$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft File: pVqOdK-92uYpENDGe6Ip1p4eyXg.mft (raw, json) Hash identifier: 5s3ZGHD1uiVY89coGXNDF2W1xNQQ+QKWgmSTavF8l6Y= Subject key identifier: 1A:2B:3C:2A:17:C6:BE:5A:49:DC:65:25:40:29:83:79:F6:4B:08:32 Authority key identifier: A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78 Certificate issuer: /CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978 Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft Manifest number: 06A8 Signing time: Fri 22 Nov 2024 21:45:35 +0000 Manifest this update: Fri 22 Nov 2024 21:45:34 +0000 Manifest next update: Fri 29 Nov 2024 21:45:34 +0000 Files and hashes: 1: pVqOdK-92uYpENDGe6Ip1p4eyXg.crl (hash: cgvodXJvzGQW980FMWYIFz+3eFyq2pH2y/PgsuZgIDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FC6/serialNumber=A55A8E74AFBDDAE62910D0C67BA229D69E1EC978 Validity Not Before: Nov 22 21:45:34 2024 GMT Not After : Nov 29 21:45:34 2024 GMT Subject: CN=6740fb7f-1e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:ef:73:a2:b3:0f:21:65:cd:69:6e:8f:4f: 5b:88:7a:39:9f:27:5c:26:2a:02:41:23:2a:68:25: 51:ec:91:e8:ba:e9:bb:aa:2f:84:4f:df:6a:26:2d: c7:c4:04:86:11:a2:f0:d2:b9:c0:87:4d:08:98:85: 71:33:ba:a3:14:e7:e8:a6:53:c5:88:01:04:60:5a: f7:ea:6e:48:4a:cb:34:4f:e6:dc:98:e2:28:02:b5: aa:29:51:48:2c:f5:42:4a:b3:91:c6:f5:ec:c3:b5: 9f:fb:6f:66:90:df:b9:0b:61:9a:9b:56:de:ef:ac: c2:88:23:6c:8f:4d:ea:84:69:25:f0:66:ec:d5:55: 06:a3:0d:1b:5e:50:51:55:2d:d1:f5:30:ff:0b:a3: 54:77:0b:13:b3:19:29:37:18:3e:53:c9:3b:5a:bc: 3d:5d:c8:35:d9:8a:ad:c1:7f:44:68:1c:2a:bf:47: b5:a3:6f:9b:dc:8b:f8:c8:43:22:55:8c:d8:42:53: 09:40:16:69:12:a0:b7:d0:a6:dd:cc:87:33:6e:7d: fc:c5:d6:eb:ee:83:68:05:3b:ef:56:1a:a6:4e:38: 2e:9a:9e:01:9d:3f:7e:73:10:3b:5b:bb:ed:54:4b: eb:55:22:a2:61:41:84:e2:be:70:f4:0d:b5:f7:ef: b2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2B:3C:2A:17:C6:BE:5A:49:DC:65:25:40:29:83:79:F6:4B:08:32 X509v3 Authority Key Identifier: keyid:A5:5A:8E:74:AF:BD:DA:E6:29:10:D0:C6:7B:A2:29:D6:9E:1E:C9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVqOdK-92uYpENDGe6Ip1p4eyXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FC6/019C027E3F6511EB8BE95A22C4F9AE02/pVqOdK-92uYpENDGe6Ip1p4eyXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:56:72:d3:4a:8f:13:2e:cb:d2:48:c3:51:77:88:34:5b:ef: