$ rpki-client -vvf rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft File: g4n9Rv74flk96Bz_3N8guiynYB4.mft (raw, json) Hash identifier: BPmUGbU1d8ZQUZzIXbZrv7tAvQYjTehmvlP/r18JZEs= Subject key identifier: 81:D3:FD:F3:01:06:8E:C8:4C:68:28:DC:41:42:25:A9:97:8E:34:DA Authority key identifier: 83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E Certificate issuer: /CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft Manifest number: 07AD Signing time: Fri 22 Nov 2024 20:45:06 +0000 Manifest this update: Fri 22 Nov 2024 20:45:06 +0000 Manifest next update: Fri 29 Nov 2024 20:45:06 +0000 Files and hashes: 1: g4n9Rv74flk96Bz_3N8guiynYB4.crl (hash: dyG9SO0tcarng67CMZI6G5Ke4091qz4CPFcH4Go7+H4=) 2: 1E1D32C22FF311EC9220256BC4F9AE02.roa (hash: sp7R1jgbjSPvEocVz1lCwF44oWS6ofUWMkzKCCO1nDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475BA/serialNumber=8389FD46FEF87E593DE81CFFDCDF20BA2CA7601E Validity Not Before: Nov 22 20:45:06 2024 GMT Not After : Nov 29 20:45:06 2024 GMT Subject: CN=6740ed52-aed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:65:dc:f4:b2:4d:12:23:39:46:73:6a:ba: 9c:ed:47:e9:d0:07:99:31:a5:2a:72:d4:5b:17:c2: 2b:73:63:1a:41:79:be:8e:16:34:2b:4d:92:3e:6c: 05:88:0b:1a:c2:75:98:0e:13:34:1f:41:9e:eb:57: 4f:ea:4b:92:7b:2f:85:50:53:15:1e:34:a4:cf:49: 68:1d:ef:7e:ac:ec:b8:5b:a3:f0:16:04:2f:5a:d2: 97:67:c6:99:e1:70:e5:68:a1:a2:e2:b9:9b:4f:db: a3:73:70:77:d7:a2:90:e1:51:3c:73:2a:1a:b4:3b: 45:a9:42:08:e1:17:f6:f1:fc:84:94:ce:a6:82:1e: bd:66:67:97:83:01:82:a1:3c:74:09:23:f2:b3:89: 71:e5:98:e8:f9:c9:8c:a7:05:82:e1:85:ac:ca:19: fa:67:99:df:df:80:d5:f8:07:e8:4b:c2:d5:b0:8f: c7:f9:b7:98:a1:ff:c1:8a:e4:94:c1:c8:c8:ed:90: d9:bc:69:69:c8:8b:b1:9d:af:da:a4:fc:4c:c9:8c: 79:fa:76:4c:a7:77:3b:e3:e0:a3:b2:b7:c0:66:22: e3:6e:6e:51:f9:ce:34:50:25:46:39:2f:6c:0e:fb: d3:64:03:8a:35:3a:48:cb:e1:ac:51:9a:63:69:8e: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D3:FD:F3:01:06:8E:C8:4C:68:28:DC:41:42:25:A9:97:8E:34:DA X509v3 Authority Key Identifier: keyid:83:89:FD:46:FE:F8:7E:59:3D:E8:1C:FF:DC:DF:20:BA:2C:A7:60:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4n9Rv74flk96Bz_3N8guiynYB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475BA/D4F08EE6DAE911EA92CE345AC4F9AE02/g4n9Rv74flk96Bz_3N8guiynYB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:42:34:f9:b6:29:3c:bf:fa:1d:51:67:db:a0:1a:a9:c3:50: 