$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft File: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft (raw, json) Hash identifier: 2XcqFhFKsK7AnFAynlxi0kBOKXc9K4t4bzSeyhzGUHg= Subject key identifier: E3:BF:53:C8:11:7C:9D:F7:3B:81:4F:C4:11:2B:40:49:7B:00:79:AB Authority key identifier: E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A Certificate issuer: /CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A Certificate serial: 0D3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft Manifest number: 0D35 Signing time: Fri 22 Nov 2024 17:57:06 +0000 Manifest this update: Fri 22 Nov 2024 17:57:06 +0000 Manifest next update: Fri 29 Nov 2024 17:57:06 +0000 Files and hashes: 1: 4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl (hash: 0j1PM9xVaERGyOD7wUkqiIsnwkCnegn7xJ3fg+tsDtk=) 2: 7321413EC22511E99FB7F225C4F9AE02.roa (hash: Z6lmT51OP+45EouSJ7OPnhCtkGwpN+kuXARe/mt1yM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3387 (0xd3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0367/serialNumber=E15A360372DDAF1C5B218E8C4CF69F6F8BD7F59A Validity Not Before: Nov 22 17:57:06 2024 GMT Not After : Nov 29 17:57:06 2024 GMT Subject: CN=6740c5f2-5374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0f:02:e4:61:f9:f4:c7:80:f3:e4:fc:1b:5a: 1b:91:4b:74:b8:02:e2:56:ce:da:f6:c3:cf:d1:49: 68:2a:8a:e2:8c:b2:08:ed:b3:eb:bc:97:50:d7:72: 60:4f:05:ff:71:9c:72:38:16:60:bf:ba:ce:5f:d0: 22:62:e2:41:9b:e3:cc:46:7e:4e:e1:02:e1:e2:00: f3:a2:15:f7:a0:1a:b2:d2:07:f3:a0:86:36:18:0e: 0e:15:09:f4:eb:f2:96:8d:9c:35:87:09:78:ae:1e: 01:7f:b8:f5:a0:80:70:26:60:27:91:32:63:b3:f8: 72:8e:fb:85:ad:2b:4e:07:26:84:2f:b4:e5:5e:de: ee:a8:48:ee:cb:e7:c9:f2:8f:68:40:51:7e:77:a0: 21:c3:6e:96:ab:27:51:1a:ae:64:ac:ce:8c:99:f3: 25:0a:51:6a:23:c0:29:07:04:77:da:3d:18:13:0f: 40:0e:13:bb:0c:ae:7a:66:6b:b9:c2:16:32:26:a7: 00:3c:04:cb:c0:a9:32:17:b3:0c:6b:27:ce:5a:a3: 82:a2:4e:be:b4:da:1c:7f:3b:a2:e9:7a:98:6f:f9: 57:fc:0e:d6:a4:9f:af:44:7a:bb:86:f3:6c:82:22: dc:d1:9a:b3:12:6c:96:e5:4b:c9:ca:ca:0e:7f:51: fe:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BF:53:C8:11:7C:9D:F7:3B:81:4F:C4:11:2B:40:49:7B:00:79:AB X509v3 Authority Key Identifier: keyid:E1:5A:36:03:72:DD:AF:1C:5B:21:8E:8C:4C:F6:9F:6F:8B:D7:F5:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0367/08C3D28EC22511E9A367D325C4F9AE02/4Vo2A3LdrxxbIY6MTPafb4vX9Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:07:fc:3e:e5:b3:a3:53:85:23:18:cf:c0:3b:3e:8d:b6:e9: 