$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft File: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json) Hash identifier: 5Bj3IBvsdrYpTRPv3XIM7j0weG2Cx/YlsdJYIyfl0bM= Subject key identifier: 8E:7C:93:82:4D:1B:D4:61:D6:A4:29:07:24:D5:10:55:30:81:92:06 Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA Certificate issuer: /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Certificate serial: 095D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft Manifest number: 0958 Signing time: Fri 22 Nov 2024 19:56:01 +0000 Manifest this update: Fri 22 Nov 2024 19:56:01 +0000 Manifest next update: Fri 29 Nov 2024 19:56:01 +0000 Files and hashes: 1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: U53JaK7hbcIEuMSA3jaGYQVemu+S1IKrSROj2XnamGw=) 2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: va8pqMs4sYFejLTjLiG9L4kNj9tDd61/iWoaglCLNt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2397 (0x95d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Validity Not Before: Nov 22 19:56:01 2024 GMT Not After : Nov 29 19:56:01 2024 GMT Subject: CN=6740e1d1-7d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0c:9c:78:c2:0b:61:f9:af:c7:ab:df:78:41: f1:d9:4b:79:8d:66:85:cc:3c:8a:9b:a8:4f:9b:c0: c8:f2:61:96:bf:d7:aa:53:59:e8:18:70:4b:fe:cd: 21:23:cb:f9:5f:03:44:e8:2e:b9:28:41:a3:73:03: 6c:c8:3a:c4:2c:96:12:aa:48:0a:22:88:83:77:3d: 47:81:8f:71:f3:13:bd:b5:1c:dd:ee:f9:b9:ad:ee: 8b:fe:50:33:24:03:66:98:cb:46:34:88:b9:21:61: 16:2a:d5:79:79:c4:a2:b2:c5:2b:20:be:1c:a3:26: 08:a7:2b:4f:8f:90:92:ed:83:8e:c1:50:8b:24:37: f3:63:86:a2:ab:da:4f:a2:48:52:6b:00:bd:ce:eb: 94:2c:e3:bb:44:5a:5a:75:54:3d:be:53:b9:43:21: 8a:cb:1b:0f:65:78:7c:aa:b2:9b:d3:9d:6d:1c:36: 13:2a:0d:2c:99:b4:82:3e:3e:89:c1:4f:c5:80:27: c8:3c:a9:65:d8:41:0e:1c:75:20:8e:f5:fc:5a:59: f0:bd:86:cb:fd:ce:34:f3:2b:bb:3b:e6:d4:7f:7f: e4:6f:92:fc:3c:01:7c:62:82:19:98:d4:7a:bb:c7: bc:00:71:1d:14:33:5e:de:2c:03:cc:c6:13:cb:47: 6b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7C:93:82:4D:1B:D4:61:D6:A4:29:07:24:D5:10:55:30:81:92:06 X509v3 Authority Key Identifier: keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e4:b9:2d:49:6f:6c:9f:f6:ce:9f:8e:e1:33:b0:9c:27:85: 01:aa:ce:22:d7:62:97:88:5e:04:39:b0:07:fc:bd:56:f5:80: b3:1f:28:bd:30:3d:65:d9:a7:98:57:dd:fe:16:01:8e:7d:9d: 2c:67:45:e3:79:ea:1f:51:1c:7a:a8:a7:69:df:b3:32:45:de: 8a:d0:71:9c:30:fb:91:06:0f:db:da:0e:b8:db:ff:02:3a:fe: d7:92:6f:4a:a4:bd:10:7e:a3:a2:0d:e1:25:a0:8e:a0:0e:92: 56:44:5b:4e:f5:f6:a1:27:48:a8:3b:0f:86:9e:3a:36:3c:73: 97:95:a5:88:54:94:1a:17:37:dc:27:43:9e:62:c7:93:16:7a: 50:0e:55:f7:32:56:64:d4:ef:85:6f:9a:05:02:59:50:b4:77: fc:5a:07:ed:51:d3:c7:de:d1:52:21:5c:cc:91:fc:51:19:14: 30:41:21:e5:f5:83:c5:5a:75:bb:1d:ae:20:43:a5:9c:96:93: a0:dc:08:85:50:7c:8a:6f:cb:e3:56:4d:86:f8:cd:1a:34:28: 83:2f:41:14:e0:82:2d:63:95:f2:df:fc:3e:46:f5:57:60:55: 94:51:e9:1f:e8:1c:75:56:10:6f:d5:b5:e6:62:62:36:d8:52: 60:87:a7:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA2QjUxMTAvBgNVBAUTKEYzMDEyQ0VEMTc2OERFQUE2NEM0RTkzNkI4NkNCMzFF MTZDRUZDQkEwHhcNMjQxMTIyMTk1NjAxWhcNMjQxMTI5MTk1NjAxWjAYMRYwFAYD VQQDEw02NzQwZTFkMS03ZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wyceMILYfmvx6vfeEHx2Ut5jWaFzDyKm6hPm8DI8mGWv9eqU1noGHBL/s0h I8v5XwNE6C65KEGjcwNsyDrELJYSqkgKIoiDdz1HgY9x8xO9tRzd7vm5re6L/lAz JANmmMtGNIi5IWEWKtV5ecSissUrIL4coyYIpytPj5CS7YOOwVCLJDfzY4aiq9pP okhSawC9zuuULOO7RFpadVQ9vlO5QyGKyxsPZXh8qrKb051tHDYTKg0smbSCPj6J wU/FgCfIPKll2EEOHHUgjvX8WlnwvYbL/c408yu7O+bUf3/kb5L8PAF8YoIZmNR6 u8e8AHEdFDNe3iwDzMYTy0dr7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI58k4JN G9Rh1qQpByTVEFUwgZIGMB8GA1UdIwQYMBaAFPMBLO0XaN6qZMTpNrhssx4Wzvy6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDZCNS8wRjVBMDE0MDgy RjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNxcGt4T2sydUd5ekhoYk9f TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh3RXM3UmRvM3Fwa3hPazJ1R3l6SGhiT19Mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDZCNS8wRjVBMDE0MDgyRjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNx cGt4T2sydUd5ekhoYk9fTG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA85LktSW9sn/bOn47hM7CcJ4UBqs4i12KXiF4EObAH/L1W9YCzHyi9 MD1l2aeYV93+FgGOfZ0sZ0XjeeofURx6qKdp37MyRd6K0HGcMPuRBg/b2g642/8C Ov7Xkm9KpL0QfqOiDeEloI6gDpJWRFtO9fahJ0ioOw+Gnjo2PHOXlaWIVJQaFzfc J0OeYseTFnpQDlX3MlZk1O+Fb5oFAllQtHf8WgftUdPH3tFSIVzMkfxRGRQwQSHl 9YPFWnW7Ha4gQ6WclpOg3AiFUHyKb8vjVk2G+M0aNCiDL0EU4IItY5Xy3/w+RvVX YFWUUekf6Bx1VhBv1bXmYmI22FJgh6c3 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org