$ rpki-client -vvf rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft File: PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft (raw, json) Hash identifier: 0wEqiIxN0B/I91FclRp/NHCjHmMDOk8ov3Fs8RDIEgk= Subject key identifier: 85:22:D3:1E:D6:09:56:26:23:37:13:6B:56:8F:B8:CA:8C:74:43:76 Authority key identifier: 3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 Certificate issuer: /CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Certificate serial: 076D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft Manifest number: 074A Signing time: Sun 24 Nov 2024 21:03:08 +0000 Manifest this update: Sun 24 Nov 2024 21:03:08 +0000 Manifest next update: Sun 01 Dec 2024 21:03:08 +0000 Files and hashes: 1: PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl (hash: 2q/Xy2QmfoMQtfmOe990iG+l7SzMx6LWhOAV+dG2zmE=) 2: 2B20A2E2AB3611EC9E53765EC4F9AE02.roa (hash: n1LEQK317GkKdD9RngjLkf0VgmT9xvQluwuwNEPyPL8=) 3: 50C07FEE992611EC94DB646EC4F9AE02.roa (hash: hhMHrlTw/yHZFceU4JaP729MzspVVwzWspaffhUjsfw=) 4: 26BEAB3245B511EB969B596DC4F9AE02.roa (hash: tliY3jYSQTp9oDGVfpmIPpl+OwdK9L8yQ5Ak8KCyoLM=) 5: 29FA91B6AB3611EC9E53765EC4F9AE02.roa (hash: jXCi8kJGJB2+zt8vW2OMCxiJjdL5RhOcolyXlsCVMF0=) 6: 0ACEF76441DC11ECBDB44C82C4F9AE02.roa (hash: +FMZTTkbA6s5qrylZcCyoJokyhv11EiI7S5Fj0Rirho=) 7: 50379A94992611EC94DB646EC4F9AE02.roa (hash: KtJTCXMoD52HXZ2ZZHsXQChJF4ykmoCns1c/X/wAwnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1901 (0x76d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91450A4/serialNumber=3D1D6A332AEA4EC502037A0909F4CC19D42DB198 Validity Not Before: Nov 24 21:03:08 2024 GMT Not After : Dec 1 21:03:08 2024 GMT Subject: CN=6743948c-2f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:1b:13:12:98:d3:f7:27:05:cf:94:0d:61: 6b:96:cc:59:97:de:c9:6e:17:ee:c6:d5:75:48:d2: fc:16:6e:43:51:50:0a:ec:60:a5:33:76:a2:b2:5d: 55:5c:75:db:4a:73:77:72:17:37:57:ee:dc:31:47: 07:fd:c1:4c:fb:7e:7e:f6:7c:20:7a:71:cb:d1:00: 6a:80:24:34:6e:10:2f:56:10:c6:ed:de:4b:7a:87: d0:cd:7b:86:86:87:a7:02:22:39:f7:6b:51:1b:90: ce:fd:5f:50:c7:08:25:38:d7:7b:c8:f7:fe:a2:50: ee:3d:a1:d6:80:7d:d0:7d:78:48:8d:5c:80:45:f4: a1:62:b5:af:a0:93:2c:b6:45:22:7f:27:82:00:19: 4e:3f:f1:71:c0:0f:39:b7:07:7c:bc:0c:e5:69:cd: c2:4b:51:30:d2:1c:17:1a:0f:ec:a7:20:3f:e8:21: 67:26:f5:75:27:02:07:1b:53:f3:9d:05:5d:e9:06: 49:74:47:e4:cd:4c:31:fc:2a:62:f6:85:36:6c:5f: e7:24:ca:04:fb:f2:8c:86:8f:02:18:6d:f3:19:ec: 9d:a6:ef:80:5b:32:e4:1a:03:63:36:dc:fe:69:a0: ab:d5:ab:c4:e2:1a:31:82:69:63:98:69:6a:1f:1e: d3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:22:D3:1E:D6:09:56:26:23:37:13:6B:56:8F:B8:CA:8C:74:43:76 X509v3 Authority Key Identifier: