$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json) Hash identifier: 97JffJ3F5JKBgrQoSSz1XPOkVLBS5w/2KctKlbzWyMU= Subject key identifier: A7:06:DA:09:0E:BA:E1:D4:A2:89:11:5E:96:5A:E5:AC:B5:77:07:8C Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Certificate serial: 072F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft Manifest number: 0723 Signing time: Fri 22 Nov 2024 21:21:59 +0000 Manifest this update: Fri 22 Nov 2024 21:21:58 +0000 Manifest next update: Fri 29 Nov 2024 21:21:58 +0000 Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: hKBPXle5C9hO65h3R3yBZBS2y+xLEtjX/BkqeA7acho=) 2: 407DD9CED09211EE843A0F22C4F9AE02.roa (hash: DYjETZSzXLPZu6k/scGKmt/lU3UqCl+3wtEbXL9L8Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E Validity Not Before: Nov 22 21:21:58 2024 GMT Not After : Nov 29 21:21:58 2024 GMT Subject: CN=6740f5f7-881b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:02:43:ad:cd:99:f4:b6:55:9a:50:37:45:19: 53:12:88:22:13:ef:39:8b:31:f2:99:a3:e7:f8:06: 5c:6c:e2:01:d0:c5:b0:37:4c:b7:ff:72:28:8e:1b: 46:65:eb:5d:aa:da:77:9f:0b:85:5f:9d:96:54:ea: 9d:96:d6:b6:a8:0b:0e:f6:4e:9e:50:99:3a:4f:d0: c7:c3:75:66:13:12:bb:b8:dc:db:21:5c:6e:e9:94: 53:40:e5:93:84:f4:fc:4c:15:77:fe:68:b6:60:ce: 44:82:2f:ea:a6:ca:e8:de:5b:e5:c4:5d:b8:7b:fd: e7:b3:45:6e:d3:c3:78:da:a3:2d:3f:55:d8:e9:37: 80:4e:4e:7e:e5:88:26:f9:20:d5:9c:cb:75:a6:96: 8d:b8:d2:6f:fa:d1:eb:2a:3d:85:53:e7:24:96:ef: a9:62:26:9f:e1:d1:73:73:b4:15:26:f2:8b:05:01: 19:66:dc:62:1f:a1:9e:8f:40:d4:51:a8:a0:be:d1: c5:8b:f9:7d:2e:4c:ee:30:93:b2:b1:2a:29:38:fa: 8c:f2:34:1e:40:f6:c5:3a:d2:95:d9:52:3a:71:e6: b3:fa:2b:79:8c:b7:47:60:2c:dd:c7:6b:d3:93:e8: 83:65:e4:c3:ba:64:c9:75:42:29:59:52:d6:0f:79: cb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:06:DA:09:0E:BA:E1:D4:A2:89:11:5E:96:5A:E5:AC:B5:77:07:8C X509v3 Authority Key Identifier: keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:25:d5:54:1c:1e:3e:31:e5:ce:0d:8f:f2:17:cf:d4:8a:e1: 64:11:c6:84:9f:fb:8b:0a:dd:0f:45:e0:45:98:cd:97:67:53: 69:dc:70:0f:ab:dd:a0:b2:38:88:2a:1b:60:cf:e9:48:95:8e: 46:ba:f6:4c:74:b4:d3:56:10:45:39:4d:a1:3d:03:84:b4:5c: 2a:6b:dd:b0:ab:42:19:98:c6:53:c0:7d:b7:99:d7:c1:4b:3a: 3e:6c:bf:59:1c:f8:00:96:f7:b8:9c:8c:75:c6:ba:31:7e:f1: 9f:a1:c9:03:af:4a:66:37:99:68:a1:a5:1d:2b:16:c0:d0:5c: a9:1b:30:c2:c9:74:3d:f6:77:46:b7:f2:aa:81:f9:3b:d0:9b: 5b:cc:51:01:fe:5e:03:02:42:50:ed:40:21:c2:45:71:e5:09: 44:9f:90:23:11:be:97:b9:c0:e6:a6:13:ad:5f:4f:eb:20:45: 4e:bb:8c:d6:a6:37:5d:b1:0f:b0:7b:70:95:57:be:e9:fd:0e: 54:25:cf:e1:57:cf:d6:24:eb:3f:89:f3:8b:c1:80:2b:f3:1a: c9:1f:af:3e:bd:71:3f:88:57:64:0b:a0:7c:c2:a0:78:87:1d: d1:97:b0:13:e2:fd:6b:68:74:97:2f:4d:a7:52:48:e9:05:52: ad:da:52:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRCRTgxMTAvBgNVBAUTKEYzNTQwOTM5NDg2NkZCNDA4QTBEMTg4RTBCN0QwMEND NUE3Mzk0OEUwHhcNMjQxMTIyMjEyMTU4WhcNMjQxMTI5MjEyMTU4WjAYMRYwFAYD VQQDEw02NzQwZjVmNy04ODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AJDrc2Z9LZVmlA3RRlTEogiE+85izHymaPn+AZcbOIB0MWwN0y3/3IojhtG Zetdqtp3nwuFX52WVOqdlta2qAsO9k6eUJk6T9DHw3VmExK7uNzbIVxu6ZRTQOWT hPT8TBV3/mi2YM5Egi/qpsro3lvlxF24e/3ns0Vu08N42qMtP1XY6TeATk5+5Ygm +SDVnMt1ppaNuNJv+tHrKj2FU+cklu+pYiaf4dFzc7QVJvKLBQEZZtxiH6Gej0DU UaigvtHFi/l9LkzuMJOysSopOPqM8jQeQPbFOtKV2VI6ceaz+it5jLdHYCzdx2vT k+iDZeTDumTJdUIpWVLWD3nL9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcG2gkO uuHUookRXpZa5ay1dweMMB8GA1UdIwQYMBaAFPNUCTlIZvtAig0Yjgt9AMxac5SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREJFOC85RDM2MzE3ODE1 MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0wQ0tEUmlPQzMwQXpGcHps STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgxUUpPVWhtLTBDS0RSaU9DMzBBekZwemxJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REJFOC85RDM2MzE3ODE1MkIxMUVCOUJENEVCNDZDNEY5QUUwMi84MVFKT1VobS0w Q0tEUmlPQzMwQXpGcHpsSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1JdVUHB4+MeXODY/yF8/UiuFkEcaEn/uLCt0PReBFmM2XZ1Np3HAP q92gsjiIKhtgz+lIlY5GuvZMdLTTVhBFOU2hPQOEtFwqa92wq0IZmMZTwH23mdfB Szo+bL9ZHPgAlve4nIx1xroxfvGfockDr0pmN5looaUdKxbA0FypGzDCyXQ99ndG t/Kqgfk70JtbzFEB/l4DAkJQ7UAhwkVx5QlEn5AjEb6XucDmphOtX0/rIEVOu4zW pjddsQ+we3CVV77p/Q5UJc/hV8/WJOs/ifOLwYAr8xrJH68+vXE/iFdkC6B8wqB4 hx3Rl7AT4v1raHSXL02nUkjpBVKt2lLH -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:54 2024 by rpki-client on console-ams.rpki-client.org