$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft File: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft (raw, json) Hash identifier: IRPZWibzxSdIsChtEBmabruRL2hfxea3aQt1qTdlNuY= Subject key identifier: AB:93:25:52:B1:A1:5C:29:D7:89:59:A9:D9:9F:94:01:C1:67:DD:4E Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Certificate serial: 0D2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft Manifest number: 0D14 Signing time: Fri 22 Nov 2024 17:59:59 +0000 Manifest this update: Fri 22 Nov 2024 17:59:59 +0000 Manifest next update: Fri 29 Nov 2024 17:59:59 +0000 Files and hashes: 1: 4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl (hash: Q0UfOBgQQgdN8OuoL9ISc4U2P7VbuuANua5IhQ9kNvc=) 2: 4E98421A162311EB90D1657AC4F9AE02.roa (hash: 1jUxwWAX6KnigOFs20Vg85yLzTjyxdO59rmGUv5qs2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3373 (0xd2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4 Validity Not Before: Nov 22 17:59:59 2024 GMT Not After : Nov 29 17:59:59 2024 GMT Subject: CN=6740c69f-648c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:07:81:fd:60:2f:1b:ef:53:34:f9:01:ad: cd:09:43:c3:f7:42:1e:01:4b:3b:3a:6e:20:eb:35: 6e:b0:0d:66:1f:d2:43:68:98:57:3b:45:d6:e0:a5: a3:3c:11:d7:c2:5c:e7:bd:0b:6c:a0:1c:e8:99:e9: 17:e6:ef:25:91:0a:21:7b:df:0c:0b:84:e6:52:50: e5:26:cb:53:62:e1:3c:23:74:0d:2b:25:05:4a:84: e2:ab:88:a6:34:00:7b:84:fd:43:c6:57:e5:74:9c: 90:de:aa:bc:35:ca:36:65:7c:48:2e:ce:f2:e8:b2: 91:45:71:44:f2:0c:c3:12:16:d1:41:99:86:39:f8: b4:d7:f5:e8:6a:e4:cd:b5:4e:f5:7a:e2:96:19:6b: fb:64:48:ac:82:f9:e1:92:66:16:32:90:2e:80:fa: 35:8e:ba:35:07:77:60:7a:c0:32:2b:91:26:dd:75: fb:fe:9c:bb:73:6c:8a:9c:89:c6:ab:e6:5b:1d:3b: 47:00:9b:a7:1e:39:6b:ac:4a:30:fc:82:e8:05:2e: c2:59:3e:47:4f:30:0c:7f:8c:a4:d7:86:aa:58:38: d0:4e:f9:57:00:76:68:d5:a1:b4:f0:0e:ef:58:8c: 6a:1f:ba:1b:43:04:66:16:49:bc:a9:58:e9:8c:2f: 0e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:93:25:52:B1:A1:5C:29:D7:89:59:A9:D9:9F:94:01:C1:67:DD:4E X509v3 Authority Key Identifier: keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a5:8c:f5:83:20:01:c8:2e:51:fb:28:e3:7e:92:72:e8:3d: 33:ce:40:08:eb:e9:43:d4:f4:82:9f:59:3b:3d:5e:7e:65:6e: 79:cc:c8:98:0f:f4:37:05:3b:a1:c5:1a:9c:95:52:8b:a3:80: f8:36:4c:c0:2d:7d:a4:a9:0e:0a:91:8a:82:7d:54:1b:dc:7f: 2a:b8:53:d0:f2:b3:c5:4d:c5:29:0e:18:98:83:36:b9:05:1b: fa:64:bb:19:e0:5b:a9:5e:53:b9:96:52:b3:e1:de:55:53:df: c3:0e:30:d9:39:76:2b:0a:e6:6f:d9:ba:29:d7:be:bb:27:ec: 74:02:28:aa:78:8a:56:7b:1b:e0:8d:d5:c6:6c:cc:0e:63:3d: cc:fd:cc:57:41:03:a3:27:02:47:98:af:0c:73:2a:90:ba:7b: 45:d9:c3:cd:ea:ae:32:37:2e:cb:fa:ae:d4:30:fc:4b:ba:b9: b2:02:08:19:e2:ff:ee:6f:64:fe:9e:55:d5:7a:c8:a2:c6:77: 68:41:7b:90:58:b1:5a:83:42:5f:54:5c:88:f7:74:47:a5:6d: 0f:85:10:38:c9:30:02:20:db:c7:f3:88:cc:e5:2c:68:d3:5e: 3c:d7:24:b6:f4:ac:65:88:4f:5d:fa:6c:57:f5:e2:da:f1:2b: 6d:6b:7e:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4 OTg2NDAxRjQwHhcNMjQxMTIyMTc1OTU5WhcNMjQxMTI5MTc1OTU5WjAYMRYwFAYD VQQDEw02NzQwYzY5Zi02NDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvG4Hgf1gLxvvUzT5Aa3NCUPD90IeAUs7Om4g6zVusA1mH9JDaJhXO0XW4KWj PBHXwlznvQtsoBzomekX5u8lkQohe98MC4TmUlDlJstTYuE8I3QNKyUFSoTiq4im NAB7hP1DxlfldJyQ3qq8Nco2ZXxILs7y6LKRRXFE8gzDEhbRQZmGOfi01/XoauTN tU71euKWGWv7ZEisgvnhkmYWMpAugPo1jro1B3dgesAyK5Em3XX7/py7c2yKnInG q+ZbHTtHAJunHjlrrEow/ILoBS7CWT5HTzAMf4yk14aqWDjQTvlXAHZo1aG08A7v WIxqH7obQwRmFkm8qVjpjC8OpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuTJVKx oVwp14lZqdmflAHBZ91OMB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0Y0Ny8zMzBBMDA4Q0NFNTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2Fh eTZPY3BZcXBXUzJKaGtBZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlpYz1gyAByC5R+yjjfpJy6D0zzkAI6+lD1PSCn1k7PV5+ZW55zMiY D/Q3BTuhxRqclVKLo4D4NkzALX2kqQ4KkYqCfVQb3H8quFPQ8rPFTcUpDhiYgza5 BRv6ZLsZ4FupXlO5llKz4d5VU9/DDjDZOXYrCuZv2bop1767J+x0AiiqeIpWexvg jdXGbMwOYz3M/cxXQQOjJwJHmK8McyqQuntF2cPN6q4yNy7L+q7UMPxLurmyAggZ 4v/ub2T+nlXVesiixndoQXuQWLFag0JfVFyI93RHpW0PhRA4yTACINvH84jM5Sxo 01481yS29KxliE9d+mxX9eLa8Stta36C -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org