25:03:7d:d3:dd:44:0f:e8:4d:c4:3c:44:be:6a:8b:47:d3:37: a7:fd:de:a1:72:22:e4:5b:81:28:b9:dd:d6:85:00:c5:19:0a: 88:7b:6e:97:a2:3f:3e:b6:b6:98:fe:6a:f7:87:ad:10:64:1a: d4:bc:a6:21:1b:e9:f0:70:0b:fd:72:e3:30:f0:b2:47:35:70: b0:c7:0b:95:2c:9d:c6:1d:a5:7f:f0:d0:f6:2c:25:9d:dc:a3: bd:72:ac:09:c6:d3:d2:81:09:d8:21:17:b2:20:f8:87:bd:f8: 75:ea:93:40:ed:81:9f:e2:14:78:ab:e3:e6:c5:cf:a3:33:6f: 67:a5:26:14:a6:27:e8:e6:0e:c9:10:40:e1:c9:3b:69:2a:af: 75:eb:2e:92:25:02:5b:b4:78:f0:cf:e7:86:a1:fc:f0:43:1c: 5c:b7:99:3c:2d:5c:9f:0b:01:f2:72:d8:35:9c:83:06:05:d8: e3:9c:5d:8e:58:df:e8:d6:e8:bd:9f:05:4e:17:15:bb:1c:81: 11:a1:d2:21:03:9a:59:1a:a9:97:74:bc:e0:6e:6e:cb:c7:e7: f3:b5:c7:cb:ea:b7:11:aa:c7:fd:66:e4:08:90:ed:34:67:f1: 90:fa:15:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNjcxMTAvBgNVBAUTKEUxNUEzNjAzNzJEREFGMUM1QjIxOEU4QzRDRjY5RjZG OEJEN0Y1OUEwHhcNMjQxMTIyMTc1NzA2WhcNMjQxMTI5MTc1NzA2WjAYMRYwFAYD VQQDEw02NzQwYzVmMi01Mzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3w8C5GH59MeA8+T8G1obkUt0uALiVs7a9sPP0UloKorijLII7bPrvJdQ13Jg TwX/cZxyOBZgv7rOX9AiYuJBm+PMRn5O4QLh4gDzohX3oBqy0gfzoIY2GA4OFQn0 6/KWjZw1hwl4rh4Bf7j1oIBwJmAnkTJjs/hyjvuFrStOByaEL7TlXt7uqEjuy+fJ 8o9oQFF+d6Ahw26WqydRGq5krM6MmfMlClFqI8ApBwR32j0YEw9ADhO7DK56Zmu5 whYyJqcAPATLwKkyF7MMayfOWqOCok6+tNocfzui6XqYb/lX/A7WpJ+vRHq7hvNs giLc0ZqzEmyW5UvJysoOf1H+KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOO/U8gR fJ33O4FPxBErQEl7AHmrMB8GA1UdIwQYMBaAFOFaNgNy3a8cWyGOjEz2n2+L1/Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2Ny8wOEMzRDI4RUMy MjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4eGJJWTZNVFBhZmI0dlg5 Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRWbzJBM0xkcnh4YklZNk1UUGFmYjR2WDlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2Ny8wOEMzRDI4RUMyMjUxMUU5QTM2N0QzMjVDNEY5QUUwMi80Vm8yQTNMZHJ4 eGJJWTZNVFBhZmI0dlg5Wm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/B/w+5bOjU4UjGM/AOz6NtuklA33T3UQP6E3EPES+aotH0zen/d6h ciLkW4Eoud3WhQDFGQqIe26Xoj8+traY/mr3h60QZBrUvKYhG+nwcAv9cuMw8LJH NXCwxwuVLJ3GHaV/8ND2LCWd3KO9cqwJxtPSgQnYIReyIPiHvfh16pNA7YGf4hR4 q+Pmxc+jM29npSYUpifo5g7JEEDhyTtpKq916y6SJQJbtHjwz+eGofzwQxxct5k8 LVyfCwHyctg1nIMGBdjjnF2OWN/o1ui9nwVOFxW7HIERodIhA5pZGqmXdLzgbm7L x+fztcfL6rcRqsf9ZuQIkO00Z/GQ+hV1 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org