$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft File: a63X1dESgRLXCrSiRSQBQo-dCXs.mft (raw, json) Hash identifier: WmJRZ8Hey98jQQlg6SV0p3tZVvOOpqPu47UTdDjGt4A= Subject key identifier: 86:03:80:26:50:49:42:86:88:3B:AA:19:D8:E7:A3:F3:BE:39:BC:ED Authority key identifier: 6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B Certificate issuer: /CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft Manifest number: 010D Signing time: Sat 23 Nov 2024 03:09:47 +0000 Manifest this update: Sat 23 Nov 2024 03:09:47 +0000 Manifest next update: Sat 30 Nov 2024 03:09:47 +0000 Files and hashes: 1: a63X1dESgRLXCrSiRSQBQo-dCXs.crl (hash: m97L4m/yLjTYPcC1+yQ04t5n2ksl5s20U9Av4Ho9i1c=) 2: AE1747DE13FC11EEAD14AF35C4F9AE02.roa (hash: IQBn4ZS4C/ZFnSsdM9cr5llJmaKNs+18E9KjqV8Ptcw=) 3: 96F5D26CFD5A11EEA0731E55C4F9AE02.roa (hash: G67FBcoSo5SdfUGnyF3K1ScYA7zHkycNrRNLNW9eMyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC86F/serialNumber=6BADD7D5D1128112D70AB4A2452401428F9D097B Validity Not Before: Nov 23 03:09:47 2024 GMT Not After : Nov 30 03:09:47 2024 GMT Subject: CN=6741477b-a50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:83:f1:e3:5a:6b:3d:24:08:24:75:31:c0: 56:23:9c:b0:78:4f:f7:cf:da:9c:8e:cc:af:d9:bb: fc:d0:34:71:22:ab:84:8d:d0:7a:dc:16:74:8b:90: 0a:ce:a4:be:e8:dd:ed:09:a8:bf:d8:be:d7:7d:08: cc:b5:17:98:fd:ed:a9:ab:7c:1b:3a:f2:f0:24:ff: 9c:1b:fb:5e:66:b6:12:c8:9f:f8:f0:f2:15:99:36: 16:f1:06:74:e6:b2:f2:17:2f:b7:fd:55:83:10:db: 00:3e:b1:4e:9d:f1:ca:ae:a4:63:63:73:4d:17:b3: 54:7b:b1:76:46:c4:2d:60:cd:9b:5b:76:3b:aa:a3: 44:3a:27:61:32:64:8f:b0:21:77:35:61:16:d4:87: aa:44:09:bc:43:cc:2d:2f:47:2e:02:1d:98:2b:41: 20:ee:20:ec:35:2a:b7:95:38:51:94:59:9c:10:ed: a9:3c:48:e7:7b:39:59:94:3a:c9:44:47:a1:07:55: 56:ed:05:90:1b:31:04:c5:75:87:89:35:73:33:28: 0b:49:bc:4d:3a:d5:59:28:6b:64:2d:65:f6:49:49: 3b:91:6a:d5:a7:62:2a:de:8c:f8:18:2b:05:9d:ca: 2f:d4:80:03:bd:67:d0:89:1a:95:4f:76:15:81:b6: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:03:80:26:50:49:42:86:88:3B:AA:19:D8:E7:A3:F3:BE:39:BC:ED X509v3 Authority Key Identifier: keyid:6B:AD:D7:D5:D1:12:81:12:D7:0A:B4:A2:45:24:01:42:8F:9D:09:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a63X1dESgRLXCrSiRSQBQo-dCXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC86F/47BA28AE13F611EE925F0A36C4F9AE02/a63X1dESgRLXCrSiRSQBQo-dCXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:a7:d0:38:ce:f4:c4:8c:b1:d1:b1:2c:de:ae:22:6e:66:5b: