$ rpki-client -vvf rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft File: Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft (raw, json) Hash identifier: xkvRAQn6WEHEsK3+ZtXBQ21nEaNAVX4DDtBG6zB03mM= Subject key identifier: AB:D4:E2:0E:C7:8A:DE:95:FA:82:35:79:C1:52:A3:60:59:8B:A9:82 Authority key identifier: 02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 Certificate issuer: /CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Certificate serial: 0C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft Manifest number: 0C48 Signing time: Fri 22 Nov 2024 18:14:12 +0000 Manifest this update: Fri 22 Nov 2024 18:14:11 +0000 Manifest next update: Fri 29 Nov 2024 18:14:11 +0000 Files and hashes: 1: Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl (hash: wlJ8ZpDQJjaku0GxurqiyVdKgpk+d6e8cQVexXsfFWk=) 2: B0B70006B19211EC9EAAD44EC4F9AE02.roa (hash: 83OH0Wsd/y1ubngAT82t1pBg049gm5VgpR6zC5KRyEQ=) 3: AFB0FFCCB19211EC9EAAD44EC4F9AE02.roa (hash: Qq3O50/II2fF8ZDKuNfLBJMdHudKQhPCei4uAD4b1ww=) 4: 0EF0E842839E11EEA1892A12C4F9AE02.roa (hash: qjRK1UsduZje7NigLFGo9IfaYJBsXsGYrorJ0nbh7Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91642A0/serialNumber=02AE84F611B7E82FD7D6FF8F452D8725EF489088 Validity Not Before: Nov 22 18:14:11 2024 GMT Not After : Nov 29 18:14:11 2024 GMT Subject: CN=6740c9f4-7647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f6:e0:16:e5:bf:a0:09:7d:5b:4f:09:26:95: 89:ff:bb:0e:ee:98:c6:62:bf:91:32:ff:65:0d:d7: 76:86:fa:24:32:40:d4:92:fa:62:e9:a1:9a:8f:a2: 80:61:d1:f6:87:3b:f3:39:7f:32:d2:86:af:be:35: af:c9:a7:7e:4d:62:46:2e:bc:ca:52:fc:92:d9:84: 17:a7:2d:8c:8d:ab:bc:58:02:3e:28:ca:b9:d5:e2: 70:22:1d:6e:6a:53:77:7f:46:40:ee:97:2d:d8:b5: 25:70:58:20:a2:cb:98:6a:73:9d:45:3b:e5:07:c3: b4:82:cb:30:62:5e:59:d0:7c:fe:0a:04:75:2e:3b: 0f:d0:73:2d:43:eb:54:99:e6:40:7a:34:3f:32:d9: ba:a8:4a:4a:34:ad:ae:64:3d:e5:31:ef:aa:21:13: 55:aa:25:81:8e:83:64:d3:9d:ae:8c:8f:f0:a9:53: 7f:91:47:60:e4:c1:59:4e:62:c2:e8:57:c6:fd:ff: b7:c3:d2:68:c5:c8:a5:22:87:1b:a4:4e:40:a8:8a: 29:24:6e:0d:04:20:8c:34:46:08:cd:ac:f3:c7:44: eb:2d:a7:48:8b:23:c2:97:22:42:a6:53:47:15:de: be:11:bd:0b:a5:45:0b:f9:47:9e:a4:b3:45:22:e6: 56:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D4:E2:0E:C7:8A:DE:95:FA:82:35:79:C1:52:A3:60:59:8B:A9:82 X509v3 Authority Key Identifier: keyid:02:AE:84:F6:11:B7:E8:2F:D7:D6:FF:8F:45:2D:87:25:EF:48:90:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aq6E9hG36C_X1v-PRS2HJe9IkIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91642A0/CA7D1162F67611E990BAA222C4F9AE02/Aq6E9hG36C_X1v-PRS2HJe9IkIg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:11:e5:c4:87:a6:02:29:52:f4:e4:f6:e1:04:b3:8d:5e:17: 