$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft File: ABXboDjLzLFS7RcROqCo1ddIjSE.mft (raw, json) Hash identifier: e/A6ILS0P3lycbcG/r5JVqAMmylsGhuatTh9qcdMik8= Subject key identifier: 90:48:A5:49:94:79:6A:85:61:33:61:D8:21:DB:F7:C7:71:81:1E:53 Authority key identifier: 00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 Certificate issuer: /CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Certificate serial: 0818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft Manifest number: 0812 Signing time: Fri 22 Nov 2024 20:35:01 +0000 Manifest this update: Fri 22 Nov 2024 20:35:01 +0000 Manifest next update: Fri 29 Nov 2024 20:35:01 +0000 Files and hashes: 1: ABXboDjLzLFS7RcROqCo1ddIjSE.crl (hash: qMJkLTA5UEXeLCRmgFqWplVPg57dcXwHaW4uZEcP7Rk=) 2: 74CCA13ADBE811EA8D063B7DC4F9AE02.roa (hash: r8kplkUIga9YQn8b4xbaXWuaaJUEiwNgh+YYSbpeRUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC564/serialNumber=0015DBA038CBCCB152ED17113AA0A8D5D7488D21 Validity Not Before: Nov 22 20:35:01 2024 GMT Not After : Nov 29 20:35:01 2024 GMT Subject: CN=6740eaf5-142f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:92:09:6b:3b:d1:94:90:20:0a:fd:70:06:6d: ff:cd:fb:e9:8d:f7:2b:a4:67:3e:42:2c:db:79:21: 5b:93:ba:85:13:01:f0:68:b3:fd:4f:a3:4d:bc:c0: c2:64:7c:1f:a3:90:1e:76:ad:d5:66:1e:99:ea:ae: 60:c3:2d:6b:c2:0a:0d:a6:54:76:ac:b0:0a:a6:a1: b1:85:80:f6:aa:8b:ce:17:b1:e1:6e:d8:ad:2c:54: 4b:c2:14:59:cf:a7:aa:35:b5:e6:d6:d0:89:99:a9: 72:30:39:b1:24:47:07:5e:7a:0f:68:4f:dd:c0:19: 28:a5:de:ca:b0:5d:34:55:88:e6:61:10:44:5f:6e: 69:92:48:de:f0:dd:d7:ab:d6:22:2a:e7:89:3f:dc: d5:ab:b3:aa:9a:92:08:2b:41:f6:4c:e7:13:60:79: 7e:44:34:21:bd:14:e0:c2:3d:cf:46:a3:3d:02:5f: 16:40:59:de:bc:a9:47:c3:54:1e:e8:b6:71:86:2d: 22:db:5f:f2:06:1c:5c:9a:27:90:6a:0e:3a:ae:96: 89:6c:26:3b:63:eb:93:9b:c9:cf:81:bd:8a:d4:26: 12:90:ae:a3:d7:28:3a:b8:b4:e9:ce:49:67:a6:fc: 16:62:3b:b4:fb:03:35:41:33:8f:72:54:fc:83:58: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:48:A5:49:94:79:6A:85:61:33:61:D8:21:DB:F7:C7:71:81:1E:53 X509v3 Authority Key Identifier: keyid:00:15:DB:A0:38:CB:CC:B1:52:ED:17:11:3A:A0:A8:D5:D7:48:8D:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABXboDjLzLFS7RcROqCo1ddIjSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC564/4F29D0C4C40F11EA9C15B470C4F9AE02/ABXboDjLzLFS7RcROqCo1ddIjSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:4e:e1:39:27:1d:ca:66:c1:39:38:81:5b:ec:50:1f:67:ae: 