$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft File: 98erVUq_Hcr4wXnBS8h6vPi3dg4.mft (raw, json) Hash identifier: bAsgdLdff/OHsVYYy7ouXe+koxO7loMIZhAHWKLl958= Subject key identifier: 37:D0:A3:BF:E3:84:0E:29:3E:91:11:F7:1F:82:92:0E:43:0E:79:09 Authority key identifier: F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E Certificate issuer: /CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft Manifest number: 0249 Signing time: Sat 23 Nov 2024 01:19:50 +0000 Manifest this update: Sat 23 Nov 2024 01:19:49 +0000 Manifest next update: Sat 30 Nov 2024 01:19:49 +0000 Files and hashes: 1: 98erVUq_Hcr4wXnBS8h6vPi3dg4.crl (hash: G90YOFlO8YcCFAP3N3M2iMMAG7Kt0RiwWSr1gNvnB4M=) 2: A60C101AFB8411ECB7FF456FC4F9AE02.roa (hash: KUkDUfBaYO7x5r7GKr4hhdrUQHUWyKfXeCnKjTowHew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15EA/serialNumber=F7C7AB554ABF1DCAF8C179C14BC87ABCF8B7760E Validity Not Before: Nov 23 01:19:49 2024 GMT Not After : Nov 30 01:19:49 2024 GMT Subject: CN=67412db5-312b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6b:6b:0b:d4:bc:15:1a:11:21:4d:de:e2:0f: 74:d8:51:80:25:6a:54:f2:aa:47:77:35:f3:dc:d0: 82:27:15:36:35:c8:07:5d:a2:82:7c:b6:c7:b6:5f: b2:8f:78:2c:f3:b4:0d:18:dc:40:cc:5d:7e:df:b0: 18:3d:f4:01:6d:12:f7:61:b2:93:dc:1d:ba:df:48: 3a:d0:e1:3b:93:21:d2:e8:ff:10:f0:8e:8c:b3:e3: d2:31:8c:78:67:43:f1:97:e0:8c:33:76:21:05:09: b5:a2:cf:77:a2:aa:2b:1b:33:bf:c7:c3:11:56:0a: dc:0d:92:06:de:48:1c:56:4d:3d:8c:99:d1:c3:22: 75:55:3d:f8:7d:be:cd:87:fc:95:ed:5a:74:7f:05: f1:2c:df:ca:ba:7b:04:65:ef:ff:b6:4f:9f:04:57: 56:b3:85:89:2f:91:9b:75:d3:75:cb:3f:5d:a8:55: 29:67:76:f0:58:e9:cc:ff:6c:1f:be:7f:2b:6f:4c: 52:66:98:3a:b7:aa:9a:37:96:b3:6e:c2:0b:26:58: 4a:e5:88:d8:0e:ce:89:55:4d:68:81:48:6a:7a:61: 54:be:6d:28:e9:26:9a:83:84:fb:b0:b9:c4:94:3e: d5:7b:09:f9:15:20:67:4a:41:50:a3:4b:92:7d:75: af:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D0:A3:BF:E3:84:0E:29:3E:91:11:F7:1F:82:92:0E:43:0E:79:09 X509v3 Authority Key Identifier: keyid:F7:C7:AB:55:4A:BF:1D:CA:F8:C1:79:C1:4B:C8:7A:BC:F8:B7:76:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/98erVUq_Hcr4wXnBS8h6vPi3dg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15EA/F1A7E2F4FB8111EC9C412644C4F9AE02/98erVUq_Hcr4wXnBS8h6vPi3dg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:89:15:02:87:d5:9c:88:42:ff:34:af:e0:42:ee:55:8c:82: