$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft File: aaMtc-A4ow1HrKzrgc1zEq91Ork.mft (raw, json) Hash identifier: bfcvtFVED/3CWbxOJcZZ4WlgNuivViDdDLi6s8kuY9k= Subject key identifier: 1E:5A:FA:76:62:9F:D2:81:D1:D3:F6:E9:C3:F0:A5:E7:60:4D:6E:E3 Authority key identifier: 69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 Certificate issuer: /CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft Manifest number: 87 Signing time: Sat 23 Nov 2024 04:38:29 +0000 Manifest this update: Sat 23 Nov 2024 04:38:29 +0000 Manifest next update: Sat 30 Nov 2024 04:38:29 +0000 Files and hashes: 1: aaMtc-A4ow1HrKzrgc1zEq91Ork.crl (hash: o9I3oTDW5HqT97zIJvnYU5bqJWHG2kNi5jyGSEDvlSw=) 2: 2F734D2E860111EFB49EB20DC4F9AE02.roa (hash: 4t+sMTbAJ+kLCfq05BEZPY0fE0+PYleTD+wj8+655eM=) 3: 43441626860111EF8B4DF50DC4F9AE02.roa (hash: zb3/lrLeRlJmKw7JTV9NgzGdwRwswYT+OX1DDSNNgHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1F31/serialNumber=69A32D73E038A30D47ACACEB81CD7312AF753AB9 Validity Not Before: Nov 23 04:38:29 2024 GMT Not After : Nov 30 04:38:29 2024 GMT Subject: CN=67415c45-3f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:1d:7b:99:29:f3:84:35:d4:15:fa:e9:05: 22:d0:6c:d8:22:5e:31:56:59:72:55:4a:8e:74:02: 1e:60:44:92:10:99:f5:75:e9:45:13:53:c3:c2:40: e3:80:70:13:61:f6:ab:6e:92:22:74:05:53:4e:2c: 7c:a2:cb:14:7e:7e:d4:49:32:15:c8:00:c6:88:76: 37:d2:47:64:ba:96:ec:a0:2e:cc:94:85:99:55:cd: 35:ce:47:1b:8e:3c:de:a4:39:6a:09:1a:00:ea:21: 1f:df:96:18:d5:1e:c4:20:4c:99:29:64:94:08:5b: 06:f4:c0:82:c5:d3:fe:4b:bf:92:f8:45:25:09:e5: 9f:af:8c:7e:87:1c:1e:10:7a:00:51:19:58:15:72: 7d:b6:98:ea:39:bd:04:5e:7c:b8:61:02:cd:bc:14: 16:d2:57:fb:02:67:9e:38:1f:3f:7e:1d:61:e1:31: 4d:89:47:a9:9e:46:05:0b:ef:c9:b2:5b:c2:d5:73: f4:81:c7:9a:ff:e3:12:aa:70:25:71:61:3c:eb:1a: 1b:6a:44:55:ca:1e:89:90:93:c1:b8:d8:96:a3:d1: b9:8a:d1:cd:b0:89:c0:c2:54:61:19:00:d6:09:12: 66:1f:3f:7b:f0:19:cb:d4:36:f9:d4:49:1f:26:1d: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5A:FA:76:62:9F:D2:81:D1:D3:F6:E9:C3:F0:A5:E7:60:4D:6E:E3 X509v3 Authority Key Identifier: keyid:69:A3:2D:73:E0:38:A3:0D:47:AC:AC:EB:81:CD:73:12:AF:75:3A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aaMtc-A4ow1HrKzrgc1zEq91Ork.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1F31/A0F4E0D0E1BE11EEB045EB26C4F9AE02/aaMtc-A4ow1HrKzrgc1zEq91Ork.