:a8:6d:c1:85:03:b6:40:8a:0a:09:e4:b9:db:d3: b3:47:ec:c0:9f:51:17:5d:05:07:85:c3:fa:92:65: ed:bf:ba:be:58:5c:01:34:6b:fe:09:39:5e:7b:fd: 36:22:98:d9:e3:b4:c2:18:13:2f:37:8f:a0:07:92: fc:91:16:30:c1:41:a6:de:18:f6:7f:de:75:fd:76: 9c:cd:d4:e4:ea:4b:9f:8b:86:e3:4d:28:47:6e:50: 2b:60:6f:7f:8e:45:7d:b3:72:d0:29:e9:d5:7d:e9: 5d:d5:82:3b:e5:ca:d9:63:83:b7:43:52:f5:84:bd: 51:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F8:78:43:98:7D:D8:1C:08:C5:11:73:D3:92:88:23:E5:D6:E2:84 X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:7d:0b:9b:a3:4f:dc:b2:1a:b1:8e:5f:9b:43:ac:eb:32:98: 6c:22:2a:f2:78:75:27:47:a3:36:4d:76:5c:0a:70:ec:50:c7: 73:8b:66:ad:f3:a7:d9:df:fa:be:49:4d:aa:55:6c:f5:5d:ed: 2c:72:f2:e6:a0:b3:2a:e8:ee:d6:ed:2c:7c:f1:e2:4c:8b:03: 8f:38:48:3b:c5:8e:f5:d6:4c:e4:c4:44:76:2c:d9:38:2b:78: dd:a0:fa:6a:db:9a:cc:cc:29:d5:07:c9:88:11:88:70:98:24: ea:d0:40:8b:7f:62:c3:9d:aa:16:49:bc:52:5f:26:97:5e:35: 9e:2c:f9:ac:48:5a:9e:b3:b5:42:b0:ca:e3:79:31:12:01:2b: a5:d1:8f:c6:9c:68:df:9e:26:e0:92:87:c2:c3:70:92:a2:ab: ec:9f:84:15:c2:c3:cd:87:45:d1:cc:0b:66:f6:37:41:7d:79: b9:b4:32:2e:55:bc:36:cb:0b:e8:5f:97:08:3a:0a:64:a8:4e: 16:69:c3:c4:39:bf:89:89:9c:f3:07:bb:09:f9:9d:fe:6d:0c: fd:8a:ba:d9:bb:4a:8b:17:f9:c2:83:20:50:ed:56:90:70:c7: 06:15:bc:96:99:ad:9a:06:84:62:ab:89:ef:26:4d:a1:e5:32: f4:75:c7:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjQxMTIyMTgxMjAxWhcNMjQxMTI5MTgxMjAxWjAYMRYwFAYD VQQDEw02NzQwYzk3Mi1hNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnc7mYbkLoWjp0Fh2uXDcSwl47qPZye06LV0JnxmeJuANC9sy0+PcVnPk59yz Z8bf4Jx2nuuI+4N9oZtyQRFQ8Nb9YiylHs8MxTAxMPmNuEeXgEtOftAdqBnIqO/y NQsP42MdQCbtdxjLDMAT1iewEMV8wN6oWMqVMyVnM5gt2lkk3OkwIwLKqG3BhQO2 QIoKCeS529OzR+zAn1EXXQUHhcP6kmXtv7q+WFwBNGv+CTlee/02IpjZ47TCGBMv N4+gB5L8kRYwwUGm3hj2f951/XaczdTk6kufi4bjTShHblArYG9/jkV9s3LQKenV feld1YI75crZY4O3Q1L1hL1RJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIf4eEOY fdgcCMURc9OSiCPl1uKEMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUfQubo0/cshqxjl+bQ6zrMphsIiryeHUnR6M2TXZcCnDsUMdzi2at 86fZ3/q+SU2qVWz1Xe0scvLmoLMq6O7W7Sx88eJMiwOPOEg7xY711kzkxER2LNk4 K3jdoPpq25rMzCnVB8mIEYhwmCTq0ECLf2LDnaoWSbxSXyaXXjWeLPmsSFqes7VC sMrjeTESASul0Y/GnGjfnibgkofCw3CSoqvsn4QVwsPNh0XRzAtm9jdBfXm5tDIu Vbw2ywvoX5cIOgpkqE4WacPEOb+JiZzzB7sJ+Z3+bQz9irrZu0qLF/nCgyBQ7VaQ cMcGFbyWma2aBoRiq4nvJk2h5TL0dceu -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org