$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft File: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft (raw, json) Hash identifier: zkanCvVDSdllqiro2YTbA3P9tCJCEhgX32qXoQ6ylrQ= Subject key identifier: 0F:EE:A8:4D:3B:66:76:25:21:7F:95:4A:9C:BE:70:17:78:13:E0:AB Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 3501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft Manifest number: 3485 Signing time: Fri 22 Nov 2024 14:24:14 +0000 Manifest this update: Fri 22 Nov 2024 14:24:14 +0000 Manifest next update: Fri 29 Nov 2024 14:24:14 +0000 Files and hashes: 1: U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl (hash: ay7Tw7P0Rb25Z1Jl9weyCmSrqpE40Rq2j2WnkNFIgQM=) 2: DF8602D05E5B11ED994E491CC4F9AE02.roa (hash: KKCg2NooRoQGuF3KYpzz51c9C/45UUPObnLo2e5njhU=) 3: D0886954188811EC8E86754FC4F9AE02.roa (hash: yPv2xJqSMbxdqO3CUxzFvtSmE89AHilhOo/061TH8FU=) 4: AB9889725E5E11EDB5361D3BC4F9AE02.roa (hash: nfNjfg1IXDDhMM0k16fT6xDTUZvLHRQ/C+xvVXQFUFE=) 5: 99CF729E221011ED980A6F47C4F9AE02.roa (hash: iSQxLeiRN1fYoIns2yWqQhKW9w0d7Bh4Hi7g+FcoiAo=) 6: 9F3A919468D811EFB2FE405FC4F9AE02.roa (hash: ZaxlSh3XWBv2fOJrVopMAyhJjHEvnP8TGG96c6iuXcg=) 7: 491E49AECDCA11ED8F57D386C4F9AE02.roa (hash: GOobL3IcAmOzxEXI8Av9eECmrglVLT+e8Yk36aU9ns8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13569 (0x3501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: Nov 22 14:24:14 2024 GMT Not After : Nov 29 14:24:14 2024 GMT Subject: CN=6740940e-7917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:7b:f7:39:b3:e8:46:05:44:26:77:fa:76: 40:ac:68:f2:cc:71:45:82:ff:98:e0:2f:4b:02:4c: 31:c2:3b:dd:b1:89:39:1b:3e:c2:07:69:a0:f5:c7: 40:d1:7f:56:c3:97:34:21:5a:68:36:97:f9:bc:bc: e0:cd:14:13:ea:55:4f:02:4c:cb:f5:53:74:0b:d6: 37:0e:0d:01:65:87:da:52:9b:b8:49:ba:a0:9e:05: ae:33:ad:bc:66:cb:a8:b6:93:2c:65:e6:1b:f7:e8: c2:cf:9c:04:43:91:45:21:07:cb:cc:02:74:f6:32: 94:3b:97:c4:fd:b2:22:bd:24:ce:35:07:52:1f:d0: 89:ae:8f:da:d0:15:84:a6:1d:fb:2e:aa:a2:1a:59: b1:c4:bd:39:09:85:60:81:a5:8c:f9:b5:af:17:5a: 8b:c6:0e:91:a7:86:10:87:60:ae:f0:bf:71:e8:76: 0c:3f:47:64:90:0f:3d:78:86:ad:9a:4d:36:7d:36: 1d:97:60:6a:3f:c3:9b:74:dd:5d:1b:da:e9:69:3b: 3b:b7:d9:8b:d6:9d:62:52:56:5f:8e:e7:7f:cd:cc: ba:21:7c:37:6f:51:de:7d:41:de:5e:ec:89:d9:80: 36:ed:25:78:b9:93:19:78:15:5c:06:e9:32:94:29: 0e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EE:A8:4D:3B:66:76:25:21:7F:95:4A:9C:BE:70:17:78:13:E0:AB X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:db:8e:b4:9f:97:de:b8:5e:68:2e:4d:92:05:5f:71:b3:fb: 15:b6:14:be:46:b4:30:97:68:f3:e8:c3:ca:f4:d3:f9:5f:62: 45:42:fb:8f:98:53:b1:96:b0:9a:7f:50:6c:ac:06:3a:a6:42: 78:cd:3c:30:70:19:a9:3d:d1:25:59:44:24:ba:cd:77:fe:5a: e6:8e:66:9f:db:99:99:de:69:d1:f8:9c:30:9f:24:8b:b0:5d: 80:d7:2d:58:f3:00:50:25:14:b3:6e:24:d7:29:42:57:66:90: 68:cf:e0:0b:38:9b:88:71:2f:71:f1:05:bf:36:95:45:9a:e9: 56:c9:7f:ad:32:96:17:c6:59:d7:b1:13:26:a3:64:e7:29:a2: 1f:c0:1c:f5:f2:c4:2e:42:2c:11:c4:48:86:d0:c9:d8:a1:be: 37:e7:5c:31:7f:3a:64:31:93:83:c9:5a:55:af:3b:dc:ed:f7: 4a:4f:d5:f8:fb:95:31:7c:b1:52:ad:1b:49:65:15:b2:fd:00: 27:2c:d3:16:1c:1d:5b:90:27:5c:e0:2b:cc:33:54:35:96:d4: a4:c1:8d:84:dd:39:18:58:8c:c7:45:88:0d:1e:01:ce:99:ee: 7a:12:bc:60:94:78:80:80:40:e3:4c:8a:df:fc:a2:53:15:de: f6:74:80:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjQxMTIyMTQyNDE0WhcNMjQxMTI5MTQyNDE0WjAYMRYwFAYD VQQDEw02NzQwOTQwZS03OTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPx79zmz6EYFRCZ3+nZArGjyzHFFgv+Y4C9LAkwxwjvdsYk5Gz7CB2mg9cdA 0X9Ww5c0IVpoNpf5vLzgzRQT6lVPAkzL9VN0C9Y3Dg0BZYfaUpu4SbqgngWuM628 ZsuotpMsZeYb9+jCz5wEQ5FFIQfLzAJ09jKUO5fE/bIivSTONQdSH9CJro/a0BWE ph37LqqiGlmxxL05CYVggaWM+bWvF1qLxg6Rp4YQh2Cu8L9x6HYMP0dkkA89eIat mk02fTYdl2BqP8ObdN1dG9rpaTs7t9mL1p1iUlZfjud/zcy6IXw3b1HefUHeXuyJ 2YA27SV4uZMZeBVcBukylCkOnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/uqE07 ZnYlIX+VSpy+cBd4E+CrMB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY0Ny9CNEE4NkMzODFEODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQ cmlsd3lWUS1oSnFRX25OMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh2460n5feuF5oLk2SBV9xs/sVthS+RrQwl2jz6MPK9NP5X2JFQvuP mFOxlrCaf1BsrAY6pkJ4zTwwcBmpPdElWUQkus13/lrmjmaf25mZ3mnR+JwwnySL sF2A1y1Y8wBQJRSzbiTXKUJXZpBoz+ALOJuIcS9x8QW/NpVFmulWyX+tMpYXxlnX sRMmo2TnKaIfwBz18sQuQiwRxEiG0MnYob4351wxfzpkMZODyVpVrzvc7fdKT9X4 +5UxfLFSrRtJZRWy/QAnLNMWHB1bkCdc4CvMM1Q1ltSkwY2E3TkYWIzHRYgNHgHO me56ErxglHiAgEDjTIrf/KJTFd72dIDG -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org