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0c:c8:96:1b:32:b8:8d:d6:22:a5:13:e8:54:17:49:64:fd: df:26:fb:20:55:b5:be:17:3f:83:03:2b:f7:c6:fd:e9:5c:81: 50:47:76:b6:bf:06:69:92:c6:71:a9:ac:90:f9:43:46:e3:20: c1:16:c6:2c:52:38:47:c5:00:12:9e:a1:b0:18:06:2d:7d:f9: a5:d5:61:b5:ed:25:d7:26:f1:71:94:c6:22:15:8b:f1:ae:a4: b6:60:17:41:a5:45:3b:64:d0:9d:ec:7c:0d:29:cb:ef:48:be: 7d:2f:4c:ff:35:bf:71:7d:a4:dd:ef:cf:f6:d1:cd:a6:be:99: ec:1f:4e:8c:3e:0a:3d:9f:05:8e:5b:fc:24:9e:78:14:75:03: 0a:d1:c3:9e:4e:f3:99:f5:12:96:99:71:99:d5:10:70:d8:34: d7:7c:3f:b0:55:84:89:a7:5d:50:7f:da:65:f3:8e:0e:35:52: 98:cf:82:7f:dc:7b:04:5f:cd:de:b2:0a:6d:c0:35:d3:c1:fc: 60:3f:26:df:ee:76:7d:e0:22:72:c7:39:6e:48:c6:93:00:5a: 87:74:c2:26:39:51:13:f7:08:5e:bf:26:76:4c:48:6b:d2:b3: f2:6a:27:65:20:2d:50:05:3c:c9:3a:ab:f6:58:67:5e:3f:9e: 90:25:fe:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFGMzExMTAvBgNVBAUTKDY5QTMyRDczRTAzOEEzMEQ0N0FDQUNFQjgxQ0Q3MzEy QUY3NTNBQjkwHhcNMjQxMTIzMDQzODI5WhcNMjQxMTMwMDQzODI5WjAYMRYwFAYD VQQDEw02NzQxNWM0NS0zZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut8de5kp84Q11BX66QUi0GzYIl4xVllyVUqOdAIeYESSEJn1delFE1PDwkDj gHATYfarbpIidAVTTix8ossUfn7USTIVyADGiHY30kdkupbsoC7MlIWZVc01zkcb jjzepDlqCRoA6iEf35YY1R7EIEyZKWSUCFsG9MCCxdP+S7+S+EUlCeWfr4x+hxwe EHoAURlYFXJ9tpjqOb0EXny4YQLNvBQW0lf7AmeeOB8/fh1h4TFNiUepnkYFC+/J slvC1XP0gcea/+MSqnAlcWE86xobakRVyh6JkJPBuNiWo9G5itHNsInAwlRhGQDW CRJmHz978BnL1Db51EkfJh2i1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5a+nZi n9KB0dP26cPwpedgTW7jMB8GA1UdIwQYMBaAFGmjLXPgOKMNR6ys64HNcxKvdTq5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUYzMS9BMEY0RTBEMEUx QkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93MUhyS3pyZ2MxekVxOTFP cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FhTXRjLUE0b3cxSHJLenJnYzF6RXE5MU9yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUYzMS9BMEY0RTBEMEUxQkUxMUVFQjA0NUVCMjZDNEY5QUUwMi9hYU10Yy1BNG93 MUhyS3pyZ2MxekVxOTFPcmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdDMiWGzK4jdYipRPoVBdJZP3fJvsgVbW+Fz+DAyv3xv3pXIFQR3a2 vwZpksZxqayQ+UNG4yDBFsYsUjhHxQASnqGwGAYtffml1WG17SXXJvFxlMYiFYvx rqS2YBdBpUU7ZNCd7HwNKcvvSL59L0z/Nb9xfaTd78/20c2mvpnsH06MPgo9nwWO W/wknngUdQMK0cOeTvOZ9RKWmXGZ1RBw2DTXfD+wVYSJp11Qf9pl844ONVKYz4J/ 3HsEX83esgptwDXTwfxgPybf7nZ94CJyxzluSMaTAFqHdMImOVET9whevyZ2TEhr 0rPyaidlIC1QBTzJOqv2WGdeP56QJf6e -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:30 2024 by rpki-client on console-fra.rpki-client.org