$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: hz7Adt0bj4EXO8GbDAsN3phPZJe4JUfH9B6+6/1zTfU= Subject key identifier: AA:4E:F5:99:88:4E:3D:3E:39:91:D4:00:88:70:30:69:CD:13:11:7D Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0B56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0B4A Signing time: Wed 20 Nov 2024 18:54:16 +0000 Manifest this update: Wed 20 Nov 2024 18:54:15 +0000 Manifest next update: Wed 27 Nov 2024 18:54:15 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: CbRfMo7FnjU0UFJoE0VMtYb7rBcm9DLLoHO0D4T55ig=) 2: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: qlZP3R6ADNSLIjHBw8W0Ir6gb+wbtwRxcHltJI21c8o=) 3: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: XZvDy9rrNZdAc4wLm1/CDaz5V+p7vna2qFhp8p1ojnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2902 (0xb56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: Nov 20 18:54:15 2024 GMT Not After : Nov 27 18:54:15 2024 GMT Subject: CN=673e3057-6bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:81:73:a7:43:18:b8:32:86:e3:f3:e4:00:0a: 63:c6:ff:fc:06:c1:b9:76:96:03:fd:aa:01:90:71: e4:9a:f9:19:db:28:45:ff:e9:9b:2b:fe:ba:79:6a: 8f:01:ea:68:cf:d1:b4:b7:2a:c7:94:73:0f:21:84: 5c:7c:c8:f7:b4:eb:eb:58:04:d9:b2:11:93:77:1c: 90:c5:3e:34:60:fb:3e:c3:6d:cd:f5:ac:ab:54:72: 91:ba:28:49:43:83:22:94:b0:6e:fb:bd:f4:19:28: 75:e3:9e:17:bb:07:49:d1:01:38:3d:d5:47:7c:31: 6e:63:8f:c7:d6:91:ab:95:db:02:6f:90:c9:62:44: ae:2b:91:8f:c8:cf:53:60:7b:e2:82:fc:1f:d8:8c: cd:c4:f1:7a:eb:0a:34:14:2f:4d:f0:29:25:78:e6: f0:ac:57:e2:26:38:34:3a:41:f4:ba:a7:30:f5:6a: 6e:d4:b5:30:9f:c0:11:7f:78:03:32:ea:6b:be:81: 24:31:3e:e0:fd:b1:df:49:b8:ec:7c:0a:d6:9c:d3: 2e:58:af:5a:1b:06:b2:ca:85:69:60:11:b1:ea:05: 27:6e:82:da:e3:e6:53:5c:ea:4c:16:36:16:4c:6a: c3:1c:f7:7a:05:80:a1:cc:f9:85:50:4c:65:8e:58: 66:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4E:F5:99:88:4E:3D:3E:39:91:D4:00:88:70:30:69:CD:13:11:7D X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:47:c4:60:37:e1:e7:e3:0c:45:3e:e6:82:c7:80:6d:c1:a8: 6b:83:4e:15:f7:02:85:78:b7:ba:31:6c:20:ba:99:38:f8:3e: c2:26:5b:d6:b4:ca:6b:34:f4:5e:2c:ba:15:d7:32:3e:56:d8: 53:b6:90:b7:d1:cf:1b:c1:db:7b:89:cf:11:81:65:3c:b9:2a: 4b:84:ea:23:4e:29:a2:fd:6b:a0:df:e2:23:30:1a:47:dd:ea: 0b:15:3d:33:0f:76:5d:af:ec:8c:b1:5b:bc:26:bc:9a:be:35: 48:c4:c8:30:dd:b9:8b:0a:36:1e:4d:89:25:17:86:b3:6b:fa: a1:e2:3a:b5:20:60:5a:0a:31:97:57:db:22:57:c3:31:58:5b: 1d:42:de:82:68:c4:cf:72:87:17:f1:28:3e:1c:00:7b:64:a9: 17:19:f2:c1:a2:bd:98:a7:6a:e9:bb:47:17:b8:43:5a:ef:60: 03:1a:80:95:d6:34:61:13:40:93:ac:52:3d:a6:16:ae:8f:9c: 77:29:0d:9c:d3:ce:93:f0:72:80:3f:5e:91:59:5d:49:eb:6f: 19:83:fe:04:f6:15:41:47:4c:16:e9:d6:ad:40:92:3b:92:ae: 08:94:57:ac:3c:ae:29:f2:11:82:60:c3:fc:31:8a:29:06:bc: 3d:fe:a9:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjQxMTIwMTg1NDE1WhcNMjQxMTI3MTg1NDE1WjAYMRYwFAYD VQQDEw02NzNlMzA1Ny02YmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4Fzp0MYuDKG4/PkAApjxv/8BsG5dpYD/aoBkHHkmvkZ2yhF/+mbK/66eWqP Aepoz9G0tyrHlHMPIYRcfMj3tOvrWATZshGTdxyQxT40YPs+w23N9ayrVHKRuihJ Q4MilLBu+730GSh1454XuwdJ0QE4PdVHfDFuY4/H1pGrldsCb5DJYkSuK5GPyM9T YHvigvwf2IzNxPF66wo0FC9N8CkleObwrFfiJjg0OkH0uqcw9Wpu1LUwn8ARf3gD MuprvoEkMT7g/bHfSbjsfArWnNMuWK9aGwayyoVpYBGx6gUnboLa4+ZTXOpMFjYW TGrDHPd6BYChzPmFUExljlhmPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpO9ZmI Tj0+OZHUAIhwMGnNExF9MB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASR8RgN+Hn4wxFPuaCx4Btwahrg04V9wKFeLe6MWwgupk4+D7CJlvW tMprNPReLLoV1zI+VthTtpC30c8bwdt7ic8RgWU8uSpLhOojTimi/Wug3+IjMBpH 3eoLFT0zD3Zdr+yMsVu8JryavjVIxMgw3bmLCjYeTYklF4aza/qh4jq1IGBaCjGX V9siV8MxWFsdQt6CaMTPcocX8Sg+HAB7ZKkXGfLBor2Yp2rpu0cXuENa72ADGoCV 1jRhE0CTrFI9phauj5x3KQ2c086T8HKAP16RWV1J628Zg/4E9hVBR0wW6datQJI7 kq4IlFesPK4p8hGCYMP8MYopBrw9/qmw -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:24 2024 by rpki-client on console-fra.rpki-client.org