$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: LmFChTbQKAHOBR3HtV0+H81Fz4HKt7ytWSUpXhnurU8= Subject key identifier: 46:F9:07:6A:30:0A:DA:C7:43:CE:E3:AD:C7:71:CB:92:91:E9:69:1C Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0E84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0E6E Signing time: Fri 22 Nov 2024 17:42:29 +0000 Manifest this update: Fri 22 Nov 2024 17:42:28 +0000 Manifest next update: Fri 29 Nov 2024 17:42:28 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: byPv5kl2/uRJ3X32UzkYo30VE8RQjEHQxk4WEisU8CI=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: dWOEO8pwtx9hi9faa2fgwj2lHG7eHOgZT5KAz1c3Ctk=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: TcpjWImJ/6OMJ2cd8RP+FJqzHMIXrQ0AmNStUKst97g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3716 (0xe84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Nov 22 17:42:28 2024 GMT Not After : Nov 29 17:42:28 2024 GMT Subject: CN=6740c284-a104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8a:d7:24:ab:53:b4:c0:21:fc:17:64:cd:58: 4f:99:1d:6b:a2:4e:bc:26:01:c3:71:59:89:bb:2a: a4:9d:46:f1:69:d4:7a:4b:9e:7c:24:f9:6d:7f:22: 86:13:d9:bf:b1:2f:81:00:87:48:99:c5:b5:9a:4e: f0:58:0a:2b:f8:6a:c7:6e:8a:c1:36:b2:e7:54:58: e5:68:a1:de:a6:d1:3d:aa:19:94:02:2e:20:5c:e1: 28:10:d3:a8:5f:ae:d2:27:03:91:9a:4e:85:12:b2: 7c:6b:f4:f8:4f:72:69:e2:e7:29:56:58:b4:32:ab: 5a:e1:bb:5a:67:27:25:ad:4c:63:ba:d1:9c:b4:d5: 24:e6:47:dd:5f:85:3b:08:f5:4e:73:30:e9:c8:ad: 86:80:38:06:df:1a:34:65:37:fc:4f:e5:4d:42:03: f2:32:02:70:d4:fb:63:33:e1:6a:ce:aa:79:6d:3d: c9:0e:8c:8d:8e:92:64:0d:35:12:b9:a6:9c:08:84: f5:41:38:c4:bf:4c:d5:24:0c:de:e9:e8:d5:62:a9: e4:1e:b4:a4:14:19:3f:14:2f:22:8b:9c:ba:4d:d0: c6:88:28:92:96:cf:66:00:0e:56:57:f7:e6:5a:d5: 13:07:7e:0b:ee:18:e1:71:14:b2:86:59:71:8d:cf: b3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F9:07:6A:30:0A:DA:C7:43:CE:E3:AD:C7:71:CB:92:91:E9:69:1C X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:f0:87:08:9d:64:ed:47:de:a5:ed:ef:ec:87:87:ba:d8:3b: 09:f8:08:bd:68:11:70:50:2d:b0:35:9d:95:12:1f:26:7f:bb: 8a:7f:21:5c:dd:af:bc:03:de:24:c5:24:2f:fd:e0:89:91:77: 87:3b:f0:31:14:88:73:81:f9:33:c5:d1:7e:94:e9:47:24:10: 2b:7a:09:e9:68:2d:83:9a:6f:54:0e:3d:03:06:29:81:8c:8f: ea:94:82:1f:24:62:62:20:50:3c:a8:49:5b:aa:d7:1a:21:d5: 55:a5:78:d7:23:25:4c:e1:0f:9d:df:9f:94:e1:65:50:e3:67: 4a:a7:29:87:8d:87:66:f2:83:80:5b:31:7f:62:b2:73:c5:4f: 97:d6:6e:d4:59:6b:8a:bc:1a:3e:7d:8f:fe:cf:30:aa:16:1e: d9:38:cd:94:31:79:3b:c8:0f:f6:87:5f:06:a5:2d:cd:9e:b9: 55:a0:d3:1e:30:b4:de:a6:78:a5:d7:b2:71:0d:e5:9c:4b:a6: 6c:e3:b5:09:d0:ad:5f:04:ed:e8:1d:65:5d:1e:27:43:4b:e7: 36:33:62:17:c7:03:25:1b:a1:c6:b4:6d:cb:6f:88:bd:6d:16: 10:42:9e:83:3c:9a:e9:f7:86:53:a7:f1:7c:9d:d0:da:1b:7f: a4:f2:01:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjQxMTIyMTc0MjI4WhcNMjQxMTI5MTc0MjI4WjAYMRYwFAYD VQQDEw02NzQwYzI4NC1hMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4rXJKtTtMAh/BdkzVhPmR1rok68JgHDcVmJuyqknUbxadR6S558JPltfyKG E9m/sS+BAIdImcW1mk7wWAor+GrHborBNrLnVFjlaKHeptE9qhmUAi4gXOEoENOo X67SJwORmk6FErJ8a/T4T3Jp4ucpVli0Mqta4btaZyclrUxjutGctNUk5kfdX4U7 CPVOczDpyK2GgDgG3xo0ZTf8T+VNQgPyMgJw1PtjM+Fqzqp5bT3JDoyNjpJkDTUS uaacCIT1QTjEv0zVJAze6ejVYqnkHrSkFBk/FC8ii5y6TdDGiCiSls9mAA5WV/fm WtUTB34L7hjhcRSyhllxjc+z8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb5B2ow CtrHQ87jrcdxy5KR6WkcMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh8IcInWTtR96l7e/sh4e62DsJ+Ai9aBFwUC2wNZ2VEh8mf7uKfyFc 3a+8A94kxSQv/eCJkXeHO/AxFIhzgfkzxdF+lOlHJBAregnpaC2Dmm9UDj0DBimB jI/qlIIfJGJiIFA8qElbqtcaIdVVpXjXIyVM4Q+d35+U4WVQ42dKpymHjYdm8oOA WzF/YrJzxU+X1m7UWWuKvBo+fY/+zzCqFh7ZOM2UMXk7yA/2h18GpS3NnrlVoNMe MLTepnil17JxDeWcS6Zs47UJ0K1fBO3oHWVdHidDS+c2M2IXxwMlG6HGtG3Lb4i9 bRYQQp6DPJrp94ZTp/F8ndDaG3+k8gF8 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org