$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json) Hash identifier: uMyGOshvwmeXfOOrNtJbBFEZTKIGt6nABQdB1sk1+cw= Subject key identifier: CA:21:93:71:63:19:BA:A9:E9:62:C6:5C:8F:BD:9D:C3:19:69:5C:11 Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft Manifest number: 017A Signing time: Sat 23 Nov 2024 02:13:42 +0000 Manifest this update: Sat 23 Nov 2024 02:13:41 +0000 Manifest next update: Sat 30 Nov 2024 02:13:41 +0000 Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: SS+CpIpb5nQbqbrgIdHs03DfG3tV1FSWJczjO6L0bhg=) 2: 0FBB769A5DDB11EEAEEA437DC4F9AE02.roa (hash: 22JLLHDDivPS+exWd4wVWjMfX8Vk/x1LDA48sqpY1E8=) 3: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: 3kdta5Pi/N5KniM95Q0zJF7VC4SA3fQTqDL8ggYKjfQ=) 4: DE56B490143611EEAB1A5D73C4F9AE02.roa (hash: jnXfSHlWHW/O+hO/ieoSAiqyekCOz3/mZevuImwOi1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F Validity Not Before: Nov 23 02:13:41 2024 GMT Not After : Nov 30 02:13:41 2024 GMT Subject: CN=67413a55-98ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:2c:b2:a9:fc:ba:9b:59:5e:4c:97:88:62: 48:08:c3:d8:d0:31:1d:23:52:b1:7d:4f:93:85:8a: cc:e6:66:aa:40:e7:17:f9:b9:f6:9e:17:2a:59:e3: 90:25:01:41:19:b6:58:fc:e6:8d:37:ed:d8:7a:40: 58:4f:e8:24:89:cd:8d:f1:e0:2c:dc:b1:cd:70:6a: 77:db:0c:90:f8:18:42:e1:72:44:e2:74:b0:d3:cf: 4a:27:5b:77:89:a5:01:b4:97:86:03:b6:5c:4b:27: f7:d2:28:0e:20:3d:f5:3f:c8:ba:02:4d:e9:1b:bb: 1c:5c:54:6b:11:c3:93:d3:c7:df:e5:95:19:26:00: 9d:8a:b9:ad:b1:2f:c9:0b:a8:3d:a0:34:95:29:d2: c9:1c:20:6f:3f:2f:5a:6a:c6:53:7c:09:28:ed:53: dc:a8:39:34:bb:4a:d1:f8:91:c9:d8:bc:26:d5:d0: ad:81:fa:e2:ff:01:d0:79:26:6b:29:46:b6:4c:b5: ad:c3:f9:4c:3f:ca:df:c1:6c:e3:00:4f:94:d6:2a: 92:05:9f:e3:a5:17:32:d2:39:51:47:db:87:41:ad: 93:25:2d:11:be:c5:cb:af:e1:5b:0f:7e:da:12:1e: dd:3b:59:40:72:fc:2b:e8:a3:27:aa:5d:93:ba:ba: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:21:93:71:63:19:BA:A9:E9:62:C6:5C:8F:BD:9D:C3:19:69:5C:11 X509v3 Authority Key Identifier: keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:62:f5:f7:42:56:9e:44:a3:54:50:fc:b2:2d:9e:1b:0b:0f: 68:8b:d4:9d:2f:57:1c:71:7d:ec:a6:d3:c8:ad:ed:16:e6:50: e4:51:f1:52:56:d8:0b:90:9c:d5:93:e3:58:ee:30:ed:fd:00: 26:03:86:54:f7:ba:49:01:55:bc:8e:a0:6f:f3:02:d6:42:67: b9:56:bd:41:07:c2:41:be:6e:c4:6f:21:2c:fb:0d:62:77:ca: 4e:c4:53:97:ae:58:a8:7e:6b:46:49:19:b7:a2:5e:da:06:7a: 4a:1e:0f:f8:e9:0b:27:ec:cd:70:b2:32:14:4e:3f:c5:b2:91: 07:63:f6:fb:85:84:b6:6a:44:85:bc:13:7b:75:54:1b:0e:55: 3a:3b:b5:81:7a:69:df:8d:1e:4c:de:74:62:78:10:78:bc:6f: 0d:74:97:f4:df:7e:4a:a8:f8:53:fe:bb:db:8d:a6:85:31:34: 6a:eb:e9:a9:0f:bf:62:fc:31:1f:04:90:25:73:b9:9d:5d:ce: f8:42:58:c9:38:02:f6:c9:94:59:5f:c7:b0:32:26:b2:99:6c: 5d:11:5e:bc:95:e9:61:ab:ce:0e:8d:5b:f7:c7:6c:4e:00:52: 87:fc:44:19:53:a5:ba:c0:c6:79:d6:55:4a:b2:88:4e:a2:23: f5:94:8f:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDgxMTAvBgNVBAUTKDAyNDIyOUM4MUFDMzUzNUEyMUQ2MEUyREMzMkE5Qjg4 QkQ2QUQ4MUYwHhcNMjQxMTIzMDIxMzQxWhcNMjQxMTMwMDIxMzQxWjAYMRYwFAYD VQQDEw02NzQxM2E1NS05OGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljossqn8uptZXkyXiGJICMPY0DEdI1KxfU+ThYrM5maqQOcX+bn2nhcqWeOQ JQFBGbZY/OaNN+3YekBYT+gkic2N8eAs3LHNcGp32wyQ+BhC4XJE4nSw089KJ1t3 iaUBtJeGA7ZcSyf30igOID31P8i6Ak3pG7scXFRrEcOT08ff5ZUZJgCdirmtsS/J C6g9oDSVKdLJHCBvPy9aasZTfAko7VPcqDk0u0rR+JHJ2Lwm1dCtgfri/wHQeSZr KUa2TLWtw/lMP8rfwWzjAE+U1iqSBZ/jpRcy0jlRR9uHQa2TJS0RvsXLr+FbD37a Eh7dO1lAcvwr6KMnql2TurrITwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMohk3Fj Gbqp6WLGXI+9ncMZaVwRMB8GA1UdIwQYMBaAFAJCKcgaw1NaIdYOLcMqm4i9atgf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0OC82NEQ4QjFERTc3 RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUxb2gxZzR0d3lxYmlMMXEy QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FrSXB5QnJEVTFvaDFnNHR3eXFiaUwxcTJCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0OC82NEQ4QjFERTc3RTQxMUVEOTdGNTkzNERDNEY5QUUwMi9Ba0lweUJyRFUx b2gxZzR0d3lxYmlMMXEyQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWYvX3QlaeRKNUUPyyLZ4bCw9oi9SdL1cccX3sptPIre0W5lDkUfFS VtgLkJzVk+NY7jDt/QAmA4ZU97pJAVW8jqBv8wLWQme5Vr1BB8JBvm7EbyEs+w1i d8pOxFOXrliofmtGSRm3ol7aBnpKHg/46Qsn7M1wsjIUTj/FspEHY/b7hYS2akSF vBN7dVQbDlU6O7WBemnfjR5M3nRieBB4vG8NdJf0335KqPhT/rvbjaaFMTRq6+mp D79i/DEfBJAlc7mdXc74QljJOAL2yZRZX8ewMiaymWxdEV68lelhq84OjVv3x2xO AFKH/EQZU6W6wMZ51lVKsohOoiP1lI+M -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org