$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: EaqJDInbMm7htJqN6ZzoqshmNKLf9lTqYtJBaDch/Zw= Subject key identifier: EB:43:EF:42:05:4F:C9:59:F4:BF:C2:A9:0D:8B:19:30:C9:0B:A9:99 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0C80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0C77 Signing time: Wed 20 Nov 2024 18:05:03 +0000 Manifest this update: Wed 20 Nov 2024 18:05:02 +0000 Manifest next update: Wed 27 Nov 2024 18:05:02 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: e3G0GIyHRTjvKcJahOSkBo4UewdEEJx0Z6Q1+JO38Mc=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3200 (0xc80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Nov 20 18:05:02 2024 GMT Not After : Nov 27 18:05:02 2024 GMT Subject: CN=673e24cf-f364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:c9:35:f3:7a:40:45:e2:56:bf:48:b4:fa: b2:42:d3:10:1c:45:4e:a6:8c:79:9f:33:71:58:09: 12:0f:cc:ff:45:de:14:d4:c6:a0:4e:bb:fe:52:b9: 62:1b:a3:5b:72:f4:2e:3f:c4:b3:7d:5d:7b:3e:1e: 14:e3:3e:ae:e7:53:ee:7f:bf:d8:3e:f0:3b:6e:09: dd:bc:9c:7c:38:10:be:0d:11:13:42:8c:32:3a:67: 27:3d:6e:98:e4:70:72:31:71:98:fc:6f:5e:42:5b: 5c:a0:ed:29:d8:9d:36:49:f8:7c:bc:40:e6:10:91: e2:5b:a8:5f:5a:ee:a3:ed:5b:e4:3b:eb:31:05:3b: 63:44:32:5e:0f:e1:54:d9:06:ea:2f:6e:8b:db:96: 83:53:33:d8:1f:33:e4:30:32:c7:97:94:74:f3:32: bc:b1:17:8c:78:ba:7e:70:f9:a7:df:1d:30:b4:af: 66:c9:4b:8e:8f:34:0d:0d:73:dc:00:ae:cf:ca:da: 02:9b:93:8c:ba:20:b2:8b:09:de:61:b9:ef:50:71: 85:0e:04:7c:58:51:1c:1d:d6:e5:7a:5e:60:61:10: 84:ec:96:5d:f9:6d:82:64:cd:04:70:c3:3a:63:70: 91:08:1e:7c:b1:99:91:16:ea:c9:8e:56:7d:ae:67: 61:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:43:EF:42:05:4F:C9:59:F4:BF:C2:A9:0D:8B:19:30:C9:0B:A9:99 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ac:f9:92:03:5b:35:e2:2f:82:68:9a:87:f5:62:88:3b:4e: d9:65:1d:48:49:f9:10:11:23:78:ed:7c:03:e6:db:07:7b:42: 85:f9:73:6d:db:b0:f4:4e:90:99:62:c9:9c:23:42:1a:cf:8a: de:76:44:cf:73:a7:e8:57:a2:d2:77:e9:b7:50:f2:a7:b1:01: cd:86:dc:ca:cc:59:dc:e8:50:c5:0b:05:3e:08:89:52:c8:9b: d5:ef:90:9a:65:58:c8:de:69:9d:31:2f:47:e6:48:a3:34:c5: 06:e3:57:28:ea:a1:de:fb:ab:f5:de:5d:d6:de:0f:8e:7f:7c: 7d:8d:e7:cd:11:34:ed:18:7c:90:fd:a2:b9:c4:b9:8f:45:f4: 47:b0:2b:be:c2:b1:cb:71:b5:5d:ae:54:bb:4c:88:76:39:16: 40:29:a2:d4:ef:8f:76:9c:54:c3:ad:a4:f7:3b:3a:68:28:9b: e4:40:79:b7:4e:89:db:a8:33:3d:99:2b:55:1d:8e:f6:6b:1b: 82:dd:bb:87:fa:22:80:91:cf:b0:5a:23:bf:03:ff:82:d5:9e: f0:57:64:c0:d0:45:88:65:57:83:69:c7:67:19:f8:10:20:25: 65:3c:72:86:b2:11:2a:16:d2:c6:b5:f2:99:76:32:3a:27:c1: 42:02:20:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjQxMTIwMTgwNTAyWhcNMjQxMTI3MTgwNTAyWjAYMRYwFAYD VQQDEw02NzNlMjRjZi1mMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQPJNfN6QEXiVr9ItPqyQtMQHEVOpox5nzNxWAkSD8z/Rd4U1MagTrv+Urli G6NbcvQuP8SzfV17Ph4U4z6u51Puf7/YPvA7bgndvJx8OBC+DRETQowyOmcnPW6Y 5HByMXGY/G9eQltcoO0p2J02Sfh8vEDmEJHiW6hfWu6j7VvkO+sxBTtjRDJeD+FU 2QbqL26L25aDUzPYHzPkMDLHl5R08zK8sReMeLp+cPmn3x0wtK9myUuOjzQNDXPc AK7PytoCm5OMuiCyiwneYbnvUHGFDgR8WFEcHdblel5gYRCE7JZd+W2CZM0EcMM6 Y3CRCB58sZmRFurJjlZ9rmdhOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtD70IF T8lZ9L/CqQ2LGTDJC6mZMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChrPmSA1s14i+CaJqH9WKIO07ZZR1ISfkQESN47XwD5tsHe0KF+XNt 27D0TpCZYsmcI0Iaz4redkTPc6foV6LSd+m3UPKnsQHNhtzKzFnc6FDFCwU+CIlS yJvV75CaZVjI3mmdMS9H5kijNMUG41co6qHe+6v13l3W3g+Of3x9jefNETTtGHyQ /aK5xLmPRfRHsCu+wrHLcbVdrlS7TIh2ORZAKaLU7492nFTDraT3OzpoKJvkQHm3 TonbqDM9mStVHY72axuC3buH+iKAkc+wWiO/A/+C1Z7wV2TA0EWIZVeDacdnGfgQ ICVlPHKGshEqFtLGtfKZdjI6J8FCAiC0 -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:04 2024 by rpki-client on console-ams.rpki-client.org