fb:0e:f6:15:39:cd:61:95:7a:1b:5f:4f:1d:78:e9:80:f3:27: d5:33:a1:c8:5b:23:aa:2b:b6:20:07:78:d7:da:25:8f:52:91: 1a:80:71:4e:35:d0:e7:e5:d6:cf:32:95:c5:9e:a6:43:4f:3d: d8:b5:eb:a3:5e:ed:27:7c:f7:b4:61:cc:b2:71:d3:3c:76:26: 89:a3:12:a5:74:7b:58:05:a3:33:8b:2e:74:4e:57:11:a3:b6: d6:19:36:03:4e:42:e3:88:df:ba:70:7d:e2:c6:79:a8:a8:70: 33:ac:7b:e4:8a:0b:89:41:b4:59:c9:96:b3:fd:21:1c:ba:0e: 3d:19:e8:a0:d8:91:d6:ce:11:49:3f:b0:50:25:51:db:d4:07: aa:6a:42:3b:94:b3:42:6a:9c:c4:b5:79:09:5f:76:c5:74:5e: 7a:ab:28:fa:ba:f2:9c:1c:f2:8a:9a:3d:ff:70:40:73:19:95: d4:5e:e1:0d:ff:2f:bc:0a:94:04:df:4c:34:2c:b6:c5:97:c4: 35:a7:46:e1:37:22:23:90:70:ed:c9:15:dc:8b:d2:23:c5:db: 6c:72:04:a0:2a:b4:76:74:a6:3f:d1:84:30:5b:48:2b:f9:1d: 01:62:2e:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1RUExMTAvBgNVBAUTKEY3QzdBQjU1NEFCRjFEQ0FGOEMxNzlDMTRCQzg3QUJD RjhCNzc2MEUwHhcNMjQxMTIzMDExOTQ5WhcNMjQxMTMwMDExOTQ5WjAYMRYwFAYD VQQDEw02NzQxMmRiNS0zMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mtrC9S8FRoRIU3e4g902FGAJWpU8qpHdzXz3NCCJxU2NcgHXaKCfLbHtl+y j3gs87QNGNxAzF1+37AYPfQBbRL3YbKT3B2630g60OE7kyHS6P8Q8I6Ms+PSMYx4 Z0Pxl+CMM3YhBQm1os93oqorGzO/x8MRVgrcDZIG3kgcVk09jJnRwyJ1VT34fb7N h/yV7Vp0fwXxLN/KunsEZe//tk+fBFdWs4WJL5GbddN1yz9dqFUpZ3bwWOnM/2wf vn8rb0xSZpg6t6qaN5azbsILJlhK5YjYDs6JVU1ogUhqemFUvm0o6Saag4T7sLnE lD7Vewn5FSBnSkFQo0uSfXWvjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfQo7/j hA4pPpER9x+Ckg5DDnkJMB8GA1UdIwQYMBaAFPfHq1VKvx3K+MF5wUvIerz4t3YO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVFQS9GMUE3RTJGNEZC ODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hjcjR3WG5CUzhoNnZQaTNk ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk4ZXJWVXFfSGNyNHdYbkJTOGg2dlBpM2RnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVFQS9GMUE3RTJGNEZCODExMUVDOUM0MTI2NDRDNEY5QUUwMi85OGVyVlVxX0hj cjR3WG5CUzhoNnZQaTNkZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkiRUCh9WciEL/NK/gQu5VjIL7DvYVOc1hlXobX08deOmA8yfVM6HI WyOqK7YgB3jX2iWPUpEagHFONdDn5dbPMpXFnqZDTz3YteujXu0nfPe0YcyycdM8 diaJoxKldHtYBaMziy50TlcRo7bWGTYDTkLjiN+6cH3ixnmoqHAzrHvkiguJQbRZ yZaz/SEcug49Geig2JHWzhFJP7BQJVHb1AeqakI7lLNCapzEtXkJX3bFdF56qyj6 uvKcHPKKmj3/cEBzGZXUXuEN/y+8CpQE30w0LLbFl8Q1p0bhNyIjkHDtyRXci9Ij xdtscgSgKrR2dKY/0YQwW0gr+R0BYi5v -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:54 2024 by rpki-client on console-ams.rpki-client.org