$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft File: 8VAZIKVfOnwnEDkUn_oop8HMOPE.mft (raw, json) Hash identifier: 9AbPLae8eBXifMjQCbF5lUDxGv4uNvpV3IxGWLAiNcQ= Subject key identifier: 3E:A3:A2:67:D7:F2:8E:82:58:A1:EE:90:C2:26:88:BA:8C:97:11:FD Authority key identifier: F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 Certificate issuer: /CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Certificate serial: 0301 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft Manifest number: 02FD Signing time: Sat 23 Nov 2024 00:48:49 +0000 Manifest this update: Sat 23 Nov 2024 00:48:49 +0000 Manifest next update: Sat 30 Nov 2024 00:48:49 +0000 Files and hashes: 1: 8VAZIKVfOnwnEDkUn_oop8HMOPE.crl (hash: PG5hEmnFT7Af1BXbpT1OMLkNFw0QSBLBKlDiRuVfGns=) 2: 8304B142B34711EC90A6DA67C4F9AE02.roa (hash: WXC/B6Dbe8kPnOwbgfCf/9me935cYsiOJufkenUuGQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 00:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 769 (0x301) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B49C0/serialNumber=F1501920A55F3A7C271039149FFA28A7C1CC38F1 Validity Not Before: Nov 23 00:48:49 2024 GMT Not After : Nov 30 00:48:49 2024 GMT Subject: CN=67412671-780e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:f1:00:41:0c:54:a3:aa:11:55:32:00:7f: ea:1d:be:df:a1:24:3f:f0:67:a0:d5:58:3f:ae:95: af:32:4f:52:1b:93:d5:cc:4c:2b:73:dd:d2:a0:25: 1d:38:fd:14:8b:1b:8d:32:f6:51:d8:22:df:07:d3: c3:72:eb:52:38:10:62:10:15:5a:65:fb:a9:60:35: 1c:f3:ef:a9:cc:71:b3:54:a8:02:a7:97:77:2d:e8: ca:1a:39:4b:70:8b:cd:e2:97:82:ed:a2:c2:2c:d2: 69:02:86:8c:d9:af:dd:06:7b:f7:78:96:86:fc:75: ec:e2:7d:17:e2:ba:a3:b3:b5:6b:d4:97:94:17:70: ef:c1:6f:38:01:1f:49:c3:a3:79:8d:66:e8:88:fc: ff:99:ed:15:21:01:85:86:2e:ea:92:26:46:f8:32: 38:a5:59:00:f4:b8:b8:f4:8c:38:ff:90:60:60:9f: 43:0a:76:90:a0:9b:d0:61:99:f2:ca:6d:aa:07:fb: 9c:55:f9:58:a3:10:22:11:b0:e5:25:26:39:21:25: 00:e2:7a:6e:4e:e0:9d:92:e7:96:0b:cc:82:7b:3e: 9b:36:be:bd:11:55:f5:84:f1:d6:ff:9e:c0:18:c5: 7a:27:4c:12:a6:eb:8e:78:9f:42:1a:cb:6e:e3:48: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A3:A2:67:D7:F2:8E:82:58:A1:EE:90:C2:26:88:BA:8C:97:11:FD X509v3 Authority Key Identifier: keyid:F1:50:19:20:A5:5F:3A:7C:27:10:39:14:9F:FA:28:A7:C1:CC:38:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VAZIKVfOnwnEDkUn_oop8HMOPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49C0/6CB38358B34411ECABCE2A62C4F9AE02/8VAZIKVfOnwnEDkUn_oop8HMOPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ac:c9:81:61:fe:a7:18:65:08:42:30:cf:4d:92:27:dd:11: 