$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: hGYVaEQ5dZQ/JeQb53f7YgIbLropw7Atp6e7Xk/KVA4= Subject key identifier: A2:5F:56:16:C2:D3:95:E2:7A:0A:6B:39:B0:70:DE:14:E2:52:99:B5 Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 030B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 0307 Signing time: Sat 23 Nov 2024 00:47:39 +0000 Manifest this update: Sat 23 Nov 2024 00:47:39 +0000 Manifest next update: Sat 30 Nov 2024 00:47:39 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: WRkVocTasF5tOSDJJAEcyYctkrHHLGtISa7bDjyNdro=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 95fJ03bboSIkCN0DBXqmsgAZgIidDy4lfSJOy1nx1H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 779 (0x30b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Nov 23 00:47:39 2024 GMT Not After : Nov 30 00:47:39 2024 GMT Subject: CN=6741262b-d897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ff:94:9d:2b:a5:61:25:a7:7f:29:a9:12:00: 13:45:48:80:41:09:3e:a5:60:87:21:f6:18:1f:c4: bb:55:33:0d:10:6c:dc:d8:16:64:06:6c:08:05:6f: 21:2e:d1:1d:0b:b2:36:ad:c2:6b:34:b8:e4:34:32: eb:f9:0f:15:4f:72:99:6c:85:df:4a:91:24:69:31: 83:92:d6:1b:6a:7a:ce:c0:de:14:c1:cf:17:21:d1: 4a:8d:58:62:3a:51:a4:2e:6d:0e:9a:0e:fc:ca:b1: 1f:0d:c4:41:2a:32:2e:a1:5b:0f:9d:11:76:7b:c5: 05:28:1c:e5:04:1a:28:ef:83:1d:9c:ab:7a:f2:27: 50:e9:62:13:3a:d3:5f:9b:d4:d3:93:73:1c:45:ab: 6a:0b:b1:c8:f1:25:94:e2:5b:86:05:b3:8f:79:5b: fc:ee:df:04:5a:68:f3:f7:74:c9:47:16:08:ee:87: 66:53:1d:5d:f3:e3:bb:4c:77:0c:f4:28:03:71:14: 97:44:ef:14:33:1d:63:75:0c:ae:45:80:74:de:85: 0e:7c:ee:0c:18:e6:e7:d0:73:db:07:c2:8e:91:2b: 17:87:27:bd:1f:69:fc:5a:ed:a7:d6:6a:49:47:4c: 12:6e:9a:aa:90:d7:e2:a1:87:96:d3:17:0a:01:25: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5F:56:16:C2:D3:95:E2:7A:0A:6B:39:B0:70:DE:14:E2:52:99:B5 X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:92:d0:19:75:0b:fb:4f:0f:f9:15:ef:c8:c0:b2:9f:50:f7: 4f:e3:c3:98:6f:ad:b5:48:27:c6:f9:c4:44:57:d6:2e:9c:2a: 3e:b4:83:45:10:04:1d:54:51:d7:c4:1d:ce:e3:9d:f3:57:ba: 99:95:52:91:41:36:bc:13:4c:1e:36:ff:4b:c2:f3:14:bf:04: 02:80:8f:7e:00:11:75:a1:2a:0a:67:d8:ca:dc:f6:e6:32:5e: d4:95:2b:f8:09:1e:60:a1:14:1f:1f:1e:44:c4:e7:9b:4b:7c: 0d:e4:e1:92:69:13:80:6f:15:71:1c:97:a2:a7:cb:41:f6:4d: af:d1:6a:f1:89:1b:24:e7:04:50:62:4d:a8:00:3c:70:ce:8e: f2:f1:35:b1:75:7a:63:eb:25:45:ff:53:bb:32:db:21:28:97: 43:8e:d8:d7:70:7d:25:01:92:52:6e:de:c8:20:f8:82:d3:1f: a8:6c:88:bf:fc:d0:a3:ae:88:85:34:f9:6f:b9:11:71:ba:5c: cf:73:23:ad:71:b2:90:fd:fb:91:97:24:15:f9:0c:db:66:4a: 7b:d7:d1:fc:f9:4b:71:91:1a:2a:9c:1a:0f:ff:0e:04:e8:46: 94:5d:ac:c0:0c:d3:e1:59:db:c7:f9:32:86:11:73:32:1c:f9: 90:ef:81:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjQxMTIzMDA0NzM5WhcNMjQxMTMwMDA0NzM5WjAYMRYwFAYD VQQDEw02NzQxMjYyYi1kODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/+UnSulYSWnfympEgATRUiAQQk+pWCHIfYYH8S7VTMNEGzc2BZkBmwIBW8h LtEdC7I2rcJrNLjkNDLr+Q8VT3KZbIXfSpEkaTGDktYbanrOwN4Uwc8XIdFKjVhi OlGkLm0Omg78yrEfDcRBKjIuoVsPnRF2e8UFKBzlBBoo74MdnKt68idQ6WITOtNf m9TTk3McRatqC7HI8SWU4luGBbOPeVv87t8EWmjz93TJRxYI7odmUx1d8+O7THcM 9CgDcRSXRO8UMx1jdQyuRYB03oUOfO4MGObn0HPbB8KOkSsXhye9H2n8Wu2n1mpJ R0wSbpqqkNfioYeW0xcKASU7iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJfVhbC 05XiegprObBw3hTiUpm1MB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNktAZdQv7Tw/5Fe/IwLKfUPdP48OYb621SCfG+cREV9YunCo+tINF EAQdVFHXxB3O453zV7qZlVKRQTa8E0weNv9LwvMUvwQCgI9+ABF1oSoKZ9jK3Pbm Ml7UlSv4CR5goRQfHx5ExOebS3wN5OGSaROAbxVxHJeip8tB9k2v0WrxiRsk5wRQ Yk2oADxwzo7y8TWxdXpj6yVF/1O7MtshKJdDjtjXcH0lAZJSbt7IIPiC0x+obIi/ /NCjroiFNPlvuRFxulzPcyOtcbKQ/fuRlyQV+QzbZkp719H8+UtxkRoqnBoP/w4E 6EaUXazADNPhWdvH+TKGEXMyHPmQ74F0 -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:47 2024 by rpki-client on console-fra.rpki-client.org