$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft File: T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft (raw, json) Hash identifier: uzQNwurcWNena1c/6HY0C/q502vjAqtB8Fjgb2wjM8I= Subject key identifier: A2:18:95:4B:2F:83:9D:D4:08:FF:A4:8C:33:CF:6A:50:CC:A7:47:BF Authority key identifier: 4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 Certificate issuer: /CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Certificate serial: 0BAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft Manifest number: 0BA7 Signing time: Fri 22 Nov 2024 18:41:06 +0000 Manifest this update: Fri 22 Nov 2024 18:41:06 +0000 Manifest next update: Fri 29 Nov 2024 18:41:06 +0000 Files and hashes: 1: T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl (hash: mtxV/w0B3PT1GouwD48N3BXVOmc5JPLoYTwT5T2gDrA=) 2: 8160C03610E911EA86FA6774C4F9AE02.roa (hash: zl2/KyvOYO11VNEUno+KY1iGQk0Qm8eGwpcW6ERpUeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2990 (0xbae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB883/serialNumber=4F5AF565D30DD54F24147EF5E178AA0BAA33FC29 Validity Not Before: Nov 22 18:41:06 2024 GMT Not After : Nov 29 18:41:06 2024 GMT Subject: CN=6740d042-344a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:5b:3b:3b:f6:86:5f:89:da:c3:93:40:a2: 27:66:a2:46:f1:5c:b9:56:9b:bf:19:f8:76:e9:18: 88:69:59:6d:e0:5a:19:a0:36:5e:f1:10:2b:63:01: d7:5b:da:5c:34:23:c2:ae:14:f0:18:2b:0f:be:6c: 38:82:82:4a:c3:00:d0:24:d1:41:50:27:d9:31:02: 25:50:13:f6:51:f7:4c:e3:8d:2e:8c:0e:c0:35:be: d2:c1:90:95:ba:6e:62:58:7e:58:c5:42:19:7f:91: f2:c0:a2:a3:2b:dd:f9:d5:25:38:35:9c:db:1b:1e: 6d:c1:0a:7a:71:2e:2d:73:c6:52:e7:78:41:50:b4: e5:ef:29:6c:f4:eb:78:a1:2d:b1:94:bb:78:bb:c6: c7:91:77:ef:16:f7:62:e7:ea:7d:f8:a2:be:bc:05: 69:53:94:43:38:00:9a:be:9f:c1:8d:c4:fc:5c:90: b3:b1:64:07:bd:a4:c8:65:da:ea:a8:71:4b:2d:ad: bb:2d:14:d9:fa:42:a1:95:19:4f:f1:da:09:8d:40: 69:ab:66:8f:58:c8:41:e7:4e:ce:8a:65:4e:16:59: 11:3e:0e:ef:5f:74:a9:5b:06:18:ba:f7:a5:a2:b5: 08:a5:13:c5:81:63:41:ed:94:95:37:32:5d:0f:89: cd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:18:95:4B:2F:83:9D:D4:08:FF:A4:8C:33:CF:6A:50:CC:A7:47:BF X509v3 Authority Key Identifier: keyid:4F:5A:F5:65:D3:0D:D5:4F:24:14:7E:F5:E1:78:AA:0B:AA:33:FC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T1r1ZdMN1U8kFH714XiqC6oz_Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB883/E982BA3610E711EA9D21C26FC4F9AE02/T1r1ZdMN1U8kFH714XiqC6oz_Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:6c:5f:51:81:e9:37:68:52:e8:03:8c:f7:18:cf:55:c7:3f: c9:3f:9e:50:86:13:7d:b8:29:0c:f3:97:31:f7:9e:4e:db:9d: e9:4b:72:4f:10:56:07:38:64:ce:d6:bf:c3:a2:c0:41:0f:08: 15:39:a6:0b:ab:30:0c:51:25:e7:2d:7e:38:c8:ce:89:1a:f4: ec:06:3d:1f:70:b1:90:14:36:fd:3c:8b:43:df:5f:8c:0b:51: dd:8a:5a:66:42:af:1a:8c:25:5d:e4:7c:e1:64:68:fb:13:fd: 0b:9a:4d:9c:1c:8b:be:a8:51:54:af:64:0d:af:97:f0:6c:f5: d7:0c:b5:67:94:9d:70:4f:2c:bd:d0:ef:64:62:ab:fd:c5:fd: 66:0d:7f:b3:5e:46:c7:0e:fd:b7:d3:ac:82:91:5c:b0:35:69: 90:b9:48:ef:78:e0:73:76:49:ab:c1:cd:91:7d:90:53:bd:c2: 8f:04:f4:f6:f4:85:07:81:f5:19:ca:71:01:7b:78:30:9d:da: 34:1f:f8:16:cc:4e:90:47:dd:f9:b2:65:62:9c:ab:33:cc:e4: 82:a7:55:b6:ba:9c:f5:0b:70:0a:e5:b5:2c:40:82:1c:bb:27: 2f:ec:8a:22:0c:62:4c:11:11:b4:e6:e2:cb:28:d3:55:f0:d1: 91:45:92:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4ODMxMTAvBgNVBAUTKDRGNUFGNTY1RDMwREQ1NEYyNDE0N0VGNUUxNzhBQTBC QUEzM0ZDMjkwHhcNMjQxMTIyMTg0MTA2WhcNMjQxMTI5MTg0MTA2WjAYMRYwFAYD VQQDEw02NzQwZDA0Mi0zNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLtbOzv2hl+J2sOTQKInZqJG8Vy5Vpu/Gfh26RiIaVlt4FoZoDZe8RArYwHX W9pcNCPCrhTwGCsPvmw4goJKwwDQJNFBUCfZMQIlUBP2UfdM440ujA7ANb7SwZCV um5iWH5YxUIZf5HywKKjK9351SU4NZzbGx5twQp6cS4tc8ZS53hBULTl7yls9Ot4 oS2xlLt4u8bHkXfvFvdi5+p9+KK+vAVpU5RDOACavp/BjcT8XJCzsWQHvaTIZdrq qHFLLa27LRTZ+kKhlRlP8doJjUBpq2aPWMhB507OimVOFlkRPg7vX3SpWwYYuvel orUIpRPFgWNB7ZSVNzJdD4nN1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIYlUsv g53UCP+kjDPPalDMp0e/MB8GA1UdIwQYMBaAFE9a9WXTDdVPJBR+9eF4qguqM/wp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg4My9FOTgyQkEzNjEw RTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFVOGtGSDcxNFhpcUM2b3pf Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QxcjFaZE1OMVU4a0ZINzE0WGlxQzZvel9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg4My9FOTgyQkEzNjEwRTcxMUVBOUQyMUMyNkZDNEY5QUUwMi9UMXIxWmRNTjFV OGtGSDcxNFhpcUM2b3pfQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxbF9Rgek3aFLoA4z3GM9Vxz/JP55QhhN9uCkM85cx955O253pS3JP EFYHOGTO1r/DosBBDwgVOaYLqzAMUSXnLX44yM6JGvTsBj0fcLGQFDb9PItD31+M C1HdilpmQq8ajCVd5HzhZGj7E/0Lmk2cHIu+qFFUr2QNr5fwbPXXDLVnlJ1wTyy9 0O9kYqv9xf1mDX+zXkbHDv2306yCkVywNWmQuUjveOBzdkmrwc2RfZBTvcKPBPT2 9IUHgfUZynEBe3gwndo0H/gWzE6QR935smVinKszzOSCp1W2upz1C3AK5bUsQIIc uycv7IoiDGJMERG05uLLKNNV8NGRRZKA -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org