$ rpki-client -vvf rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft File: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft (raw, json) Hash identifier: u8o07A5xfHT31tN4X//VhM/69Mj/1cCbcuKZPrWvi4A= Subject key identifier: 11:52:72:F5:AC:DB:17:D7:F4:7B:8C:C6:0C:B6:E6:92:90:A4:88:B5 Authority key identifier: FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 Certificate issuer: /CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft Manifest number: 76 Signing time: Thu 21 Nov 2024 04:53:58 +0000 Manifest this update: Thu 21 Nov 2024 04:53:58 +0000 Manifest next update: Thu 28 Nov 2024 04:53:58 +0000 Files and hashes: 1: -8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl (hash: 5nPL90r5TozdFNcSaVhloCsgsJE3u/vkfUdeODRysk0=) 2: 47610B18F5A811EEA84E8049C4F9AE02.roa (hash: eSiI/oC1ty9113uzmLbZZm5hsJhJGqVqy8fDd/ohEuI=) 3: 46D954B6F5A811EEA84E8049C4F9AE02.roa (hash: p1SssvY6SOrULQhmO9jpxYD94HPLlt6Ruhw6hVa4svI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91984AC/serialNumber=FBC55B2C0BE0AB234748FBC361547F64BFA75197 Validity Not Before: Nov 21 04:53:58 2024 GMT Not After : Nov 28 04:53:58 2024 GMT Subject: CN=673ebce6-1327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:ec:a4:4b:d1:5b:9a:0b:e2:70:af:aa:63: 33:03:d1:e6:a2:34:78:27:9d:61:36:d0:35:0f:f4: c6:79:f3:07:42:7a:9a:98:0e:da:b6:8f:77:5c:b2: d2:c4:29:ca:08:12:34:bb:9d:8a:62:d7:2f:1c:a3: 31:6e:27:b5:b5:78:c3:2d:f3:cb:2c:70:9a:8a:d3: cf:59:3e:e5:f9:70:12:36:80:88:7f:5d:88:29:3a: 1e:f7:f9:10:da:9f:4d:8b:de:e1:1d:2a:ad:75:03: 41:b2:09:b6:ef:0e:fe:d7:07:68:f5:8f:1c:32:9c: c8:73:7e:9b:0a:5d:4f:4b:ac:c3:e2:f5:ff:39:d0: 51:d5:a4:ac:b3:3e:50:b3:98:6f:6d:64:f2:be:cc: 85:d9:97:58:22:01:ff:7c:c9:52:4b:00:f4:16:42: a1:5a:df:cd:48:3d:ca:67:f7:c6:f8:9f:0f:fd:88: 9b:79:4f:3a:b7:80:de:eb:79:ea:ed:96:e8:9f:ac: 05:9a:57:4b:18:37:28:90:ef:b4:2b:4d:27:5e:40: 4c:a7:6e:32:6a:53:9c:fa:20:66:fd:fb:3d:0c:5a: b4:a2:40:e9:e1:6e:b3:29:a1:66:e1:aa:24:d9:ac: 61:35:44:b9:a9:d9:2a:94:05:3b:d6:9d:71:16:ec: c6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:52:72:F5:AC:DB:17:D7:F4:7B:8C:C6:0C:B6:E6:92:90:A4:88:B5 X509v3 Authority Key Identifier: keyid:FB:C5:5B:2C:0B:E0:AB:23:47:48:FB:C3:61:54:7F:64:BF:A7:51:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91984AC/6D026CECF5A111EE98DBCD11C4F9AE02/-8VbLAvgqyNHSPvDYVR_ZL-nUZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:4e:85:9f:68:cc:7e:12:e9:8b:c8:6b:f5:14:4b:d6:30:f1: 