$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: Gb2DzcXYRT9eFXXl+pPDSq6P2+1cLxlkpX09yoGH/EM= Subject key identifier: 62:BA:CB:B8:E0:8A:94:F5:88:F8:3D:38:5B:1E:41:9C:AB:70:DE:F6 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 11B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 1190 Signing time: Fri 22 Nov 2024 17:13:20 +0000 Manifest this update: Fri 22 Nov 2024 17:13:20 +0000 Manifest next update: Fri 29 Nov 2024 17:13:20 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: ZH1sk3i21CtZne7iDLKLOW1je0e570qvRYcVh5b690Y=) 2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: wr5ztPmvZN7s4D2CvOqMN8VnTh99RrNwK0w18m5apNc=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: ESw9duBCReL8Wp+ONcz10sCJO+y/cVuwZOBDVu1HWH8=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: 5BaIXlUklJBlXKeiwr0r+qNSQwgyfF8ibFZCw3svB+U=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: pSOeVRU8/a8GqfVRku1xH+URO8tttyKC8jeMWDGPElQ=) 6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: kt3Yk+E/EE3f1S73Kn5W6atQhH5e6Q2wDMxAcInFDQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4534 (0x11b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Nov 22 17:13:20 2024 GMT Not After : Nov 29 17:13:20 2024 GMT Subject: CN=6740bbb0-c896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:95:44:a8:1c:96:bf:f4:b7:ad:44:96:d3:ad: f9:46:22:ec:f5:e5:87:2d:01:a2:c7:cf:ae:7f:c4: 4e:da:3a:1c:bb:05:e7:05:02:fc:c4:43:3c:5b:de: c0:5e:f9:f2:a4:2f:ac:ba:4f:ef:5b:d7:9b:09:d9: ba:50:0f:97:05:e1:98:33:b8:12:3d:24:fe:a0:fc: 02:6a:45:85:9b:7a:e1:7c:a1:ec:34:bc:a5:a4:4b: 30:5a:82:66:64:47:f8:f6:a0:9b:c4:e7:38:5b:5e: 4d:86:0f:79:37:de:c0:51:ac:74:02:8f:04:6b:98: 17:2d:6d:5c:fa:e0:a0:1f:6f:4f:7d:28:f5:c7:d0: f5:65:5b:be:4f:50:32:22:b7:27:20:21:ac:1c:65: 08:90:c7:c8:a4:e9:88:57:59:81:d5:53:c8:39:f1: 1f:3d:2a:db:da:74:c5:2c:df:0d:f0:c8:d7:ff:f4: 03:ff:a8:c8:30:d6:3e:77:87:77:95:7e:37:b7:2d: 02:16:29:cb:fd:57:59:e2:5d:fa:ca:c8:db:3c:63: 85:49:7b:ee:3c:ce:94:8d:13:0d:11:ec:2e:87:17: 90:53:02:07:b4:dd:92:0e:34:87:af:a6:93:2b:50: 22:42:bb:f5:f2:0c:10:3e:b4:3d:47:fc:1a:21:b5: 30:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BA:CB:B8:E0:8A:94:F5:88:F8:3D:38:5B:1E:41:9C:AB:70:DE:F6 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:26:ab:1c:bc:c5:6a:20:fc:e0:1d:4e:4e:75:27:df:4c:b3: 69:ff:e6:50:9b:31:21:f8:03:cb:09:64:59:6e:6b:d1:d4:d5: b3:23:dd:8e:cf:11:84:21:c1:3c:f9:06:d7:fd:73:47:c6:22: 86:94:18:28:27:db:be:ec:19:39:b3:63:14:e8:9f:87:e9:88: 13:9d:9f:2a:01:42:4d:09:97:6d:1d:1e:dc:d7:26:36:e5:16: dc:fe:6c:76:0b:23:45:32:69:fc:44:69:80:b1:a9:43:af:f8: fa:6f:ad:b6:47:4d:85:81:c9:d0:08:44:9a:9c:f5:1d:55:b1: 86:b4:ea:01:eb:8c:10:a8:6c:bb:f7:e0:75:8a:1b:9f:45:ea: 19:1d:1c:a1:77:b9:7a:73:aa:e6:d1:5a:25:b6:1b:25:7c:34: 0a:f0:54:00:bf:26:21:73:67:0e:3c:9f:5d:c0:bd:43:6c:8f: f0:00:8f:6e:78:a6:c0:4d:96:7a:28:cb:f3:26:a8:86:d5:8b: 11:c1:c0:b1:7d:29:78:b3:83:92:bf:fd:46:93:5c:34:b4:47: fe:db:58:53:eb:0f:02:c5:0a:10:98:b6:5d:10:b8:94:9b:bd: d8:60:3c:d1:9a:78:ae:ca:d0:f4:e6:77:3e:3b:92:06:0d:59: d9:31:e3:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjQxMTIyMTcxMzIwWhcNMjQxMTI5MTcxMzIwWjAYMRYwFAYD VQQDEw02NzQwYmJiMC1jODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpVEqByWv/S3rUSW0635RiLs9eWHLQGix8+uf8RO2jocuwXnBQL8xEM8W97A XvnypC+suk/vW9ebCdm6UA+XBeGYM7gSPST+oPwCakWFm3rhfKHsNLylpEswWoJm ZEf49qCbxOc4W15Nhg95N97AUax0Ao8Ea5gXLW1c+uCgH29PfSj1x9D1ZVu+T1Ay IrcnICGsHGUIkMfIpOmIV1mB1VPIOfEfPSrb2nTFLN8N8MjX//QD/6jIMNY+d4d3 lX43ty0CFinL/VdZ4l36ysjbPGOFSXvuPM6UjRMNEewuhxeQUwIHtN2SDjSHr6aT K1AiQrv18gwQPrQ9R/waIbUw9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGK6y7jg ipT1iPg9OFseQZyrcN72MB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDJqscvMVqIPzgHU5OdSffTLNp/+ZQmzEh+APLCWRZbmvR1NWzI92O zxGEIcE8+QbX/XNHxiKGlBgoJ9u+7Bk5s2MU6J+H6YgTnZ8qAUJNCZdtHR7c1yY2 5Rbc/mx2CyNFMmn8RGmAsalDr/j6b622R02FgcnQCESanPUdVbGGtOoB64wQqGy7 9+B1ihufReoZHRyhd7l6c6rm0VolthslfDQK8FQAvyYhc2cOPJ9dwL1DbI/wAI9u eKbATZZ6KMvzJqiG1YsRwcCxfSl4s4OSv/1Gk1w0tEf+21hT6w8CxQoQmLZdELiU m73YYDzRmniuytD05nc+O5IGDVnZMeNz -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org