$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft File: ROq4zxyb1totteNCtBx0fuOkUF8.mft (raw, json) Hash identifier: LV2ZJJl6L3HH7y22nb4kY2Q1IMPt/ZnNA/HhHc9kY0s= Subject key identifier: 70:19:99:B8:F3:2C:91:87:6A:D8:E7:A9:81:7B:51:44:1A:F1:B0:A1 Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F Certificate issuer: /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Certificate serial: 09A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft Manifest number: 09A1 Signing time: Fri 22 Nov 2024 19:47:52 +0000 Manifest this update: Fri 22 Nov 2024 19:47:52 +0000 Manifest next update: Fri 29 Nov 2024 19:47:52 +0000 Files and hashes: 1: ROq4zxyb1totteNCtBx0fuOkUF8.crl (hash: R9h3gVOXx6whXX4iAocv0H52Lh5dZVG2LUeT3aVC3F4=) 2: 800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (hash: iFLleCrx5lJW9+fJUCH6MH2zTLB5N+94fs57s6ev9K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2470 (0x9a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F Validity Not Before: Nov 22 19:47:52 2024 GMT Not After : Nov 29 19:47:52 2024 GMT Subject: CN=6740dfe8-1c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:03:a4:14:90:71:24:12:4b:b8:57:3e:94:64: 53:d2:d4:bd:c9:24:75:af:c1:ed:44:a3:f2:1e:bc: de:88:84:19:43:86:09:a1:52:40:e6:69:cb:33:85: be:86:21:ef:83:58:e2:e2:a7:39:cb:e2:d3:63:bc: 01:17:b0:8d:53:da:c8:63:91:31:4b:e8:42:19:d7: cc:34:3a:84:65:dc:4a:75:14:ca:d7:97:92:9d:61: 15:79:2d:de:b3:7d:a5:60:ad:90:a9:39:47:5c:88: 99:91:64:a7:4e:30:78:55:df:ae:27:d7:03:97:5c: 94:36:c4:71:3a:48:70:65:cc:3e:c3:ee:68:ee:02: cd:92:5a:01:46:7e:c0:c0:e7:07:b4:76:2e:59:3c: f0:3e:e0:c8:55:e9:b9:9b:7d:60:ae:0e:6a:55:71: 62:1b:02:85:7b:9d:62:15:91:28:9e:1d:ef:57:94: d9:90:b3:12:d1:43:2a:5e:15:4e:60:b7:71:c0:2e: 25:c5:9c:0b:82:34:e9:d8:46:9b:ef:c2:51:6b:96: 05:d8:cd:db:f2:7f:89:55:fa:61:88:f9:9a:b6:a7: 31:d1:35:70:71:13:f7:6c:55:e4:f7:51:6e:f4:7a: f1:dc:f2:53:2d:d4:2b:45:8b:65:b3:90:1a:00:17: 72:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:19:99:B8:F3:2C:91:87:6A:D8:E7:A9:81:7B:51:44:1A:F1:B0:A1 X509v3 Authority Key Identifier: keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f1:91:0b:e1:f7:75:db:f3:35:83:36:3d:b4:c0:1f:86:51: 70:df:db:ad:9f:88:b1:ac:d2:2a:3f:f3:72:55:3a:6e:ee:a1: 22:22:35:c1:cb:34:58:7a:ef:80:13:95:90:03:6d:2e:7f:39: af:0a:e0:a2:9e:a0:27:58:3b:2d:91:9a:2d:15:d5:21:f8:8a: 19:1f:fc:4c:a6:8b:70:10:c0:cf:38:bc:a6:e8:c3:6f:b7:f2: d9:dd:66:61:76:20:b9:54:c0:68:64:e9:52:a4:d5:01:e7:ed: 86:b8:a6:95:23:ca:77:e8:9b:14:1d:40:75:55:2f:f9:1e:ca: 15:28:42:a7:48:22:d9:9a:c3:c9:cf:be:31:88:64:c8:5d:eb: 59:67:36:29:56:98:f5:56:29:46:ef:0b:c9:9f:0c:e9:de:55: 89:ca:a3:b1:43:b0:a5:95:ad:62:86:9b:49:29:e8:1e:08:9c: 50:8a:30:8e:cf:c2:06:9e:3f:0d:b4:ab:b9:ce:15:85:27:47: cb:d5:d7:70:e5:eb:f3:3b:9f:ba:b1:3e:e0:37:0f:3e:48:cd: 59:ef:ec:46:53:6e:8f:86:1c:25:2e:7d:a6:2c:0c:4a:f2:fa: 32:c2:44:09:9e:aa:7b:ac:ac:aa:1c:a8:94:e2:f7:d7:6e:b8: 77:5b:75:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwQjYxMTAvBgNVBAUTKDQ0RUFCOENGMUM5QkQ2REEyREI1RTM0MkI0MUM3NDdF RTNBNDUwNUYwHhcNMjQxMTIyMTk0NzUyWhcNMjQxMTI5MTk0NzUyWjAYMRYwFAYD VQQDEw02NzQwZGZlOC0xYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wOkFJBxJBJLuFc+lGRT0tS9ySR1r8HtRKPyHrzeiIQZQ4YJoVJA5mnLM4W+ hiHvg1ji4qc5y+LTY7wBF7CNU9rIY5ExS+hCGdfMNDqEZdxKdRTK15eSnWEVeS3e s32lYK2QqTlHXIiZkWSnTjB4Vd+uJ9cDl1yUNsRxOkhwZcw+w+5o7gLNkloBRn7A wOcHtHYuWTzwPuDIVem5m31grg5qVXFiGwKFe51iFZEonh3vV5TZkLMS0UMqXhVO YLdxwC4lxZwLgjTp2Eab78JRa5YF2M3b8n+JVfphiPmatqcx0TVwcRP3bFXk91Fu 9Hrx3PJTLdQrRYtls5AaABdyewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAZmbjz LJGHatjnqYF7UUQa8bChMB8GA1UdIwQYMBaAFETquM8cm9baLbXjQrQcdH7jpFBf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDBCNi85RjlBRjdBODc1 NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0b3R0ZU5DdEJ4MGZ1T2tV RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JPcTR6eHliMXRvdHRlTkN0QngwZnVPa1VGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDBCNi85RjlBRjdBODc1NkUxMUVBOTkxNDIzNkJDNEY5QUUwMi9ST3E0enh5YjF0 b3R0ZU5DdEJ4MGZ1T2tVRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ8ZEL4fd12/M1gzY9tMAfhlFw39utn4ixrNIqP/NyVTpu7qEiIjXB yzRYeu+AE5WQA20ufzmvCuCinqAnWDstkZotFdUh+IoZH/xMpotwEMDPOLym6MNv t/LZ3WZhdiC5VMBoZOlSpNUB5+2GuKaVI8p36JsUHUB1VS/5HsoVKEKnSCLZmsPJ z74xiGTIXetZZzYpVpj1VilG7wvJnwzp3lWJyqOxQ7Clla1ihptJKegeCJxQijCO z8IGnj8NtKu5zhWFJ0fL1ddw5evzO5+6sT7gNw8+SM1Z7+xGU26PhhwlLn2mLAxK 8voywkQJnqp7rKyqHKiU4vfXbrh3W3W5 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:38 2024 by rpki-client on console-ams.rpki-client.org