$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft File: anyGILARkTWk4pZxECAuepIQ_XY.mft (raw, json) Hash identifier: ko/+3fsKpW/N9LjN7hDs5ccKZMF622Ts0vlJiAnu784= Subject key identifier: 6C:AF:88:18:F1:BD:EE:EA:A4:99:FB:42:D5:E7:2D:06:67:1B:5A:EA Authority key identifier: 6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 Certificate issuer: /CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Certificate serial: 0C4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft Manifest number: 0C48 Signing time: Fri 22 Nov 2024 18:09:19 +0000 Manifest this update: Fri 22 Nov 2024 18:09:18 +0000 Manifest next update: Fri 29 Nov 2024 18:09:18 +0000 Files and hashes: 1: anyGILARkTWk4pZxECAuepIQ_XY.crl (hash: bpCi6bLefh6MQGRCySxbT6CaLOp5e3RgzGo5PkS5/TE=) 2: 3ED2E738F0C511E9AD7DCC11C4F9AE02.roa (hash: sDU0CzCwuoT0jsGzITGNqVvjEqL0/qHnbm4MS2vPAPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3150 (0xc4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2659/serialNumber=6A7C8620B0119135A4E2967110202E7A9210FD76 Validity Not Before: Nov 22 18:09:18 2024 GMT Not After : Nov 29 18:09:18 2024 GMT Subject: CN=6740c8cf-929a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0d:22:23:fc:93:ac:49:54:46:d2:a3:ba:dd: 02:84:a3:a2:c1:25:35:a0:98:c0:5a:3a:ba:78:66: c6:97:14:2e:ab:32:51:7d:bb:29:a1:3d:f3:03:38: 3c:8b:c7:2c:16:7f:c1:8d:3a:fc:77:e3:ec:c2:cd: ca:4c:c8:72:8d:f6:0a:9a:23:46:4b:8c:f2:56:77: c3:39:68:8c:6d:81:fb:87:ea:c3:4a:27:8f:29:66: 0b:6d:39:88:a5:a3:a4:5f:09:f9:8b:d9:8a:d5:a7: ec:4d:0a:96:97:dc:7e:25:06:97:b0:20:2d:e4:bc: b9:e8:78:67:33:9d:8b:63:af:86:ef:e3:cd:df:2e: ec:33:61:2d:ef:76:4e:3c:7d:f2:61:21:b3:a5:d7: ac:73:5b:26:e7:d2:14:dd:ba:64:ee:6c:c6:2b:8c: c3:7f:e8:cc:e0:b9:a4:e5:76:c1:fb:e3:b1:e5:4a: 39:ba:46:d6:cc:5c:83:99:cd:ec:1f:e3:86:ee:06: 21:1b:47:c4:c4:93:ca:c3:09:12:c8:5e:76:0c:8f: 3f:c0:7e:88:4d:d4:3b:73:50:3c:e2:7e:dc:28:df: e5:01:2b:f4:4c:10:75:bb:11:7a:e2:0f:8e:18:23: 4d:61:88:ab:c5:a7:31:05:16:1f:04:1a:55:a3:7c: 8c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AF:88:18:F1:BD:EE:EA:A4:99:FB:42:D5:E7:2D:06:67:1B:5A:EA X509v3 Authority Key Identifier: keyid:6A:7C:86:20:B0:11:91:35:A4:E2:96:71:10:20:2E:7A:92:10:FD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anyGILARkTWk4pZxECAuepIQ_XY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2659/C468E9C6F0C311E9926CCD0EC4F9AE02/anyGILARkTWk4pZxECAuepIQ_XY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e6:e4:c4:65:9b:18:47:d0:a4:20:94:a5:cd:77:8a:a0:40: 