$ rpki-client -vvf rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft File: v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft (raw, json) Hash identifier: D2WQJivHSVui9NYcewvIT8ZAWe1Lu7kE7RlhdIcO1iA= Subject key identifier: 7C:E6:7C:49:4B:07:3E:3C:F1:8F:14:BA:67:6B:F6:6C:4D:81:F8:91 Authority key identifier: BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF Certificate issuer: /CN=A91401C4/serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Certificate serial: 348E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft Manifest number: 345B Signing time: Fri 22 Nov 2024 14:15:55 +0000 Manifest this update: Fri 22 Nov 2024 14:15:54 +0000 Manifest next update: Fri 29 Nov 2024 14:15:54 +0000 Files and hashes: 1: v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl (hash: zDDTRv17qvsir7FQU5K3NDPsXC8IoBB/YZeZZzV5Pko=) 2: 13773D180C8111EB9BD25070C4F9AE02.roa (hash: EcHgJTBJZVSZcmyoGTsJf6lDzdXZarLLw4Yz9Tt75wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13454 (0x348e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91401C4/serialNumber=BF7BCAF1909C10BCFEA0D8E7D45D8254F269C6BF Validity Not Before: Nov 22 14:15:54 2024 GMT Not After : Nov 29 14:15:54 2024 GMT Subject: CN=6740921b-fe9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:81:76:87:4a:ed:2d:ea:ff:09:5b:62:fd:75: 17:4a:ce:69:50:3c:68:d8:39:73:79:f3:00:cf:f8: 03:96:4b:f0:7f:71:cb:a6:71:02:cd:64:03:a1:b3: 45:5f:9a:b5:51:f6:b0:8f:b4:cf:30:df:b5:84:a9: ad:71:27:2b:68:6c:a5:3b:87:09:eb:04:dd:c4:a9: 01:e4:5b:52:96:81:c6:e1:0c:e1:88:8f:e6:2a:13: 71:da:27:30:25:3c:32:e9:38:ce:9d:ac:af:ca:4e: bb:a6:49:ab:3c:ca:74:8c:b4:8e:27:53:42:5f:d4: 65:7d:e4:0e:51:76:0a:f4:26:cb:3a:b1:f9:8f:8f: 55:92:0c:34:4f:9f:f1:d1:4a:16:52:1e:62:e7:e6: 68:5d:31:89:1f:60:3f:2a:2b:d2:d8:00:bd:9f:d5: b7:4a:9d:94:28:12:86:ba:1a:4b:49:b7:dc:d3:52: 0a:5a:50:2e:19:d4:d6:fd:66:e1:35:22:17:41:a2: 51:1a:ee:20:8a:41:58:0f:49:f5:bd:d7:67:c2:d2: 0c:24:75:47:a1:31:ac:ec:b0:ab:f9:6a:be:8b:13: 36:9a:07:8f:2e:4b:cd:b6:0e:4a:98:1a:ff:98:4b: c1:cc:8c:72:4f:ae:05:79:04:45:99:b0:86:4d:dc: e4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E6:7C:49:4B:07:3E:3C:F1:8F:14:BA:67:6B:F6:6C:4D:81:F8:91 X509v3 Authority Key Identifier: keyid:BF:7B:CA:F1:90:9C:10:BC:FE:A0:D8:E7:D4:5D:82:54:F2:69:C6:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91401C4/2B2B3C9E1D6911E2AAA055A608B02CD2/v3vK8ZCcELz-oNjn1F2CVPJpxr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:a5:f8:0a:4f:48:7f:05:ac:be:8f:89:6a:d8:85:cc:d1:03: