$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft File: n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json) Hash identifier: DyqfGJzkBAva9QmWLVSW+dOVxgiUwP51ADAuAKgukCs= Subject key identifier: 0D:03:0A:C8:EB:D3:63:9A:FC:A5:DC:9D:0F:59:3C:F3:AA:B7:6D:BF Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE Certificate issuer: /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Certificate serial: 0705 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft Manifest number: 0700 Signing time: Fri 22 Nov 2024 21:28:11 +0000 Manifest this update: Fri 22 Nov 2024 21:28:11 +0000 Manifest next update: Fri 29 Nov 2024 21:28:11 +0000 Files and hashes: 1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: uygWd7GIEp/PTm1KbBTpvdPAzXbYDtk4p05W/Ym1Cy8=) 2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: VYmAaIWXtOM49U72kqYNWP/gYJulw+7csprKEDsQLfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1797 (0x705) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Validity Not Before: Nov 22 21:28:11 2024 GMT Not After : Nov 29 21:28:11 2024 GMT Subject: CN=6740f76b-de55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:f3:39:36:d0:14:fe:00:f9:fc:4c:00:33: b7:53:94:40:f6:a0:1f:0a:a6:bf:5f:66:d8:89:0d: c3:fc:0d:84:83:24:c5:7d:e9:13:c9:ef:2f:d3:47: 09:5a:8c:96:b1:05:6a:01:76:28:4a:43:49:6b:4f: 44:38:95:c2:80:7f:30:a2:e4:bf:de:91:2b:87:9a: 98:40:b9:c1:3c:5b:2a:33:b0:65:8b:8a:b2:f5:e4: 65:4a:cc:ff:d4:1f:64:ad:1a:70:4c:a7:3c:33:79: 3d:8d:38:9d:d3:f9:7b:b0:8a:d1:8b:08:dd:ee:7b: 96:8d:e3:c1:79:02:ef:43:54:6e:7d:bc:80:b4:69: 8c:ce:ba:41:bc:f0:72:50:f0:36:96:da:3e:cf:7d: 7e:de:16:78:1a:b3:84:41:52:ad:92:d5:7e:fd:f2: ae:15:42:32:e3:ed:1b:ee:a2:42:ce:b9:f3:b4:6d: ae:15:a8:31:31:36:4d:43:73:46:b4:a8:e4:1e:89: ef:97:77:85:cc:7e:80:37:2f:1a:21:54:65:8e:a9: 7c:a0:27:4a:ba:a8:89:3d:e4:7e:4b:09:60:c1:fd: 13:8b:76:7d:42:bd:c2:c8:84:3a:8d:f1:f2:c1:c6: 50:e0:5d:8f:79:ba:7f:9f:a8:bc:54:75:fd:91:34: 14:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:03:0A:C8:EB:D3:63:9A:FC:A5:DC:9D:0F:59:3C:F3:AA:B7:6D:BF X509v3 Authority Key Identifier: keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a8:24:0f:db:4d:3d:90:42:e0:13:e7:5e:9a:e1:55:49:e4: 22:f3:2f:fc:d8:05:6c:ff:93:4c:64:24:73:88:d4:ff:6d:8e: c7:70:91:1d:4a:f7:c3:6f:48:66:29:d8:de:05:ec:a1:dd:7a: 9d:81:fd:d5:e6:d6:1f:da:99:ac:87:7d:01:6d:fb:0c:40:32: e9:41:d1:7e:3e:36:04:d9:27:ea:e2:ee:d7:4b:74:79:6b:c1: ce:fd:30:da:c4:f1:b4:43:f2:f7:23:21:a2:0a:5b:7a:54:3f: c6:8b:80:09:4d:a3:5b:5d:5f:c2:6b:7d:aa:c7:8e:8d:3d:a5: 5c:64:0e:5b:54:8e:7a:d1:68:05:09:62:9a:da:51:90:61:6e: 87:7b:b4:d0:91:72:d7:16:20:b8:81:26:98:83:ef:35:17:d3: eb:87:b6:af:1b:f8:19:07:eb:74:12:bc:47:ed:5f:62:dc:f4: a4:79:67:f8:ac:75:70:02:a5:92:90:0e:c3:b0:70:92:9b:a9: bd:24:c7:b7:5f:fa:07:44:16:d7:3b:af:24:47:7f:aa:e6:a5: c2:ef:9f:9c:92:23:6d:f6:af:10:6e:37:b3:22:14:cd:0f:39: 6c:62:79:6a:e1:e2:fd:13:6f:12:52:d6:a8:81:46:4c:a6:0f: ae:e7:4c:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQUYxMTAvBgNVBAUTKDlGQUQyMzAyM0ExNTVCRDI1QjIyNDI4MDYzQUMxOTc4 N0NFN0MyQkUwHhcNMjQxMTIyMjEyODExWhcNMjQxMTI5MjEyODExWjAYMRYwFAYD VQQDEw02NzQwZjc2Yi1kZTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlTzOTbQFP4A+fxMADO3U5RA9qAfCqa/X2bYiQ3D/A2EgyTFfekTye8v00cJ WoyWsQVqAXYoSkNJa09EOJXCgH8wouS/3pErh5qYQLnBPFsqM7Bli4qy9eRlSsz/ 1B9krRpwTKc8M3k9jTid0/l7sIrRiwjd7nuWjePBeQLvQ1RufbyAtGmMzrpBvPBy UPA2lto+z31+3hZ4GrOEQVKtktV+/fKuFUIy4+0b7qJCzrnztG2uFagxMTZNQ3NG tKjkHonvl3eFzH6ANy8aIVRljql8oCdKuqiJPeR+Swlgwf0Ti3Z9Qr3CyIQ6jfHy wcZQ4F2Pebp/n6i8VHX9kTQUmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0DCsjr 02Oa/KXcnQ9ZPPOqt22/MB8GA1UdIwQYMBaAFJ+tIwI6FVvSWyJCgGOsGXh858K+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBRi8xRjQ5MzI1QzFE QjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5SmJJa0tBWTZ3WmVIem53 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242MGpBam9WVzlKYklrS0FZNndaZUh6bndyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBRi8xRjQ5MzI1QzFEQjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5 SmJJa0tBWTZ3WmVIem53cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfqCQP2009kELgE+demuFVSeQi8y/82AVs/5NMZCRziNT/bY7HcJEd SvfDb0hmKdjeBeyh3Xqdgf3V5tYf2pmsh30BbfsMQDLpQdF+PjYE2Sfq4u7XS3R5 a8HO/TDaxPG0Q/L3IyGiClt6VD/Gi4AJTaNbXV/Ca32qx46NPaVcZA5bVI560WgF CWKa2lGQYW6He7TQkXLXFiC4gSaYg+81F9Prh7avG/gZB+t0ErxH7V9i3PSkeWf4 rHVwAqWSkA7DsHCSm6m9JMe3X/oHRBbXO68kR3+q5qXC75+ckiNt9q8QbjezIhTN DzlsYnlq4eL9E28SUtaogUZMpg+u50xR -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:11 2024 by rpki-client on console-fra.rpki-client.org