$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft File: reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json) Hash identifier: ImQa5dQIK3MwJoFwOPoOjQeBRjr/PKJTCQDCI/85B64= Subject key identifier: CA:3E:36:1E:EF:9B:1F:DC:C1:C8:51:75:FD:EB:B3:FA:A4:E8:11:6F Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF Certificate issuer: /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Certificate serial: 1246 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft Manifest number: 1238 Signing time: Fri 22 Nov 2024 17:07:29 +0000 Manifest this update: Fri 22 Nov 2024 17:07:28 +0000 Manifest next update: Fri 29 Nov 2024 17:07:28 +0000 Files and hashes: 1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: lLSY65tmW55fqx1jL6hssjwy5b30f4OwnDQjK3MCLA4=) 2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: tYzlvKoaH6Iw/czt01Ia6uEcjkV7kohl/OzIkYhWPeY=) 3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: Gl4gKDf4aT96XGuS7DGEepsfpPgK8tonViSlMSSTaDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4678 (0x1246) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF Validity Not Before: Nov 22 17:07:28 2024 GMT Not After : Nov 29 17:07:28 2024 GMT Subject: CN=6740ba51-14da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:19:a6:46:58:ab:c4:11:34:89:f3:56:81:03: 2d:23:f8:43:41:a9:78:e8:32:c3:dd:26:db:cb:8f: c7:c0:ad:e8:10:ee:ca:75:24:eb:2c:e8:7a:0d:45: ca:6b:c4:c2:0e:62:27:c8:e7:a8:41:98:d0:cf:0a: bf:fc:cd:32:d1:63:26:7b:52:39:14:60:62:27:01: 3d:58:66:f5:21:20:1a:f3:2c:89:71:43:9f:d2:56: e5:e9:0b:9f:18:e6:ff:e7:1d:95:c6:7a:e7:ae:e4: 07:99:75:a0:06:d8:21:03:1b:38:f4:0d:2d:99:68: ae:a6:f9:0b:3a:f6:01:2b:88:d3:cc:70:04:44:d7: b6:25:56:90:bb:d2:e0:2a:02:88:32:39:0a:d8:a1: 57:74:15:89:c7:1b:eb:46:5c:45:cd:d2:90:33:58: 97:a1:3e:13:3d:0d:ac:75:62:80:18:ef:32:b1:2d: d6:42:67:98:a0:1e:d5:c6:3c:3d:d4:22:2d:a2:b9: 33:bd:4d:bb:04:5b:ca:98:bc:31:72:9c:76:81:60: 44:be:7c:90:59:ee:b0:7b:19:62:59:a5:74:01:f7: 8c:0a:a4:db:63:47:34:5c:d8:47:44:34:c2:9f:8a: 4c:8a:7f:ff:e4:5b:0b:64:3b:eb:30:3b:48:aa:66: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3E:36:1E:EF:9B:1F:DC:C1:C8:51:75:FD:EB:B3:FA:A4:E8:11:6F X509v3 Authority Key Identifier: keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:bf:6a:58:7f:98:07:7c:9b:d8:0e:32:37:f3:d9:b9:55:cc: d4:21:45:4a:fd:ab:f7:3b:2f:e2:ec:0e:92:ee:32:b8:67:de: 50:97:b3:29:82:fb:82:bd:96:dc:31:b7:36:40:3a:8c:53:41: 62:65:d6:4b:a7:90:1a:64:6b:e4:47:0e:fd:f4:71:13:b6:43: 3b:00:3a:01:c6:0b:39:8e:56:30:d3:c2:99:b2:f4:cc:4e:46: 3d:11:86:22:9c:10:06:47:0d:91:44:df:ea:4d:80:45:10:31: 81:80:71:e3:48:74:8b:0b:4e:5a:1b:77:35:dd:2e:ed:6b:7c: 6e:01:1b:84:f8:a9:a3:b6:6f:74:2f:7b:0f:2d:b5:fc:38:ed: 10:da:92:a4:ce:b4:9e:14:e2:a1:9f:e0:2f:95:e9:56:89:70: 75:17:c3:2e:18:ca:7d:55:32:2b:6b:75:8f:cf:f4:a6:8c:79: 65:65:96:96:3d:3b:c0:22:e1:a9:9d:77:7c:5e:ef:97:d8:1c: f1:0e:df:cb:5a:51:ad:d6:92:e8:e1:a2:41:7d:04:21:ff:fb: 74:9b:d4:b8:ce:91:59:4b:fa:69:3b:bb:ec:d6:47:f5:d2:23: e4:eb:eb:36:a1:64:60:2f:43:ee:87:ba:82:2a:2b:76:75:e6: c6:45:44:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdBMDYxMTAvBgNVBAUTKEFERTEzNUQ1RTA0RDQ5NjM3MDlCM0NBNkJGQzAxMEI2 RDBGOTdDQUYwHhcNMjQxMTIyMTcwNzI4WhcNMjQxMTI5MTcwNzI4WjAYMRYwFAYD VQQDEw02NzQwYmE1MS0xNGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhmmRlirxBE0ifNWgQMtI/hDQal46DLD3Sbby4/HwK3oEO7KdSTrLOh6DUXK a8TCDmInyOeoQZjQzwq//M0y0WMme1I5FGBiJwE9WGb1ISAa8yyJcUOf0lbl6Quf GOb/5x2VxnrnruQHmXWgBtghAxs49A0tmWiupvkLOvYBK4jTzHAERNe2JVaQu9Lg KgKIMjkK2KFXdBWJxxvrRlxFzdKQM1iXoT4TPQ2sdWKAGO8ysS3WQmeYoB7Vxjw9 1CItorkzvU27BFvKmLwxcpx2gWBEvnyQWe6wexliWaV0AfeMCqTbY0c0XNhHRDTC n4pMin//5FsLZDvrMDtIqmYDQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo+Nh7v mx/cwchRdf3rs/qk6BFvMB8GA1UdIwQYMBaAFK3hNdXgTUljcJs8pr/AELbQ+Xyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EwNi80OEY0RENEQUM2 QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNXTndtenltdjhBUXR0RDVm SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlRTExZUJOU1dOd216eW12OEFRdHRENWZLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0EwNi80OEY0RENEQUM2QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNX TndtenltdjhBUXR0RDVmSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVv2pYf5gHfJvYDjI389m5VczUIUVK/av3Oy/i7A6S7jK4Z95Ql7Mp gvuCvZbcMbc2QDqMU0FiZdZLp5AaZGvkRw799HETtkM7ADoBxgs5jlYw08KZsvTM TkY9EYYinBAGRw2RRN/qTYBFEDGBgHHjSHSLC05aG3c13S7ta3xuARuE+Kmjtm90 L3sPLbX8OO0Q2pKkzrSeFOKhn+AvlelWiXB1F8MuGMp9VTIra3WPz/SmjHllZZaW PTvAIuGpnXd8Xu+X2BzxDt/LWlGt1pLo4aJBfQQh//t0m9S4zpFZS/ppO7vs1kf1 0iPk6+s2oWRgL0Puh7qCKit2debGRUSO -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org