e5:bb:13:4a:af:76:f0:9d:38:b3:38:dc:9c:19:51:89:9d:c3: bc:40:53:34:6e:fc:e8:a4:78:cc:3f:75:25:25:a8:b5:b1:fa: a1:e2:ea:e0:72:59:63:d2:54:ed:25:9b:13:86:02:40:66:c3: e4:29:3f:fc:12:94:f5:23:0b:85:2c:70:04:f9:4a:6f:81:05: 7f:32:b1:fa:46:c0:ac:b6:30:14:13:70:e9:85:57:37:d9:e9: ca:a2:10:db:e5:9a:88:36:7f:5b:50:20:8a:3a:04:bc:61:a5: 3c:eb:32:19:66:43:d6:33:cf:f2:63:be:87:c2:59:10:c9:27: 90:66:9e:59:b5:69:b2:d8:bc:80:e5:29:41:8f:6a:7e:1a:c8: e0:77:18:b6:e1:d5:d8:a8:aa:01:40:86:cb:42:1e:db:72:78: eb:a2:f4:ad:3c:74:77:eb:6e:b2:36:77:b7:67:8f:84:6c:52: 2b:c0:98:e5:fc:fa:a9:2b:85:9d:83:f3:2e:0c:68:2a:78:e0: 9e:c3:40:bb:60:fa:1e:61:dc:3d:2a:ce:54:f4:73:07:7a:19: 70:48:59:fa:f2:85:f3:23:f6:d0:54:20:45:4c:d2:20:3b:bd: 98:5e:73:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4NkYxMTAvBgNVBAUTKDZCQUREN0Q1RDExMjgxMTJENzBBQjRBMjQ1MjQwMTQy OEY5RDA5N0IwHhcNMjQxMTIzMDMwOTQ3WhcNMjQxMTMwMDMwOTQ3WjAYMRYwFAYD VQQDEw02NzQxNDc3Yi1hNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTWD8eNaaz0kCCR1McBWI5yweE/3z9qcjsyv2bv80DRxIquEjdB63BZ0i5AK zqS+6N3tCai/2L7XfQjMtReY/e2pq3wbOvLwJP+cG/teZrYSyJ/48PIVmTYW8QZ0 5rLyFy+3/VWDENsAPrFOnfHKrqRjY3NNF7NUe7F2RsQtYM2bW3Y7qqNEOidhMmSP sCF3NWEW1IeqRAm8Q8wtL0cuAh2YK0Eg7iDsNSq3lThRlFmcEO2pPEjnezlZlDrJ REehB1VW7QWQGzEExXWHiTVzMygLSbxNOtVZKGtkLWX2SUk7kWrVp2Iq3oz4GCsF ncov1IADvWfQiRqVT3YVgbbhwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYDgCZQ SUKGiDuqGdjno/O+ObztMB8GA1UdIwQYMBaAFGut19XREoES1wq0okUkAUKPnQl7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzg2Ri80N0JBMjhBRTEz RjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dSTFhDclNpUlNRQlFvLWRD WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2M1gxZEVTZ1JMWENyU2lSU1FCUW8tZENYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qzg2Ri80N0JBMjhBRTEzRjYxMUVFOTI1RjBBMzZDNEY5QUUwMi9hNjNYMWRFU2dS TFhDclNpUlNRQlFvLWRDWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzp9A4zvTEjLHRsSzeriJuZlvluxNKr3bwnTizONycGVGJncO8QFM0 bvzopHjMP3UlJai1sfqh4urgcllj0lTtJZsThgJAZsPkKT/8EpT1IwuFLHAE+Upv gQV/MrH6RsCstjAUE3DphVc32enKohDb5ZqINn9bUCCKOgS8YaU86zIZZkPWM8/y Y76HwlkQySeQZp5ZtWmy2LyA5SlBj2p+Gsjgdxi24dXYqKoBQIbLQh7bcnjrovSt PHR3626yNne3Z4+EbFIrwJjl/PqpK4Wdg/MuDGgqeOCew0C7YPoeYdw9Ks5U9HMH ehlwSFn68oXzI/bQVCBFTNIgO72YXnMd -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:23 2024 by rpki-client on console-ams.rpki-client.org