$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft File: awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json) Hash identifier: 2EunXAuiX8DKiB+SEF1M+GNpwh41ng9V96RhZBBQALY= Subject key identifier: 5E:62:5E:50:BE:AE:62:8A:0C:62:40:76:08:31:36:85:DE:77:55:3A Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0BD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft Manifest number: 0BB6 Signing time: Fri 22 Nov 2024 18:41:35 +0000 Manifest this update: Fri 22 Nov 2024 18:41:35 +0000 Manifest next update: Fri 29 Nov 2024 18:41:35 +0000 Files and hashes: 1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: EMdcd21FRl3zfWA17GJHmJpEbOXltRGXYYxXRzE0D9U=) 2: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: TDJGQsW2NIk73+noi3yai+lnEcUS65iyjDduaFF8MsU=) 3: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: o+CZ7fn0neERiRGT74H4pMCJhxb2efrn1ZqyAv5eZQ0=) 4: BBAF872C113E11EA8C481077C4F9AE02.roa (hash: N6gsigaV+jIBOu8StnwHgdUyD0fY+sbCLKJLFXj0k0E=) 5: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: +Z1f48sI1Kz7JI6qJ55JG0SRXt9VC0MvWpOU7eCKqS8=) 6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: qVUxUTjG003o3VqH+LJ1RqY1Y4pgpDhTWOzQr0cogNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3030 (0xbd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Nov 22 18:41:35 2024 GMT Not After : Nov 29 18:41:35 2024 GMT Subject: CN=6740d05f-cef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:64:a9:de:54:c1:44:d3:97:20:00:97:57:ac: a9:64:bd:1c:29:10:55:51:a6:f4:55:51:1f:f7:05: 2f:9f:99:b1:dd:78:50:e8:6d:3d:4f:6d:d6:ce:5c: 5a:4d:46:8b:32:b7:ec:dc:4a:32:a8:8e:f1:da:64: 1d:af:dc:30:df:fb:a4:2f:57:7c:5b:d7:39:b3:ac: 6a:3e:5b:69:71:9d:d3:8f:19:3f:ca:0e:99:8b:eb: 68:0e:dd:7a:35:8e:5d:48:cc:ef:e8:16:c6:af:19: a1:4e:71:5b:73:11:eb:00:df:5d:86:45:78:e3:a7: 21:e0:ab:6a:66:0a:08:ca:03:32:3d:32:ef:85:39: 4f:8f:e8:4c:2a:c4:50:36:23:d2:2c:25:73:b9:a5: e7:87:be:9d:a2:5c:7e:47:be:46:a5:5e:9f:ed:64: bb:b1:b1:3f:53:bd:63:8c:00:63:41:94:e9:d2:d9: e2:d3:e3:88:0a:73:76:5e:af:b5:85:a4:9b:87:24: a3:6e:6c:08:3d:55:db:17:de:38:2d:63:20:78:d4: 4f:61:df:67:d6:a0:d2:72:14:66:10:e1:ce:32:53: ba:07:d3:61:02:b9:38:d3:be:2f:f5:bd:fd:c9:8d: 7d:fb:1e:c2:7a:46:b1:7f:22:ba:3b:2c:19:22:ca: 4e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:62:5E:50:BE:AE:62:8A:0C:62:40:76:08:31:36:85:DE:77:55:3A X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0a:53:40:4a:21:80:8a:91:f9:88:29:c6:7c:0c:91:8d:bd: 12:d6:bc:9a:35:e4:44:a9:6a:27:2a:b2:55:8f:46:d6:25:7f: 52:51:07:94:fc:6f:ea:1c:6d:0a:11:2f:59:20:e6:b0:33:a6: a2:83:74:59:6f:8a:07:49:2a:bb:74:89:81:e4:a3:da:f4:bc: c9:94:c9:c3:37:14:e1:1e:24:74:a9:a9:f8:74:30:6f:36:a3: 18:c2:07:70:70:08:0d:47:f8:9d:13:6e:8f:09:c3:d6:af:42: 6c:10:a7:dd:a2:d0:18:fb:35:3b:f1:7d:47:0a:c9:e9:55:dd: f5:f8:c7:c5:be:7e:c2:d8:a7:d5:80:fb:0d:60:9b:2c:34:76: e6:a8:00:e6:92:0d:b1:a3:b0:c1:92:8e:1f:b5:42:2c:0c:73: 16:a8:ea:e2:04:70:0c:09:63:b0:27:2f:bf:f6:a8:6e:b1:43: ee:31:2e:1c:fc:d1:03:e2:24:ba:cb:6e:67:f7:dd:bc:c6:8a: 0a:fb:31:c6:72:7c:7c:c7:00:55:4f:ab:1e:df:63:f1:d7:2f: ef:4b:47:81:92:68:c7:71:09:79:da:bb:6c:23:76:33:7a:17: 94:57:31:02:cd:83:f2:46:55:b3:72:9e:f3:d0:af:e2:8a:33: e5:c1:2f:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjQxMTIyMTg0MTM1WhcNMjQxMTI5MTg0MTM1WjAYMRYwFAYD VQQDEw02NzQwZDA1Zi1jZWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGSp3lTBRNOXIACXV6ypZL0cKRBVUab0VVEf9wUvn5mx3XhQ6G09T23Wzlxa TUaLMrfs3EoyqI7x2mQdr9ww3/ukL1d8W9c5s6xqPltpcZ3Tjxk/yg6Zi+toDt16 NY5dSMzv6BbGrxmhTnFbcxHrAN9dhkV446ch4KtqZgoIygMyPTLvhTlPj+hMKsRQ NiPSLCVzuaXnh76dolx+R75GpV6f7WS7sbE/U71jjABjQZTp0tni0+OICnN2Xq+1 haSbhySjbmwIPVXbF944LWMgeNRPYd9n1qDSchRmEOHOMlO6B9NhArk4074v9b39 yY19+x7CekaxfyK6OywZIspOGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5iXlC+ rmKKDGJAdggxNoXed1U6MB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVFMC8yM0JGMkYyNjExM0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlW XzVRbW5YcWJ3Z0poY0UzT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3ClNASiGAipH5iCnGfAyRjb0S1ryaNeREqWonKrJVj0bWJX9SUQeU /G/qHG0KES9ZIOawM6aig3RZb4oHSSq7dImB5KPa9LzJlMnDNxThHiR0qan4dDBv NqMYwgdwcAgNR/idE26PCcPWr0JsEKfdotAY+zU78X1HCsnpVd31+MfFvn7C2KfV gPsNYJssNHbmqADmkg2xo7DBko4ftUIsDHMWqOriBHAMCWOwJy+/9qhusUPuMS4c /NED4iS6y25n9928xooK+zHGcnx8xwBVT6se32Px1y/vS0eBkmjHcQl52rtsI3Yz eheUVzECzYPyRlWzcp7z0K/iijPlwS9B -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:14 2024 by rpki-client on console-ams.rpki-client.org