f6:3c:df:5e:11:91:e7:b5:7e:c6:d7:7e:ef:0c:d2:69:b9:63: 15:f8:8f:b0:86:16:e2:19:2e:1c:c0:54:7a:d4:68:18:cb:b6: 7b:59:b1:0a:45:7c:51:cf:df:3d:05:f5:00:32:e4:7b:ba:50: 57:e4:a4:18:df:9a:4d:ec:30:cb:fd:45:a7:31:03:4d:8b:1d: c5:d6:a9:78:2e:67:27:d7:4a:4d:74:57:72:9e:f6:de:48:c4: 32:ef:d6:86:92:c4:7b:f3:4c:e7:ad:f9:d2:9c:de:f3:c7:fd: 7c:67:ed:d6:3c:c0:c1:f3:8d:19:8c:30:76:a3:26:b4:2d:65: f8:02:8e:97:61:fc:fc:d6:c3:47:69:c4:f4:00:75:00:1f:cd: b7:8b:73:66:18:e7:02:d3:e5:ce:fb:06:55:f0:97:2e:87:06: 28:f1:25:db:9b:de:e1:a8:89:07:0e:33:ed:3b:0e:fc:5c:06: d7:26:b6:21:8d:11:64:b8:24:f4:33:df:20:7e:f2:b1:75:94: ce:25:d5:23:55:20:10:27:11:b7:bf:2c:85:2f:3e:0a:45:b4: b7:9b:6e:4a:3b:78:2d:89:26:b3:bc:85:76:ae:ce:2d:ab:21: 3e:fc:b8:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGQzYxMTAvBgNVBAUTKEE1NUE4RTc0QUZCRERBRTYyOTEwRDBDNjdCQTIyOUQ2 OUUxRUM5NzgwHhcNMjQxMTIyMjE0NTM0WhcNMjQxMTI5MjE0NTM0WjAYMRYwFAYD VQQDEw02NzQwZmI3Zi0xZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy/vc6KzDyFlzWluj09biHo5nydcJioCQSMqaCVR7JHouum7qi+ET99qJi3H xASGEaLw0rnAh00ImIVxM7qjFOfoplPFiAEEYFr36m5ISss0T+bcmOIoArWqKVFI LPVCSrORxvXsw7Wf+29mkN+5C2Gam1be76zCiCNsj03qhGkl8Gbs1VUGow0bXlBR VS3R9TD/C6NUdwsTsxkpNxg+U8k7Wrw9Xcg12YqtwX9EaBwqv0e1o2+b3Iv4yEMi VYzYQlMJQBZpEqC30KbdzIczbn38xdbr7oNoBTvvVhqmTjgump4BnT9+cxA7W7vt VEvrVSKiYUGE4r5w9A219++y5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBorPCoX xr5aSdxlJUApg3n2SwgyMB8GA1UdIwQYMBaAFKVajnSvvdrmKRDQxnuiKdaeHsl4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZDNi8wMTlDMDI3RTNG NjUxMUVCOEJFOTVBMjJDNEY5QUUwMi9wVnFPZEstOTJ1WXBFTkRHZTZJcDFwNGV5 WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BWcU9kSy05MnVZcEVOREdlNklwMXA0ZXlYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZDNi8wMTlDMDI3RTNGNjUxMUVCOEJFOTVBMjJDNEY5QUUwMi9wVnFPZEstOTJ1 WXBFTkRHZTZJcDFwNGV5WGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOVnLTSo8TLsvSSMNRd4g0W+/2PN9eEZHntX7G137vDNJpuWMV+I+w hhbiGS4cwFR61GgYy7Z7WbEKRXxRz989BfUAMuR7ulBX5KQY35pN7DDL/UWnMQNN ix3F1ql4Lmcn10pNdFdynvbeSMQy79aGksR780znrfnSnN7zx/18Z+3WPMDB840Z jDB2oya0LWX4Ao6XYfz81sNHacT0AHUAH823i3NmGOcC0+XO+wZV8JcuhwYo8SXb m97hqIkHDjPtOw78XAbXJrYhjRFkuCT0M98gfvKxdZTOJdUjVSAQJxG3vyyFLz4K RbS3m25KO3gtiSazvIV2rs4tqyE+/Lhl -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:47 2024 by rpki-client on console-ams.rpki-client.org