$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft File: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft (raw, json) Hash identifier: fNuSGYf/Xmg8nxgdgwLss33GolysTSSUQlIwxX17iRQ= Subject key identifier: 84:CC:B6:9C:6E:D1:AB:7C:35:67:6D:E6:48:FE:25:2C:1C:09:08:93 Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1D06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft Manifest number: 1CF8 Signing time: Fri 22 Nov 2024 16:09:29 +0000 Manifest this update: Fri 22 Nov 2024 16:09:28 +0000 Manifest next update: Fri 29 Nov 2024 16:09:28 +0000 Files and hashes: 1: MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl (hash: b5H3pqARXJ2FoaOxop/0Z5Vx7qAeBtfTdHc8WpSiZYw=) 2: 9DC06B6E36A211E893BF3061C4F9AE02.roa (hash: hlCAOqdM82iuB3BtNLbjrR+eENtQp+VFzUFQxq5vFhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7430 (0x1d06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: Nov 22 16:09:28 2024 GMT Not After : Nov 29 16:09:28 2024 GMT Subject: CN=6740acb9-ff73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:db:85:12:4a:1b:b3:21:fe:69:85:2a:0e: e8:20:93:42:11:e6:1c:97:a1:84:1f:3e:15:38:4c: 4c:45:94:43:f5:b7:e7:fd:a7:de:6a:17:6d:81:46: 23:c1:93:14:d2:c7:bf:32:be:97:d2:5f:ca:7e:49: 84:11:b2:7b:68:78:34:ca:f3:24:c7:10:4c:7d:7a: b8:62:12:27:63:ff:60:f6:ed:7b:30:83:f0:b1:af: ee:c5:1b:e7:69:53:d6:04:1f:1e:cf:50:1c:b0:8e: 87:03:ca:eb:70:56:12:55:05:6a:14:4f:d8:41:09: 99:97:4c:e4:95:0e:42:65:71:24:17:7e:a4:8b:60: 4e:b0:99:d0:b5:5a:ad:a1:fd:bb:31:e4:67:c6:48: 24:b0:1a:86:81:98:06:5e:b5:ed:96:eb:2e:7f:cc: 8b:36:f0:a3:10:6e:d1:3c:71:1e:5e:fd:51:b2:bd: 33:19:80:55:16:c5:b7:23:1e:61:2e:bb:4b:ec:b4: 43:b4:06:35:68:a9:0b:f5:ea:7d:43:f5:c4:c1:af: bc:16:c4:20:ef:b2:df:9b:71:51:61:eb:87:62:52: e5:1f:66:08:23:90:92:79:98:4f:ca:65:81:3d:42: c3:d2:d8:96:59:0b:38:9f:f5:23:79:eb:87:3b:dd: 02:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CC:B6:9C:6E:D1:AB:7C:35:67:6D:E6:48:FE:25:2C:1C:09:08:93 X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f6:79:c6:ff:3d:50:92:36:2c:0f:36:28:97:c9:78:08:1e: 26:da:75:ac:16:3b:2d:2e:e2:d2:99:f4:e5:a7:59:f3:85:b4: 11:1b:07:46:62:70:69:01:2b:d3:94:a7:64:24:3d:d9:d9:ab: bf:8c:94:54:9b:9e:c1:1e:af:9a:0c:b3:f3:ca:0c:ab:ea:be: 5f:48:c0:d2:ae:03:5a:4a:d6:63:13:8d:74:1e:96:3a:f7:4b: 10:9e:fa:4a:6d:e6:09:ae:84:27:25:e2:66:b9:85:98:d2:d9: 9a:13:ae:85:6d:af:e8:61:f6:61:96:be:46:2b:9f:eb:93:dd: f4:61:e0:d0:dc:b0:32:f1:7c:3f:3e:ab:41:ac:62:ac:8a:9a: 6b:fd:a3:50:fb:c1:20:fe:cf:6d:d3:ea:14:a6:da:4e:b8:a4: 96:dc:c3:8b:01:68:ec:57:c2:36:e3:f3:c2:8b:07:9a:24:b4: 8c:86:ab:18:7f:bd:f1:2e:c3:97:b5:40:e8:c5:f1:02:67:a7: 65:26:70:39:dd:fc:73:cc:bf:3d:1a:46:94:87:4a:c8:4d:43: 6a:67:9b:60:15:74:03:16:45:d4:29:e4:67:16:02:12:3e:78: 25:87:d9:c1:fb:18:e5:b2:30:4f:2a:59:cc:05:dd:62:d7:ad: 7f:da:17:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjQxMTIyMTYwOTI4WhcNMjQxMTI5MTYwOTI4WjAYMRYwFAYD VQQDEw02NzQwYWNiOS1mZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFHbhRJKG7Mh/mmFKg7oIJNCEeYcl6GEHz4VOExMRZRD9bfn/afeahdtgUYj wZMU0se/Mr6X0l/KfkmEEbJ7aHg0yvMkxxBMfXq4YhInY/9g9u17MIPwsa/uxRvn aVPWBB8ez1AcsI6HA8rrcFYSVQVqFE/YQQmZl0zklQ5CZXEkF36ki2BOsJnQtVqt of27MeRnxkgksBqGgZgGXrXtlusuf8yLNvCjEG7RPHEeXv1Rsr0zGYBVFsW3Ix5h LrtL7LRDtAY1aKkL9ep9Q/XEwa+8FsQg77Lfm3FRYeuHYlLlH2YII5CSeZhPymWB PULD0tiWWQs4n/UjeeuHO90CfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITMtpxu 0at8NWdt5kj+JSwcCQiTMB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjA5NS84Qzg5OUE0MkFCNTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZL ZnpIMU9WLUkzWmZaUncwWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD9nnG/z1QkjYsDzYol8l4CB4m2nWsFjstLuLSmfTlp1nzhbQRGwdG YnBpASvTlKdkJD3Z2au/jJRUm57BHq+aDLPzygyr6r5fSMDSrgNaStZjE410HpY6 90sQnvpKbeYJroQnJeJmuYWY0tmaE66Fba/oYfZhlr5GK5/rk930YeDQ3LAy8Xw/ PqtBrGKsippr/aNQ+8Eg/s9t0+oUptpOuKSW3MOLAWjsV8I24/PCiweaJLSMhqsY f73xLsOXtUDoxfECZ6dlJnA53fxzzL89GkaUh0rITUNqZ5tgFXQDFkXUKeRnFgIS Pnglh9nB+xjlsjBPKlnMBd1i161/2heh -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org