a0:b4:38:1b:fc:22:37:ae:00:2d:e8:f5:0e:48:63:b6:e8:75: 5d:57:50:6d:43:70:da:90:30:fe:bb:04:a3:b7:5a:34:35:6d: 9f:21:60:66:a0:a4:9b:92:1f:6e:50:49:ae:a3:b1:cf:84:30: de:c7:ae:63:08:a7:0f:3a:8d:44:af:7a:ba:f6:22:e0:d8:08: 30:55:6c:5f:2d:97:7b:4c:f1:f5:9b:66:9d:05:6d:67:3d:b1: 7a:77:81:69:45:f6:f6:3c:26:80:30:4f:33:81:1f:47:85:84: 1c:f4:61:63:c7:cf:62:83:cb:2b:30:b9:62:f5:1d:b0:78:31: 76:56:ef:1c:d7:3c:53:04:56:a5:0b:fa:ee:51:a0:bc:c3:5a: ac:3d:d2:b6:7f:cc:3d:d1:c2:bf:1f:28:ea:bc:0f:cb:a3:1b: ab:15:d8:9c:17:eb:28:7c:33:8b:05:64:27:7d:f5:04:1d:2a: a3:fb:96:2d:5d:28:74:1a:cd:d2:0d:53:3b:6f:b6:64:6c:ee: 12:0f:0a:6e:f8:27:c9:25:05:72:ba:54:ad:b0:90:26:3c:28: 85:a0:17:8b:b7:81:1b:30:1c:4c:16:39:a1:90:78:f1:c9:78: e1:64:03:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAxQzQxMTAvBgNVBAUTKEJGN0JDQUYxOTA5QzEwQkNGRUEwRDhFN0Q0NUQ4MjU0 RjI2OUM2QkYwHhcNMjQxMTIyMTQxNTU0WhcNMjQxMTI5MTQxNTU0WjAYMRYwFAYD VQQDEw02NzQwOTIxYi1mZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YF2h0rtLer/CVti/XUXSs5pUDxo2DlzefMAz/gDlkvwf3HLpnECzWQDobNF X5q1Ufawj7TPMN+1hKmtcScraGylO4cJ6wTdxKkB5FtSloHG4QzhiI/mKhNx2icw JTwy6TjOnayvyk67pkmrPMp0jLSOJ1NCX9RlfeQOUXYK9CbLOrH5j49Vkgw0T5/x 0UoWUh5i5+ZoXTGJH2A/KivS2AC9n9W3Sp2UKBKGuhpLSbfc01IKWlAuGdTW/Wbh NSIXQaJRGu4gikFYD0n1vddnwtIMJHVHoTGs7LCr+Wq+ixM2mgePLkvNtg5KmBr/ mEvBzIxyT64FeQRFmbCGTdzkcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzmfElL Bz488Y8Uumdr9mxNgfiRMB8GA1UdIwQYMBaAFL97yvGQnBC8/qDY59RdglTyaca/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDFDNC8yQjJCM0M5RTFE NjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VMei1vTmpuMUYyQ1ZQSnB4 cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Yzdks4WkNjRUx6LW9Oam4xRjJDVlBKcHhyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDFDNC8yQjJCM0M5RTFENjkxMUUyQUFBMDU1QTYwOEIwMkNEMi92M3ZLOFpDY0VM ei1vTmpuMUYyQ1ZQSnB4cjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+pfgKT0h/Bay+j4lq2IXM0QOgtDgb/CI3rgAt6PUOSGO26HVdV1Bt Q3DakDD+uwSjt1o0NW2fIWBmoKSbkh9uUEmuo7HPhDDex65jCKcPOo1Er3q69iLg 2AgwVWxfLZd7TPH1m2adBW1nPbF6d4FpRfb2PCaAME8zgR9HhYQc9GFjx89ig8sr MLli9R2weDF2Vu8c1zxTBFalC/ruUaC8w1qsPdK2f8w90cK/HyjqvA/LoxurFdic F+sofDOLBWQnffUEHSqj+5YtXSh0Gs3SDVM7b7ZkbO4SDwpu+CfJJQVyulStsJAm PCiFoBeLt4EbMBxMFjmhkHjxyXjhZAMu -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:17 2024 by rpki-client on console-ams.rpki-client.org