3d:a8:10:65:01:a1:99:77:fa:18:21:57:6d:01:2a:1d:dd:07: ec:fe:85:28:c1:60:91:3f:6e:2f:3c:1d:ca:ae:07:3e:c4:48: a2:d8:39:63:9d:31:d9:c1:7b:40:fc:c4:22:38:1e:6b:6c:8b: 97:a5:18:08:de:f9:59:19:12:84:a3:01:2c:42:f6:0f:09:4f: 4c:cd:58:5f:2c:cc:fa:ac:76:8e:46:7a:05:b5:39:a8:52:da: 33:7d:36:db:cf:8a:d5:0a:e2:40:93:d1:c0:aa:40:46:50:97: 12:6f:65:8b:3d:cc:4b:ab:70:f0:7a:2e:46:20:f4:ef:54:9c: 59:9e:09:b5:9a:78:b9:10:39:13:01:72:1b:58:41:dd:a2:d4: 6a:46:64:56:da:b8:87:92:c6:34:f5:cb:f9:d8:57:0a:f7:ed: 0f:b5:23:68:11:47:c7:67:cc:47:92:b2:73:be:8c:dc:2d:72: be:ed:8b:aa:dc:18:a7:0b:76:92:51:53:df:35:0e:70:5e:9b: b5:de:49:05:c9:02:a8:9a:a0:68:94:9f:a3:0d:93:23:9e:9b: 93:69:3a:96:1b:1b:68:1d:a0:9b:21:f6:74:42:31:89:b8:db: 69:98:18:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODRBQzExMC8GA1UEBRMoRkJDNTVCMkMwQkUwQUIyMzQ3NDhGQkMzNjE1NDdGNjRC RkE3NTE5NzAeFw0yNDExMjEwNDUzNThaFw0yNDExMjgwNDUzNThaMBgxFjAUBgNV BAMTDTY3M2ViY2U2LTEzMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOTOykS9FbmgvicK+qYzMD0eaiNHgnnWE20DUP9MZ58wdCepqYDtq2j3dcstLE KcoIEjS7nYpi1y8cozFuJ7W1eMMt88sscJqK089ZPuX5cBI2gIh/XYgpOh73+RDa n02L3uEdKq11A0GyCbbvDv7XB2j1jxwynMhzfpsKXU9LrMPi9f850FHVpKyzPlCz mG9tZPK+zIXZl1giAf98yVJLAPQWQqFa381IPcpn98b4nw/9iJt5Tzq3gN7reert luifrAWaV0sYNyiQ77QrTSdeQEynbjJqU5z6IGb9+z0MWrSiQOnhbrMpoWbhqiTZ rGE1RLmp2SqUBTvWnXEW7Mb1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEVJy9azb F9f0e4zGDLbmkpCkiLUwHwYDVR0jBBgwFoAU+8VbLAvgqyNHSPvDYVR/ZL+nUZcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4NEFDLzZEMDI2Q0VDRjVB MTExRUU5OERCQ0QxMUM0RjlBRTAyLy04VmJMQXZncXlOSFNQdkRZVlJfWkwtblVa Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLThWYkxBdmdxeU5IU1B2RFlWUl9aTC1uVVpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 NEFDLzZEMDI2Q0VDRjVBMTExRUU5OERCQ0QxMUM0RjlBRTAyLy04VmJMQXZncXlO SFNQdkRZVlJfWkwtblVaYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEVOhZ9ozH4S6YvIa/UUS9Yw8T2oEGUBoZl3+hghV20BKh3dB+z+hSjB YJE/bi88HcquBz7ESKLYOWOdMdnBe0D8xCI4Hmtsi5elGAje+VkZEoSjASxC9g8J T0zNWF8szPqsdo5GegW1OahS2jN9NtvPitUK4kCT0cCqQEZQlxJvZYs9zEurcPB6 LkYg9O9UnFmeCbWaeLkQORMBchtYQd2i1GpGZFbauIeSxjT1y/nYVwr37Q+1I2gR R8dnzEeSsnO+jNwtcr7ti6rcGKcLdpJRU981DnBem7XeSQXJAqiaoGiUn6MNkyOe m5NpOpYbG2gdoJsh9nRCMYm422mYGCE= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:35 2024 by rpki-client on console-ams.rpki-client.org