$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json) Hash identifier: LZeTRGRwAzOU2xl1dMh9rwTYFpPXohPISOZXL1bRfFA= Subject key identifier: 82:C5:2D:E1:56:0B:5E:3C:8E:8F:98:F8:03:81:1F:F7:C2:58:F1:17 Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Certificate serial: 09AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft Manifest number: 099E Signing time: Fri 22 Nov 2024 19:49:21 +0000 Manifest this update: Fri 22 Nov 2024 19:49:20 +0000 Manifest next update: Fri 29 Nov 2024 19:49:20 +0000 Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: aJnCYrkJeW0jcehOnlRhgMeMfnXCiPIFuXDY3U2nKDU=) 2: C886095278C311EAA3BED75BC4F9AE02.roa (hash: 5ZUfJ/DmgqRpIsn2EL1trFIXyZWZYhkSJfMnijLCwE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2477 (0x9ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Validity Not Before: Nov 22 19:49:20 2024 GMT Not After : Nov 29 19:49:20 2024 GMT Subject: CN=6740e041-87f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:74:91:72:83:95:e5:2e:1f:ab:51:44:6e:23: 1d:08:4c:8e:da:3e:1a:b8:2c:4e:88:99:58:e5:5e: d4:9d:c3:41:a8:40:1b:18:3c:cd:d6:25:a4:ee:02: 48:e9:7b:e0:68:e6:4c:0a:67:18:ed:8b:5e:75:f6: 8e:07:ca:bb:ca:65:28:7f:78:e2:f4:2e:9a:5c:e9: 0d:28:90:34:72:d3:09:74:1e:96:bf:08:46:31:96: b6:f1:cb:18:82:ca:d1:29:a8:e7:44:23:9b:0b:32: a7:22:1a:66:00:51:0d:a2:ad:59:48:55:1a:80:77: 09:b3:5e:b2:bc:f0:3c:e3:7b:66:ca:20:b8:8b:29: db:a4:59:f9:99:b0:6e:5c:59:c7:2c:18:78:2a:8c: b2:aa:1a:47:2c:e8:e2:8f:e5:ab:7e:7d:be:7b:24: ed:2b:79:76:7a:49:19:e9:dc:95:05:38:94:96:6c: 6a:de:6a:c4:2d:ee:d5:47:cf:f2:a5:93:d9:98:b2: 32:d6:4b:f8:6e:84:48:20:34:51:43:2e:f6:61:50: dd:a9:92:22:78:8b:e9:b8:db:82:f0:d8:e7:13:52: e1:ba:81:69:0a:e4:74:07:61:c9:1d:c7:56:41:2f: 34:85:57:97:10:cb:17:97:75:68:74:80:e3:d5:ba: 85:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C5:2D:E1:56:0B:5E:3C:8E:8F:98:F8:03:81:1F:F7:C2:58:F1:17 X509v3 Authority Key Identifier: keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:75:88:aa:be:4e:da:bc:77:ba:3e:48:dc:57:63:7e:72:56: 56:de:94:7f:14:5f:0e:f4:68:b0:83:b4:ce:4f:de:42:3c:56: 5a:8c:e6:15:ff:fe:99:9f:3c:0c:93:f1:15:62:38:10:f8:d2: c2:2a:6e:aa:c8:2e:c7:f3:f7:8a:8e:d6:7c:d0:9c:cd:50:6e: 4d:7c:38:d5:61:8e:5b:d2:1d:c8:7f:6b:47:40:94:b1:48:43: 78:cc:b7:d9:ba:11:eb:eb:40:f4:aa:0a:2d:0b:1d:16:15:6d: 36:41:22:5c:ef:02:42:a2:ad:f3:5f:a6:58:a4:1f:e0:5b:34: 46:fd:9e:a2:83:fa:95:9d:5d:5b:ea:1b:3c:07:ce:56:75:3f: 09:f8:c9:35:fd:81:44:ed:7d:0b:6f:8e:97:8e:c3:77:46:c2: d2:a3:0b:98:96:46:83:03:c9:29:29:61:16:18:c9:be:39:2a: 10:da:57:8d:3a:60:70:c1:13:8d:59:1b:58:8f:8d:3b:fd:57: 9b:06:22:1f:83:db:5b:2f:00:eb:7b:58:06:2b:cd:0a:41:96: 03:f9:6e:ec:e1:28:32:2d:6d:b2:ea:53:db:50:52:51:f5:16: 65:1f:57:77:35:fd:0d:6b:28:de:cd:83:58:cf:60:dd:92:da: 16:cf:2d:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC N0NENTY1RkQwHhcNMjQxMTIyMTk0OTIwWhcNMjQxMTI5MTk0OTIwWjAYMRYwFAYD VQQDEw02NzQwZTA0MS04N2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8nSRcoOV5S4fq1FEbiMdCEyO2j4auCxOiJlY5V7UncNBqEAbGDzN1iWk7gJI 6XvgaOZMCmcY7YtedfaOB8q7ymUof3ji9C6aXOkNKJA0ctMJdB6WvwhGMZa28csY gsrRKajnRCObCzKnIhpmAFENoq1ZSFUagHcJs16yvPA843tmyiC4iynbpFn5mbBu XFnHLBh4KoyyqhpHLOjij+Wrfn2+eyTtK3l2ekkZ6dyVBTiUlmxq3mrELe7VR8/y pZPZmLIy1kv4boRIIDRRQy72YVDdqZIieIvpuNuC8NjnE1LhuoFpCuR0B2HJHcdW QS80hVeXEMsXl3VodIDj1bqFHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILFLeFW C148jo+Y+AOBH/fCWPEXMB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4 QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEYzRi8wOTM3M0FENjc4QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5 dy1MR3BJcFZTWXEzelZaZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1dYiqvk7avHe6PkjcV2N+clZW3pR/FF8O9Giwg7TOT95CPFZajOYV //6ZnzwMk/EVYjgQ+NLCKm6qyC7H8/eKjtZ80JzNUG5NfDjVYY5b0h3If2tHQJSx SEN4zLfZuhHr60D0qgotCx0WFW02QSJc7wJCoq3zX6ZYpB/gWzRG/Z6ig/qVnV1b 6hs8B85WdT8J+Mk1/YFE7X0Lb46XjsN3RsLSowuYlkaDA8kpKWEWGMm+OSoQ2leN OmBwwRONWRtYj407/VebBiIfg9tbLwDre1gGK80KQZYD+W7s4SgyLW2y6lPbUFJR 9RZlH1d3Nf0NayjezYNYz2DdktoWzy3F -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org