$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: rlHZLjVglmK00SnhMI6e8lEl9NRPCkjdbTj5prhL3Ho= Subject key identifier: 2E:B7:3C:C6:3E:F6:FC:4D:55:95:0F:23:B3:91:14:D6:43:94:93:FC Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 030D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 0308 Signing time: Sat 23 Nov 2024 00:47:17 +0000 Manifest this update: Sat 23 Nov 2024 00:47:17 +0000 Manifest next update: Sat 30 Nov 2024 00:47:17 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: ZYJ66W0NmOcUzON6N8SHrweO3IwtfR0a8nIo4YBumUU=) 2: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (hash: lDraqThqAp2VTAeBcGzfKiHZ4mgdJ9Pve9y5JAjucic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Nov 23 00:47:17 2024 GMT Not After : Nov 30 00:47:17 2024 GMT Subject: CN=67412615-9191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:7f:7f:dc:73:46:b7:c6:62:0a:c1:7e:2c: c7:39:39:f6:49:04:55:4c:5a:8c:56:37:44:57:10: 16:91:7d:3e:9f:68:89:5a:6e:e4:23:3c:95:b1:37: 97:a1:98:b5:73:af:ae:68:f7:e4:28:29:88:c5:8a: 66:fe:68:4e:39:cc:0c:93:99:24:fb:11:7d:bc:bf: 3a:2e:8a:fb:aa:24:12:6e:be:d8:80:9f:bd:6a:f9: b1:95:fc:e4:bb:30:0a:a2:3f:c6:1a:4e:67:d7:cd: 6e:53:d2:1f:85:ba:55:01:66:d9:33:9c:2a:4f:42: 1a:69:f7:ac:b7:e2:b4:7b:f0:f4:dc:8b:4b:ad:3d: b7:05:2f:4e:15:dd:01:7d:ef:df:9d:45:7d:7d:7f: 5c:2c:ff:70:27:3b:f9:71:f9:3c:dd:30:c8:96:ac: bd:2d:b0:2c:ba:a3:57:a1:af:69:58:dc:33:64:57: 32:dc:8c:78:b3:37:00:4e:2e:da:6c:81:94:73:fb: c6:8d:8f:1c:9d:81:86:ba:91:b0:18:1e:60:a4:e7: c3:6c:6f:fd:5a:f8:cf:86:d3:25:63:04:89:1a:fa: b8:78:8a:64:85:f9:b8:79:a7:33:02:c1:a0:d6:ed: 28:20:8f:86:bd:46:43:61:cf:5a:d5:39:88:e9:27: 13:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B7:3C:C6:3E:F6:FC:4D:55:95:0F:23:B3:91:14:D6:43:94:93:FC X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:1c:94:c2:30:66:99:8d:24:bb:e4:6b:8d:a3:ef:09:c3:0b: 4c:d2:57:fd:53:2d:c9:24:a5:06:a5:fc:30:a5:2f:8d:ed:76: d6:f3:6d:0f:b6:d5:a9:1a:2c:cc:d8:4a:cd:a3:15:d5:dd:62: b7:8d:7c:bf:e8:28:ca:aa:78:a3:b0:57:09:c5:e5:5b:2a:4f: 21:8c:77:45:9c:46:9f:ae:26:86:1b:6c:2a:3d:6a:0b:3b:b2: c4:1c:95:8f:1e:ff:64:9b:86:4b:f2:90:cf:d5:6d:5f:ac:b1: 52:be:d1:7e:94:66:0e:e4:75:93:ad:4e:b8:ed:8f:ed:ed:a1: 17:1e:8f:3d:fc:61:7d:3b:92:c0:1b:ad:4a:e5:c4:25:83:5b: e0:d3:6c:a1:5d:05:bc:ec:b6:a4:41:8f:a5:ab:89:57:18:c1: 09:09:88:0a:66:8d:59:8b:06:aa:af:2a:2f:6a:24:6c:99:3d: 9d:e2:e5:97:5d:78:98:e8:d4:23:d1:ac:27:df:c5:6d:d0:d9: 99:32:e6:c1:28:a9:88:2d:25:9d:59:93:22:7d:b9:c6:f5:10: 29:c1:c3:3a:41:76:8c:86:3a:0d:21:ce:f6:85:09:87:50:46: bc:68:d7:10:83:71:59:f7:07:db:25:71:a2:c7:65:b7:2b:7a: 62:5f:98:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjQxMTIzMDA0NzE3WhcNMjQxMTMwMDA0NzE3WjAYMRYwFAYD VQQDEw02NzQxMjYxNS05MTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQp/f9xzRrfGYgrBfizHOTn2SQRVTFqMVjdEVxAWkX0+n2iJWm7kIzyVsTeX oZi1c6+uaPfkKCmIxYpm/mhOOcwMk5kk+xF9vL86Lor7qiQSbr7YgJ+9avmxlfzk uzAKoj/GGk5n181uU9IfhbpVAWbZM5wqT0Iaafest+K0e/D03ItLrT23BS9OFd0B fe/fnUV9fX9cLP9wJzv5cfk83TDIlqy9LbAsuqNXoa9pWNwzZFcy3Ix4szcATi7a bIGUc/vGjY8cnYGGupGwGB5gpOfDbG/9WvjPhtMlYwSJGvq4eIpkhfm4eaczAsGg 1u0oII+GvUZDYc9a1TmI6ScT+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC63PMY+ 9vxNVZUPI7ORFNZDlJP8MB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVHJTCMGaZjSS75GuNo+8JwwtM0lf9Uy3JJKUGpfwwpS+N7XbW820P ttWpGizM2ErNoxXV3WK3jXy/6CjKqnijsFcJxeVbKk8hjHdFnEafriaGG2wqPWoL O7LEHJWPHv9km4ZL8pDP1W1frLFSvtF+lGYO5HWTrU647Y/t7aEXHo89/GF9O5LA G61K5cQlg1vg02yhXQW87LakQY+lq4lXGMEJCYgKZo1ZiwaqryovaiRsmT2d4uWX XXiY6NQj0awn38Vt0NmZMubBKKmILSWdWZMifbnG9RApwcM6QXaMhjoNIc72hQmH UEa8aNcQg3FZ9wfbJXGix2W3K3piX5hg -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:56 2024 by rpki-client on console-ams.rpki-client.org