$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft File: p1cNzzcgqNWohWpLtlg_G66uAJM.mft (raw, json) Hash identifier: aW8gWSMQXD2m95kc6N3lVAIQOXu5N/iJ8J8fkGqgExI= Subject key identifier: C3:B4:A4:AE:5C:03:80:F5:DD:25:7C:33:6B:E3:1C:A5:83:8F:7B:A8 Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft Manifest number: 0C04 Signing time: Fri 22 Nov 2024 18:22:43 +0000 Manifest this update: Fri 22 Nov 2024 18:22:43 +0000 Manifest next update: Fri 29 Nov 2024 18:22:43 +0000 Files and hashes: 1: p1cNzzcgqNWohWpLtlg_G66uAJM.crl (hash: diysuf78YV0sKfT2n7YpDMLOs0HwkW0bknSJGgaLyIs=) 2: 1994900403CE11EAA10C6A84C4F9AE02.roa (hash: iRXSCwbYvkB9N1oSkDNNM/sHFlWbk+W21qXorY3ggOs=) 3: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (hash: v5rqq+1vbD4A/BqKnkMqbNhWY+ZtznzjTbOL/bdSMTs=) 4: 24252532B84711EA8A7F036DC4F9AE02.roa (hash: xlVExDsT6dRqAOzeSQn/to87W/tI0sJTe5K+fPJ+qMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Nov 22 18:22:43 2024 GMT Not After : Nov 29 18:22:43 2024 GMT Subject: CN=6740cbf3-c97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:37:52:72:e5:30:26:fd:65:79:0e:11:ea: 61:e6:0f:34:8f:9b:8e:46:ab:97:2a:42:da:e7:be: f1:cb:50:e0:cf:61:05:59:b3:1a:f5:74:c3:c0:ec: 06:7e:78:f6:d6:d3:9d:43:c2:3b:73:65:e8:6b:8d: 5a:33:6e:79:6a:45:68:b6:87:28:83:d9:5c:ad:36: 7e:f7:6c:c6:5d:5c:47:7b:06:c9:f6:e7:a3:db:8a: 01:02:01:bf:e9:8e:1c:39:e4:b8:d4:29:10:bb:46: c5:ad:36:d6:3c:80:67:28:0c:c7:65:b2:c4:c5:b2: f3:c1:51:fe:a6:e7:8f:d7:f2:8d:c6:5b:7c:85:58: 99:6d:88:5d:54:50:15:d6:6c:a3:cf:d8:c9:47:72: 5d:1d:f3:7a:26:ff:df:9a:f2:ea:30:8b:fd:e9:82: 8b:39:a0:22:4c:3f:01:7c:2f:7c:83:21:1a:29:c7: 88:6b:c6:7d:86:33:ac:e9:fe:fc:b5:1b:f7:fd:cd: eb:e2:8f:7f:83:d5:f6:bb:05:da:19:2f:ce:55:dd: e6:27:3f:bd:92:6a:40:48:fb:77:ea:45:ba:ec:d4: 14:95:06:86:c1:76:50:4f:26:32:27:e5:1a:d5:af: 38:66:85:45:4e:78:58:f7:5f:4c:b4:0b:f8:b1:90: 47:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B4:A4:AE:5C:03:80:F5:DD:25:7C:33:6B:E3:1C:A5:83:8F:7B:A8 X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d2:99:28:11:72:d2:92:70:23:0f:c0:34:f4:b2:db:d8:64: da:47:e4:ef:09:0d:63:09:41:c1:09:82:4f:54:a7:13:b2:cc: 0c:74:60:5f:c0:06:68:4c:a9:05:6d:c6:93:b0:f2:7f:42:d8: 0d:41:ab:f2:e5:93:f5:00:0d:07:4b:cd:67:0a:18:f4:13:94: aa:92:88:ae:b9:c1:90:c1:73:2d:a3:92:ca:d4:ea:e5:4b:cc: 21:0c:fa:6c:e5:b4:0d:88:03:1d:24:e6:0e:a3:34:2a:20:3c: 05:40:61:d5:67:9d:b7:be:af:05:22:42:d3:35:02:b2:e0:22: f1:2b:48:76:45:54:b3:6b:5e:24:41:dc:7b:9a:5f:92:a0:ae: 9a:ad:14:ee:88:48:f1:f4:12:93:ce:c3:5b:70:bf:bd:e4:8f: 4b:16:16:cb:cc:c8:43:dc:84:00:95:17:b2:81:16:e6:ae:92: f2:1a:de:01:23:3c:b8:24:3c:9d:eb:9a:96:16:20:dc:c2:a9: 96:34:6f:ee:c3:43:d3:39:8b:43:53:6d:ab:d9:a7:19:75:dc: 15:b0:13:a4:9d:2a:2d:97:19:9f:17:fb:7d:fc:77:9a:40:75: c0:96:15:5c:41:72:33:0c:a1:c3:c3:62:51:7d:e5:45:f0:99: a6:94:9c:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjQxMTIyMTgyMjQzWhcNMjQxMTI5MTgyMjQzWjAYMRYwFAYD VQQDEw02NzQwY2JmMy1jOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3Y3UnLlMCb9ZXkOEeph5g80j5uORquXKkLa577xy1Dgz2EFWbMa9XTDwOwG fnj21tOdQ8I7c2Xoa41aM255akVotocog9lcrTZ+92zGXVxHewbJ9uej24oBAgG/ 6Y4cOeS41CkQu0bFrTbWPIBnKAzHZbLExbLzwVH+pueP1/KNxlt8hViZbYhdVFAV 1myjz9jJR3JdHfN6Jv/fmvLqMIv96YKLOaAiTD8BfC98gyEaKceIa8Z9hjOs6f78 tRv3/c3r4o9/g9X2uwXaGS/OVd3mJz+9kmpASPt36kW67NQUlQaGwXZQTyYyJ+Ua 1a84ZoVFTnhY919MtAv4sZBH4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMO0pK5c A4D13SV8M2vjHKWDj3uoMB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzdFMy8wQUZFQTdDRTAzQTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FO V29oV3BMdGxnX0c2NnVBSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq0pkoEXLSknAjD8A09LLb2GTaR+TvCQ1jCUHBCYJPVKcTsswMdGBf wAZoTKkFbcaTsPJ/QtgNQavy5ZP1AA0HS81nChj0E5SqkoiuucGQwXMto5LK1Orl S8whDPps5bQNiAMdJOYOozQqIDwFQGHVZ523vq8FIkLTNQKy4CLxK0h2RVSza14k Qdx7ml+SoK6arRTuiEjx9BKTzsNbcL+95I9LFhbLzMhD3IQAlReygRbmrpLyGt4B Izy4JDyd65qWFiDcwqmWNG/uw0PTOYtDU22r2acZddwVsBOknSotlxmfF/t9/Hea QHXAlhVcQXIzDKHDw2JRfeVF8JmmlJxb -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:15 2024 by rpki-client on console-ams.rpki-client.org