keyid:3D:1D:6A:33:2A:EA:4E:C5:02:03:7A:09:09:F4:CC:19:D4:2D:B1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR1qMyrqTsUCA3oJCfTMGdQtsZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91450A4/DD4736980C3611EBA4E49E21C4F9AE02/PR1qMyrqTsUCA3oJCfTMGdQtsZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:2d:d5:dd:eb:63:b6:28:ef:f8:b6:76:95:43:14:47:ba:08: 7a:cb:58:87:c8:c7:03:54:cc:10:da:34:cb:c2:85:4c:8e:f6: bd:4a:17:7b:a6:b3:f1:79:d9:d5:e8:fc:af:d0:7a:92:fe:c7: 32:b6:b4:9f:0c:10:e2:be:23:b1:e5:a9:28:2e:7e:61:38:01: 1d:72:80:de:55:99:b0:70:df:10:3d:eb:87:7d:8f:81:65:58: 55:97:d0:ae:f0:11:5c:7f:5a:bb:a4:d7:98:82:06:55:85:f8: a6:0d:e9:df:b2:3e:93:c0:b2:0a:be:a2:e4:9a:7f:84:96:d3: 2f:99:c3:82:4b:a4:a7:28:07:79:6a:f9:5a:77:5b:0f:39:fb: e1:8d:eb:fd:a0:91:6a:cb:fc:8f:f0:92:6b:29:7c:9a:f0:31: 2b:14:f9:27:43:9b:a0:cc:b6:24:0f:c3:51:c5:33:c5:90:0f: 37:0d:6b:f7:10:9e:12:e0:b0:0f:ac:92:55:c0:da:c7:df:0b: ef:a2:0e:03:49:b7:a3:71:b5:d2:08:be:33:6f:08:43:dc:fb: ca:9e:f0:c0:4b:ce:ac:53:d4:8d:a6:1d:9b:ff:be:86:82:74: cb:98:9d:5a:19:92:3f:ab:0f:ab:57:ba:c1:79:10:82:33:3f: 1a:4f:fe:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUwQTQxMTAvBgNVBAUTKDNEMUQ2QTMzMkFFQTRFQzUwMjAzN0EwOTA5RjRDQzE5 RDQyREIxOTgwHhcNMjQxMTI0MjEwMzA4WhcNMjQxMjAxMjEwMzA4WjAYMRYwFAYD VQQDEw02NzQzOTQ4Yy0yZjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZcbExKY0/cnBc+UDWFrlsxZl97JbhfuxtV1SNL8Fm5DUVAK7GClM3aisl1V XHXbSnN3chc3V+7cMUcH/cFM+35+9nwgenHL0QBqgCQ0bhAvVhDG7d5LeofQzXuG hoenAiI592tRG5DO/V9QxwglONd7yPf+olDuPaHWgH3QfXhIjVyARfShYrWvoJMs tkUifyeCABlOP/FxwA85twd8vAzlac3CS1Ew0hwXGg/spyA/6CFnJvV1JwIHG1Pz nQVd6QZJdEfkzUwx/Cpi9oU2bF/nJMoE+/KMho8CGG3zGeydpu+AWzLkGgNjNtz+ aaCr1avE4hoxgmljmGlqHx7TaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUi0x7W CVYmIzcTa1aPuMqMdEN2MB8GA1UdIwQYMBaAFD0dajMq6k7FAgN6CQn0zBnULbGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTBBNC9ERDQ3MzY5ODBD MzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRzVUNBM29KQ2ZUTUdkUXRz WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSMXFNeXJxVHNVQ0Ezb0pDZlRNR2RRdHNaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTBBNC9ERDQ3MzY5ODBDMzYxMUVCQTRFNDlFMjFDNEY5QUUwMi9QUjFxTXlycVRz VUNBM29KQ2ZUTUdkUXRzWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDALdXd62O2KO/4tnaVQxRHugh6y1iHyMcDVMwQ2jTLwoVMjva9Shd7 prPxednV6Pyv0HqS/scytrSfDBDiviOx5akoLn5hOAEdcoDeVZmwcN8QPeuHfY+B ZVhVl9Cu8BFcf1q7pNeYggZVhfimDenfsj6TwLIKvqLkmn+EltMvmcOCS6SnKAd5 avlad1sPOfvhjev9oJFqy/yP8JJrKXya8DErFPknQ5ugzLYkD8NRxTPFkA83DWv3 EJ4S4LAPrJJVwNrH3wvvog4DSbejcbXSCL4zbwhD3PvKnvDAS86sU9SNph2b/76G gnTLmJ1aGZI/qw+rV7rBeRCCMz8aT/5E -----END CERTIFICATE-----Generated at Sun Nov 24 23:07:48 2024 by rpki-client on console-ams.rpki-client.org