$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft File: evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json) Hash identifier: qSzeBeyPLfPSBaTn8rHbepDBAElmeK07lAoE801Ndvo= Subject key identifier: 47:86:B1:88:0E:0D:E6:17:1A:6A:7C:A9:5D:05:EC:84:E5:1F:BE:64 Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft Manifest number: 0188 Signing time: Sat 23 Nov 2024 02:05:57 +0000 Manifest this update: Sat 23 Nov 2024 02:05:57 +0000 Manifest next update: Sat 30 Nov 2024 02:05:57 +0000 Files and hashes: 1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: 8o8CNFjxYbUrvz58GpsOVruXer0VI8j9zCKSDKyMqy0=) 2: 92B0DE0EE10811EE8117E548C4F9AE02.roa (hash: Fa326dB+IQfp8fAs2daFA4WusqLa1cIqQOmat0gGk5U=) 3: 5982C700E10811EE9C1E5D48C4F9AE02.roa (hash: x8OSftLAKsENNZpKvZOx5iVpmUg99SnJ4zJmyqJ0S34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Validity Not Before: Nov 23 02:05:57 2024 GMT Not After : Nov 30 02:05:57 2024 GMT Subject: CN=67413885-085e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:4f:42:e7:10:5b:68:ee:7e:34:cb:8d:ca: b1:f9:89:f4:af:02:5a:4d:c5:7c:58:95:92:b7:4c: 97:75:3c:ce:52:ef:46:7e:61:55:0e:b6:4a:b9:53: 19:89:f9:55:96:48:17:72:13:c4:a6:53:5b:9f:fb: 69:3e:52:88:05:9c:bc:3d:7f:7e:4e:b2:fa:8d:89: 44:6e:c4:94:4d:b8:00:13:56:17:30:09:01:81:0d: e4:0f:e4:08:3e:b5:90:a0:58:5f:6b:8c:f8:4b:f9: 24:65:96:da:0c:1b:5d:ed:28:0b:a1:fa:82:3e:67: 6c:85:68:76:20:c4:08:b4:c0:0b:34:ca:48:0b:c0: 01:00:ae:57:ad:d8:ca:c7:df:da:65:49:9f:83:ee: f2:9e:0a:b8:85:e1:57:fd:e5:7d:02:ab:28:99:7e: bf:a0:d9:a9:8c:81:99:24:a6:d8:98:a3:5c:3a:88: 69:8f:e9:56:68:7e:24:f0:91:3d:eb:44:32:81:0d: 7d:51:77:2f:2a:40:5a:02:ce:85:3a:96:fc:63:13: 30:ba:81:f7:fd:33:2a:42:b7:a7:7a:5b:96:53:e7: 23:23:54:bd:3b:7a:a6:8e:aa:71:64:55:0b:e3:d6: 04:c9:bc:ab:c6:3e:69:36:8e:76:9a:e2:c7:66:7b: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:86:B1:88:0E:0D:E6:17:1A:6A:7C:A9:5D:05:EC:84:E5:1F:BE:64 X509v3 Authority Key Identifier: keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c5:74:ac:2c:92:9b:be:c4:3d:7b:b4:da:2b:50:5e:bc:c4: 0f:59:88:22:dd:f7:72:10:c7:ce:c6:48:78:16:f3:07:bf:41: 1d:e0:82:0a:35:77:6d:b9:ef:20:c2:44:a0:bb:9d:11:4c:ad: cb:80:bb:69:31:f3:16:80:28:9a:a4:4a:06:d0:27:48:b8:b0: a7:ad:d0:5f:6d:96:fe:5a:67:50:7f:40:84:28:7d:ca:7a:3a: 09:0f:86:6e:14:04:68:9a:e1:c4:cc:20:c2:fc:1e:90:13:06: 1c:fb:27:b8:6b:d2:58:b4:22:59:d3:e6:77:0a:13:1a:0f:97: 8e:73:ef:95:27:91:bb:fc:86:3f:72:15:e5:1e:ec:2f:3a:0b: 30:17:7b:4b:64:d1:d0:7e:34:16:1d:b4:62:32:17:cb:1b:32: 3a:ae:71:81:7c:2e:7a:b5:55:e0:7e:8b:68:51:d9:a7:e8:b7: 74:82:1f:a4:54:55:aa:9f:4a:24:6a:84:27:e0:fd:c1:56:84: 64:13:ec:49:9a:48:7e:19:ad:e0:57:78:d7:90:a0:c0:45:84: 81:52:20:bc:94:c4:04:a4:26:57:8f:a7:d8:74:91:41:01:09: 43:6f:b2:6f:8e:2f:f2:18:e2:14:3b:09:d3:58:eb:60:05:2f: ca:01:55:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx NDdCODhBMjIwHhcNMjQxMTIzMDIwNTU3WhcNMjQxMTMwMDIwNTU3WjAYMRYwFAYD VQQDEw02NzQxMzg4NS0wODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhVPQucQW2jufjTLjcqx+Yn0rwJaTcV8WJWSt0yXdTzOUu9GfmFVDrZKuVMZ iflVlkgXchPEplNbn/tpPlKIBZy8PX9+TrL6jYlEbsSUTbgAE1YXMAkBgQ3kD+QI PrWQoFhfa4z4S/kkZZbaDBtd7SgLofqCPmdshWh2IMQItMALNMpIC8ABAK5XrdjK x9/aZUmfg+7yngq4heFX/eV9AqsomX6/oNmpjIGZJKbYmKNcOohpj+lWaH4k8JE9 60QygQ19UXcvKkBaAs6FOpb8YxMwuoH3/TMqQreneluWU+cjI1S9O3qmjqpxZFUL 49YEybyrxj5pNo52muLHZntQNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeGsYgO DeYXGmp8qV0F7ITlH75kMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4 MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4xXSsLJKbvsQ9e7TaK1BevMQPWYgi3fdyEMfOxkh4FvMHv0Ed4IIK NXdtue8gwkSgu50RTK3LgLtpMfMWgCiapEoG0CdIuLCnrdBfbZb+WmdQf0CEKH3K ejoJD4ZuFARomuHEzCDC/B6QEwYc+ye4a9JYtCJZ0+Z3ChMaD5eOc++VJ5G7/IY/ chXlHuwvOgswF3tLZNHQfjQWHbRiMhfLGzI6rnGBfC56tVXgfotoUdmn6Ld0gh+k VFWqn0okaoQn4P3BVoRkE+xJmkh+Ga3gV3jXkKDARYSBUiC8lMQEpCZXj6fYdJFB AQlDb7Jvji/yGOIUOwnTWOtgBS/KAVVB -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:46 2024 by rpki-client on console-ams.rpki-client.org