9c:94:bd:e0:95:93:ea:d1:49:b9:eb:96:b9:6c:5b:c9:11:f0: 6d:50:84:43:ab:b7:0f:ef:e7:4d:4f:54:e5:88:c3:4c:ea:db: 23:ad:8a:01:48:2e:4b:50:e4:c4:59:9c:ec:31:8d:cb:16:8f: ec:d6:2f:8e:77:49:09:c9:ca:24:2c:81:e0:20:24:46:ac:0c: 7c:4b:60:9d:f3:46:8a:16:ed:f0:48:b1:2a:fb:75:36:ee:e2: 77:94:a1:0f:aa:83:8f:28:df:45:75:cb:70:ed:d8:0e:d0:ec: e9:9e:0c:d7:3f:ff:c7:eb:e2:47:08:71:96:8b:5f:2c:19:63: 8b:4d:41:5d:08:99:69:5a:d2:0d:74:81:97:cd:48:5f:a9:60: 68:9f:13:c2:0b:3f:b8:e5:79:89:68:90:ea:fb:01:65:1d:f4: 3d:7f:2a:0a:96:9f:3b:87:74:57:c8:56:e0:84:ab:cf:91:68: 89:c2:5e:6d:1f:af:10:b0:c3:94:b3:a3:61:85:c8:eb:6d:9a: 20:57:26:c8:08:06:7a:ac:ae:91:1c:ce:81:21:ae:66:22:89: f1:2d:d9:63:16:61:37:28:10:b8:d8:ac:6a:0d:01:41:c2:6d: ac:ac:dc:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjQxMTAvBgNVBAUTKDAwMTVEQkEwMzhDQkNDQjE1MkVEMTcxMTNBQTBBOEQ1 RDc0ODhEMjEwHhcNMjQxMTIyMjAzNTAxWhcNMjQxMTI5MjAzNTAxWjAYMRYwFAYD VQQDEw02NzQwZWFmNS0xNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7pIJazvRlJAgCv1wBm3/zfvpjfcrpGc+QizbeSFbk7qFEwHwaLP9T6NNvMDC ZHwfo5Aedq3VZh6Z6q5gwy1rwgoNplR2rLAKpqGxhYD2qovOF7HhbtitLFRLwhRZ z6eqNbXm1tCJmalyMDmxJEcHXnoPaE/dwBkopd7KsF00VYjmYRBEX25pkkje8N3X q9YiKueJP9zVq7OqmpIIK0H2TOcTYHl+RDQhvRTgwj3PRqM9Al8WQFnevKlHw1Qe 6LZxhi0i21/yBhxcmieQag46rpaJbCY7Y+uTm8nPgb2K1CYSkK6j1yg6uLTpzkln pvwWYju0+wM1QTOPclT8g1jI7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBIpUmU eWqFYTNh2CHb98dxgR5TMB8GA1UdIwQYMBaAFAAV26A4y8yxUu0XETqgqNXXSI0h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2NC80RjI5RDBDNEM0 MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpMRlM3UmNST3FDbzFkZElq U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FCWGJvRGpMekxGUzdSY1JPcUNvMWRkSWpTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2NC80RjI5RDBDNEM0MEYxMUVBOUMxNUI0NzBDNEY5QUUwMi9BQlhib0RqTHpM RlM3UmNST3FDbzFkZElqU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhTuE5Jx3KZsE5OIFb7FAfZ66clL3glZPq0Um565a5bFvJEfBtUIRD q7cP7+dNT1TliMNM6tsjrYoBSC5LUOTEWZzsMY3LFo/s1i+Od0kJycokLIHgICRG rAx8S2Cd80aKFu3wSLEq+3U27uJ3lKEPqoOPKN9Fdctw7dgO0OzpngzXP//H6+JH CHGWi18sGWOLTUFdCJlpWtINdIGXzUhfqWBonxPCCz+45XmJaJDq+wFlHfQ9fyoK lp87h3RXyFbghKvPkWiJwl5tH68QsMOUs6NhhcjrbZogVybICAZ6rK6RHM6BIa5m IonxLdljFmE3KBC42KxqDQFBwm2srNyT -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org