$ rpki-client -vvf rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft File: V7aHJ0szGe2QcblmFY-birZK5vc.mft (raw, json) Hash identifier: 2/69PjGSJFxKGPfRsKx6me/m1sbq0WbXzlxjSuqOX18= Subject key identifier: D9:F7:28:37:49:2E:0D:72:AF:46:58:DB:06:50:5C:D5:2E:80:BB:09 Authority key identifier: 57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7 Certificate issuer: /CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7 Certificate serial: 2732 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft Manifest number: 272B Signing time: Fri 22 Nov 2024 15:39:28 +0000 Manifest this update: Fri 22 Nov 2024 15:39:28 +0000 Manifest next update: Fri 29 Nov 2024 15:39:28 +0000 Files and hashes: 1: V7aHJ0szGe2QcblmFY-birZK5vc.crl (hash: qJPsFCIRwpqWjdBPD1WAUw+rx+6vjsEKp3Lb55oXRWg=) 2: C22BA9D094E411EA9076F758C4F9AE02.roa (hash: IgwhRGzkUSBDQMKcII70Dlgk2iFbA7Ss/RSC/5v2m40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10034 (0x2732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7 Validity Not Before: Nov 22 15:39:28 2024 GMT Not After : Nov 29 15:39:28 2024 GMT Subject: CN=6740a5b0-9ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:18:9e:5e:e1:32:b2:7d:51:55:e3:3e:0a: ea:f8:da:40:a1:db:c7:13:eb:fc:61:8e:f2:6f:3b: c4:22:36:04:e3:73:d2:d2:1f:f1:9f:3c:0d:91:16: 25:74:ea:c5:86:0d:db:8f:96:b2:09:b5:27:a0:3f: 35:1a:17:d2:b8:a2:9e:c0:a7:fa:37:1c:e4:e8:cc: 9b:f7:94:2c:b8:72:e0:a4:cd:a2:55:ea:b2:53:98: 9e:32:98:c1:29:a9:59:ee:d7:0f:21:3d:c4:f4:e1: 6c:9b:ac:c7:a9:33:5b:f3:eb:84:2a:05:bf:7f:06: 29:5b:bd:f8:5b:f1:52:2e:40:59:57:36:f1:31:a6: 5e:c3:88:7c:cd:f7:aa:e9:e7:2e:1d:f1:21:4a:98: 04:f4:50:1b:1c:79:bc:af:5a:b7:21:43:b7:69:ed: a2:67:e5:88:40:bc:7a:d6:08:54:14:f1:08:1a:4e: dc:fa:3a:a8:a3:50:43:c0:bc:c9:ba:99:7e:0c:af: cd:7b:7b:e3:b4:f4:cc:09:96:2b:0f:c0:88:d0:b6: a5:c2:ed:16:27:04:8a:61:bf:4e:a4:6d:7b:4b:25: c7:91:b1:64:d4:d9:0d:ea:fa:69:0f:31:65:b3:7d: fd:1b:87:75:14:cd:e5:4a:4e:f0:b9:ea:e1:bc:b6: a4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F7:28:37:49:2E:0D:72:AF:46:58:DB:06:50:5C:D5:2E:80:BB:09 X509v3 Authority Key Identifier: keyid:57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:f4:b8:13:b7:13:7d:88:95:5c:3f:0d:ea:8c:b2:f4:16:ca: 57:30:9b:fe:f7:75:80:22:bf:9b:fe:79:34:1d:26:78:0c:bb: 7f:c8:7d:1b:c4:7e:48:97:0c:05:ae:3b:8f:f1:fc:fb:35:90: ae:38:a9:af:f7:87:11:a7:9b:ed:65:8d:bf:44:54:83:ea:89: be:f6:44:78:b4:10:9b:ff:e9:58:22:ec:ad:f9:01:56:ec:15: f1:d1:3d:e8:cc:c1:d6:a9:16:b0:e8:8c:c7:83:22:a2:cb:c8: 2f:ba:4b:50:75:5c:7a:a5:e7:c2:5f:45:ec:00:2d:97:43:64: 22:9b:f3:d7:64:2f:27:e2:19:fe:8e:32:3e:c2:c3:77:d0:f9: d5:65:56:96:81:aa:b8:63:7c:c7:2b:95:e1:6a:f3:5b:c2:a0: e1:1a:ae:1f:ee:c9:82:59:84:0b:28:91:65:ab:b8:97:48:74: fe:62:2c:a0:fb:fd:eb:25:d9:37:b5:dd:36:48:b1:d9:76:5f: 20:80:2f:70:60:1c:1d:ab:6b:fa:0c:70:3f:cd:5a:a9:a6:55: a1:f2:c4:0d:4a:f7:91:17:81:e1:64:cd:59:0e:fc:55:4a:1f: 27:c5:1f:f8:7d:29:c9:7c:08:79:9c:3e:31:82:ed:ce:b6:ed: c0:14:cf:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUyN0UxMTAvBgNVBAUTKDU3QjY4NzI3NEIzMzE5RUQ5MDcxQjk2NjE1OEY5QjhB QjY0QUU2RjcwHhcNMjQxMTIyMTUzOTI4WhcNMjQxMTI5MTUzOTI4WjAYMRYwFAYD VQQDEw02NzQwYTViMC05YmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCsYnl7hMrJ9UVXjPgrq+NpAodvHE+v8YY7ybzvEIjYE43PS0h/xnzwNkRYl dOrFhg3bj5ayCbUnoD81GhfSuKKewKf6Nxzk6Myb95QsuHLgpM2iVeqyU5ieMpjB KalZ7tcPIT3E9OFsm6zHqTNb8+uEKgW/fwYpW734W/FSLkBZVzbxMaZew4h8zfeq 6ecuHfEhSpgE9FAbHHm8r1q3IUO3ae2iZ+WIQLx61ghUFPEIGk7c+jqoo1BDwLzJ upl+DK/Ne3vjtPTMCZYrD8CI0Lalwu0WJwSKYb9OpG17SyXHkbFk1NkN6vppDzFl s339G4d1FM3lSk7wuerhvLakZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNn3KDdJ Lg1yr0ZY2wZQXNUugLsJMB8GA1UdIwQYMBaAFFe2hydLMxntkHG5ZhWPm4q2Sub3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTI3RS9FOEE4OENCQUFC NzIxMUU0QjhCQkI4MUNDNEY5QUUwMi9WN2FISjBzekdlMlFjYmxtRlktYmlyWks1 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y3YUhKMHN6R2UyUWNibG1GWS1iaXJaSzV2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTI3RS9FOEE4OENCQUFCNzIxMUU0QjhCQkI4MUNDNEY5QUUwMi9WN2FISjBzekdl MlFjYmxtRlktYmlyWks1dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx9LgTtxN9iJVcPw3qjLL0FspXMJv+93WAIr+b/nk0HSZ4DLt/yH0b xH5IlwwFrjuP8fz7NZCuOKmv94cRp5vtZY2/RFSD6om+9kR4tBCb/+lYIuyt+QFW 7BXx0T3ozMHWqRaw6IzHgyKiy8gvuktQdVx6pefCX0XsAC2XQ2Qim/PXZC8n4hn+ jjI+wsN30PnVZVaWgaq4Y3zHK5XhavNbwqDhGq4f7smCWYQLKJFlq7iXSHT+Yiyg +/3rJdk3td02SLHZdl8ggC9wYBwdq2v6DHA/zVqpplWh8sQNSveRF4HhZM1ZDvxV Sh8nxR/4fSnJfAh5nD4xgu3Otu3AFM+l -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org