$ rpki-client -vvf rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft File: s8j34GTam1qm6nlgF-xg0okDeCo.mft (raw, json) Hash identifier: PmZzjDT+6kOrzVs2z9d5kmryOVCQ1lfahVfprUMr8GA= Subject key identifier: EF:6D:EE:2B:AC:69:D7:C6:5E:D5:F0:51:42:DE:F4:5E:2F:B0:95:80 Authority key identifier: B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A Certificate issuer: /CN=A91D671F/serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A Certificate serial: 15B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft Manifest number: 15A6 Signing time: Fri 22 Nov 2024 16:47:22 +0000 Manifest this update: Fri 22 Nov 2024 16:47:21 +0000 Manifest next update: Fri 29 Nov 2024 16:47:21 +0000 Files and hashes: 1: s8j34GTam1qm6nlgF-xg0okDeCo.crl (hash: waFzRg27YmsfgHe08oE7TyCxRoxR1JDpVAsbtfvoNCM=) 2: A135DDD4162211EC9B4B6F77C4F9AE02.roa (hash: PQQbRL+FceR911s2DnKbA76SOWcCu+81xyQa/8CkP7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5561 (0x15b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D671F/serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A Validity Not Before: Nov 22 16:47:21 2024 GMT Not After : Nov 29 16:47:21 2024 GMT Subject: CN=6740b59a-5716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:19:71:4f:41:4b:84:ba:6f:1d:02:5f:11: e9:c6:49:72:24:88:ac:5c:a3:cd:97:28:7a:a7:7b: 4a:b7:72:f7:d3:b3:8e:75:d5:44:77:99:9c:62:99: c3:6b:b8:e6:af:52:0b:2e:b4:e2:79:eb:84:0a:b9: 80:7c:6a:5c:2a:f0:08:02:ef:fe:ed:c7:5c:6f:b9: d0:66:d9:2e:62:19:28:c6:9e:a3:0a:ff:05:56:f3: e8:0d:15:15:a7:4c:01:63:4b:7c:72:b2:95:ae:73: 65:58:b1:58:98:8f:9b:b7:44:3f:9a:ff:ac:3c:03: db:ad:85:26:6d:7b:bf:73:9b:eb:2c:fa:1a:84:d6: 3c:4e:a9:f9:72:ca:3a:c6:92:18:1a:47:f0:34:eb: 9c:5f:2e:16:94:2a:86:84:c2:fa:87:a9:46:8a:9f: 19:19:1d:01:2d:9a:05:f0:f7:54:c3:42:f3:31:0f: 3f:53:d1:be:98:20:07:95:1b:77:29:c9:d9:50:79: be:93:e3:33:87:bd:f2:6a:4f:09:40:cc:27:a7:26: 7c:96:a9:57:55:eb:57:4d:48:30:05:20:1d:b3:22: e4:07:69:71:9a:67:83:34:94:09:79:31:2c:03:d7: 8b:6a:c9:ce:07:af:2e:b8:d6:0c:b4:3d:fb:c2:12: 9d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6D:EE:2B:AC:69:D7:C6:5E:D5:F0:51:42:DE:F4:5E:2F:B0:95:80 X509v3 Authority Key Identifier: keyid:B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:8c:60:31:e2:1e:96:ab:e9:ca:37:0d:3f:a8:10:31:29:d5: d4:6b:d1:62:5f:ae:37:10:2e:95:b0:3a:cb:57:fe:3a:06:83: 44:16:ce:5a:67:44:9c:9e:49:f0:c1:65:f0:95:62:52:a2:12: ac:20:3d:80:e4:e2:00:2e:7c:8b:81:e6:a1:c2:b5:8b:eb:d9: b5:6b:bf:c8:5d:f6:01:b6:4d:f5:b9:ab:da:40:12:53:29:79: c9:a5:a3:ab:45:02:5c:06:23:67:0d:3a:21:b7:1e:04:73:2d: e0:5a:2f:b2:8f:0d:e5:25:07:98:e4:16:ac:04:64:8c:d0:bf: 38:44:ca:a5:53:98:be:5a:dc:ac:13:df:c3:80:b1:08:a3:f4: ee:93:16:0d:95:96:1d:4a:8f:f7:08:d1:3f:35:2d:04:12:23: d5:10:b6:55:94:3b:75:f3:16:04:49:54:57:0d:1e:df:c9:a7: b1:7f:cd:8e:5d:0b:7f:48:20:58:17:da:89:ab:67:56:df:22: fa:9b:e8:c4:05:fb:73:3b:71:c2:ec:35:4c:ed:18:5f:65:dd: 9e:d5:31:69:30:86:12:5f:3e:85:6d:14:2f:cf:7e:dd:57:61: bf:2f:be:30:d0:72:ad:de:f8:cd:f6:67:55:17:d6:c2:7f:74: c3:c3:f9:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MUYxMTAvBgNVBAUTKEIzQzhGN0UwNjREQTlCNUFBNkVBNzk2MDE3RUM2MEQy ODkwMzc4MkEwHhcNMjQxMTIyMTY0NzIxWhcNMjQxMTI5MTY0NzIxWjAYMRYwFAYD VQQDEw02NzQwYjU5YS01NzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyccZcU9BS4S6bx0CXxHpxklyJIisXKPNlyh6p3tKt3L307OOddVEd5mcYpnD a7jmr1ILLrTieeuECrmAfGpcKvAIAu/+7cdcb7nQZtkuYhkoxp6jCv8FVvPoDRUV p0wBY0t8crKVrnNlWLFYmI+bt0Q/mv+sPAPbrYUmbXu/c5vrLPoahNY8Tqn5cso6 xpIYGkfwNOucXy4WlCqGhML6h6lGip8ZGR0BLZoF8PdUw0LzMQ8/U9G+mCAHlRt3 KcnZUHm+k+Mzh73yak8JQMwnpyZ8lqlXVetXTUgwBSAdsyLkB2lxmmeDNJQJeTEs A9eLasnOB68uuNYMtD37whKdlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9t7ius adfGXtXwUULe9F4vsJWAMB8GA1UdIwQYMBaAFLPI9+Bk2ptapup5YBfsYNKJA3gq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcxRi8xRURDMTBCQzE3 MUUxMUU4ODU2QkM0NDNDNEY5QUUwMi9zOGozNEdUYW0xcW02bmxnRi14ZzBva0Rl Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4ajM0R1RhbTFxbTZubGdGLXhnMG9rRGVDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjcxRi8xRURDMTBCQzE3MUUxMUU4ODU2QkM0NDNDNEY5QUUwMi9zOGozNEdUYW0x cW02bmxnRi14ZzBva0RlQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4jGAx4h6Wq+nKNw0/qBAxKdXUa9FiX643EC6VsDrLV/46BoNEFs5a Z0ScnknwwWXwlWJSohKsID2A5OIALnyLgeahwrWL69m1a7/IXfYBtk31uavaQBJT KXnJpaOrRQJcBiNnDTohtx4Ecy3gWi+yjw3lJQeY5BasBGSM0L84RMqlU5i+Wtys E9/DgLEIo/TukxYNlZYdSo/3CNE/NS0EEiPVELZVlDt18xYESVRXDR7fyaexf82O XQt/SCBYF9qJq2dW3yL6m+jEBftzO3HC7DVM7RhfZd2e1TFpMIYSXz6FbRQvz37d V2G/L74w0HKt3vjN9mdVF9bCf3TDw/kJ -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org