$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json) Hash identifier: kJrpEOXDvTJ6TSCURZcDWQmPbEJyooG+OCRCqgQ/RaM= Subject key identifier: 6F:5E:7A:6C:6E:FD:52:75:F9:99:8C:8E:69:AB:C7:E1:3E:9E:76:1A Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0E90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft Manifest number: 0E84 Signing time: Fri 22 Nov 2024 17:42:15 +0000 Manifest this update: Fri 22 Nov 2024 17:42:14 +0000 Manifest next update: Fri 29 Nov 2024 17:42:14 +0000 Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: A/4MP7bt36tXz3+/v9e/T8otl1vLdwp118OOPnvUcHU=) 2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: A8AIxAg5gwWSMZiH0q8hrQIiNj9S46FbMDHCyBhebm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3728 (0xe90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: Nov 22 17:42:14 2024 GMT Not After : Nov 29 17:42:14 2024 GMT Subject: CN=6740c277-ef35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:8a:3a:4c:3f:db:b0:aa:5f:64:91:14:9f: 8f:c5:f1:a9:2d:6a:8a:ee:ab:fd:57:e4:0e:95:cf: 96:38:94:6f:2e:ec:6c:43:89:7b:a8:e5:c8:92:86: 6c:21:7e:7f:80:7d:33:4e:27:fe:df:81:83:44:c1: 2c:46:e8:74:3b:0f:d2:de:22:72:9e:b0:c9:13:99: c0:4d:41:16:92:8e:22:00:e9:10:24:e9:96:91:e6: a8:18:15:d3:8e:04:31:01:81:2b:ad:38:b8:ab:1b: 54:13:f3:73:a4:d5:5e:e8:38:ba:41:37:08:87:be: f6:dd:d0:16:1f:4f:38:e8:fb:4e:f6:fc:48:84:73: c1:32:c6:90:25:f9:53:0e:ef:45:3f:42:64:b5:a5: 4a:73:26:78:b7:e7:67:58:ba:9c:31:03:cb:c0:81: 8c:94:7e:da:e8:e7:40:f7:6c:18:93:eb:07:d1:44: 81:b5:2e:fd:4e:c1:d1:13:4d:b1:8b:4f:e4:49:77: 99:7a:b0:38:5d:ce:ec:91:2f:7f:4d:6b:e9:30:5a: 7b:ba:f2:b7:47:16:fc:ec:03:3e:1a:fb:97:ba:33: a8:7e:c3:85:71:c9:65:33:4c:ed:41:e8:ac:a6:03: 07:02:cb:14:26:9d:d6:72:5f:1d:b4:e9:87:d7:48: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5E:7A:6C:6E:FD:52:75:F9:99:8C:8E:69:AB:C7:E1:3E:9E:76:1A X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:cd:a9:95:89:d8:69:d4:91:7c:0f:27:a2:2a:ec:e8:1a:41: 4a:74:bb:f5:01:91:b1:49:32:b5:98:64:a6:d5:48:7c:60:16: 49:7b:74:ec:cc:cb:64:01:ab:67:bc:03:b4:58:e0:23:fd:f8: 5a:2e:a2:36:ab:6e:82:d3:52:67:9f:df:d3:25:87:23:f0:1c: 91:8b:83:a1:1d:01:c6:39:ae:95:bc:17:94:6f:49:d0:60:6f: 41:ec:d7:b7:38:71:84:09:b6:c0:3c:09:72:0c:ae:a2:c6:30: 60:c3:11:2a:53:2c:56:46:25:3f:6f:8d:1b:36:99:1e:cd:90: cc:31:1b:a4:ac:60:6d:04:79:29:6e:c6:70:05:19:0e:cb:ad: 80:0e:ae:61:ed:0c:c9:86:f3:86:f9:d2:1d:9b:c3:40:6d:42: ea:4b:05:ad:58:ff:d9:f1:c0:de:0e:a6:a2:58:06:be:20:30: 66:93:40:bb:c1:96:8a:76:7e:76:e5:66:f4:a4:64:ed:bf:55: 1f:56:9a:21:58:89:d9:a5:02:3e:b6:e4:d2:f2:d8:ee:97:7b: 96:28:8c:8b:c2:25:18:b4:9f:85:b3:3f:a4:b6:18:c2:03:8b: ad:af:48:bb:b4:bc:6a:46:72:da:9d:a5:1a:d2:cc:9b:e4:b0: d9:e5:e6:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjQxMTIyMTc0MjE0WhcNMjQxMTI5MTc0MjE0WjAYMRYwFAYD VQQDEw02NzQwYzI3Ny1lZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKmKOkw/27CqX2SRFJ+PxfGpLWqK7qv9V+QOlc+WOJRvLuxsQ4l7qOXIkoZs IX5/gH0zTif+34GDRMEsRuh0Ow/S3iJynrDJE5nATUEWko4iAOkQJOmWkeaoGBXT jgQxAYErrTi4qxtUE/NzpNVe6Di6QTcIh7723dAWH0846PtO9vxIhHPBMsaQJflT Du9FP0JktaVKcyZ4t+dnWLqcMQPLwIGMlH7a6OdA92wYk+sH0USBtS79TsHRE02x i0/kSXeZerA4Xc7skS9/TWvpMFp7uvK3Rxb87AM+GvuXujOofsOFccllM0ztQeis pgMHAssUJp3Wcl8dtOmH10ivYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9eemxu /VJ1+ZmMjmmrx+E+nnYaMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3 dHN6QXNnOFlhQW02Q05DUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAizamVidhp1JF8DyeiKuzoGkFKdLv1AZGxSTK1mGSm1Uh8YBZJe3Ts zMtkAatnvAO0WOAj/fhaLqI2q26C01Jnn9/TJYcj8ByRi4OhHQHGOa6VvBeUb0nQ YG9B7Ne3OHGECbbAPAlyDK6ixjBgwxEqUyxWRiU/b40bNpkezZDMMRukrGBtBHkp bsZwBRkOy62ADq5h7QzJhvOG+dIdm8NAbULqSwWtWP/Z8cDeDqaiWAa+IDBmk0C7 wZaKdn525Wb0pGTtv1UfVpohWInZpQI+tuTS8tjul3uWKIyLwiUYtJ+Fsz+kthjC A4utr0i7tLxqRnLanaUa0syb5LDZ5eZi -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org