$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: QNly8/XESN2AaWpjBbB1Qz/HuoHwYwcqcfK7Bt1Wdqo= Subject key identifier: 71:C6:1B:BA:4E:C8:36:89:93:D6:D5:A6:01:F3:E0:3D:A2:33:99:F4 Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0CB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0CAB Signing time: Fri 22 Nov 2024 18:05:06 +0000 Manifest this update: Fri 22 Nov 2024 18:05:05 +0000 Manifest next update: Fri 29 Nov 2024 18:05:05 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: fBRhWnTr2zhfp31fKeZ9AoRsMWiWvNOxMVnMjyZSGpw=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: YQKzakVZRwkEoSkOxzmifYwaHBBE1uM/hdsf+7QDJq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3253 (0xcb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Nov 22 18:05:05 2024 GMT Not After : Nov 29 18:05:05 2024 GMT Subject: CN=6740c7d2-43b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6c:9e:b7:8b:05:9a:da:25:7b:ee:ed:a0:c6: 6e:8d:f5:03:8b:ba:48:4c:bd:eb:cc:80:ec:d7:7e: 48:4b:1a:c6:63:0c:41:d5:d3:44:c8:1f:53:16:8b: 65:88:76:be:18:ce:95:70:99:66:c1:dd:6e:f8:a9: 20:c6:f4:ed:97:c2:96:0d:ae:20:e2:58:ea:c3:a6: 13:86:5e:cb:34:31:53:47:6e:57:b9:34:c3:68:78: 35:56:18:a8:e8:6d:5f:75:e8:a7:b9:3b:c7:67:00: e6:67:62:ee:8b:0c:30:02:81:27:06:34:30:9f:9b: 9a:21:6f:79:73:80:a1:a8:f6:22:ac:79:67:be:9a: ec:e3:79:e9:31:99:f4:83:f7:da:44:fb:7b:aa:b7: 16:c4:88:aa:57:a4:0d:c0:c0:2e:1d:11:48:c2:81: a6:7d:df:43:74:56:ce:f7:81:a0:61:60:e3:a5:4e: bb:3c:3a:35:8e:ee:11:6a:07:c9:fe:7f:09:61:9f: e2:bd:ee:78:ee:12:f0:81:b8:3a:f6:a4:87:f6:60: 09:88:77:0c:f8:3e:89:ed:49:ca:85:2e:19:01:26: 91:3f:76:7f:a5:e9:fb:8d:21:ce:e6:86:6b:94:08: a8:b4:2f:1b:6b:a0:de:c6:7f:5c:60:c8:73:79:09: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C6:1B:BA:4E:C8:36:89:93:D6:D5:A6:01:F3:E0:3D:A2:33:99:F4 X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:18:1c:0a:9a:7b:39:8e:2d:52:ee:f1:22:1d:e8:a3:7e:09: 70:40:30:20:57:b3:95:2b:ac:bb:9c:7c:f9:91:08:19:21:6f: 47:49:fc:6c:b4:60:ba:e4:d5:94:de:d1:c1:b0:6d:7a:bd:f5: 44:5f:e1:f2:08:48:12:c4:e0:78:3c:33:36:e7:79:d9:2f:29: f3:97:42:1f:0e:81:76:16:0c:df:3d:06:94:e1:70:73:c0:54: ac:b6:2c:93:23:fa:ac:f0:81:59:75:a8:ef:f8:cb:aa:c6:bf: b0:7a:5c:97:b7:6f:d4:66:f9:6f:a1:b8:27:34:ec:71:fb:50: 6c:d3:10:fd:36:44:cd:38:ec:51:9b:ec:63:0d:96:87:3a:18: e3:ea:cb:c9:92:1f:a6:43:1f:c3:71:9e:17:e1:ca:6c:0b:78: b3:68:02:e4:a6:8f:20:b8:7d:78:e2:8c:f9:98:af:ae:1c:fc: 55:fa:fe:d5:e6:ac:81:b6:e1:dc:d4:71:0a:85:0d:43:c7:b3: 9b:65:6a:ba:18:bd:f2:0d:81:09:01:5f:81:a8:81:a4:88:56: 98:ce:94:1d:9e:5b:a7:90:c1:2b:e4:a9:e9:3d:6a:34:d8:11: 50:c0:f9:04:a3:c0:52:be:72:0a:52:21:15:83:58:8d:f5:d3: db:7c:fc:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjQxMTIyMTgwNTA1WhcNMjQxMTI5MTgwNTA1WjAYMRYwFAYD VQQDEw02NzQwYzdkMi00M2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Wyet4sFmtole+7toMZujfUDi7pITL3rzIDs135ISxrGYwxB1dNEyB9TFotl iHa+GM6VcJlmwd1u+KkgxvTtl8KWDa4g4ljqw6YThl7LNDFTR25XuTTDaHg1Vhio 6G1fdeinuTvHZwDmZ2LuiwwwAoEnBjQwn5uaIW95c4ChqPYirHlnvprs43npMZn0 g/faRPt7qrcWxIiqV6QNwMAuHRFIwoGmfd9DdFbO94GgYWDjpU67PDo1ju4RagfJ /n8JYZ/ive547hLwgbg69qSH9mAJiHcM+D6J7UnKhS4ZASaRP3Z/pen7jSHO5oZr lAiotC8ba6Dexn9cYMhzeQm+UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHGG7pO yDaJk9bVpgHz4D2iM5n0MB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7GBwKmns5ji1S7vEiHeijfglwQDAgV7OVK6y7nHz5kQgZIW9HSfxs tGC65NWU3tHBsG16vfVEX+HyCEgSxOB4PDM253nZLynzl0IfDoF2FgzfPQaU4XBz wFSstiyTI/qs8IFZdajv+Muqxr+welyXt2/UZvlvobgnNOxx+1Bs0xD9NkTNOOxR m+xjDZaHOhjj6svJkh+mQx/DcZ4X4cpsC3izaALkpo8guH144oz5mK+uHPxV+v7V 5qyBtuHc1HEKhQ1Dx7ObZWq6GL3yDYEJAV+BqIGkiFaYzpQdnlunkMEr5KnpPWo0 2BFQwPkEo8BSvnIKUiEVg1iN9dPbfPy3 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org