05:37:5b:58:2f:77:0b:37:e4:a2:43:45:2a:57:9b:01:18:af: 6f:1e:4d:1e:c8:96:f9:c7:9a:54:31:61:45:99:10:f1:69:ca: dc:00:70:a8:88:11:46:7c:d8:a3:e8:96:39:27:d0:7c:7e:e9: 85:21:ed:2a:ed:3f:53:0e:49:93:0b:4b:3e:98:a2:63:8f:87: 89:68:dd:10:29:41:35:db:e8:fb:3f:4c:00:8a:6c:b0:72:e1: 05:01:c0:1a:0c:c4:f9:de:da:54:47:05:c7:e4:96:82:63:e2: 26:da:43:ad:12:07:38:4b:cf:b6:a4:f6:b7:22:c7:a4:de:0f: 77:7e:5d:21:70:81:7e:ae:8b:b8:85:07:d6:86:fa:7a:d7:c9: ca:11:47:00:db:f8:21:df:1e:da:9f:b0:88:01:b5:c2:fc:df: 15:ab:31:e0:91:32:77:f7:3d:f8:48:b5:70:59:cc:13:15:c8: cb:45:9c:ac:2a:0f:06:52:c3:a0:30:c7:c6:ba:3d:4f:d6:81: a3:29:fa:3b:3c:b7:33:45:9c:dd:f5:da:a6:c1:5b:2a:d5:12: 67:7b:b5:0e:1c:f1:ff:25:0d:25:56:e3:38:d0:c3:85:c0:93: c2:ea:2b:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QkExMTAvBgNVBAUTKDgzODlGRDQ2RkVGODdFNTkzREU4MUNGRkRDREYyMEJB MkNBNzYwMUUwHhcNMjQxMTIyMjA0NTA2WhcNMjQxMTI5MjA0NTA2WjAYMRYwFAYD VQQDEw02NzQwZWQ1Mi1hZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHFl3PSyTRIjOUZzarqc7Ufp0AeZMaUqctRbF8Irc2MaQXm+jhY0K02SPmwF iAsawnWYDhM0H0Ge61dP6kuSey+FUFMVHjSkz0loHe9+rOy4W6PwFgQvWtKXZ8aZ 4XDlaKGi4rmbT9ujc3B316KQ4VE8cyoatDtFqUII4Rf28fyElM6mgh69ZmeXgwGC oTx0CSPys4lx5Zjo+cmMpwWC4YWsyhn6Z5nf34DV+AfoS8LVsI/H+beYof/BiuSU wcjI7ZDZvGlpyIuxna/apPxMyYx5+nZMp3c74+CjsrfAZiLjbm5R+c40UCVGOS9s DvvTZAOKNTpIy+GsUZpjaY6zIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHT/fMB Bo7ITGgo3EFCJamXjjTaMB8GA1UdIwQYMBaAFIOJ/Ub++H5ZPegc/9zfILosp2Ae MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVCQS9ENEYwOEVFNkRB RTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZsazk2QnpfM044Z3VpeW5Z QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0bjlSdjc0ZmxrOTZCel8zTjhndWl5bllCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVCQS9ENEYwOEVFNkRBRTkxMUVBOTJDRTM0NUFDNEY5QUUwMi9nNG45UnY3NGZs azk2QnpfM044Z3VpeW5ZQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5QjT5tik8v/odUWfboBqpw1AFN1tYL3cLN+SiQ0UqV5sBGK9vHk0e yJb5x5pUMWFFmRDxacrcAHCoiBFGfNij6JY5J9B8fumFIe0q7T9TDkmTC0s+mKJj j4eJaN0QKUE12+j7P0wAimywcuEFAcAaDMT53tpURwXH5JaCY+Im2kOtEgc4S8+2 pPa3Isek3g93fl0hcIF+rou4hQfWhvp618nKEUcA2/gh3x7an7CIAbXC/N8VqzHg kTJ39z34SLVwWcwTFcjLRZysKg8GUsOgMMfGuj1P1oGjKfo7PLczRZzd9dqmwVsq 1RJne7UOHPH/JQ0lVuM40MOFwJPC6it5 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:25 2024 by rpki-client on console-ams.rpki-client.org