$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: gPqtHGsUc2HmGRxuemfqjxVbvLYA2sX2K3DMRYk+yKc= Subject key identifier: C3:B1:B2:EE:48:D0:A1:C7:26:2A:38:39:FF:BF:DB:D5:BA:B0:5A:4A Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 0779 Signing time: Fri 22 Nov 2024 20:55:22 +0000 Manifest this update: Fri 22 Nov 2024 20:55:22 +0000 Manifest next update: Fri 29 Nov 2024 20:55:22 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: CfPxigYnA8ayME9V6HQJJpaJlyIS34viWfOke/QXbFA=) 2: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: CyHrVj1UIxTmkHUnWq5JYlTSppmsSZAZAIYgcE9IyY4=) 3: 4878EA2E954511EF87341210C4F9AE02.roa (hash: 3Hi3qHebz75olBYvl7sFul5/x4z+usSMAu2fmKYpx6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Nov 22 20:55:22 2024 GMT Not After : Nov 29 20:55:22 2024 GMT Subject: CN=6740efba-8303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:74:9a:63:41:90:e9:28:c8:13:e9:f3:e8:93: d1:97:71:ce:71:b3:10:6b:bb:cb:42:70:57:8d:f5: 54:14:de:f5:24:5b:82:ca:5a:be:c7:39:47:1c:4f: 85:e6:80:2e:ee:e7:d4:5a:4a:09:4c:fc:71:84:8a: 59:f4:e5:62:3d:13:6d:2f:d4:f5:0d:93:81:af:c6: a2:c5:6e:ef:5c:fa:20:70:61:5f:ab:e5:9e:8b:7e: 89:f3:66:92:38:d2:fe:6c:e3:c0:fc:0e:bc:51:07: 93:13:8e:19:55:5d:0b:4a:9b:ce:16:e6:7d:8a:fd: c6:0e:bf:6c:f7:5e:23:e1:84:42:22:b1:23:75:a6: 90:47:0e:d2:67:0b:b1:d9:c3:45:49:f5:02:da:da: 31:60:04:35:13:e1:cf:3d:88:43:35:dd:9e:87:49: d9:56:7f:cc:b4:e8:f6:2c:13:54:fa:2c:10:67:d9: c6:f2:14:5e:3c:e0:8e:82:41:8e:a2:26:69:64:e5: 8e:23:1f:42:9b:68:07:f6:bf:b3:36:9f:15:59:88: fb:e1:ce:7e:bc:fd:f4:37:56:3d:d5:fd:46:5e:d5: 68:94:3e:f3:08:12:9f:a6:41:7c:1c:51:86:7a:6f: 9e:4b:94:1f:ac:da:56:cd:7a:88:6e:84:65:10:c7: e2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B1:B2:EE:48:D0:A1:C7:26:2A:38:39:FF:BF:DB:D5:BA:B0:5A:4A X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:9b:b4:b2:3b:08:24:75:78:85:14:f4:00:71:3f:90:a3:e4: 05:d4:54:13:e3:38:5a:ff:60:13:b5:cc:29:16:46:05:df:9b: 58:ae:3f:c9:63:49:dd:51:ac:9a:a5:06:f2:4f:37:e9:94:19: c7:41:cf:11:6e:f0:1c:97:31:3f:be:74:80:c8:f4:83:12:78: 36:43:52:d0:de:45:9a:b9:be:54:55:cd:be:12:f6:75:44:2d: 9f:5c:b1:60:ec:d0:fe:7f:7e:6f:fe:78:14:de:28:e1:2c:e5: f9:83:71:7e:2c:2f:88:2b:14:18:82:87:42:87:38:1b:bd:e4: 35:3e:ce:20:21:47:75:eb:6c:ae:55:4c:e5:c5:1b:18:c3:be: 3b:2d:ec:cf:23:45:a8:be:9e:bd:36:8d:4b:6a:99:1c:21:01: 71:4d:89:37:a8:b2:8d:aa:ab:b2:12:42:da:53:0b:4e:75:02: bf:5f:28:a4:29:25:53:e4:6c:89:29:03:e9:4d:6a:21:41:28: 1c:4e:42:ba:c1:05:22:11:8c:17:68:af:78:5c:ad:9c:54:01: b5:6a:ee:a2:10:02:42:14:13:d1:9e:31:e5:fa:4d:7b:05:b3: 7e:2e:74:3d:7e:a1:e8:54:84:ff:54:ce:37:76:1f:4c:11:4f: df:ea:a3:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjQxMTIyMjA1NTIyWhcNMjQxMTI5MjA1NTIyWjAYMRYwFAYD VQQDEw02NzQwZWZiYS04MzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XSaY0GQ6SjIE+nz6JPRl3HOcbMQa7vLQnBXjfVUFN71JFuCylq+xzlHHE+F 5oAu7ufUWkoJTPxxhIpZ9OViPRNtL9T1DZOBr8aixW7vXPogcGFfq+Wei36J82aS ONL+bOPA/A68UQeTE44ZVV0LSpvOFuZ9iv3GDr9s914j4YRCIrEjdaaQRw7SZwux 2cNFSfUC2toxYAQ1E+HPPYhDNd2eh0nZVn/MtOj2LBNU+iwQZ9nG8hRePOCOgkGO oiZpZOWOIx9Cm2gH9r+zNp8VWYj74c5+vP30N1Y91f1GXtVolD7zCBKfpkF8HFGG em+eS5QfrNpWzXqIboRlEMfiJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOxsu5I 0KHHJio4Of+/29W6sFpKMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAm7SyOwgkdXiFFPQAcT+Qo+QF1FQT4zha/2ATtcwpFkYF35tYrj/J Y0ndUayapQbyTzfplBnHQc8RbvAclzE/vnSAyPSDEng2Q1LQ3kWaub5UVc2+EvZ1 RC2fXLFg7ND+f35v/ngU3ijhLOX5g3F+LC+IKxQYgodChzgbveQ1Ps4gIUd162yu VUzlxRsYw747LezPI0Wovp69No1LapkcIQFxTYk3qLKNqquyEkLaUwtOdQK/Xyik KSVT5GyJKQPpTWohQSgcTkK6wQUiEYwXaK94XK2cVAG1au6iEAJCFBPRnjHl+k17 BbN+LnQ9fqHoVIT/VM43dh9MEU/f6qOk -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:25 2024 by rpki-client on console-ams.rpki-client.org