$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft File: h2oHnURPUsZNYGBMzHT5XwitpUc.mft (raw, json) Hash identifier: YvkXIWPzfpiOeI+lZz1PKaS1LPknER05JgpPgAQMvM8= Subject key identifier: 2A:D7:C0:FF:EE:CA:E2:9E:C9:89:DB:78:E4:EA:91:75:D7:27:7C:62 Authority key identifier: 87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 Certificate issuer: /CN=A91EB527/serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft Manifest number: 02DB Signing time: Sat 23 Nov 2024 02:21:40 +0000 Manifest this update: Sat 23 Nov 2024 02:21:39 +0000 Manifest next update: Sat 30 Nov 2024 02:21:39 +0000 Files and hashes: 1: h2oHnURPUsZNYGBMzHT5XwitpUc.crl (hash: Z7A6lmld8cuFownPJVqnJFVK97ukOl7JJ0S3AdfaPT0=) 2: 408045262AAA11EE86A2063BC4F9AE02.roa (hash: KULh3Cwj4pTsQ4NdFS2oaGBEZ1LXp6l0HQDgLQQ16OI=) 3: A9D7005CA94111EF9CC46F2FC4F9AE02.roa (hash: dxGl/7gfmwIzrpPvuQV22Q3Xb8qBR16UFLioFibE54M=) 4: 7AE355C0A94111EFB4F9A22EC4F9AE02.roa (hash: /XL7p2Q1hHPtidLAFeXIsJVDG0l7K1bzPg/w/IkAkqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB527/serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547 Validity Not Before: Nov 23 02:21:39 2024 GMT Not After : Nov 30 02:21:39 2024 GMT Subject: CN=67413c34-9a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:a4:44:34:62:60:ae:1d:f8:7d:9a:04:06: 7a:ae:aa:2b:4e:34:11:95:37:be:9e:3b:fd:79:68: c8:cc:b3:02:ad:30:b6:cf:0c:c3:6c:a5:6e:a0:1f: 6d:80:0c:ca:85:a0:c4:32:85:54:d4:9a:0a:d2:1a: 6e:6c:12:f8:fe:29:e6:57:23:76:50:8e:29:7c:0c: 85:f4:f2:af:c3:d5:01:31:5a:4e:96:8f:ae:cf:f7: dd:22:d1:83:fc:23:70:d4:c9:f4:87:e7:cf:09:12: 57:53:1d:a8:10:a1:7c:b8:f6:58:b5:c6:0c:f1:77: 47:fa:92:02:83:dc:3f:b2:bf:8d:dc:15:16:e9:35: 97:2c:52:76:1e:70:e4:48:04:bb:fe:e0:e8:b6:b7: 8d:46:44:75:98:87:de:c6:52:3a:0e:9e:4d:ad:6b: 21:94:1e:c5:4e:70:74:f6:55:e1:25:cf:d9:cb:2f: 90:a7:a8:85:76:2a:88:91:e8:8f:40:f6:51:08:0e: cb:3e:58:a1:ff:86:8c:b4:c2:ea:0f:2c:b8:25:ba: fc:7b:8a:4f:e3:63:34:ff:f0:c1:97:6d:91:93:17: 3d:60:71:fc:f8:ae:4c:2f:01:7b:87:5d:ad:6b:0f: 0c:e2:a3:23:c0:58:25:ef:54:d9:e3:ba:e6:8b:18: 9b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D7:C0:FF:EE:CA:E2:9E:C9:89:DB:78:E4:EA:91:75:D7:27:7C:62 X509v3 Authority Key Identifier: keyid:87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:ab:1b:bf:6f:a0:e9:d1:e3:93:df:64:d3:45:04:56:09:29: 