35:cb:ea:62:f2:39:6d:c3:e2:0b:80:de:66:22:bb:3c:e2:2b: 7f:54:73:70:73:e3:02:a4:31:c1:f4:b3:86:bf:a1:f7:d5:bf: 4b:e3:85:3e:ff:bb:de:68:38:76:1f:76:21:e3:42:3f:fe:e4: dc:6c:ca:70:4b:12:0d:ff:3d:42:8e:0e:48:9f:34:5c:ba:90: a2:c9:9c:56:bb:70:74:dd:9c:01:26:04:b0:66:c8:29:20:1f: 46:07:42:c4:e0:06:a2:6c:68:43:d5:60:38:1d:51:73:8f:9f: 92:d7:e0:66:52:2e:d5:23:8c:73:3f:4b:12:3d:fd:eb:b3:80: 5d:d0:a7:bf:86:81:4c:45:f9:3d:f1:bf:ef:3f:2b:27:2e:2f: e3:bf:6d:8c:26:6d:95:e9:f7:c2:7d:9a:8f:03:b6:9c:c0:e0: a5:a4:dc:fd:f8:34:a7:de:84:97:62:b9:f4:3d:08:e9:b0:06: b6:e1:d9:57:e3:dc:fa:cd:0d:54:0d:1d:bb:96:47:97:e4:3e: 45:83:fa:a5:98:71:aa:a8:89:65:85:52:0d:42:fc:2f:92:0e: 0d:3e:e4:1a:ec:10:e3:4a:cd:c3:6c:1c:cd:8d:41:28:9d:ba: 73:ed:82:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQyQTAxMTAvBgNVBAUTKDAyQUU4NEY2MTFCN0U4MkZEN0Q2RkY4RjQ1MkQ4NzI1 RUY0ODkwODgwHhcNMjQxMTIyMTgxNDExWhcNMjQxMTI5MTgxNDExWjAYMRYwFAYD VQQDEw02NzQwYzlmNC03NjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPbgFuW/oAl9W08JJpWJ/7sO7pjGYr+RMv9lDdd2hvokMkDUkvpi6aGaj6KA YdH2hzvzOX8y0oavvjWvyad+TWJGLrzKUvyS2YQXpy2Mjau8WAI+KMq51eJwIh1u alN3f0ZA7pct2LUlcFggosuYanOdRTvlB8O0gsswYl5Z0Hz+CgR1LjsP0HMtQ+tU meZAejQ/Mtm6qEpKNK2uZD3lMe+qIRNVqiWBjoNk052ujI/wqVN/kUdg5MFZTmLC 6FfG/f+3w9JoxcilIocbpE5AqIopJG4NBCCMNEYIzazzx0TrLadIiyPClyJCplNH Fd6+Eb0LpUUL+UeepLNFIuZWWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvU4g7H it6V+oI1ecFSo2BZi6mCMB8GA1UdIwQYMBaAFAKuhPYRt+gv19b/j0UthyXvSJCI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDJBMC9DQTdEMTE2MkY2 NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZDX1gxdi1QUlMySEplOUlr SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FxNkU5aEczNkNfWDF2LVBSUzJISmU5SWtJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDJBMC9DQTdEMTE2MkY2NzYxMUU5OTBCQUEyMjJDNEY5QUUwMi9BcTZFOWhHMzZD X1gxdi1QUlMySEplOUlrSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbEeXEh6YCKVL05PbhBLONXhc1y+pi8jltw+ILgN5mIrs84it/VHNw c+MCpDHB9LOGv6H31b9L44U+/7veaDh2H3Yh40I//uTcbMpwSxIN/z1Cjg5InzRc upCiyZxWu3B03ZwBJgSwZsgpIB9GB0LE4AaibGhD1WA4HVFzj5+S1+BmUi7VI4xz P0sSPf3rs4Bd0Ke/hoFMRfk98b/vPysnLi/jv22MJm2V6ffCfZqPA7acwOClpNz9 +DSn3oSXYrn0PQjpsAa24dlX49z6zQ1UDR27lkeX5D5Fg/qlmHGqqIllhVINQvwv kg4NPuQa7BDjSs3DbBzNjUEonbpz7YLp -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:59 2024 by rpki-client on console-fra.rpki-client.org