$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: WFk4+6NXbp/QotidrRlKK/bmRE2LGxycn7E9aXMQN+k= Subject key identifier: A5:89:76:15:FA:F1:D3:B0:F4:B3:9B:18:93:DB:60:1F:86:35:E1:BD Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 02DB Signing time: Thu 21 Nov 2024 00:52:49 +0000 Manifest this update: Thu 21 Nov 2024 00:52:48 +0000 Manifest next update: Thu 28 Nov 2024 00:52:48 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: /yOVv42F5zdCu5prp9PqEq4GNXP9zG7AD6rGEqgDDro=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: SBU8GVreyOnldCYNvt0nDJnVdYm/HEq3WcHOf4U77zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: Nov 21 00:52:48 2024 GMT Not After : Nov 28 00:52:48 2024 GMT Subject: CN=673e8460-7782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:be:05:e1:73:03:58:81:58:2f:85:aa:ce:cf: 18:aa:e0:18:f0:55:1c:18:c5:fa:4c:7b:c3:fa:b8: a8:18:55:48:83:e9:c3:4d:1c:b6:d6:50:84:69:e7: 85:f6:14:4f:67:db:e5:16:8f:18:fa:b7:fd:2d:a5: 46:81:70:83:68:17:f8:25:a0:b6:49:f2:ab:a5:a1: 61:06:ce:85:12:db:4c:da:a8:71:de:10:a2:d7:26: 59:0d:f1:51:07:fa:5e:77:cf:ed:3d:89:e0:57:3a: 3a:90:08:e2:9c:77:ba:b7:e1:7a:40:54:74:46:4b: 2b:11:a5:1d:a9:dd:a8:db:df:58:e4:09:d2:e9:4b: 07:fa:99:6a:66:6f:e1:de:cc:80:8b:b1:08:b6:93: ee:5e:05:8c:43:c5:a9:b5:b3:7f:ca:e5:34:c1:8a: 52:1b:b7:ad:31:eb:1f:28:73:da:ca:95:53:b8:c9: 34:10:58:56:39:a4:82:99:89:85:df:7d:46:61:d5: 1b:1e:da:5b:e4:8e:a6:25:2a:74:2a:5a:d2:34:88: e0:3d:46:fd:96:ab:09:1e:b3:11:69:57:c7:4f:42: 9b:68:30:6d:e8:8a:54:6d:b7:f8:c0:05:99:8f:5a: 3a:cb:9c:54:3d:fa:03:17:74:1c:c6:50:a7:a2:79: 68:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:89:76:15:FA:F1:D3:B0:F4:B3:9B:18:93:DB:60:1F:86:35:E1:BD X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:68:37:48:09:0d:f9:06:31:3d:1c:3a:1a:c4:88:58:b8:1c: 0e:46:d1:e8:56:2c:80:86:41:d0:cd:46:c6:f8:5a:55:7e:12: 19:a1:3d:a0:ac:ed:d5:7f:c8:f4:92:2e:2e:03:ba:94:f6:4f: a7:d9:c7:91:3f:63:05:7e:ce:10:cd:11:a3:84:eb:d9:f6:20: f2:32:33:ca:2b:b2:4a:c0:1c:49:10:f6:62:da:ef:61:99:51: 6c:92:57:d7:c6:4c:61:33:93:81:0c:b7:f6:ce:f3:48:bc:45: e5:41:88:b5:d1:52:d3:7d:39:87:86:2d:9d:95:ec:cd:91:91: 43:03:9f:91:5e:94:56:39:c9:95:84:66:e4:2e:52:b2:4b:c4: 2d:0d:f9:cc:ca:c3:73:ac:9c:d8:e0:b6:cb:77:e4:e9:dc:75: 8a:33:8f:62:b8:d4:70:3e:b5:87:03:39:72:01:7d:a1:b7:02: f7:6c:95:72:e0:be:cb:60:70:bb:b2:14:73:82:34:4f:7b:c9: d2:d0:5c:f1:c9:7d:3e:0d:73:8b:52:6e:30:d0:44:36:90:5c: 7d:10:cc:a6:50:b8:90:aa:7d:af:97:9d:c1:f4:3b:b7:de:b2: 9b:20:c8:18:9e:22:61:20:c3:98:30:ea:e8:e1:19:67:04:48: 42:20:84:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjQxMTIxMDA1MjQ4WhcNMjQxMTI4MDA1MjQ4WjAYMRYwFAYD VQQDEw02NzNlODQ2MC03NzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1r4F4XMDWIFYL4Wqzs8YquAY8FUcGMX6THvD+rioGFVIg+nDTRy21lCEaeeF 9hRPZ9vlFo8Y+rf9LaVGgXCDaBf4JaC2SfKrpaFhBs6FEttM2qhx3hCi1yZZDfFR B/ped8/tPYngVzo6kAjinHe6t+F6QFR0RksrEaUdqd2o299Y5AnS6UsH+plqZm/h 3syAi7EItpPuXgWMQ8WptbN/yuU0wYpSG7etMesfKHPaypVTuMk0EFhWOaSCmYmF 331GYdUbHtpb5I6mJSp0KlrSNIjgPUb9lqsJHrMRaVfHT0KbaDBt6IpUbbf4wAWZ j1o6y5xUPfoDF3QcxlCnonlo+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWJdhX6 8dOw9LObGJPbYB+GNeG9MB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2aDdICQ35BjE9HDoaxIhYuBwORtHoViyAhkHQzUbG+FpVfhIZoT2g rO3Vf8j0ki4uA7qU9k+n2ceRP2MFfs4QzRGjhOvZ9iDyMjPKK7JKwBxJEPZi2u9h mVFsklfXxkxhM5OBDLf2zvNIvEXlQYi10VLTfTmHhi2dlezNkZFDA5+RXpRWOcmV hGbkLlKyS8QtDfnMysNzrJzY4LbLd+Tp3HWKM49iuNRwPrWHAzlyAX2htwL3bJVy 4L7LYHC7shRzgjRPe8nS0FzxyX0+DXOLUm4w0EQ2kFx9EMymULiQqn2vl53B9Du3 3rKbIMgYniJhIMOYMOro4RlnBEhCIIRj -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:50 2024 by rpki-client on console-ams.rpki-client.org