$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft File: aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json) Hash identifier: MgAfAFIVChaq2Xo8G6rDnzIGTPfhWsomAEcll1dFZLY= Subject key identifier: 6C:AC:C3:35:6E:04:7A:36:B6:97:26:5D:63:10:EC:6E:01:43:8D:1D Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5 Certificate issuer: /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5 Certificate serial: 096C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft Manifest number: 0967 Signing time: Fri 22 Nov 2024 19:54:13 +0000 Manifest this update: Fri 22 Nov 2024 19:54:13 +0000 Manifest next update: Fri 29 Nov 2024 19:54:13 +0000 Files and hashes: 1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: PQ5Ks7bE36f3uaISEo4o3ZnoTY8XWIJpbWEz+I7J6YE=) 2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: bowd2B0tA4ibjD34KXZjrzNTGjmQ2OPcAbE7DjOnSAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2412 (0x96c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5 Validity Not Before: Nov 22 19:54:13 2024 GMT Not After : Nov 29 19:54:13 2024 GMT Subject: CN=6740e165-282a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:66:f6:87:7a:6d:34:75:fa:cc:27:56:7c:d9: 18:43:fb:6e:ca:83:c5:d6:e8:81:eb:ce:f3:e8:4c: cd:cf:c2:03:31:72:3a:2d:21:81:b3:f9:6c:21:c5: 74:f0:26:66:99:bd:a0:9f:a8:99:ff:c8:b8:c4:79: 6c:9a:dd:77:88:81:92:a1:19:09:b6:e6:3a:12:e1: d2:d2:8c:e6:ba:3d:ab:bb:4b:09:99:66:46:29:bd: 30:ae:71:0c:09:3e:57:41:47:79:43:65:47:c3:26: 68:2a:c5:40:b9:d2:fc:a7:f7:74:37:9f:bf:50:b6: 0c:df:63:e0:57:ba:9e:33:fc:0f:3a:39:d2:bc:bd: 66:42:20:bd:0d:4c:3f:e1:6d:82:b8:7b:d4:02:a9: 6a:5e:27:f3:de:46:5d:0e:7e:77:c1:4c:ce:5e:0c: de:39:62:df:ca:67:5a:1b:a4:47:fb:4a:bb:16:e8: e6:63:4c:cf:13:ed:cc:60:b2:b6:bc:97:9d:dc:62: 8c:57:12:f9:28:71:c5:7c:7a:50:62:af:37:e7:ed: 09:0d:c7:d6:f2:08:cc:cc:7b:f2:0a:ee:6d:15:63: c9:1e:62:c2:d6:16:36:5b:30:65:6a:3e:dd:35:5b: dd:4f:70:7f:0c:03:16:54:90:9f:a2:42:07:cf:1c: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AC:C3:35:6E:04:7A:36:B6:97:26:5D:63:10:EC:6E:01:43:8D:1D X509v3 Authority Key Identifier: keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:73:20:d7:23:16:38:f4:3a:c8:50:32:b0:8d:b9:c5:66:ff: c6:b2:89:ea:18:be:ee:9c:e5:4d:7a:0a:62:f0:bd:44:d2:44: 81:50:e5:e6:4f:61:af:3f:3e:5a:c1:22:bf:3f:cb:f7:13:8b: 55:2a:c4:08:8f:6d:b3:b9:d9:f1:99:26:1e:c2:e6:a3:a9:3a: ec:cd:77:3c:25:be:4b:ad:84:23:2b:f0:b7:bd:5d:58:6e:8a: f3:fb:d3:45:58:fd:d8:13:e3:0a:3a:8c:32:44:9d:5b:cc:8e: 1c:8b:b2:46:1f:ff:a1:01:05:72:09:79:77:95:eb:54:d2:1f: 84:37:ca:66:52:dd:94:aa:eb:43:83:12:c1:40:5c:db:53:c6: f5:7e:06:87:e3:d6:d2:19:bc:02:2b:09:0e:b4:a9:5e:d5:d0: 0d:ac:8e:c9:90:d1:26:35:aa:9f:1f:4a:61:0a:8e:40:b3:1c: 9b:86:f8:6f:cd:47:c3:ec:d2:6c:0d:f9:fb:75:67:ab:9d:d9: cd:a6:8e:ef:d6:6c:0f:72:18:b7:03:81:47:dd:34:e9:f9:f5: 4e:f7:35:b5:6f:75:5e:a6:7b:a4:1c:aa:9e:07:15:60:f1:1f: 3f:00:5f:54:c4:a7:4e:2c:49:85:56:5e:d3:69:ed:23:8d:f1: e1:7d:d5:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYxOEIxMTAvBgNVBAUTKDY5NjkxRjU1MTY0OTUyRjJGNEYxRkVFODA0QUExNTgz NUZGRTg2RDUwHhcNMjQxMTIyMTk1NDEzWhcNMjQxMTI5MTk1NDEzWjAYMRYwFAYD VQQDEw02NzQwZTE2NS0yODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumb2h3ptNHX6zCdWfNkYQ/tuyoPF1uiB687z6EzNz8IDMXI6LSGBs/lsIcV0 8CZmmb2gn6iZ/8i4xHlsmt13iIGSoRkJtuY6EuHS0ozmuj2ru0sJmWZGKb0wrnEM CT5XQUd5Q2VHwyZoKsVAudL8p/d0N5+/ULYM32PgV7qeM/wPOjnSvL1mQiC9DUw/ 4W2CuHvUAqlqXifz3kZdDn53wUzOXgzeOWLfymdaG6RH+0q7FujmY0zPE+3MYLK2 vJed3GKMVxL5KHHFfHpQYq835+0JDcfW8gjMzHvyCu5tFWPJHmLC1hY2WzBlaj7d NVvdT3B/DAMWVJCfokIHzxzM+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyswzVu BHo2tpcmXWMQ7G4BQ40dMB8GA1UdIwQYMBaAFGlpH1UWSVLy9PH+6ASqFYNf/obV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjE4Qi85QkEyQjI1NDgw M0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2TDA4ZjdvQktvVmcxXy1o dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXa2ZWUlpKVXZMMDhmN29CS29WZzFfLWh0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjE4Qi85QkEyQjI1NDgwM0YxMUVBOTdCNDNENjJDNEY5QUUwMi9hV2tmVlJaSlV2 TDA4ZjdvQktvVmcxXy1odFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7cyDXIxY49DrIUDKwjbnFZv/GsonqGL7unOVNegpi8L1E0kSBUOXm T2GvPz5awSK/P8v3E4tVKsQIj22zudnxmSYewuajqTrszXc8Jb5LrYQjK/C3vV1Y borz+9NFWP3YE+MKOowyRJ1bzI4ci7JGH/+hAQVyCXl3letU0h+EN8pmUt2UqutD gxLBQFzbU8b1fgaH49bSGbwCKwkOtKle1dANrI7JkNEmNaqfH0phCo5Asxybhvhv zUfD7NJsDfn7dWerndnNpo7v1mwPchi3A4FH3TTp+fVO9zW1b3VepnukHKqeBxVg 8R8/AF9UxKdOLEmFVl7Tae0jjfHhfdXB -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org