$ rpki-client -vvf rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft File: mvCw748-tT8U2E-jphBr5kvXgnI.mft (raw, json) Hash identifier: 8TQsbOcwGHujG00h5pkj9fqLg9naSyeJx1Uz8rXf3Hg= Subject key identifier: AF:9A:46:A2:64:CF:50:75:C6:44:A0:6F:B6:CB:3A:84:8B:E0:1A:4B Authority key identifier: 9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 Certificate issuer: /CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Certificate serial: 039A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft Manifest number: 0396 Signing time: Thu 21 Nov 2024 00:19:11 +0000 Manifest this update: Thu 21 Nov 2024 00:19:10 +0000 Manifest next update: Thu 28 Nov 2024 00:19:10 +0000 Files and hashes: 1: mvCw748-tT8U2E-jphBr5kvXgnI.crl (hash: BtmVuwivtqzM6Sah/4iJPovk+nIcDV9KWc4uTv2hK/s=) 2: 8EB98374776E11ECA05F7133C4F9AE02.roa (hash: 0odSjBqkbrai7nHTuGPVDMCVhidqU26/lOEVMrtNDiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 922 (0x39a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Validity Not Before: Nov 21 00:19:10 2024 GMT Not After : Nov 28 00:19:10 2024 GMT Subject: CN=673e7c7e-30f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:45:bb:fe:c9:c2:5b:56:ff:1d:43:f6:d5: ac:e1:cf:2c:fa:e4:7e:29:2a:32:52:4f:d3:42:c1: 7b:e5:f7:ae:99:bb:6f:73:39:b8:8e:82:33:24:98: 71:3b:ef:a4:54:47:83:ac:d7:07:48:dd:d8:8d:b0: 20:30:d0:06:9c:29:53:ec:49:e1:ba:bf:00:99:4d: 46:ab:ae:92:2e:bf:54:7e:08:6b:e8:5b:d8:c3:1a: a5:8f:fb:2b:b6:9d:7f:af:31:60:a7:03:89:cd:db: 92:85:04:97:d3:36:9a:a2:31:1c:27:c3:e2:79:89: 1d:45:2c:1f:cb:02:4d:88:68:0e:29:dc:0b:6a:78: 33:0c:79:68:d5:a3:4d:a6:0b:c0:6a:81:36:4e:23: 08:52:b3:59:5b:9a:0b:34:cc:c1:4a:27:5b:fa:9e: d5:39:ec:83:28:12:ab:06:3c:cf:60:4f:4b:76:98: 87:06:8f:c0:81:ea:86:73:4d:37:40:74:78:ef:6d: 5e:85:75:56:b2:85:22:b1:38:ef:bc:f7:f0:36:81: 38:38:45:e4:54:5c:e1:9f:c1:bf:2e:db:93:e0:19: d7:ad:d2:f7:ee:1e:bb:59:ba:c8:bb:3c:1f:d3:fb: 80:45:ce:20:e7:1f:db:eb:65:40:a6:8b:bc:d3:58: 74:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9A:46:A2:64:CF:50:75:C6:44:A0:6F:B6:CB:3A:84:8B:E0:1A:4B X509v3 Authority Key Identifier: keyid:9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:83:22:dc:e8:37:98:ad:c1:ca:b2:66:29:40:a6:8c:31:a0: 8c:29:1a:18:a9:4e:1b:7d:1b:b4:c9:d5:37:a1:ce:22:32:4e: 2a:4a:b1:9d:30:05:c6:cc:57:13:bb:9b:6e:f2:ba:b4:38:aa: d6:37:1e:01:b3:1e:f1:7d:05:2a:d9:88:bb:45:5b:e6:d2:4e: a2:c9:bb:bc:97:3c:bc:3e:08:93:e0:d4:7a:c3:97:20:06:c0: 28:e6:ee:80:e9:8d:c8:29:95:b8:0f:0c:e5:90:13:44:13:f5: 31:83:90:f0:1d:f0:b6:e7:5f:82:17:cd:6d:a9:19:bd:05:4a: 0b:63:e0:1d:7b:de:b9:40:6c:8c:35:73:d5:2d:b6:80:f9:9e: ae:80:1b:d0:c1:e6:12:0f:90:88:69:4c:fd:2b:df:81:5d:91: 1e:95:27:62:30:f0:c3:75:fc:cc:3c:b4:a3:86:ea:a6:db:53: b5:e4:28:df:0a:64:46:96:cd:2b:43:9a:fe:60:f0:aa:84:e5: b0:ed:f1:35:64:4b:7d:15:55:06:b5:c3:cc:71:28:2d:ac:98: 2d:6e:f0:1d:fa:7e:19:87:e7:b9:f5:5b:08:77:58:9e:c5:6f: 08:d6:90:7d:13:d6:7c:88:91:05:aa:94:f2:4a:ba:98:57:66: 6b:4c:64:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA2Q0ExMTAvBgNVBAUTKDlBRjBCMEVGOEYzRUI1M0YxNEQ4NEZBM0E2MTA2QkU2 NEJENzgyNzIwHhcNMjQxMTIxMDAxOTEwWhcNMjQxMTI4MDAxOTEwWjAYMRYwFAYD VQQDEw02NzNlN2M3ZS0zMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwptFu/7JwltW/x1D9tWs4c8s+uR+KSoyUk/TQsF75feumbtvczm4joIzJJhx O++kVEeDrNcHSN3YjbAgMNAGnClT7Enhur8AmU1Gq66SLr9Ufghr6FvYwxqlj/sr tp1/rzFgpwOJzduShQSX0zaaojEcJ8PieYkdRSwfywJNiGgOKdwLangzDHlo1aNN pgvAaoE2TiMIUrNZW5oLNMzBSidb+p7VOeyDKBKrBjzPYE9LdpiHBo/AgeqGc003 QHR4721ehXVWsoUisTjvvPfwNoE4OEXkVFzhn8G/LtuT4BnXrdL37h67WbrIuzwf 0/uARc4g5x/b62VApou801h07wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+aRqJk z1B1xkSgb7bLOoSL4BpLMB8GA1UdIwQYMBaAFJrwsO+PPrU/FNhPo6YQa+ZL14Jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDZDQS9EMkUwMDg3Mjc3 NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRUOFUyRS1qcGhCcjVrdlhn bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL212Q3c3NDgtdFQ4VTJFLWpwaEJyNWt2WGduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDZDQS9EMkUwMDg3Mjc3NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRU OFUyRS1qcGhCcjVrdlhnbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJgyLc6DeYrcHKsmYpQKaMMaCMKRoYqU4bfRu0ydU3oc4iMk4qSrGd MAXGzFcTu5tu8rq0OKrWNx4Bsx7xfQUq2Yi7RVvm0k6iybu8lzy8PgiT4NR6w5cg BsAo5u6A6Y3IKZW4DwzlkBNEE/Uxg5DwHfC251+CF81tqRm9BUoLY+Ade965QGyM NXPVLbaA+Z6ugBvQweYSD5CIaUz9K9+BXZEelSdiMPDDdfzMPLSjhuqm21O15Cjf CmRGls0rQ5r+YPCqhOWw7fE1ZEt9FVUGtcPMcSgtrJgtbvAd+n4Zh+e59VsId1ie xW8I1pB9E9Z8iJEFqpTySrqYV2ZrTGQI -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:04 2024 by rpki-client on console-ams.rpki-client.org