$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json) Hash identifier: hnpSPDIEW8oGXYO2ot6O/4ZHvpy0YvZy8fvx8nCyAYU= Subject key identifier: 81:65:AF:75:F9:0D:A3:34:55:FA:7A:E0:A6:C5:25:3E:8E:85:50:A4 Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft Manifest number: 0CAD Signing time: Fri 22 Nov 2024 18:04:51 +0000 Manifest this update: Fri 22 Nov 2024 18:04:50 +0000 Manifest next update: Fri 29 Nov 2024 18:04:50 +0000 Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: YtRIvSBDOGHBbMWOIcNgYlRu+Dcih4zn30v8kuFt8aI=) 2: 5563895C378911EABB08EC0EC4F9AE02.roa (hash: WnvG/G2ljF/bLCjnLck6amfr8nqRxURnaP7xF6JQcoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Nov 22 18:04:50 2024 GMT Not After : Nov 29 18:04:50 2024 GMT Subject: CN=6740c7c3-a33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:2f:a4:57:14:a3:99:9d:c3:cc:db:b0:10: d8:c8:c0:1c:d4:f9:ba:9d:e6:d6:e0:5f:ed:f9:04: 05:50:ba:b1:67:36:2f:26:83:3d:d5:bd:90:cb:57: 38:55:f3:0c:5a:8d:13:6d:3e:06:1f:b6:b5:dc:f7: ce:2d:3c:e3:a7:e0:83:f8:89:a1:3b:c3:a8:07:b6: 55:1f:a2:8a:d9:57:ca:af:e9:e7:c2:a2:94:32:f6: a0:11:c3:77:64:2b:c3:44:e2:77:3d:09:af:fe:84: e2:18:58:be:a0:4b:0f:df:4a:13:72:cb:f6:e7:3c: 78:89:21:91:b7:34:e5:ab:d5:59:6d:8d:00:37:52: b8:3e:6b:a3:73:92:81:e8:05:e8:34:67:bc:8b:1e: 88:e5:6b:c7:2e:8b:81:fe:2f:24:70:13:eb:88:4b: ab:88:b8:be:53:e9:c3:77:38:0e:1f:2f:d6:ae:1c: 1d:45:97:09:b6:4e:7a:52:72:fb:98:2e:77:7f:48: 34:bb:95:4d:3c:9e:e7:e6:ac:3d:6e:83:19:93:92: 23:e2:f3:3a:bb:65:27:08:85:a7:a9:d9:f2:08:ec: 6c:f8:2a:12:86:19:44:0a:6f:d6:69:a6:fa:20:2b: 11:f9:80:1c:87:0d:44:32:cd:92:3b:21:32:d6:31: 34:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:65:AF:75:F9:0D:A3:34:55:FA:7A:E0:A6:C5:25:3E:8E:85:50:A4 X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:76:49:0a:89:70:df:2d:b5:28:2b:20:b5:f7:62:68:f4:62: c6:a9:4b:72:ab:01:06:3c:7b:78:10:e2:da:df:71:c0:7f:6f: dc:7d:f2:0a:17:aa:68:c8:cc:12:51:2b:0e:1a:c6:6c:c3:b5: 03:28:17:c0:06:91:93:1f:c7:15:a3:2e:dd:91:e7:7a:87:63: 99:96:71:22:40:39:1b:95:a9:71:c4:6d:5d:68:21:47:47:36: ed:71:66:5c:59:1a:18:2b:12:0c:9b:97:69:88:08:82:65:67: 02:46:27:4a:1d:71:ac:2b:23:50:4b:00:5b:ad:72:d5:32:af: bc:e7:65:41:c6:f3:65:b8:17:59:67:78:9b:b5:3e:67:41:f3: 9c:ba:cc:3f:e1:34:4c:78:62:9c:b3:14:80:f4:35:80:37:24: 38:8a:d1:4f:52:a1:63:ed:86:98:9b:29:eb:c6:0a:a2:34:11: 1e:00:43:00:3e:04:68:1c:fa:f4:3e:4d:46:a9:1d:cf:cb:30: 58:a6:13:c4:63:0c:bd:c4:b3:d1:18:2b:9c:bb:89:02:b2:a7: fa:29:d4:28:49:fc:0c:96:47:5f:1d:31:c7:42:1c:7a:a5:bb: 56:f1:ee:fc:11:ce:82:00:ea:c6:63:c0:6a:79:f9:3d:bc:84: 8f:69:ab:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjQxMTIyMTgwNDUwWhcNMjQxMTI5MTgwNDUwWjAYMRYwFAYD VQQDEw02NzQwYzdjMy1hMzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/svpFcUo5mdw8zbsBDYyMAc1Pm6nebW4F/t+QQFULqxZzYvJoM91b2Qy1c4 VfMMWo0TbT4GH7a13PfOLTzjp+CD+ImhO8OoB7ZVH6KK2VfKr+nnwqKUMvagEcN3 ZCvDROJ3PQmv/oTiGFi+oEsP30oTcsv25zx4iSGRtzTlq9VZbY0AN1K4Pmujc5KB 6AXoNGe8ix6I5WvHLouB/i8kcBPriEuriLi+U+nDdzgOHy/WrhwdRZcJtk56UnL7 mC53f0g0u5VNPJ7n5qw9boMZk5Ij4vM6u2UnCIWnqdnyCOxs+CoShhlECm/Waab6 ICsR+YAchw1EMs2SOyEy1jE0owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFlr3X5 DaM0Vfp64KbFJT6OhVCkMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURBNi9EQjE4QjhFNkREREYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1j VUVtQU5zeHM1bkJyZ0dGMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAldkkKiXDfLbUoKyC192Jo9GLGqUtyqwEGPHt4EOLa33HAf2/cffIK F6poyMwSUSsOGsZsw7UDKBfABpGTH8cVoy7dked6h2OZlnEiQDkblalxxG1daCFH RzbtcWZcWRoYKxIMm5dpiAiCZWcCRidKHXGsKyNQSwBbrXLVMq+852VBxvNluBdZ Z3ibtT5nQfOcusw/4TRMeGKcsxSA9DWANyQ4itFPUqFj7YaYmynrxgqiNBEeAEMA PgRoHPr0Pk1GqR3PyzBYphPEYwy9xLPRGCucu4kCsqf6KdQoSfwMlkdfHTHHQhx6 pbtW8e78Ec6CAOrGY8Bqefk9vISPaatV -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org