$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft File: rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json) Hash identifier: wfi9YO+I9sKY5CJUtfEBldD+AGbvkqdV7we2bLj+tbk= Subject key identifier: 2B:18:52:D4:B5:C8:16:C9:C9:1D:12:BE:16:CF:2B:D9:66:EE:11:5F Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Certificate serial: 089E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft Manifest number: 0893 Signing time: Fri 22 Nov 2024 20:18:35 +0000 Manifest this update: Fri 22 Nov 2024 20:18:35 +0000 Manifest next update: Fri 29 Nov 2024 20:18:35 +0000 Files and hashes: 1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: p8PCkqxOUkkXYFFwpiPZEcReZ9PRbtUBw5MbZ+wLED8=) 2: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: eQTh6mzluyryLv1k1vcNqfuU7PfF9NQSG/VlGMgRn/I=) 3: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: fpS/IAyugQMqJIWGwmXI8wOUbVOYobs6hKofuFnkQek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2206 (0x89e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Validity Not Before: Nov 22 20:18:35 2024 GMT Not After : Nov 29 20:18:35 2024 GMT Subject: CN=6740e71b-142a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:23:86:8c:76:bd:ee:51:a2:94:e4:12:f5: 44:2c:50:10:fe:9b:45:51:b3:17:d7:4d:ac:51:29: 1e:27:0c:7e:1a:85:94:69:6c:b1:ca:7d:4e:d5:46: 0f:2e:62:96:34:43:31:2f:86:28:13:54:44:95:ba: e5:43:96:49:83:df:f8:2e:f7:7a:30:b8:9a:4f:34: d8:f9:74:5b:c1:2c:b4:0d:b6:cc:57:1e:7d:b0:56: a2:01:24:71:44:74:41:7d:05:92:24:5a:cd:64:c4: 02:92:ae:75:e4:5d:52:61:97:26:14:b1:33:52:38: 3a:d4:2c:b8:c4:50:a5:8d:c7:a0:36:bc:6e:12:c7: 77:59:f6:df:36:aa:84:50:2c:12:00:5f:15:8e:37: b2:9d:5c:75:7b:4b:94:a6:b1:c6:b9:3a:96:88:e2: 77:eb:95:56:ad:d8:14:7a:f1:6d:d4:3d:04:f8:6c: fb:e1:d3:86:1f:d3:b0:4c:34:c3:93:a3:c6:22:ef: 53:4c:5c:df:28:03:82:3b:61:a1:eb:d2:4a:0c:52: 0e:4b:3e:af:3c:1d:4c:d4:0c:74:98:12:62:bc:3a: e3:38:75:bb:f5:ea:bd:bc:79:9e:3d:be:12:38:48: 09:10:48:41:d4:d4:97:ba:54:f8:6d:10:d7:04:50: e7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:18:52:D4:B5:C8:16:C9:C9:1D:12:BE:16:CF:2B:D9:66:EE:11:5F X509v3 Authority Key Identifier: keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ad:f4:c4:d2:79:48:85:75:a8:29:53:79:45:d0:68:26:af: c6:7c:38:e3:1a:45:4f:24:f6:a3:a9:e8:24:57:ec:b8:f8:bb: d8:37:99:b0:c0:75:17:71:f1:67:c4:63:f2:ac:81:d9:f6:1f: c2:a1:89:4b:4c:76:09:03:f2:83:e1:24:a3:25:44:64:6e:29: 85:b9:55:d5:50:32:20:24:c4:e7:12:4c:84:f8:66:f9:34:26: d7:34:19:6d:6f:32:c2:9b:d4:88:33:e5:99:f2:0d:9b:f3:de: f7:c9:5a:b2:45:7d:8c:70:c9:49:34:1d:30:be:df:73:e8:d0: d0:5e:98:b7:9f:d7:af:7a:a6:2c:d2:ad:35:98:b3:5a:56:f2: f7:d2:e3:a3:39:eb:97:77:10:f0:f3:ff:aa:e7:37:c4:cf:3d: c8:02:57:ba:c4:ec:6a:6a:4f:dc:55:f7:ac:ec:14:fc:ea:55: eb:af:58:a1:cf:26:b4:ed:c4:cf:c1:2e:6a:fc:d2:51:bf:19: 52:3c:be:25:d0:c1:d1:dd:fb:f7:e8:6b:b9:9c:5d:a4:db:40: d0:2d:a1:6a:fc:97:38:36:7b:d8:db:5b:23:fe:97:d3:36:df: cc:ea:39:b5:cb:03:74:1a:35:29:74:ea:5c:bf:c6:80:3d:ef: 78:9e:d2:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2RDYxMTAvBgNVBAUTKEFFMDBDMUEyQzAzNDJBNzE1MjgzNTQ0RUQ2NUI0NjE4 NjU4MkYyNkMwHhcNMjQxMTIyMjAxODM1WhcNMjQxMTI5MjAxODM1WjAYMRYwFAYD VQQDEw02NzQwZTcxYi0xNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtYjhox2ve5RopTkEvVELFAQ/ptFUbMX102sUSkeJwx+GoWUaWyxyn1O1UYP LmKWNEMxL4YoE1RElbrlQ5ZJg9/4Lvd6MLiaTzTY+XRbwSy0DbbMVx59sFaiASRx RHRBfQWSJFrNZMQCkq515F1SYZcmFLEzUjg61Cy4xFCljcegNrxuEsd3WfbfNqqE UCwSAF8VjjeynVx1e0uUprHGuTqWiOJ365VWrdgUevFt1D0E+Gz74dOGH9OwTDTD k6PGIu9TTFzfKAOCO2Gh69JKDFIOSz6vPB1M1Ax0mBJivDrjOHW79eq9vHmePb4S OEgJEEhB1NSXulT4bRDXBFDnqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsYUtS1 yBbJyR0SvhbPK9lm7hFfMB8GA1UdIwQYMBaAFK4AwaLANCpxUoNUTtZbRhhlgvJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjZENi85QTU2Q0MyRUFB QjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtuRlNnMVJPMWx0R0dHV0M4 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnREJvc0EwS25GU2cxUk8xbHRHR0dXQzhtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjZENi85QTU2Q0MyRUFBQjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtu RlNnMVJPMWx0R0dHV0M4bXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6rfTE0nlIhXWoKVN5RdBoJq/GfDjjGkVPJPajqegkV+y4+LvYN5mw wHUXcfFnxGPyrIHZ9h/CoYlLTHYJA/KD4SSjJURkbimFuVXVUDIgJMTnEkyE+Gb5 NCbXNBltbzLCm9SIM+WZ8g2b8973yVqyRX2McMlJNB0wvt9z6NDQXpi3n9eveqYs 0q01mLNaVvL30uOjOeuXdxDw8/+q5zfEzz3IAle6xOxqak/cVfes7BT86lXrr1ih zya07cTPwS5q/NJRvxlSPL4l0MHR3fv36Gu5nF2k20DQLaFq/Jc4NnvY21sj/pfT Nt/M6jm1ywN0GjUpdOpcv8aAPe94ntLj -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:33 2024 by rpki-client on console-ams.rpki-client.org