$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json) Hash identifier: h9N94Rnkwwb6e+ApqSQjdx6IOdtIz1KEdrgcCoPsj0I= Subject key identifier: 11:B1:C9:5E:D2:C9:72:45:26:BA:0D:FA:53:F5:0A:A4:B2:80:C1:3A Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Certificate serial: 344A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft Manifest number: 3431 Signing time: Fri 22 Nov 2024 14:23:50 +0000 Manifest this update: Fri 22 Nov 2024 14:23:50 +0000 Manifest next update: Fri 29 Nov 2024 14:23:50 +0000 Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: JpgQeUqEBT7JcOsgX9RuS/59zNG7+GWvRY5qrA8uMbU=) 2: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: boIl8qij5jUmYTPH63CpeAQqWEz64efivFVAHG/Uz5o=) 3: C28E34620A2011EC8B517885C4F9AE02.roa (hash: tH+POgRMZAhmbeasbPpcjrc1nV84O4M1OMPTlFS42fo=) 4: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: LpKGyXF5BUfwWxSekbAgu6cdwWEw0DkcoeIItH56IQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13386 (0x344a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Validity Not Before: Nov 22 14:23:50 2024 GMT Not After : Nov 29 14:23:50 2024 GMT Subject: CN=674093f6-94ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e2:ef:45:c9:72:81:75:3f:0f:19:8f:a3:cf: 47:6f:a0:14:9f:6e:d4:1f:f1:3f:b7:95:6f:c2:3c: db:90:9f:6d:9e:af:99:17:15:07:cf:fc:89:69:66: 6a:02:4d:55:6c:26:f6:02:8a:1a:5d:25:03:30:66: 03:d5:1d:f1:83:37:bf:fb:23:00:7e:ed:be:28:c0: fb:da:1e:da:8b:64:88:a5:f5:70:2c:ea:c3:69:5d: 41:b0:db:ab:3f:65:29:82:fe:08:3c:34:cf:9a:c7: 4c:89:54:4a:69:0e:dd:6d:da:de:7d:9a:b5:8c:ca: 9f:63:4c:6c:85:31:7f:4a:6b:07:bc:7d:33:c9:d1: 49:fe:0d:31:47:04:2b:18:a6:92:f5:d1:3a:80:fe: bf:11:d6:39:5a:05:ea:26:0d:22:8c:92:c9:e0:a3: f9:7e:2c:c0:98:c6:da:3b:4b:45:20:8f:45:f6:eb: 81:44:0e:27:03:8a:5a:93:98:61:36:58:b1:1b:3e: 40:87:eb:e3:21:b3:84:a4:dc:5e:b3:1a:9d:67:de: 14:b5:94:9d:c2:f2:81:6f:46:95:1e:ba:29:16:f1: 3a:c6:4f:3c:fc:40:9f:c2:28:e0:87:96:02:ce:dc: da:dd:7c:7c:9a:2c:ad:f9:1b:8b:ab:23:8b:66:af: 95:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B1:C9:5E:D2:C9:72:45:26:BA:0D:FA:53:F5:0A:A4:B2:80:C1:3A X509v3 Authority Key Identifier: keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:15:a2:a9:92:53:19:4b:af:b3:f9:af:4e:ff:f3:68:47:18: 74:40:fe:8c:4e:72:d3:5f:9c:46:79:dc:e5:d8:48:cc:55:a0: 0f:fd:9e:6b:06:04:42:6e:29:26:81:8d:76:5a:56:41:44:9f: 06:ee:41:04:7e:5d:ad:30:e7:77:97:2b:44:8f:50:78:17:75: 71:b5:6b:76:98:be:51:0f:f2:65:8d:f1:bd:d5:d0:19:df:c4: 7a:44:77:e6:3a:f9:24:e7:d2:41:ae:1e:a4:ff:f1:0e:0d:7e: ad:e6:f8:e1:96:44:b9:f9:95:d3:59:4d:89:99:3a:8f:0d:78: d2:2b:5d:a9:6e:e3:84:00:56:ba:92:8c:b9:c8:2b:25:7c:52: 88:d7:57:f7:78:8d:0b:15:47:94:b6:02:30:26:cb:e0:fd:01: d2:a2:f7:2b:86:8e:95:17:9f:98:e3:8b:0a:74:7d:06:60:06: 79:e0:c4:bf:16:d1:28:32:9f:99:94:fa:01:82:c1:c7:cb:45: ae:a6:e5:f8:65:f4:48:ed:7a:e4:54:3e:a1:4d:42:63:7f:b0: e9:6e:88:66:e2:d0:75:a2:ed:37:f7:92:bf:a7:1f:00:0f:54: 25:dc:3e:7c:04:66:33:47:fd:7c:e9:da:8a:f1:bf:28:3b:d0: 61:aa:24:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2 REQ2MDU1QjMwHhcNMjQxMTIyMTQyMzUwWhcNMjQxMTI5MTQyMzUwWjAYMRYwFAYD VQQDEw02NzQwOTNmNi05NGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eLvRclygXU/DxmPo89Hb6AUn27UH/E/t5VvwjzbkJ9tnq+ZFxUHz/yJaWZq Ak1VbCb2AooaXSUDMGYD1R3xgze/+yMAfu2+KMD72h7ai2SIpfVwLOrDaV1BsNur P2Upgv4IPDTPmsdMiVRKaQ7dbdrefZq1jMqfY0xshTF/SmsHvH0zydFJ/g0xRwQr GKaS9dE6gP6/EdY5WgXqJg0ijJLJ4KP5fizAmMbaO0tFII9F9uuBRA4nA4pak5hh NlixGz5Ah+vjIbOEpNxesxqdZ94UtZSdwvKBb0aVHropFvE6xk88/ECfwijgh5YC ztza3Xx8miyt+RuLqyOLZq+VBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGxyV7S yXJFJroN+lP1CqSygME6MB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjBBOS82QkE4MDYxQTFEODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVC TXQ2YWVIRVFpREZ0MWdWYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApFaKpklMZS6+z+a9O//NoRxh0QP6MTnLTX5xGedzl2EjMVaAP/Z5r BgRCbikmgY12WlZBRJ8G7kEEfl2tMOd3lytEj1B4F3VxtWt2mL5RD/JljfG91dAZ 38R6RHfmOvkk59JBrh6k//EODX6t5vjhlkS5+ZXTWU2JmTqPDXjSK12pbuOEAFa6 koy5yCslfFKI11f3eI0LFUeUtgIwJsvg/QHSovcrho6VF5+Y44sKdH0GYAZ54MS/ FtEoMp+ZlPoBgsHHy0WupuX4ZfRI7XrkVD6hTUJjf7Dpbohm4tB1ou0395K/px8A D1Ql3D58BGYzR/186dqK8b8oO9BhqiRJ -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:02 2024 by rpki-client on console-ams.rpki-client.org