$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json) Hash identifier: tMZi4a4abFL6UcoV2HLpE+h/H/SAbTEIQD8TVoXFOh4= Subject key identifier: DA:37:A3:F3:FE:F0:A4:65:78:11:39:5B:B5:AE:6F:39:29:D8:A3:E6 Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft Manifest number: B2 Signing time: Sat 23 Nov 2024 04:15:28 +0000 Manifest this update: Sat 23 Nov 2024 04:15:28 +0000 Manifest next update: Sat 30 Nov 2024 04:15:28 +0000 Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: 9L5F4bXjgMK4c9WWd+mY42WOo/xtOWu1HpGFYwpngN8=) 2: 7251CC7C546211EF85988412C4F9AE02.roa (hash: MXnU/QcuEmDKktg0CnuwolgKiFkbHbMHOSWdEnSOv5c=) 3: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: S3mbIiQ1nO0L4Bz9sTuCjtwzB96XobjR5ufSof/xnsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Validity Not Before: Nov 23 04:15:28 2024 GMT Not After : Nov 30 04:15:28 2024 GMT Subject: CN=674156e0-20dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:7c:21:01:ad:fe:f4:4c:69:af:76:64:b4: 91:00:ab:02:a1:52:69:0e:db:76:b9:25:f9:a6:5e: 36:57:56:e9:c9:53:83:dc:02:23:b0:ee:db:3f:50: 19:fa:23:30:93:fe:fc:13:d2:3e:ee:39:41:bd:7f: 3c:dd:2e:60:18:30:b6:d8:3b:cc:fb:c7:ec:a4:41: 15:4d:d4:ae:83:78:e6:61:17:6d:6c:38:5a:25:c4: 6e:8d:25:1c:45:24:78:39:2c:da:57:1e:b2:7e:c7: c1:6c:84:2f:79:33:22:36:39:5a:1a:f3:aa:d2:d0: 93:8e:c7:a4:ac:a8:0c:57:66:f5:c8:54:5c:80:3b: f3:dd:46:2d:b6:49:c3:d8:59:40:a1:0f:35:db:5c: f0:42:7d:44:47:60:a8:48:da:2b:67:94:1e:50:55: 7c:27:10:de:ef:bb:27:36:1b:61:0c:af:9d:06:6f: 42:4d:41:62:f5:31:8c:02:3b:f1:1a:69:57:c4:ff: bf:1f:4c:6a:a7:ca:e4:1d:ce:60:ba:c5:fb:75:fe: 45:62:19:fa:78:1e:b1:a1:95:be:56:f7:64:55:90: 80:3f:70:79:b7:14:57:c0:7f:18:60:d8:dd:9d:3f: 9f:e1:6b:5a:e5:41:98:18:82:c6:9b:f9:27:27:05: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:37:A3:F3:FE:F0:A4:65:78:11:39:5B:B5:AE:6F:39:29:D8:A3:E6 X509v3 Authority Key Identifier: keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:eb:f3:8c:a7:37:62:fc:87:54:c3:15:25:1e:6f:83:70:60: 62:87:51:4a:74:71:7d:a9:47:50:a8:d6:29:ef:7a:d0:2a:f7: 4b:9a:71:2b:39:ed:20:33:60:9a:76:cb:52:8d:24:a3:94:9f: 34:40:9a:0a:b6:67:e5:46:c2:90:9c:92:f4:2f:1b:cb:27:97: 00:61:4b:cb:d9:2d:78:84:db:5f:15:5e:d7:f1:b6:e1:86:9f: ed:8e:17:ce:d5:4c:e0:26:7d:82:e0:ed:b9:19:6f:d1:ed:38: 8c:63:be:46:32:e5:64:66:c5:d9:5c:f1:6b:f5:eb:4a:24:b6: f7:db:99:17:de:86:77:72:d0:d7:1a:af:dd:a1:30:14:14:dc: d5:3e:4c:fb:19:df:a5:7d:1e:85:c8:fe:80:ab:62:ab:62:f1: 65:5a:c3:cb:77:f0:6e:c4:f1:3a:f2:fa:c8:03:29:a3:8e:f9: 01:16:58:3c:bc:26:cc:ba:50:2a:72:4f:3f:a1:e4:7a:03:75: bb:bf:ee:43:9c:4d:47:67:06:f3:c4:d8:49:52:f7:42:ce:9f: f5:82:eb:de:ae:74:14:97:68:7a:b5:33:65:6a:ed:4f:8e:fb: 72:46:b8:2e:26:78:aa:c8:1b:3e:b2:75:a5:a0:54:e6:1f:06: 81:6d:fd:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDcxMTAvBgNVBAUTKDcwQ0QwMkI2NjQyNDc5QTg3NDQ2MjcxNTcwNkU2QUE5 QTg5REEyQzkwHhcNMjQxMTIzMDQxNTI4WhcNMjQxMTMwMDQxNTI4WjAYMRYwFAYD VQQDEw02NzQxNTZlMC0yMGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzr18IQGt/vRMaa92ZLSRAKsCoVJpDtt2uSX5pl42V1bpyVOD3AIjsO7bP1AZ +iMwk/78E9I+7jlBvX883S5gGDC22DvM+8fspEEVTdSug3jmYRdtbDhaJcRujSUc RSR4OSzaVx6yfsfBbIQveTMiNjlaGvOq0tCTjsekrKgMV2b1yFRcgDvz3UYttknD 2FlAoQ8121zwQn1ER2CoSNorZ5QeUFV8JxDe77snNhthDK+dBm9CTUFi9TGMAjvx GmlXxP+/H0xqp8rkHc5gusX7df5FYhn6eB6xoZW+VvdkVZCAP3B5txRXwH8YYNjd nT+f4Wta5UGYGILGm/knJwVFYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNo3o/P+ 8KRleBE5W7Wubzkp2KPmMB8GA1UdIwQYMBaAFHDNArZkJHmodEYnFXBuaqmonaLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZENy83MUE1MTU3NEFF RjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2VhaDBSaWNWY0c1cXFhaWRv c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMEN0bVFrZWFoMFJpY1ZjRzVxcWFpZG9zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZENy83MUE1MTU3NEFFRjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2Vh aDBSaWNWY0c1cXFhaWRvc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS6/OMpzdi/IdUwxUlHm+DcGBih1FKdHF9qUdQqNYp73rQKvdLmnEr Oe0gM2CadstSjSSjlJ80QJoKtmflRsKQnJL0LxvLJ5cAYUvL2S14hNtfFV7X8bbh hp/tjhfO1UzgJn2C4O25GW/R7TiMY75GMuVkZsXZXPFr9etKJLb325kX3oZ3ctDX Gq/doTAUFNzVPkz7Gd+lfR6FyP6Aq2KrYvFlWsPLd/BuxPE68vrIAymjjvkBFlg8 vCbMulAqck8/oeR6A3W7v+5DnE1HZwbzxNhJUvdCzp/1guvernQUl2h6tTNlau1P jvtyRrguJniqyBs+snWloFTmHwaBbf2j -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:22 2024 by rpki-client on console-ams.rpki-client.org