$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft File: ArpjtYYuJwm5DRa33C61z8ii5oQ.mft (raw, json) Hash identifier: vNQbVZk0M76w/hW++9MXfErL4vISd6WDWAxeilh2260= Subject key identifier: AF:94:2B:2D:59:C4:E4:4E:51:86:D8:59:35:C3:72:3C:B6:60:15:C0 Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 Certificate issuer: /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft Manifest number: 0140 Signing time: Thu 21 Nov 2024 02:47:12 +0000 Manifest this update: Thu 21 Nov 2024 02:47:12 +0000 Manifest next update: Thu 28 Nov 2024 02:47:12 +0000 Files and hashes: 1: ArpjtYYuJwm5DRa33C61z8ii5oQ.crl (hash: 2bnjb0s/ooXKKr3+dJEdKktFyrg9C+VeNTTE1n0hqX0=) 2: 5192AB7ED47811EEB5A6D21AC4F9AE02.roa (hash: /1Z2TwuqTkrgrfRC8VIKBetzzhs6fi/sVhfwWQwuK6g=) 3: A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (hash: 6nBegUEh6ts9PfjWE2PkXRJ1EOdzjUB+XsuGThTEurg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684 Validity Not Before: Nov 21 02:47:12 2024 GMT Not After : Nov 28 02:47:12 2024 GMT Subject: CN=673e9f30-1b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:cd:60:f3:b8:04:b8:4c:ef:84:e7:64:db: 86:f1:44:a8:19:4f:0a:ed:cb:9d:11:e7:ae:73:89: db:94:85:41:33:a1:0d:a1:32:32:d3:eb:9e:20:bf: 8c:5e:d0:3c:00:a7:88:e3:9f:42:56:b2:19:94:ab: 55:ce:3f:3f:e3:19:56:4b:44:d2:40:32:0c:b7:30: 1e:fa:03:d7:b2:8c:3d:42:70:72:51:f0:9c:1c:90: 20:18:0d:be:ed:b3:62:8a:b1:d1:19:f7:85:86:64: 61:eb:e2:41:09:3b:60:a0:28:21:ee:86:a8:b3:27: d3:c3:7e:de:6a:d2:a5:5d:f0:3d:58:8e:fb:f4:79: c6:b7:f5:22:7b:92:a9:90:88:f7:a2:d8:69:c7:e6: 95:01:73:60:58:62:2a:70:d4:da:86:9f:d0:f9:b9: fc:b9:ba:9b:19:12:6d:1e:f9:bb:92:84:86:e1:06: 5d:19:25:db:30:1a:14:45:02:f6:76:ac:65:80:3f: 58:4e:e5:41:0d:d5:1e:03:98:80:c9:19:7b:64:1d: fe:07:ed:6f:20:59:70:31:0d:18:4b:7b:d6:47:1f: ed:6e:cd:5c:75:ff:83:93:c1:59:15:ba:41:1b:32: 3c:a9:85:13:9d:8b:1f:96:c6:fe:d4:b9:93:ab:ac: 85:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:94:2B:2D:59:C4:E4:4E:51:86:D8:59:35:C3:72:3C:B6:60:15:C0 X509v3 Authority Key Identifier: keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:36:c9:11:d4:f2:22:d7:75:7c:56:ed:91:5c:b2:17:64:e9: 2e:6c:af:e0:9f:6c:71:d4:c7:a7:4d:84:64:9b:4f:25:56:b1: 8b:be:c7:c0:b3:4c:7d:38:b2:ec:74:60:23:d3:b1:2b:07:00: 8e:05:15:db:bb:3b:74:48:ed:35:da:ca:0a:17:55:94:5a:9f: 02:54:87:6c:e4:a4:a5:c4:c0:f8:bb:58:d8:fa:0d:64:bb:ef: 5e:35:5c:69:4d:d6:48:29:d6:68:60:36:7a:44:24:42:8d:1c: 2f:f7:02:e9:b2:3c:77:e6:93:5b:c1:17:3f:9f:36:25:37:a5: ae:76:a5:c4:4c:93:04:e8:df:53:ba:c7:dc:4e:0c:3d:40:52: 89:dc:4f:87:16:ed:b2:a3:f5:b6:c6:4f:32:69:78:39:13:87: 0f:a1:d7:ef:fd:41:2e:85:90:97:e6:1f:6c:3b:af:83:6f:12: 64:86:05:7c:96:59:47:a9:6c:7a:9b:6b:f2:c8:a9:26:0e:43: 06:14:ae:77:fa:7d:45:27:19:6c:3e:25:eb:79:67:ca:2b:fc: 8f:fb:68:0c:d4:e1:e1:b3:06:f9:b2:4c:40:6f:85:fa:12:5b: 89:db:bc:4a:d8:4f:67:8a:04:88:fc:99:8e:94:f9:19:69:00: c7:65:2f:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRUUxMTAvBgNVBAUTKDAyQkE2M0I1ODYyRTI3MDlCOTBEMTZCN0RDMkVCNUNG QzhBMkU2ODQwHhcNMjQxMTIxMDI0NzEyWhcNMjQxMTI4MDI0NzEyWjAYMRYwFAYD VQQDEw02NzNlOWYzMC0xYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2/NYPO4BLhM74TnZNuG8USoGU8K7cudEeeuc4nblIVBM6ENoTIy0+ueIL+M XtA8AKeI459CVrIZlKtVzj8/4xlWS0TSQDIMtzAe+gPXsow9QnByUfCcHJAgGA2+ 7bNiirHRGfeFhmRh6+JBCTtgoCgh7oaosyfTw37eatKlXfA9WI779HnGt/Uie5Kp kIj3othpx+aVAXNgWGIqcNTahp/Q+bn8ubqbGRJtHvm7koSG4QZdGSXbMBoURQL2 dqxlgD9YTuVBDdUeA5iAyRl7ZB3+B+1vIFlwMQ0YS3vWRx/tbs1cdf+Dk8FZFbpB GzI8qYUTnYsflsb+1LmTq6yFSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+UKy1Z xOROUYbYWTXDcjy2YBXAMB8GA1UdIwQYMBaAFAK6Y7WGLicJuQ0Wt9wutc/IouaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNFRS80QThBREFDMENE NDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3bTVEUmEzM0M2MXo4aWk1 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FycGp0WVl1SndtNURSYTMzQzYxejhpaTVvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNFRS80QThBREFDMENENDYxMUVEQjQ1Q0NENjZDNEY5QUUwMi9BcnBqdFlZdUp3 bTVEUmEzM0M2MXo4aWk1b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALNskR1PIi13V8Vu2RXLIXZOkubK/gn2xx1MenTYRkm08lVrGLvsfA s0x9OLLsdGAj07ErBwCOBRXbuzt0SO012soKF1WUWp8CVIds5KSlxMD4u1jY+g1k u+9eNVxpTdZIKdZoYDZ6RCRCjRwv9wLpsjx35pNbwRc/nzYlN6WudqXETJME6N9T usfcTgw9QFKJ3E+HFu2yo/W2xk8yaXg5E4cPodfv/UEuhZCX5h9sO6+DbxJkhgV8 lllHqWx6m2vyyKkmDkMGFK53+n1FJxlsPiXreWfKK/yP+2gM1OHhswb5skxAb4X6 EluJ27xK2E9nigSI/JmOlPkZaQDHZS/q -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:03 2024 by rpki-client on console-fra.rpki-client.org