2a:b6:26:04:e5:f9:a4:99:02:32:73:02:05:e3:18:2e:cc:e7: dd:82:01:2c:bd:9c:d7:77:47:06:72:2e:33:19:94:db:1e:4d: 9e:66:e7:7d:fe:bc:f2:d1:57:72:e8:18:59:1b:6b:30:f7:4f: d0:e6:50:cc:6f:65:78:1b:2a:3e:93:50:26:64:fd:e2:37:3e: ec:a8:a3:89:ee:7e:8f:00:f5:25:46:20:19:07:c9:9e:0e:9a: 2f:e3:74:f1:5e:6d:41:c3:79:48:a0:0f:1b:16:03:54:39:61: 06:e9:9d:6a:e5:0d:f2:04:6e:9a:83:90:b0:84:cb:e7:7e:f3: a2:b1:f0:2c:ff:c9:c1:c8:2e:a5:e2:be:87:5b:c8:53:6e:dd: e5:8a:55:27:75:b1:50:be:e6:70:0d:bb:d2:5b:80:95:42:c3: 6b:9d:62:9b:5e:d6:b9:4f:72:b8:c3:a3:ee:ca:ed:6a:a6:35: 44:ef:c6:c7:ed:72:14:95:c5:02:46:1f:88:5c:f6:65:6d:8a: ad:99:38:27:cc:97:38:c4:7b:6d:d4:1a:be:e7:82:cc:eb:6c: c9:1e:55:e2:28:24:f9:9f:fd:45:9d:f2:45:04:4a:11:ad:8b: 95:7c:50:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NTkxMTAvBgNVBAUTKDZBN0M4NjIwQjAxMTkxMzVBNEUyOTY3MTEwMjAyRTdB OTIxMEZENzYwHhcNMjQxMTIyMTgwOTE4WhcNMjQxMTI5MTgwOTE4WjAYMRYwFAYD VQQDEw02NzQwYzhjZi05MjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4g0iI/yTrElURtKjut0ChKOiwSU1oJjAWjq6eGbGlxQuqzJRfbspoT3zAzg8 i8csFn/BjTr8d+Psws3KTMhyjfYKmiNGS4zyVnfDOWiMbYH7h+rDSiePKWYLbTmI paOkXwn5i9mK1afsTQqWl9x+JQaXsCAt5Ly56HhnM52LY6+G7+PN3y7sM2Et73ZO PH3yYSGzpdesc1sm59IU3bpk7mzGK4zDf+jM4Lmk5XbB++Ox5Uo5ukbWzFyDmc3s H+OG7gYhG0fExJPKwwkSyF52DI8/wH6ITdQ7c1A84n7cKN/lASv0TBB1uxF64g+O GCNNYYirxacxBRYfBBpVo3yM6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyviBjx ve7qpJn7QtXnLQZnG1rqMB8GA1UdIwQYMBaAFGp8hiCwEZE1pOKWcRAgLnqSEP12 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY1OS9DNDY4RTlDNkYw QzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtUV2s0cFp4RUNBdWVwSVFf WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FueUdJTEFSa1RXazRwWnhFQ0F1ZXBJUV9YWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY1OS9DNDY4RTlDNkYwQzMxMUU5OTI2Q0NEMEVDNEY5QUUwMi9hbnlHSUxBUmtU V2s0cFp4RUNBdWVwSVFfWFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB95uTEZZsYR9CkIJSlzXeKoEAqtiYE5fmkmQIycwIF4xguzOfdggEs vZzXd0cGci4zGZTbHk2eZud9/rzy0Vdy6BhZG2sw90/Q5lDMb2V4Gyo+k1AmZP3i Nz7sqKOJ7n6PAPUlRiAZB8meDpov43TxXm1Bw3lIoA8bFgNUOWEG6Z1q5Q3yBG6a g5CwhMvnfvOisfAs/8nByC6l4r6HW8hTbt3lilUndbFQvuZwDbvSW4CVQsNrnWKb Xta5T3K4w6Puyu1qpjVE78bH7XIUlcUCRh+IXPZlbYqtmTgnzJc4xHtt1Bq+54LM 62zJHlXiKCT5n/1FnfJFBEoRrYuVfFBA -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org