$ rpki-client -vvf rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft File: ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft (raw, json) Hash identifier: VbxmcnNVJxBdFn9NrCqDjTOnsWTkqUl/eixqS5csyfA= Subject key identifier: 3C:A3:59:E9:01:C1:12:01:31:93:55:C4:C2:A7:9B:8B:2F:29:4C:6E Authority key identifier: 6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED Certificate issuer: /CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Certificate serial: 056A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft Manifest number: 0564 Signing time: Fri 22 Nov 2024 22:56:49 +0000 Manifest this update: Fri 22 Nov 2024 22:56:49 +0000 Manifest next update: Fri 29 Nov 2024 22:56:49 +0000 Files and hashes: 1: ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl (hash: 4+QVyUa1HAYiGYo3dr+HUDKcGkzDI8ODOyueMhHDCEE=) 2: BB01CFB0723811EEA39E0042C4F9AE02.roa (hash: Wmsh7cLIzhswuDyOVOYJZDVZYFQtMqV8cI7HOX5SCRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1386 (0x56a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91944AB/serialNumber=6A1219726D239C82F5A44601127D1AF8725CE0ED Validity Not Before: Nov 22 22:56:49 2024 GMT Not After : Nov 29 22:56:49 2024 GMT Subject: CN=67410c31-e90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2e:44:87:5f:cf:5a:8b:8f:9a:bf:86:44:64: 00:6c:5c:73:73:36:8e:b8:fb:aa:f3:dc:89:23:11: e3:3f:8a:47:4e:1d:d6:88:9d:f8:c2:66:54:2c:c2: 97:9d:62:64:34:c5:ec:b9:77:d3:78:2d:14:26:75: ab:92:7e:e5:94:ae:99:b1:fa:ea:18:86:5a:a3:de: aa:40:0d:17:5d:df:71:ea:03:42:a7:87:90:e5:88: a6:3a:1c:f8:d5:6d:53:5a:19:5c:fc:41:93:c2:62: 08:84:55:33:91:a6:a9:d4:b3:f3:ce:01:7b:88:17: 9c:e2:e4:87:28:0c:c1:36:f4:4b:a8:15:a6:50:8c: b6:8a:65:ae:66:1c:d8:ee:fc:39:98:5f:a2:dd:3c: 62:20:5f:cc:3e:d0:91:b6:ab:54:06:9d:c6:58:18: b8:95:a9:34:12:4e:6a:77:9c:82:1b:81:7c:d8:a7: eb:1a:92:ce:1a:41:e1:dc:89:fb:43:64:5c:d1:ff: c7:e3:30:c0:f4:31:e2:e4:b5:7f:a7:19:08:1e:81: b4:75:f2:36:a5:e4:7a:13:c3:75:46:35:75:9b:da: 98:d6:52:86:3f:37:e5:ad:4c:de:1d:7c:aa:ff:11: 76:aa:0d:52:40:88:03:43:6b:51:8a:6e:10:b1:2d: 5f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A3:59:E9:01:C1:12:01:31:93:55:C4:C2:A7:9B:8B:2F:29:4C:6E X509v3 Authority Key Identifier: keyid:6A:12:19:72:6D:23:9C:82:F5:A4:46:01:12:7D:1A:F8:72:5C:E0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahIZcm0jnIL1pEYBEn0a-HJc4O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944AB/6FE306A6C2C811EB98D9DA79C4F9AE02/ahIZcm0jnIL1pEYBEn0a-HJc4O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:01:96:e5:58:94:03:a3:6a:b5:0b:35:51:82:40:51:b6:fe: