$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json) Hash identifier: +/7tRoDc/dhgEhlO4AC4JN83rX+LBbbLYTv65EIBgz8= Subject key identifier: 15:9E:8C:67:26:E0:6D:9D:0D:9E:6A:C8:92:38:94:13:3A:CA:1B:80 Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft Manifest number: 0100 Signing time: Sat 23 Nov 2024 03:20:05 +0000 Manifest this update: Sat 23 Nov 2024 03:20:05 +0000 Manifest next update: Sat 30 Nov 2024 03:20:05 +0000 Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: KXVKrAGmiL9QZaV1WOCE36Rk01/gRnwpE6VZhmyJfxc=) 2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 54qHC7QVMBwoC0O3cMcEci4Yy+Xl8hxRZfIa8v1MHj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Validity Not Before: Nov 23 03:20:05 2024 GMT Not After : Nov 30 03:20:05 2024 GMT Subject: CN=674149e5-664c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:b7:51:d0:99:a4:86:86:e1:31:6c:f4:79: ba:43:ce:f1:dc:0f:27:d9:9e:c7:bd:8b:b9:cd:4f: 14:d4:c8:a8:47:ca:00:9c:01:7e:ec:90:90:7a:0b: 0d:42:c7:fd:93:2e:90:25:2a:3c:24:a3:ac:a9:41: d3:18:b6:ab:0b:9a:a5:50:1f:34:c9:99:b6:4c:ae: 63:39:b5:3e:37:34:90:cc:35:49:37:cc:e1:75:88: d2:df:e5:01:08:03:47:b2:79:0a:73:4d:92:00:41: bb:6e:7e:73:1d:63:a6:31:76:f0:79:ad:e6:12:d2: 4b:e9:e6:6d:2a:c9:4b:33:7b:89:59:32:ed:97:9a: 7a:af:56:e6:60:2f:37:20:fc:de:7d:3a:66:de:d6: d9:3e:3c:62:ee:50:9c:c6:72:f7:90:b6:32:ff:05: b3:3a:a1:d4:c8:db:8a:6b:08:d7:69:a8:d2:b2:53: 96:b7:9c:cc:54:63:e7:b8:00:0a:d7:cf:45:0f:77: 78:87:4c:51:9e:cc:1d:aa:2d:60:63:7a:dd:77:6d: c8:1f:00:11:94:37:28:40:03:69:fe:bc:c7:45:f3: e4:b8:0f:c8:1a:70:de:37:7d:8f:49:95:a2:ea:6c: 82:88:46:d6:77:bd:a5:3d:45:33:18:0e:ff:01:ee: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9E:8C:67:26:E0:6D:9D:0D:9E:6A:C8:92:38:94:13:3A:CA:1B:80 X509v3 Authority Key Identifier: keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:4d:fa:da:59:99:61:3b:cc:ba:4c:9f:1c:b2:fd:e4:42:d7: cb:17:2e:86:24:48:05:4f:fa:af:35:0c:f8:46:ee:77:57:4c: d9:47:7c:d4:94:0d:02:98:d8:95:6b:e8:d1:b1:d0:1f:c1:bb: 6e:af:2e:6d:46:3e:d5:08:62:13:44:b0:e7:f4:cb:11:19:eb: 27:0c:20:30:a8:37:d4:a4:3c:26:e2:3c:a2:0b:04:44:a6:df: 42:e7:64:50:90:ce:73:12:7a:dc:d8:36:2a:35:3b:3c:a5:9b: 8f:82:6b:b3:fe:38:80:45:55:f7:35:d2:2f:f4:28:9f:4a:09: 6e:ff:0b:92:74:0c:70:25:60:d3:a3:12:13:9e:59:7f:b6:c1: b5:31:85:f2:9a:09:75:d1:31:28:8c:c5:de:8d:25:43:ff:f8: 69:ce:c2:6c:71:31:d4:ef:85:9f:75:7e:af:75:1d:62:62:3e: c9:e9:27:ad:af:eb:34:44:97:ce:27:87:59:07:fc:9e:51:f1: be:a7:d1:27:66:12:d6:5f:ab:08:da:f6:40:c1:3e:bd:0a:6e: 4c:3d:b6:e9:a1:c8:e7:44:5d:18:5d:ef:e9:65:2a:81:05:50: 44:0c:43:7b:23:c2:d3:ef:0b:e5:ec:b2:ad:af:fd:fa:07:f6: e7:86:2b:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzMjAxMTAvBgNVBAUTKEIxOTFBRTIwNjgxNDZGOUM3MzlCRUE2Q0Q1OUU3OTJD NEY4OTdCNzYwHhcNMjQxMTIzMDMyMDA1WhcNMjQxMTMwMDMyMDA1WjAYMRYwFAYD VQQDEw02NzQxNDllNS02NjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgi3UdCZpIaG4TFs9Hm6Q87x3A8n2Z7HvYu5zU8U1MioR8oAnAF+7JCQegsN Qsf9ky6QJSo8JKOsqUHTGLarC5qlUB80yZm2TK5jObU+NzSQzDVJN8zhdYjS3+UB CANHsnkKc02SAEG7bn5zHWOmMXbwea3mEtJL6eZtKslLM3uJWTLtl5p6r1bmYC83 IPzefTpm3tbZPjxi7lCcxnL3kLYy/wWzOqHUyNuKawjXaajSslOWt5zMVGPnuAAK 189FD3d4h0xRnswdqi1gY3rdd23IHwARlDcoQANp/rzHRfPkuA/IGnDeN32PSZWi 6myCiEbWd72lPUUzGA7/Ae6q3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWejGcm 4G2dDZ5qyJI4lBM6yhuAMB8GA1UdIwQYMBaAFLGRriBoFG+cc5vqbNWeeSxPiXt2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTMyMC83OENDRkU0RTJE QzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1eHptLXBzMVo1NUxFLUpl M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaR3VJR2dVYjV4em0tcHMxWjU1TEUtSmUzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTMyMC83OENDRkU0RTJEQzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1 eHptLXBzMVo1NUxFLUplM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCTfraWZlhO8y6TJ8csv3kQtfLFy6GJEgFT/qvNQz4Ru53V0zZR3zU lA0CmNiVa+jRsdAfwbtury5tRj7VCGITRLDn9MsRGesnDCAwqDfUpDwm4jyiCwRE pt9C52RQkM5zEnrc2DYqNTs8pZuPgmuz/jiARVX3NdIv9CifSglu/wuSdAxwJWDT oxITnll/tsG1MYXymgl10TEojMXejSVD//hpzsJscTHU74WfdX6vdR1iYj7J6Set r+s0RJfOJ4dZB/yeUfG+p9EnZhLWX6sI2vZAwT69Cm5MPbbpocjnRF0YXe/pZSqB BVBEDEN7I8LT7wvl7LKtr/36B/bnhits -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:24 2024 by rpki-client on console-ams.rpki-client.org