$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft File: 1xRtqd4o9btePeL_AMWfyFyZONo.mft (raw, json) Hash identifier: YABQJwG0zMNGuYak8tACfV52QLQ4ZREWxWM0jICBtUU= Subject key identifier: D1:9E:08:A4:D8:16:B8:C8:86:07:F1:C4:B9:FF:C1:F1:23:96:BD:9E Authority key identifier: D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA Certificate issuer: /CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Certificate serial: 0822 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft Manifest number: 12C0 Signing time: Fri 22 Nov 2024 19:15:24 +0000 Manifest this update: Fri 22 Nov 2024 19:15:24 +0000 Manifest next update: Fri 29 Nov 2024 19:15:24 +0000 Files and hashes: 1: 1xRtqd4o9btePeL_AMWfyFyZONo.crl (hash: wIhS1aonAH8EBIcHtz8+0n9gMj2rOSvRTxzWEWpnqZs=) 2: A10B1F2CC2C111EB9FF4B980C4F9AE02.roa (hash: oW5ufK8uuYVD0QdaX00seTUO6gXE6JmBRPLc71abQX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D/serialNumber=D7146DA9DE28F5BB5E3DE2FF00C59FC85C9938DA Validity Not Before: Nov 22 19:15:24 2024 GMT Not After : Nov 29 19:15:24 2024 GMT Subject: CN=6740d84c-ebbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:16:99:6e:7a:f6:98:9c:14:37:14:cb:c4: 5e:c0:b6:42:fe:96:67:b4:34:7b:e0:7c:c8:ae:ba: 34:a1:24:dd:6a:e6:db:7e:ee:58:bd:e0:86:fc:e9: 54:f8:a8:5d:3c:d2:d5:ee:37:95:fe:c1:eb:0b:79: fd:1c:63:d7:e4:72:46:e1:a7:54:b9:af:f9:48:37: 7d:09:27:18:d9:3e:2d:98:1f:99:79:eb:a8:76:6c: a2:b5:da:c8:c1:78:0f:aa:dd:a2:cc:c4:5e:5c:6f: dc:22:0d:ee:9c:d3:68:cd:30:fb:24:ad:d3:c0:12: 5c:86:66:fa:24:b4:7e:85:a6:13:03:99:8e:b4:32: 57:6a:c6:fb:f3:9d:ca:bb:02:27:d1:d9:00:31:e3: 48:cf:5b:82:79:c4:39:0d:88:98:d8:a6:4f:e8:f5: cc:50:dc:20:be:8f:ef:37:a1:d8:65:92:c3:3a:99: f8:f3:88:af:b0:d3:24:1b:26:46:32:ce:c3:60:64: ab:a7:f8:6f:0a:d4:37:a3:78:8f:27:d4:bd:80:1a: 96:d5:30:8e:74:c7:13:4d:26:ac:96:65:9a:b5:5f: 0b:4d:4a:1f:fa:66:e0:de:c6:3c:a2:55:94:5c:63: b7:29:c7:6f:0b:23:4b:d4:34:65:38:94:24:a8:9f: 11:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9E:08:A4:D8:16:B8:C8:86:07:F1:C4:B9:FF:C1:F1:23:96:BD:9E X509v3 Authority Key Identifier: keyid:D7:14:6D:A9:DE:28:F5:BB:5E:3D:E2:FF:00:C5:9F:C8:5C:99:38:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xRtqd4o9btePeL_AMWfyFyZONo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/1xRtqd4o9btePeL_AMWfyFyZONo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:23:a2:bf:ea:d0:26:62:85:7f:57:29:7e:40:e9:fa:94:2d: 5c:65:b9:a5:a1:34:08:21:f6:2b:15:93:40:e3:66:a3:d1:a5: 6c:3f:9f:ba:af:9d:a3:20:8a:07:e2:0d:9f:bd:64:c6:f0:0e: 55:fc:42:92:c5:f8:cd:6e:e0:fc:7c:cc:4d:1c:1d:71:60:9b: 10:9e:64:c9:13:75:72:b5:6e:dc:b9:8d:40:1b:11:fe:4f:96: 19:33:bb:6a:ec:3b:4d:2a:2a:aa:7c:f8:7f:a5:76:80:18:9a: 9c:90:ec:7e:ee:61:5b:27:ba:08:20:3c:01:9b:2d:66:d3:46: ea:8a:b4:11:a6:08:22:72:47:52:ac:2b:be:d5:12:d7:0a:d7: bc:7f:c9:9f:c8:c1:8a:74:27:d9:13:f7:a2:8a:2a:67:46:2d: 2d:04:77:16:2f:6e:92:28:35:cc:44:2b:a8:2f:7d:66:58:a6: 8e:73:5c:03:3d:77:bc:17:b0:ab:46:54:94:d0:ce:ee:7a:8c: d3:3a:e6:78:ff:0f:fb:e2:46:7a:a2:cc:47:d1:02:9e:db:2a: 28:2d:d4:d2:d9:ff:c3:ab:e0:1b:ed:ca:f9:75:66:9d:79:92: 13:ae:77:8a:47:3d:dc:01:72:67:ae:e1:16:a7:87:68:91:ab: 41:b4:44:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKEQ3MTQ2REE5REUyOEY1QkI1RTNERTJGRjAwQzU5RkM4 NUM5OTM4REEwHhcNMjQxMTIyMTkxNTI0WhcNMjQxMTI5MTkxNTI0WjAYMRYwFAYD VQQDEw02NzQwZDg0Yy1lYmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFoWmW569picFDcUy8RewLZC/pZntDR74HzIrro0oSTdaubbfu5YveCG/OlU +KhdPNLV7jeV/sHrC3n9HGPX5HJG4adUua/5SDd9CScY2T4tmB+ZeeuodmyitdrI wXgPqt2izMReXG/cIg3unNNozTD7JK3TwBJchmb6JLR+haYTA5mOtDJXasb7853K uwIn0dkAMeNIz1uCecQ5DYiY2KZP6PXMUNwgvo/vN6HYZZLDOpn484ivsNMkGyZG Ms7DYGSrp/hvCtQ3o3iPJ9S9gBqW1TCOdMcTTSaslmWatV8LTUof+mbg3sY8olWU XGO3KcdvCyNL1DRlOJQkqJ8RFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGeCKTY FrjIhgfxxLn/wfEjlr2eMB8GA1UdIwQYMBaAFNcUbaneKPW7Xj3i/wDFn8hcmTja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzlidGVQZUxfQU1XZnlGeVpP Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4UnRxZDRvOWJ0ZVBlTF9BTVdmeUZ5Wk9Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi8xeFJ0cWQ0bzli dGVQZUxfQU1XZnlGeVpPTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSI6K/6tAmYoV/Vyl+QOn6lC1cZbmloTQIIfYrFZNA42aj0aVsP5+6 r52jIIoH4g2fvWTG8A5V/EKSxfjNbuD8fMxNHB1xYJsQnmTJE3VytW7cuY1AGxH+ T5YZM7tq7DtNKiqqfPh/pXaAGJqckOx+7mFbJ7oIIDwBmy1m00bqirQRpggickdS rCu+1RLXCte8f8mfyMGKdCfZE/eiiipnRi0tBHcWL26SKDXMRCuoL31mWKaOc1wD PXe8F7CrRlSU0M7ueozTOuZ4/w/74kZ6osxH0QKe2yooLdTS2f/Dq+Ab7cr5dWad eZITrneKRz3cAXJnruEWp4dokatBtESq -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:33 2024 by rpki-client on console-fra.rpki-client.org