c8:0c:3d:bc:31:7a:fb:cb:c8:9f:91:39:cd:b3:44:4b:df:24: e3:fc:28:90:f9:41:fe:15:14:92:d2:8a:15:57:bb:3b:4b:01: c5:5c:a4:6f:14:85:7c:01:a9:5a:f1:cc:64:08:17:19:bf:1a: 10:2c:83:c0:07:39:da:00:21:3c:c7:33:b2:12:7c:68:e3:9d: 20:2d:10:e1:76:aa:24:3a:f7:36:96:c7:11:89:06:9f:d1:27: 08:08:81:70:eb:13:40:de:c0:94:9b:98:f5:42:45:3b:02:2d: 67:d4:fd:3e:87:27:72:db:a5:1e:f3:77:a2:95:d7:ff:4d:2f: 87:86:ee:ad:ad:f2:c5:2a:53:31:a6:ca:dc:d3:68:4f:71:c8: 53:54:88:ed:0e:8f:07:4a:fd:95:98:f4:29:96:cb:67:99:9c: cc:b6:ab:1c:54:98:ff:eb:a2:e4:1c:c2:ba:7f:2b:b4:45:96: 1d:b7:ef:14:1e:cb:8d:d3:0c:76:34:17:70:51:5c:06:4b:53: 68:35:57:d8:27:26:f0:96:38:8a:18:c5:20:fc:cf:0c:0e:77: 5f:f9:d0:37:2e:4b:64:a6:e5:4d:bc:0f:d8:98:8c:78:4f:29: 6f:1f:a4:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ0QUIxMTAvBgNVBAUTKDZBMTIxOTcyNkQyMzlDODJGNUE0NDYwMTEyN0QxQUY4 NzI1Q0UwRUQwHhcNMjQxMTIyMjI1NjQ5WhcNMjQxMTI5MjI1NjQ5WjAYMRYwFAYD VQQDEw02NzQxMGMzMS1lOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApi5Eh1/PWouPmr+GRGQAbFxzczaOuPuq89yJIxHjP4pHTh3WiJ34wmZULMKX nWJkNMXsuXfTeC0UJnWrkn7llK6ZsfrqGIZao96qQA0XXd9x6gNCp4eQ5YimOhz4 1W1TWhlc/EGTwmIIhFUzkaap1LPzzgF7iBec4uSHKAzBNvRLqBWmUIy2imWuZhzY 7vw5mF+i3TxiIF/MPtCRtqtUBp3GWBi4lak0Ek5qd5yCG4F82KfrGpLOGkHh3In7 Q2Rc0f/H4zDA9DHi5LV/pxkIHoG0dfI2peR6E8N1RjV1m9qY1lKGPzflrUzeHXyq /xF2qg1SQIgDQ2tRim4QsS1fBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyjWekB wRIBMZNVxMKnm4svKUxuMB8GA1UdIwQYMBaAFGoSGXJtI5yC9aRGARJ9GvhyXODt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDRBQi82RkUzMDZBNkMy QzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5JTDFwRVlCRW4wYS1ISmM0 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoSVpjbTBqbklMMXBFWUJFbjBhLUhKYzRPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDRBQi82RkUzMDZBNkMyQzgxMUVCOThEOURBNzlDNEY5QUUwMi9haElaY20wam5J TDFwRVlCRW4wYS1ISmM0TzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcAZblWJQDo2q1CzVRgkBRtv7IDD28MXr7y8ifkTnNs0RL3yTj/CiQ +UH+FRSS0ooVV7s7SwHFXKRvFIV8Aala8cxkCBcZvxoQLIPABznaACE8xzOyEnxo 450gLRDhdqokOvc2lscRiQaf0ScICIFw6xNA3sCUm5j1QkU7Ai1n1P0+hydy26Ue 83eildf/TS+Hhu6trfLFKlMxpsrc02hPcchTVIjtDo8HSv2VmPQplstnmZzMtqsc VJj/66LkHMK6fyu0RZYdt+8UHsuN0wx2NBdwUVwGS1NoNVfYJybwljiKGMUg/M8M Dndf+dA3LktkpuVNvA/YmIx4TylvH6RF -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:31 2024 by rpki-client on console-fra.rpki-client.org