$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft File: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json) Hash identifier: TqmGHbFqvfdU/A9EBaegm/rjNnR88bQIO37ymJHZ5Is= Subject key identifier: 5D:B4:78:D4:BE:2E:8C:1B:E7:FB:77:28:66:1A:FC:72:1D:A4:F8:84 Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 Certificate issuer: /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Certificate serial: 06CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft Manifest number: 06CA Signing time: Wed 20 Nov 2024 21:39:22 +0000 Manifest this update: Wed 20 Nov 2024 21:39:22 +0000 Manifest next update: Wed 27 Nov 2024 21:39:22 +0000 Files and hashes: 1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: a0xVBb0e4S/BZnPbX3ffTm1XGmAryRHlwIUeuB4redE=) 2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: S37wpIPSKlGYZDu3ywFrmoBX/a7GYNX3mN+QFGuswMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Validity Not Before: Nov 20 21:39:22 2024 GMT Not After : Nov 27 21:39:22 2024 GMT Subject: CN=673e570a-ad8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:ef:63:4f:da:de:11:2b:48:35:5e:f3:e1: c1:f8:9a:39:83:38:ab:c2:21:55:37:b7:fa:a5:94: 02:32:d2:72:a8:f7:d9:36:6d:eb:d8:19:b5:3a:b4: 30:d0:45:8d:61:dd:c7:7d:ab:28:79:e0:7e:34:b0: 74:9e:6d:f8:44:fd:4a:03:cf:fa:9a:9a:ec:24:f2: f4:15:81:a8:78:7a:08:a4:56:40:ca:b1:63:4b:29: 34:1d:9a:02:b1:19:ed:07:b0:8d:03:80:0f:f6:cc: 14:eb:10:cc:d0:97:48:fe:54:f3:60:52:36:9a:77: 3f:0a:58:a8:c2:82:36:9b:69:0a:9b:6e:57:e1:e8: f1:da:e5:ce:34:05:e2:fb:3f:28:e4:9e:eb:a5:d7: 76:09:d1:51:1b:eb:8b:75:32:8c:67:a7:33:32:9d: a2:27:ec:4c:f7:dc:ee:2d:20:cd:1d:5c:b7:c5:7d: 53:fa:b8:d8:79:39:ff:24:2d:b6:b3:1d:b8:78:a4: ae:22:1f:34:ec:36:07:87:ec:99:a0:08:cc:2e:bb: a5:e1:3a:e7:eb:d6:ba:80:0b:14:16:26:f3:86:13: 26:34:e9:fb:41:c2:20:a1:1a:0a:64:ff:f2:7e:ff: cd:e5:1b:9a:81:1c:84:cf:3f:b1:be:d2:bc:29:da: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B4:78:D4:BE:2E:8C:1B:E7:FB:77:28:66:1A:FC:72:1D:A4:F8:84 X509v3 Authority Key Identifier: keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fd:43:42:cd:75:50:49:4d:63:f3:62:c4:27:70:f2:a6:c7: f3:8d:d3:f4:fc:af:83:10:6a:08:c2:34:fb:6d:1b:ca:f3:58: c8:b3:68:23:7b:62:70:b0:8a:a3:da:89:4f:1d:15:62:ea:68: 30:79:5f:de:03:59:3f:c5:55:0b:26:8f:c0:eb:7d:70:16:6e: cb:b5:83:69:75:0e:fe:5f:f0:cb:ec:fe:4a:4d:4c:71:de:2c: c7:d6:f0:df:f2:e7:d7:ea:49:43:57:fe:8e:cf:95:95:ca:de: 55:3b:95:a6:92:43:94:55:a2:f2:6f:14:db:7e:22:92:3a:97: 6a:30:f1:fd:c5:5f:53:48:ba:be:44:e6:36:3c:0b:1a:58:f0: 00:60:a2:35:87:b3:54:95:2d:35:d3:4a:b4:2c:8b:4f:28:79: fe:2c:ba:e1:78:31:1b:d1:dd:d3:56:11:3d:24:fe:fc:1b:22: b5:b9:13:23:59:b4:74:c6:bb:e2:87:6d:e5:b0:2d:27:d8:6e: c4:82:db:c3:e0:4b:2d:87:f1:92:d2:67:e1:24:d8:ec:c4:bb: db:42:fb:9f:49:8a:0f:45:c9:a2:ae:44:45:8a:2d:ca:fa:da: 89:60:d2:33:92:f0:e3:0a:93:aa:b9:0d:fc:75:1f:90:37:20: dc:a2:06:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw NzhGMUU4ODEwHhcNMjQxMTIwMjEzOTIyWhcNMjQxMTI3MjEzOTIyWjAYMRYwFAYD VQQDEw02NzNlNTcwYS1hZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJTvY0/a3hErSDVe8+HB+Jo5gzirwiFVN7f6pZQCMtJyqPfZNm3r2Bm1OrQw 0EWNYd3HfasoeeB+NLB0nm34RP1KA8/6mprsJPL0FYGoeHoIpFZAyrFjSyk0HZoC sRntB7CNA4AP9swU6xDM0JdI/lTzYFI2mnc/CliowoI2m2kKm25X4ejx2uXONAXi +z8o5J7rpdd2CdFRG+uLdTKMZ6czMp2iJ+xM99zuLSDNHVy3xX1T+rjYeTn/JC22 sx24eKSuIh807DYHh+yZoAjMLrul4Trn69a6gAsUFibzhhMmNOn7QcIgoRoKZP/y fv/N5RuagRyEzz+xvtK8KdoaQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF20eNS+ Lowb5/t3KGYa/HIdpPiEMB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTA1My9BRkI2QkY3NjMzNDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxO VDd2eUdJVzlyMjBIang2SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd/UNCzXVQSU1j82LEJ3DypsfzjdP0/K+DEGoIwjT7bRvK81jIs2gj e2JwsIqj2olPHRVi6mgweV/eA1k/xVULJo/A631wFm7LtYNpdQ7+X/DL7P5KTUxx 3izH1vDf8ufX6klDV/6Oz5WVyt5VO5WmkkOUVaLybxTbfiKSOpdqMPH9xV9TSLq+ ROY2PAsaWPAAYKI1h7NUlS0100q0LItPKHn+LLrheDEb0d3TVhE9JP78GyK1uRMj WbR0xrvih23lsC0n2G7EgtvD4Esth/GS0mfhJNjsxLvbQvufSYoPRcmirkRFii3K +tqJYNIzkvDjCpOquQ38dR+QNyDcogbE -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:47 2024 by rpki-client on console-fra.rpki-client.org