$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json) Hash identifier: slINFXxXvizPnvi5rPRgmCLqxAhBRhLDL6/SQ3ehnIU= Subject key identifier: FC:83:02:67:0E:BD:37:A0:31:44:97:0B:5B:81:FB:7C:80:D4:4D:F8 Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D Certificate issuer: /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft Manifest number: 06AE Signing time: Fri 22 Nov 2024 21:44:18 +0000 Manifest this update: Fri 22 Nov 2024 21:44:18 +0000 Manifest next update: Fri 29 Nov 2024 21:44:18 +0000 Files and hashes: 1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: QvdcWR2May8wtLiODrue16hGEwneNdTe9n00HCGHqgQ=) 2: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: EohXolf65+4mOV0lpUcxHKxaaPPi5FKIJJ1IjSJxtCM=) 3: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: J2NTsyIpYZf2CeQjHrd3GmEpGqkuw4WoHXlCtDuwDwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D Validity Not Before: Nov 22 21:44:18 2024 GMT Not After : Nov 29 21:44:18 2024 GMT Subject: CN=6740fb32-a925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:7f:10:d4:4f:9f:78:c8:36:47:69:46:9f: 3c:f2:ff:c7:c2:ea:78:12:83:91:e5:00:60:79:63: 6f:b0:6e:b7:ab:45:20:b3:f0:da:73:36:7c:8d:db: a7:b1:16:e4:77:3d:2c:a3:f7:c6:1b:ee:57:df:bf: c4:69:72:8e:1d:02:e1:4a:7b:ef:ee:85:cd:52:76: b2:9a:ce:9e:4e:15:2f:29:fc:ca:25:86:26:f9:e5: c6:b9:e0:66:80:10:42:6a:70:3e:c2:91:b9:07:aa: aa:86:b8:cb:5a:35:c3:df:5f:37:0e:d6:f4:0c:ee: ae:c8:18:1e:d0:0b:87:c3:f5:8a:12:bd:6d:bc:24: f9:62:09:99:c5:e4:98:00:63:ba:80:58:a3:6a:04: 18:e1:b3:ca:4e:8f:2c:cc:32:74:c2:43:bd:67:1f: 43:e8:a7:ed:bc:99:1f:c9:c6:ad:73:6f:60:ab:04: 41:32:d8:cd:01:62:d8:a7:fd:fb:0a:72:77:f1:11: ac:a6:6f:9e:51:12:8e:58:ce:aa:33:a7:c5:2a:9d: b3:88:02:d8:02:4a:e2:b8:e1:c1:73:2f:50:fd:97: 0f:6b:f2:c0:f9:35:c3:39:cd:bb:3d:36:98:3c:b8: b6:99:eb:e8:79:9c:ab:5c:64:a8:a0:0c:72:ac:40: 5a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:83:02:67:0E:BD:37:A0:31:44:97:0B:5B:81:FB:7C:80:D4:4D:F8 X509v3 Authority Key Identifier: keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:e5:73:05:0e:86:3e:48:c3:ad:e1:4a:c3:f4:98:27:c1:d0: 9f:6d:29:b8:f8:8a:3a:91:05:0f:d3:95:1a:94:c9:4d:83:5f: 77:9f:21:15:2f:b2:70:07:09:dd:20:1f:69:0b:15:6e:c3:5b: fb:9b:79:02:77:95:45:b2:9f:95:43:a1:93:99:66:f7:10:1a: 29:ff:b3:14:34:ed:7e:69:10:9f:06:1b:f8:d2:56:91:70:bf: 55:d9:58:bf:73:71:c3:06:01:07:ea:7f:a5:a0:19:c2:0e:a3: c8:73:28:7b:dc:88:23:f6:9b:b8:82:6f:27:d3:98:78:76:19: 7a:71:c0:c2:4d:33:25:59:68:4a:62:92:38:1f:1f:8b:58:ba: 16:82:19:bf:cb:02:cd:a3:cb:43:10:b1:6c:8e:35:49:c6:06: 9b:a7:9f:30:a6:b2:f6:d8:5a:42:cd:86:63:f3:34:0f:fd:33: f1:91:ae:3d:57:5c:f5:da:d5:3e:c1:26:35:f7:39:04:b0:7d: 74:c3:87:ac:5e:80:7e:6b:32:b1:fe:d6:90:90:80:dc:ac:f0: 0d:9a:dd:d9:68:28:be:28:e7:32:cc:0d:06:a8:92:cb:34:a3: 68:a5:33:14:73:78:f8:26:5c:7a:1b:5e:02:aa:62:5b:1c:a6: 43:76:6b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4MTYxMTAvBgNVBAUTKEJEMDZCREJGOEIwRUVEQkM5RjA3Mzk1QTY1MjU0RkNC ODU4Mzk4OUQwHhcNMjQxMTIyMjE0NDE4WhcNMjQxMTI5MjE0NDE4WjAYMRYwFAYD VQQDEw02NzQwZmIzMi1hOTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyt/ENRPn3jINkdpRp888v/Hwup4EoOR5QBgeWNvsG63q0Ugs/DaczZ8jdun sRbkdz0so/fGG+5X37/EaXKOHQLhSnvv7oXNUnayms6eThUvKfzKJYYm+eXGueBm gBBCanA+wpG5B6qqhrjLWjXD3183Dtb0DO6uyBge0AuHw/WKEr1tvCT5YgmZxeSY AGO6gFijagQY4bPKTo8szDJ0wkO9Zx9D6KftvJkfycatc29gqwRBMtjNAWLYp/37 CnJ38RGspm+eURKOWM6qM6fFKp2ziALYAkriuOHBcy9Q/ZcPa/LA+TXDOc27PTaY PLi2mevoeZyrXGSooAxyrEBaMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyDAmcO vTegMUSXC1uB+3yA1E34MB8GA1UdIwQYMBaAFL0Gvb+LDu28nwc5WmUlT8uFg5id MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjgxNi82MTA0NjYxMDNE RDYxMUVCQTA2MDJDNUJDNEY5QUUwMi92UWE5djRzTzdieWZCemxhWlNWUHk0V0Rt SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZRYTl2NHNPN2J5ZkJ6bGFaU1ZQeTRXRG1KMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjgxNi82MTA0NjYxMDNERDYxMUVCQTA2MDJDNUJDNEY5QUUwMi92UWE5djRzTzdi eWZCemxhWlNWUHk0V0RtSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDG5XMFDoY+SMOt4UrD9JgnwdCfbSm4+Io6kQUP05UalMlNg193nyEV L7JwBwndIB9pCxVuw1v7m3kCd5VFsp+VQ6GTmWb3EBop/7MUNO1+aRCfBhv40laR cL9V2Vi/c3HDBgEH6n+loBnCDqPIcyh73Igj9pu4gm8n05h4dhl6ccDCTTMlWWhK YpI4Hx+LWLoWghm/ywLNo8tDELFsjjVJxgabp58wprL22FpCzYZj8zQP/TPxka49 V1z12tU+wSY19zkEsH10w4esXoB+azKx/taQkIDcrPANmt3ZaCi+KOcyzA0GqJLL NKNopTMUc3j4Jlx6G14CqmJbHKZDdmt1 -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org