$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft File: eKfTXvnEd150y6PRZrYbdZAkFSM.mft (raw, json) Hash identifier: ntYsEJoBiauyS93nybZmSu/WFuntdgV/dIhlv3N/q5o= Subject key identifier: E4:CF:EF:50:9C:0D:91:23:47:06:B0:3B:81:89:AA:6F:DF:4E:32:A7 Authority key identifier: 78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23 Certificate issuer: /CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft Manifest number: 02 Signing time: Sat 23 Nov 2024 11:17:44 +0000 Manifest this update: Sat 23 Nov 2024 11:17:44 +0000 Manifest next update: Sat 30 Nov 2024 11:17:44 +0000 Files and hashes: 1: eKfTXvnEd150y6PRZrYbdZAkFSM.crl (hash: MebFFY2Zl8uSZmZAVF5mLJhfWv7729fglRu7EuZvFpo=) 2: 8DDD0D56A98C11EFAAC0F364C4F9AE02.roa (hash: yg1U4JyDYBAoLLqLQFnhNTd+uuZ0oKhea1PeFahobmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 11:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523 Validity Not Before: Nov 23 11:17:44 2024 GMT Not After : Nov 30 11:17:44 2024 GMT Subject: CN=6741b9d8-e839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:7b:41:ad:3b:8f:d7:a7:1b:b5:84:23:93: d0:eb:d3:57:8a:67:d5:30:4e:46:3d:40:2e:72:b1: 88:08:d3:37:4f:22:5b:2d:a9:9d:0e:08:35:f4:f8: 50:70:c8:e1:c7:54:03:aa:3d:ad:73:0d:0b:c3:fa: 4c:52:4b:8f:95:c2:3a:17:03:26:a8:c4:fc:a2:b1: 5a:12:15:ac:5b:2a:ae:fb:ac:53:03:3e:c8:47:c4: 1d:ae:b1:a0:47:ae:48:2e:97:9f:e2:41:13:ec:18: 84:fa:f5:7a:20:50:20:be:31:1a:3b:a6:4b:3a:60: e0:dc:f4:e4:68:cd:8f:09:75:f7:41:6a:07:15:d1: ae:b6:b8:4d:3c:7c:99:b9:0b:3e:88:57:8b:45:2c: e4:59:49:04:e5:46:20:5c:51:46:59:c2:a4:08:2a: f6:3e:81:01:12:73:40:22:a9:ec:73:79:67:59:d8: 83:65:50:82:26:48:54:2a:9c:2a:21:88:db:7a:88: 0c:f8:10:f7:37:29:62:1e:ab:d7:85:3b:64:b9:6c: 8f:bc:b2:43:ba:1d:ad:40:91:5a:24:c6:e1:71:fb: bc:b9:7a:31:c4:c3:ab:c6:b3:c3:67:9f:c3:35:6b: f3:a7:5e:f7:68:14:50:de:ea:12:28:3a:cc:2b:d9: 5a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CF:EF:50:9C:0D:91:23:47:06:B0:3B:81:89:AA:6F:DF:4E:32:A7 X509v3 Authority Key Identifier: keyid:78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:90:8e:29:f5:ac:3a:b5:38:30:df:49:83:6d:0c:d3:6b:1a: 94:6f:47:6c:13:27:f9:8c:32:fa:21:57:91:e4:83:b5:bc:8a: 54:a5:90:2d:8f:92:04:76:0c:7d:b7:2c:a5:74:2c:80:d1:cd: f1:77:2b:01:ea:43:bc:ea:6d:65:5a:59:ac:a2:e9:7d:d7:ca: fa:f8:e1:63:4e:8d:97:38:20:c1:3a:aa:41:9d:e8:9c:45:c3: 77:db:62:68:32:5c:f5:66:99:9a:a1:24:a7:cb:98:18:9d:98: 59:38:01:75:09:62:46:bf:81:e7:ec:ac:6d:12:8d:59:e8:ab: 86:18:5d:75:88:44:a8:88:a3:fc:ea:06:9b:3d:72:31:ef:3c: 85:49:84:41:00:02:21:56:1a:94:f3:c7:32:ac:a2:bb:54:59: ac:b2:28:91:d7:76:12:79:7e:64:d8:8f:90:7b:b1:cc:ad:eb: 14:d3:8c:5f:1d:9d:13:4e:4c:c9:8e:7a:75:69:b8:ea:df:1f: 86:25:1e:fe:b8:ff:0f:d4:56:f3:68:5a:5f:5d:a7:92:f8:bc: b9:23:c0:66:f0:9b:18:a8:fd:fd:94:e2:00:a6:e7:80:86:1f: 0d:50:d2:93:e9:27:80:a9:ea:c7:e7:7b:06:74:46:37:47:0b: e3:6d:8d:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkMzODExMC8GA1UEBRMoNzhBN0QzNUVGOUM0Nzc1RTc0Q0JBM0QxNjZCNjFCNzU5 MDI0MTUyMzAeFw0yNDExMjMxMTE3NDRaFw0yNDExMzAxMTE3NDRaMBgxFjAUBgNV BAMTDTY3NDFiOWQ4LWU4MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBBXtBrTuP16cbtYQjk9Dr01eKZ9UwTkY9QC5ysYgI0zdPIlstqZ0OCDX0+FBw yOHHVAOqPa1zDQvD+kxSS4+VwjoXAyaoxPyisVoSFaxbKq77rFMDPshHxB2usaBH rkgul5/iQRPsGIT69XogUCC+MRo7pks6YODc9ORozY8JdfdBagcV0a62uE08fJm5 Cz6IV4tFLORZSQTlRiBcUUZZwqQIKvY+gQESc0AiqexzeWdZ2INlUIImSFQqnCoh iNt6iAz4EPc3KWIeq9eFO2S5bI+8skO6Ha1AkVokxuFx+7y5ejHEw6vGs8Nnn8M1 a/OnXvdoFFDe6hIoOswr2VptAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5M/vUJwN kSNHBrA7gYmqb99OMqcwHwYDVR0jBBgwFoAUeKfTXvnEd150y6PRZrYbdZAkFSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQzM4LzBERTg5MzQwQTk4 QzExRUY5MzUwRkI2M0M0RjlBRTAyL2VLZlRYdm5FZDE1MHk2UFJaclliZFpBa0ZT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUtmVFh2bkVkMTUweTZQUlpyWWJkWkFrRlNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QzM4LzBERTg5MzQwQTk4QzExRUY5MzUwRkI2M0M0RjlBRTAyL2VLZlRYdm5FZDE1 MHk2UFJaclliZFpBa0ZTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAyQjin1rDq1ODDfSYNtDNNrGpRvR2wTJ/mMMvohV5Hkg7W8ilSlkC2P kgR2DH23LKV0LIDRzfF3KwHqQ7zqbWVaWayi6X3Xyvr44WNOjZc4IME6qkGd6JxF w3fbYmgyXPVmmZqhJKfLmBidmFk4AXUJYka/gefsrG0SjVnoq4YYXXWIRKiIo/zq Bps9cjHvPIVJhEEAAiFWGpTzxzKsortUWayyKJHXdhJ5fmTYj5B7scyt6xTTjF8d nRNOTMmOenVpuOrfH4YlHv64/w/UVvNoWl9dp5L4vLkjwGbwmxio/f2U4gCm54CG Hw1Q0pPpJ4Cp6sfnewZ0RjdHC+NtjQ0= -----END CERTIFICATE-----Generated at Sat Nov 23 12:37:05 2024 by rpki-client on console-ams.rpki-client.org