$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft File: 2K83cS1WsbaT720D40bADPPwST4.mft (raw, json) Hash identifier: 4X7XcJHObLK3bptS0RsH5Ck/wGljAcZmBD3v7srJZfg= Subject key identifier: 89:4D:70:6B:D0:75:EA:BF:8D:03:50:59:1B:03:D8:6F:DB:C6:A8:49 Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Certificate serial: 0EF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft Manifest number: 0EE7 Signing time: Fri 22 Nov 2024 17:38:16 +0000 Manifest this update: Fri 22 Nov 2024 17:38:15 +0000 Manifest next update: Fri 29 Nov 2024 17:38:15 +0000 Files and hashes: 1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: PWvFe5ON7iDCfJ0/K7UQp3jwZeX9u0JaIWszNTGEJwg=) 2: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: H75rCk5vM8kD4h9GxneHBI+FagArNRGg0zjNp/brQWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3829 (0xef5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E Validity Not Before: Nov 22 17:38:15 2024 GMT Not After : Nov 29 17:38:15 2024 GMT Subject: CN=6740c187-0dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a5:c5:df:6b:d4:55:ab:9f:6c:3b:3e:6d:34: 53:ca:f3:97:a0:40:25:e6:5f:d5:60:40:28:26:a6: 7a:e4:85:30:ab:44:0b:b9:32:14:ef:36:3b:a8:81: 33:bc:b5:1d:2a:16:a1:cf:12:ae:a1:8e:a8:db:7a: b2:3e:29:d2:fc:1b:2e:e7:d2:5d:91:f4:06:29:86: 96:d9:92:c2:c7:3b:bc:87:64:ac:f7:03:2d:02:38: eb:38:4a:1c:e4:c6:ed:a6:cf:ad:80:f6:99:1e:1b: df:5a:55:4b:b1:39:6d:0d:16:a1:97:01:4a:9d:31: 37:db:d8:65:df:dc:e2:c9:56:2d:41:9b:ee:14:16: 3c:05:f0:c9:11:72:a6:40:6a:0b:4e:11:9d:25:ee: 8c:bb:d3:40:7c:19:94:6c:ab:e7:55:d8:ad:b5:6c: 70:2c:9b:27:2b:7d:89:eb:e0:5d:23:06:6a:36:55: 3e:46:63:49:8a:80:ed:7f:6f:8c:92:8d:75:86:ec: 41:6e:80:2e:9b:30:10:0f:bf:a4:a9:5c:f0:c9:6b: 79:16:93:f0:91:09:a0:15:4f:f4:10:1d:ec:38:49: e5:1e:35:8e:84:03:a5:18:1a:1a:cb:65:34:29:4a: dc:50:a5:f0:77:bb:3b:3c:bd:f3:96:24:4d:38:1c: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4D:70:6B:D0:75:EA:BF:8D:03:50:59:1B:03:D8:6F:DB:C6:A8:49 X509v3 Authority Key Identifier: keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:22:65:95:ab:4c:0c:36:8c:2a:10:a4:0d:36:21:e0:8c:5c: fd:32:c8:58:48:7f:e3:bf:4b:ad:7f:5c:e6:ef:c7:05:6f:a7: a9:f6:af:a0:11:c2:72:97:ae:3b:cc:aa:3f:e6:3b:e8:34:27: a6:2d:b6:af:c5:75:70:4a:cc:1f:07:bc:a3:a1:80:84:d7:a5: a1:ff:bf:d6:9a:db:bf:bd:ae:43:4a:54:2e:c9:8f:4d:b5:dc: 6d:8d:5a:99:cd:bc:81:fa:75:89:4e:0a:4a:bc:c2:c0:0a:92: 46:11:36:a0:81:db:64:ce:df:52:c8:5d:b3:56:c7:d8:08:e3: 58:ba:96:50:36:30:a7:34:e5:c9:01:19:db:f8:22:39:06:f7: 7a:0e:28:b5:05:4c:19:0d:84:fa:b0:6c:1f:49:80:22:87:f7: 71:ba:1a:54:8d:68:5f:25:4a:16:48:0c:7d:0a:b9:c4:ec:3d: 4e:62:aa:71:a7:6c:02:a2:37:37:a1:e0:7c:a1:fb:6a:a3:21: e7:4b:30:26:99:49:a5:cb:6d:d4:3e:76:2d:28:17:6e:4c:99: bb:c8:25:08:0d:dc:2d:36:27:b2:25:66:6d:34:3c:e0:86:bb: 13:08:0f:86:5c:df:84:e0:ed:87:5e:f4:61:2f:23:a1:5d:04: 30:5e:55:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKEQ4QUYzNzcxMkQ1NkIxQjY5M0VGNkQwM0UzNDZDMDBD RjNGMDQ5M0UwHhcNMjQxMTIyMTczODE1WhcNMjQxMTI5MTczODE1WjAYMRYwFAYD VQQDEw02NzQwYzE4Ny0wZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KXF32vUVaufbDs+bTRTyvOXoEAl5l/VYEAoJqZ65IUwq0QLuTIU7zY7qIEz vLUdKhahzxKuoY6o23qyPinS/Bsu59JdkfQGKYaW2ZLCxzu8h2Ss9wMtAjjrOEoc 5Mbtps+tgPaZHhvfWlVLsTltDRahlwFKnTE329hl39ziyVYtQZvuFBY8BfDJEXKm QGoLThGdJe6Mu9NAfBmUbKvnVdittWxwLJsnK32J6+BdIwZqNlU+RmNJioDtf2+M ko11huxBboAumzAQD7+kqVzwyWt5FpPwkQmgFU/0EB3sOEnlHjWOhAOlGBoay2U0 KUrcUKXwd7s7PL3zliRNOBwO9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlNcGvQ deq/jQNQWRsD2G/bxqhJMB8GA1UdIwQYMBaAFNivN3EtVrG2k+9tA+NGwAzz8Ek+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC9GQTc4QjA0NDZG Q0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3NiYVQ3MjBENDBiQURQUHdT VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLODNjUzFXc2JhVDcyMEQ0MGJBRFBQd1NUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC9GQTc4QjA0NDZGQ0UxMUU5ODhDNDRCM0VDNEY5QUUwMi8ySzgzY1MxV3Ni YVQ3MjBENDBiQURQUHdTVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5ImWVq0wMNowqEKQNNiHgjFz9MshYSH/jv0utf1zm78cFb6ep9q+g EcJyl647zKo/5jvoNCemLbavxXVwSswfB7yjoYCE16Wh/7/Wmtu/va5DSlQuyY9N tdxtjVqZzbyB+nWJTgpKvMLACpJGETaggdtkzt9SyF2zVsfYCONYupZQNjCnNOXJ ARnb+CI5Bvd6Dii1BUwZDYT6sGwfSYAih/dxuhpUjWhfJUoWSAx9CrnE7D1OYqpx p2wCojc3oeB8oftqoyHnSzAmmUmly23UPnYtKBduTJm7yCUIDdwtNieyJWZtNDzg hrsTCA+GXN+E4O2HXvRhLyOhXQQwXlU1 -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org