4f:8a:72:3c:4d:11:ca:39:81:71:95:33:4a:f4:e1:23:3e:c4: ad:59:99:1b:b1:6c:15:33:3e:8b:b8:87:cd:90:20:86:bf:aa: e6:02:51:cd:a8:8d:e9:6e:41:c4:0a:01:73:04:ed:36:19:99: 56:09:94:6c:37:b1:3c:a5:b8:c7:c5:60:8a:32:89:01:15:70: c2:5e:7e:59:06:71:92:09:35:05:f6:01:aa:3c:e5:50:e0:9b: 3c:be:7d:48:4b:37:d1:29:2a:22:84:e2:35:5b:8d:c1:f2:20: 73:96:8e:bb:c6:29:ea:82:67:9f:91:66:7c:dd:69:ce:ad:fb: 3d:71:86:d6:0c:0a:65:c6:f4:c4:83:04:01:f6:4e:44:7f:91: 0e:e6:76:1a:33:aa:6d:c9:fc:c8:67:8c:ae:a0:fb:95:e1:f4: 48:06:fc:fc:05:7f:22:62:f1:9e:88:5b:f2:60:3b:ce:da:d9: e0:bf:57:9c:6a:5a:33:b4:ff:bf:c2:5c:03:d0:60:3f:08:43: 0e:e3:10:d8:20:59:91:37:1a:00:97:50:e2:1f:ce:2a:5e:77: 4f:37:25:5d:13:35:17:33:18:b4:5c:fa:81:3b:0f:ce:91:0d: b8:9c:d9:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI1MjcxMTAvBgNVBAUTKDg3NkEwNzlENDQ0RjUyQzY0RDYwNjA0Q0NDNzRGOTVG MDhBREE1NDcwHhcNMjQxMTIzMDIyMTM5WhcNMjQxMTMwMDIyMTM5WjAYMRYwFAYD VQQDEw02NzQxM2MzNC05YTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQqkRDRiYK4d+H2aBAZ6rqorTjQRlTe+njv9eWjIzLMCrTC2zwzDbKVuoB9t gAzKhaDEMoVU1JoK0hpubBL4/inmVyN2UI4pfAyF9PKvw9UBMVpOlo+uz/fdItGD /CNw1Mn0h+fPCRJXUx2oEKF8uPZYtcYM8XdH+pICg9w/sr+N3BUW6TWXLFJ2HnDk SAS7/uDotreNRkR1mIfexlI6Dp5NrWshlB7FTnB09lXhJc/Zyy+Qp6iFdiqIkeiP QPZRCA7LPlih/4aMtMLqDyy4Jbr8e4pP42M0//DBl22Rkxc9YHH8+K5MLwF7h12t aw8M4qMjwFgl71TZ47rmixib3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrXwP/u yuKeyYnbeOTqkXXXJ3xiMB8GA1UdIwQYMBaAFIdqB51ET1LGTWBgTMx0+V8IraVH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjUyNy9ERDFBRTJGNkMy QUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVzWk5ZR0JNekhUNVh3aXRw VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gyb0huVVJQVXNaTllHQk16SFQ1WHdpdHBVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjUyNy9ERDFBRTJGNkMyQUExMUVDQUY1RjlGNzZDNEY5QUUwMi9oMm9IblVSUFVz Wk5ZR0JNekhUNVh3aXRwVWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0qxu/b6Dp0eOT32TTRQRWCSlPinI8TRHKOYFxlTNK9OEjPsStWZkb sWwVMz6LuIfNkCCGv6rmAlHNqI3pbkHECgFzBO02GZlWCZRsN7E8pbjHxWCKMokB FXDCXn5ZBnGSCTUF9gGqPOVQ4Js8vn1ISzfRKSoihOI1W43B8iBzlo67xinqgmef kWZ83WnOrfs9cYbWDAplxvTEgwQB9k5Ef5EO5nYaM6ptyfzIZ4yuoPuV4fRIBvz8 BX8iYvGeiFvyYDvO2tngv1ecaloztP+/wlwD0GA/CEMO4xDYIFmRNxoAl1DiH84q XndPNyVdEzUXMxi0XPqBOw/OkQ24nNk9 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:57 2024 by rpki-client on console-ams.rpki-client.org