$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: +2XvXs6YdYzZPvdjtfbsXtMM2EuZznsgUwV3WhSZ+yk= Subject key identifier: 9E:02:1F:24:4D:0A:6F:D0:45:14:90:64:FC:1B:DC:03:B4:50:DB:13 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 080C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 0807 Signing time: Fri 22 Nov 2024 20:35:38 +0000 Manifest this update: Fri 22 Nov 2024 20:35:38 +0000 Manifest next update: Fri 29 Nov 2024 20:35:38 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: wvFIIXrxYGw+iSLuOYBwNOGCwbl12GUzJ82iIOWR74c=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: cbktrrt4RsOUs9FstYccY602a8M1M48rOaYFq7f84Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2060 (0x80c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Nov 22 20:35:38 2024 GMT Not After : Nov 29 20:35:38 2024 GMT Subject: CN=6740eb1a-383e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:47:c7:f5:ae:d9:38:b8:fe:e4:b3:1c:4a:ae: 4e:aa:d6:98:f5:44:27:e3:99:ef:6c:d5:83:25:90: fd:3f:57:70:61:e7:ff:02:e2:5d:6c:4b:5f:1b:bb: 87:29:4b:ca:aa:6b:76:32:57:bf:f6:80:c4:f7:be: 09:08:a2:24:21:f1:6b:cf:3c:53:9f:c2:a6:64:6c: 3f:e1:e4:49:39:56:2c:1d:63:d4:aa:d5:8c:a9:30: 00:36:2d:1c:f7:23:05:29:d6:d4:05:ee:49:98:e1: 29:d2:f5:5c:25:7a:8a:72:17:18:d2:cb:bd:06:b9: e9:1d:fb:63:8a:46:a6:76:19:13:c8:9f:96:fb:6e: 20:d0:46:be:be:37:76:86:d5:e2:8e:65:1c:88:29: b9:cf:9d:c8:df:15:23:e9:58:7e:a6:83:63:ad:72: 3f:73:76:06:72:4c:4b:14:51:5c:a3:f3:90:1e:3d: cd:89:ec:35:92:0c:50:19:24:52:59:93:2d:cf:fa: dd:f7:99:98:ce:2f:e0:c9:57:45:e5:68:70:db:4f: 44:41:9b:c3:89:c9:75:99:13:01:90:bb:ea:8a:f8: 03:56:85:7d:18:cd:3e:17:d5:b8:51:0d:46:3b:05: 44:59:57:f0:65:15:e3:9f:e7:85:7b:f3:b0:d9:58: 3b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:02:1F:24:4D:0A:6F:D0:45:14:90:64:FC:1B:DC:03:B4:50:DB:13 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:f6:a5:d3:11:41:ed:38:ad:6e:b3:52:3f:76:16:94:d5:b4: 07:55:b5:21:cf:2b:66:22:89:cf:90:26:d1:4c:8b:9f:67:cd: 06:5b:bb:76:73:d5:8d:58:67:74:22:35:fb:09:0a:84:a5:66: 7b:7c:b3:66:6a:75:be:01:2e:bf:2b:dd:aa:63:d8:74:50:04: 3d:28:f8:9d:4f:71:d1:28:36:35:14:d4:ec:e1:21:ca:28:52: 02:9d:ec:d4:49:64:79:f2:1f:86:45:7a:70:7c:c8:cb:a8:35: 72:b3:63:ec:fb:64:f2:cd:78:d5:e7:73:4b:a3:94:f4:5b:78: f6:c4:99:86:a7:1d:c8:8f:8b:a6:f6:2d:dc:38:8d:35:55:80: 1d:cf:5f:2c:33:f5:75:1d:64:df:62:f4:55:3b:69:be:fa:80: 62:32:e6:f1:21:9f:e0:40:73:7f:ae:79:21:fa:62:0d:26:ff: 2b:7e:74:d2:43:b7:c3:ce:77:f2:b6:2e:4c:69:72:b6:99:56: b5:2e:77:75:cd:60:b7:82:0c:13:21:48:fd:bb:96:0e:de:31: 31:7d:b1:69:38:2b:9a:40:b0:88:cc:9f:e5:74:17:1e:45:19: 69:c3:af:38:1b:4a:21:33:38:dc:ad:4c:c3:81:db:60:3e:4a: 24:41:f0:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjQxMTIyMjAzNTM4WhcNMjQxMTI5MjAzNTM4WjAYMRYwFAYD VQQDEw02NzQwZWIxYS0zODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10fH9a7ZOLj+5LMcSq5OqtaY9UQn45nvbNWDJZD9P1dwYef/AuJdbEtfG7uH KUvKqmt2Mle/9oDE974JCKIkIfFrzzxTn8KmZGw/4eRJOVYsHWPUqtWMqTAANi0c 9yMFKdbUBe5JmOEp0vVcJXqKchcY0su9BrnpHftjikamdhkTyJ+W+24g0Ea+vjd2 htXijmUciCm5z53I3xUj6Vh+poNjrXI/c3YGckxLFFFco/OQHj3Niew1kgxQGSRS WZMtz/rd95mYzi/gyVdF5Whw209EQZvDicl1mRMBkLvqivgDVoV9GM0+F9W4UQ1G OwVEWVfwZRXjn+eFe/Ow2Vg7OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4CHyRN Cm/QRRSQZPwb3AO0UNsTMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB59qXTEUHtOK1us1I/dhaU1bQHVbUhzytmIonPkCbRTIufZ80GW7t2 c9WNWGd0IjX7CQqEpWZ7fLNmanW+AS6/K92qY9h0UAQ9KPidT3HRKDY1FNTs4SHK KFICnezUSWR58h+GRXpwfMjLqDVys2Ps+2TyzXjV53NLo5T0W3j2xJmGpx3Ij4um 9i3cOI01VYAdz18sM/V1HWTfYvRVO2m++oBiMubxIZ/gQHN/rnkh+mINJv8rfnTS Q7fDznfyti5MaXK2mVa1Lnd1zWC3ggwTIUj9u5YO3jExfbFpOCuaQLCIzJ/ldBce RRlpw684G0ohMzjcrUzDgdtgPkokQfD7 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org