$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft File: G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json) Hash identifier: /BXQsr3R9jx049NvAO43Uv2MnbSujopAuLA4tZR70S0= Subject key identifier: 5D:CC:31:16:A6:E0:91:AB:F6:FE:6D:24:0F:B0:A8:05:B9:46:32:52 Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0CC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft Manifest number: 0CB5 Signing time: Fri 22 Nov 2024 18:04:21 +0000 Manifest this update: Fri 22 Nov 2024 18:04:21 +0000 Manifest next update: Fri 29 Nov 2024 18:04:21 +0000 Files and hashes: 1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: iAv62ipQOQt2HNlda/oyzF+7hIqreHSNaR3Rvn9RjK0=) 2: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: ArQ1ORDWsDyRxk4p5UeJSOByQW+/BB9aVTm3Uow8Jyk=) 3: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: CaGe0AHcQubCu6O3M8q6AVpJO4E7E++RqJexbr/jygs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3270 (0xcc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Nov 22 18:04:21 2024 GMT Not After : Nov 29 18:04:21 2024 GMT Subject: CN=6740c7a5-52d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:e3:0f:9f:84:dd:44:97:45:98:b3:f2:a2: 35:4a:ec:5a:85:c0:d9:54:ae:44:ac:25:3e:32:d6: b8:62:7f:60:56:5f:18:20:27:ae:3a:c3:2e:d7:76: 20:3d:e2:ce:d1:d0:ee:b3:59:16:f3:67:82:3c:dc: 08:7d:e6:1e:13:42:ec:39:04:74:12:76:c3:28:b9: 09:5c:08:2f:c4:af:ff:7d:4b:e7:f1:48:dd:61:21: 64:05:18:02:a7:e2:3c:cd:5e:dd:39:97:07:23:79: 42:4c:73:13:1a:70:57:e4:80:92:66:3a:9f:be:86: 9f:9a:81:5b:55:61:a2:d3:39:5f:18:cd:31:4c:8b: 7a:77:da:52:de:78:0c:c6:af:e6:54:10:93:24:60: 0c:8c:55:3b:36:e9:f4:be:a1:a2:41:50:8c:67:58: a2:92:75:e9:3c:c0:67:a6:78:cc:cb:44:88:56:e3: 5e:58:c7:b6:78:54:9d:a2:a9:28:75:9b:be:e8:87: e2:5a:47:2d:c8:b8:39:bd:4f:3f:45:c1:b8:37:5d: d5:9f:59:34:38:a6:a7:3e:13:fd:ac:d7:d1:2c:be: d7:81:4a:e2:db:94:6e:77:66:54:26:1e:1c:f3:67: bd:95:1a:47:ff:fe:a0:61:8f:de:f6:8f:aa:66:bb: bb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CC:31:16:A6:E0:91:AB:F6:FE:6D:24:0F:B0:A8:05:B9:46:32:52 X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:84:a8:f6:86:40:07:ee:3c:bd:e2:14:b3:01:8a:db:a0:bf: 2c:90:41:18:09:29:76:a4:d0:3c:dc:e3:71:77:f5:b5:5b:ba: 04:5f:1f:aa:e1:de:e4:94:23:37:3d:4d:fc:a2:b2:97:f6:7c: 4e:96:ed:11:06:33:f6:ff:4f:83:39:60:5d:4e:92:7a:77:16: 84:41:a1:5b:64:ac:83:c0:92:e7:7a:c6:15:3e:e4:3e:4f:e9: e0:6d:2c:12:36:e5:2b:e8:6f:63:b1:65:42:0c:4a:05:43:94: c8:0e:36:51:5f:66:5e:a8:18:4d:d3:55:5f:0f:c6:97:81:18: e2:bb:f2:0c:a9:a8:93:30:f4:4c:82:79:50:64:e6:dd:ac:36: 0c:42:d5:54:23:e7:18:63:87:78:d1:9d:2b:2f:7a:a1:3b:43: 83:f8:07:9a:13:a6:36:3d:98:44:8c:95:c2:5a:97:92:ca:55: d0:e9:91:8a:ba:03:6b:cd:28:b9:07:d0:b6:82:80:ce:df:d6: 2a:94:a1:12:be:31:af:1c:b1:27:a0:85:74:5d:b6:6e:49:61: b8:d1:72:d4:56:32:3d:f8:9e:ed:4d:67:24:1b:c8:78:ab:08: a1:15:26:78:3f:54:1d:6f:df:c1:fb:2d:82:43:28:7a:f9:eb: fb:d5:0d:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjQxMTIyMTgwNDIxWhcNMjQxMTI5MTgwNDIxWjAYMRYwFAYD VQQDEw02NzQwYzdhNS01MmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupLjD5+E3USXRZiz8qI1SuxahcDZVK5ErCU+Mta4Yn9gVl8YICeuOsMu13Yg PeLO0dDus1kW82eCPNwIfeYeE0LsOQR0EnbDKLkJXAgvxK//fUvn8UjdYSFkBRgC p+I8zV7dOZcHI3lCTHMTGnBX5ICSZjqfvoafmoFbVWGi0zlfGM0xTIt6d9pS3ngM xq/mVBCTJGAMjFU7Nun0vqGiQVCMZ1iiknXpPMBnpnjMy0SIVuNeWMe2eFSdoqko dZu+6IfiWkctyLg5vU8/RcG4N13Vn1k0OKanPhP9rNfRLL7XgUri25Rud2ZUJh4c 82e9lRpH//6gYY/e9o+qZru7ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3MMRam 4JGr9v5tJA+wqAW5RjJSMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTYwNi85QzlGOUY5QURCOTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklK TTFFMjZzOXN5WWlDaGxTeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCThKj2hkAH7jy94hSzAYrboL8skEEYCSl2pNA83ONxd/W1W7oEXx+q 4d7klCM3PU38orKX9nxOlu0RBjP2/0+DOWBdTpJ6dxaEQaFbZKyDwJLnesYVPuQ+ T+ngbSwSNuUr6G9jsWVCDEoFQ5TIDjZRX2ZeqBhN01VfD8aXgRjiu/IMqaiTMPRM gnlQZObdrDYMQtVUI+cYY4d40Z0rL3qhO0OD+AeaE6Y2PZhEjJXCWpeSylXQ6ZGK ugNrzSi5B9C2goDO39YqlKESvjGvHLEnoIV0XbZuSWG40XLUVjI9+J7tTWckG8h4 qwihFSZ4P1Qdb9/B+y2CQyh6+ev71Q1S -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org