27:e8:f8:94:c9:0e:70:5a:5a:1c:f9:66:ac:a0:eb:02:10:1c: 60:ef:3c:a2:b8:ef:1a:8e:da:3b:e1:36:a8:c9:98:91:b0:e8: 3d:59:5f:b5:ce:9d:3e:ba:1e:ce:16:82:f1:c0:bc:00:cf:39: 03:5b:a4:e7:f1:11:0b:fc:5c:2c:18:7d:f7:c2:85:cf:bf:55: 74:39:93:b3:5d:a1:3a:2d:20:ca:3b:8b:4d:ad:2f:91:a1:f8: 0c:7f:72:80:b4:df:af:59:f8:93:61:b0:02:79:06:70:4c:ea: 88:ee:15:41:50:28:69:ee:06:17:c0:a5:8c:f3:5f:13:fb:7a: 04:2d:34:97:df:9d:43:85:28:07:62:5f:43:54:83:30:23:3c: c8:f6:c4:7b:a1:aa:3b:71:a1:21:9b:2b:29:59:66:46:d0:d1: 6e:8a:85:6e:61:52:e9:fa:2f:52:ae:2b:0a:25:a5:47:3d:40: fe:ab:76:2f:20:55:49:5a:58:1b:fa:9a:af:93:30:f1:3d:77: 89:e9:d0:f6:d2:02:75:11:bc:b8:4a:a2:c5:f8:92:37:7b:5c: 20:d2:86:09:bc:58:6d:23:a3:67:0a:86:e1:60:46:e2:03:98: 63:e6:1f:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ5QzAxMTAvBgNVBAUTKEYxNTAxOTIwQTU1RjNBN0MyNzEwMzkxNDlGRkEyOEE3 QzFDQzM4RjEwHhcNMjQxMTIzMDA0ODQ5WhcNMjQxMTMwMDA0ODQ5WjAYMRYwFAYD VQQDEw02NzQxMjY3MS03ODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUvxAEEMVKOqEVUyAH/qHb7foSQ/8Geg1Vg/rpWvMk9SG5PVzEwrc93SoCUd OP0UixuNMvZR2CLfB9PDcutSOBBiEBVaZfupYDUc8++pzHGzVKgCp5d3LejKGjlL cIvN4peC7aLCLNJpAoaM2a/dBnv3eJaG/HXs4n0X4rqjs7Vr1JeUF3DvwW84AR9J w6N5jWboiPz/me0VIQGFhi7qkiZG+DI4pVkA9Li49Iw4/5BgYJ9DCnaQoJvQYZny ym2qB/ucVflYoxAiEbDlJSY5ISUA4npuTuCdkueWC8yCez6bNr69EVX1hPHW/57A GMV6J0wSpuuOeJ9CGstu40gaTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6jomfX 8o6CWKHukMImiLqMlxH9MB8GA1UdIwQYMBaAFPFQGSClXzp8JxA5FJ/6KKfBzDjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDlDMC82Q0IzODM1OEIz NDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9ud25FRGtVbl9vb3A4SE1P UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWQVpJS1ZmT253bkVEa1VuX29vcDhITU9QRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDlDMC82Q0IzODM1OEIzNDQxMUVDQUJDRTJBNjJDNEY5QUUwMi84VkFaSUtWZk9u d25FRGtVbl9vb3A4SE1PUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0rMmBYf6nGGUIQjDPTZIn3REn6PiUyQ5wWloc+WasoOsCEBxg7zyi uO8ajto74TaoyZiRsOg9WV+1zp0+uh7OFoLxwLwAzzkDW6Tn8REL/FwsGH33woXP v1V0OZOzXaE6LSDKO4tNrS+RofgMf3KAtN+vWfiTYbACeQZwTOqI7hVBUChp7gYX wKWM818T+3oELTSX351DhSgHYl9DVIMwIzzI9sR7oao7caEhmyspWWZG0NFuioVu YVLp+i9SrisKJaVHPUD+q3YvIFVJWlgb+pqvkzDxPXeJ6dD20gJ1Eby4SqLF+JI3 e1wg0oYJvFhtI6NnCobhYEbiA5hj5h/F -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:48 2024 by rpki-client on console-ams.rpki-client.org