$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: JWtA/qZLk7Gp0ILMCVjBS0dnibXGnXS7H3BxfqlM3YM= Subject key identifier: 71:B8:0C:31:70:F4:7D:70:76:20:42:82:69:B4:F7:99:3B:5F:AF:35 Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 3435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 342C Signing time: Wed 20 Nov 2024 14:34:36 +0000 Manifest this update: Wed 20 Nov 2024 14:34:36 +0000 Manifest next update: Wed 27 Nov 2024 14:34:36 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: Gza6Uc+qyyxkVmSxCxR8KIVJSD3StHSPXBr6k9XPxg8=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13365 (0x3435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Nov 20 14:34:36 2024 GMT Not After : Nov 27 14:34:36 2024 GMT Subject: CN=673df37c-012a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a9:33:a3:cf:c1:9d:96:2b:20:4f:df:ff:14: 49:0d:61:f8:12:c9:56:4a:21:ce:bf:d6:47:01:bc: 4f:8f:ca:ce:53:d3:8d:35:51:f0:77:87:84:78:55: b3:96:a1:b3:e1:76:9a:77:85:9e:9c:90:c6:01:2f: d3:8c:e5:5e:ac:13:52:a7:c5:05:15:44:57:88:26: 86:de:57:b3:05:11:26:10:8c:9f:e5:0e:a1:8e:7b: 23:39:6f:65:e1:c1:88:0d:32:e6:47:47:a8:6e:5b: f4:ec:b5:02:42:d1:dc:ac:5e:85:92:72:c2:e8:fb: 92:a7:6c:c9:63:46:34:68:e8:25:5a:ae:a9:d1:bb: 1e:58:26:ef:59:99:f5:96:c5:8e:6c:09:8f:16:22: 46:fb:f1:2c:85:7c:4d:2e:11:fc:ec:45:a1:30:67: 8d:10:02:7d:07:a2:4e:07:04:d9:9f:f1:1a:29:99: dc:b6:f6:ff:e5:7a:e7:89:55:f8:0a:fa:e8:87:96: 18:74:13:9d:fe:79:12:ad:e2:d0:e7:fa:d1:c2:8c: e6:b9:94:47:3e:df:6f:cb:9a:10:3a:05:88:7e:12: 8a:88:90:59:9a:59:16:6c:09:82:98:ea:28:45:e4: 5b:2f:f5:28:71:a0:60:f2:3f:51:4d:42:9e:28:81: 9e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B8:0C:31:70:F4:7D:70:76:20:42:82:69:B4:F7:99:3B:5F:AF:35 X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a2:89:e2:11:ee:b0:d7:42:73:e8:e9:6e:91:92:41:f1:3a: 95:87:59:2f:32:e1:55:d3:cb:b1:f4:7e:f2:79:dc:51:1d:dd: ca:dc:d4:d3:af:a8:c2:8b:94:40:61:72:91:b6:9e:00:4e:13: b3:5a:26:4f:db:8d:a1:e1:83:6d:75:28:10:7e:9c:fd:42:ca: bc:69:0b:a0:6f:2b:9d:cf:e5:fb:50:c8:85:74:9d:63:9e:ab: 41:44:76:16:80:7d:ee:f6:15:3f:37:6a:e6:9c:9a:d0:ad:1e: 65:d8:70:ba:88:27:dd:50:4c:4d:5f:5e:f6:2c:db:69:36:62: f8:42:d8:21:4a:2e:89:e4:3d:9c:3e:98:ff:a8:bc:a3:ef:a3: 0c:a0:d0:2f:91:a8:51:cb:a7:5a:3b:63:2a:d7:8d:79:84:15: 8b:34:c7:2f:91:e6:dc:6a:78:13:02:c4:2c:d7:11:9b:1b:9b: 4a:d4:d8:49:51:e1:9b:d7:8a:c1:cd:9f:90:ff:12:d2:17:f7: c4:83:c6:38:f3:4f:35:c9:79:e5:30:96:78:ee:45:de:40:db: 81:74:aa:5d:cb:31:95:51:d9:ba:b2:a9:a1:c5:c8:54:bb:b1: fe:94:0b:0e:d7:42:eb:62:8d:83:51:41:fa:03:69:cc:48:50: 44:0c:e6:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjQxMTIwMTQzNDM2WhcNMjQxMTI3MTQzNDM2WjAYMRYwFAYD VQQDEw02NzNkZjM3Yy0wMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Kkzo8/BnZYrIE/f/xRJDWH4EslWSiHOv9ZHAbxPj8rOU9ONNVHwd4eEeFWz lqGz4Xaad4WenJDGAS/TjOVerBNSp8UFFURXiCaG3lezBREmEIyf5Q6hjnsjOW9l 4cGIDTLmR0eoblv07LUCQtHcrF6FknLC6PuSp2zJY0Y0aOglWq6p0bseWCbvWZn1 lsWObAmPFiJG+/EshXxNLhH87EWhMGeNEAJ9B6JOBwTZn/EaKZnctvb/5XrniVX4 Cvroh5YYdBOd/nkSreLQ5/rRwozmuZRHPt9vy5oQOgWIfhKKiJBZmlkWbAmCmOoo ReRbL/UocaBg8j9RTUKeKIGenwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHG4DDFw 9H1wdiBCgmm095k7X681MB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJooniEe6w10Jz6OlukZJB8TqVh1kvMuFV08ux9H7yedxRHd3K3NTT r6jCi5RAYXKRtp4AThOzWiZP242h4YNtdSgQfpz9Qsq8aQugbyudz+X7UMiFdJ1j nqtBRHYWgH3u9hU/N2rmnJrQrR5l2HC6iCfdUExNX172LNtpNmL4QtghSi6J5D2c Ppj/qLyj76MMoNAvkahRy6daO2Mq1415hBWLNMcvkebcangTAsQs1xGbG5tK1NhJ UeGb14rBzZ+Q/xLSF/fEg8Y48081yXnlMJZ47kXeQNuBdKpdyzGVUdm6sqmhxchU u7H+lAsO10LrYo2DUUH6A2nMSFBEDOYx -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:09 2024 by rpki-client on console-ams.rpki-client.org