$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft File: p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json) Hash identifier: ANe+Mh38+DmOD9JqY5uoqgFxDiJQT3Av30yHBVuvR4g= Subject key identifier: E0:BC:F4:A5:C2:0C:FB:90:B4:D4:8F:60:B8:A3:25:7A:77:52:C1:71 Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 Certificate issuer: /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Certificate serial: 0CF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft Manifest number: 0CE6 Signing time: Fri 22 Nov 2024 18:01:08 +0000 Manifest this update: Fri 22 Nov 2024 18:01:07 +0000 Manifest next update: Fri 29 Nov 2024 18:01:07 +0000 Files and hashes: 1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: DhpqtJeU6DG9NTphKjtuh4h1m0x0hIgsFooG3IBjgZU=) 2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: 7fCnTjBep84sk9XgkMrT6eykdpGaMDHQzEZtybjm0AA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3313 (0xcf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8 Validity Not Before: Nov 22 18:01:07 2024 GMT Not After : Nov 29 18:01:07 2024 GMT Subject: CN=6740c6e4-02ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:78:c1:bc:6c:01:f4:04:a6:f3:28:1c:15: 9b:c0:48:d2:c5:08:23:87:ad:e5:09:b5:41:c4:d2: a1:ad:1c:69:58:93:eb:f8:fe:24:4d:f4:fa:20:d1: e7:56:4e:4b:cf:c1:c8:13:89:76:aa:4a:ba:8e:53: cc:57:b3:5f:33:4b:bb:18:b2:a7:24:76:7a:59:a6: fc:79:6a:39:7b:c1:27:aa:4b:79:ed:89:31:df:3a: 11:69:6b:24:1a:20:58:ce:a4:55:31:d5:de:f0:2c: 5d:77:ba:07:9d:3d:9e:eb:ce:e9:85:06:65:04:20: d5:24:4f:16:44:20:4e:39:20:ae:ff:4a:1f:0d:0b: 54:bc:c9:9d:48:d7:a9:6b:68:ca:47:c9:b8:04:9f: df:39:4d:eb:2b:ba:68:88:56:3c:c7:32:80:7a:85: 79:41:dc:23:60:ea:2b:78:b2:4b:41:6e:33:da:72: 7d:f2:5e:3b:c1:57:77:92:19:68:45:4d:f0:9f:9a: 52:f4:2e:f6:c7:8e:c9:22:3b:73:ce:0e:1b:45:d5: 4b:bc:8d:ab:61:ef:a0:00:b5:cb:63:9c:c2:ff:b7: 5c:25:c9:a1:63:5c:86:e2:ba:12:f5:e8:f7:47:97: ab:30:07:5b:ab:37:79:9a:3f:3a:78:47:33:28:ec: f3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BC:F4:A5:C2:0C:FB:90:B4:D4:8F:60:B8:A3:25:7A:77:52:C1:71 X509v3 Authority Key Identifier: keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:12:55:1f:ff:ff:36:72:62:8c:b9:87:21:18:0e:fa:72:39: 77:22:de:ff:fc:32:c4:f0:52:df:38:54:21:54:0d:95:93:00: d4:5b:21:19:15:dd:4b:4b:73:7e:5a:ed:5b:fa:43:d2:07:79: e6:48:d7:94:03:e0:fa:7e:15:bf:ce:71:8e:a3:e9:e5:f0:e5: ec:69:32:f3:82:19:4f:33:8c:f9:9e:31:c8:0c:05:b6:c8:cf: e0:5c:11:ce:2d:4f:a9:7c:73:73:21:d0:a3:c7:ed:5f:44:e8: ef:c2:09:79:aa:ad:50:5c:c9:c8:4f:60:cc:ad:5d:b0:b1:9a: a0:6d:0e:5e:be:d4:b5:74:f8:eb:ca:e9:50:b4:79:32:41:9b: 0b:91:1d:29:33:39:8b:1c:66:22:05:ce:ad:61:1e:e2:00:41: a7:c1:2e:54:80:17:cc:a8:fb:9f:23:fe:ba:84:8e:3f:cc:94: 82:18:ee:36:ee:de:51:9b:70:01:e2:14:08:75:fd:64:5b:fc: d8:da:4b:36:f9:45:c4:61:99:f5:1f:61:8a:ea:24:32:43:8d: 33:71:16:6e:61:93:3c:9d:7f:62:35:15:7a:eb:1c:a6:4d:c8: 96:b4:3a:48:6b:91:1b:c9:e1:30:c0:87:99:55:71:2e:b7:ef: 6e:a6:b0:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY5QTExMTAvBgNVBAUTKEE3RjlBRjI4RDI0QTQzMjQ5M0I0QjJCQTlCNTU3MjlC QzA5NzdDQzgwHhcNMjQxMTIyMTgwMTA3WhcNMjQxMTI5MTgwMTA3WjAYMRYwFAYD VQQDEw02NzQwYzZlNC0wMmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OR4wbxsAfQEpvMoHBWbwEjSxQgjh63lCbVBxNKhrRxpWJPr+P4kTfT6INHn Vk5Lz8HIE4l2qkq6jlPMV7NfM0u7GLKnJHZ6Wab8eWo5e8Enqkt57Ykx3zoRaWsk GiBYzqRVMdXe8Cxdd7oHnT2e687phQZlBCDVJE8WRCBOOSCu/0ofDQtUvMmdSNep a2jKR8m4BJ/fOU3rK7poiFY8xzKAeoV5QdwjYOoreLJLQW4z2nJ98l47wVd3khlo RU3wn5pS9C72x47JIjtzzg4bRdVLvI2rYe+gALXLY5zC/7dcJcmhY1yG4roS9ej3 R5erMAdbqzd5mj86eEczKOzziwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOC89KXC DPuQtNSPYLijJXp3UsFxMB8GA1UdIwQYMBaAFKf5ryjSSkMkk7SyuptVcpvAl3zI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjlBMS9EMjYwMTVDQUQz N0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5U1R0TEs2bTFWeW04Q1hm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfbXZLTkpLUXlTVHRMSzZtMVZ5bThDWGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjlBMS9EMjYwMTVDQUQzN0UxMUU5OEExOTZCNjdDNEY5QUUwMi9wX212S05KS1F5 U1R0TEs2bTFWeW04Q1hmTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeElUf//82cmKMuYchGA76cjl3It7//DLE8FLfOFQhVA2VkwDUWyEZ Fd1LS3N+Wu1b+kPSB3nmSNeUA+D6fhW/znGOo+nl8OXsaTLzghlPM4z5njHIDAW2 yM/gXBHOLU+pfHNzIdCjx+1fROjvwgl5qq1QXMnIT2DMrV2wsZqgbQ5evtS1dPjr yulQtHkyQZsLkR0pMzmLHGYiBc6tYR7iAEGnwS5UgBfMqPufI/66hI4/zJSCGO42 7t5Rm3AB4hQIdf1kW/zY2ks2+UXEYZn1H2GK6iQyQ40zcRZuYZM8nX9iNRV66xym TciWtDpIa5EbyeEwwIeZVXEut+9uprCa -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org