$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft File: S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json) Hash identifier: K/s69ye+OFwjZc4wx5ObXQcBjQ5/GMgLTeNTmjQN04k= Subject key identifier: E2:68:94:13:87:F5:FE:C4:BF:F0:EE:71:4B:BD:79:9D:9F:F7:C5:36 Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A Certificate issuer: /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Certificate serial: 0A9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft Manifest number: 0A95 Signing time: Fri 22 Nov 2024 19:19:24 +0000 Manifest this update: Fri 22 Nov 2024 19:19:24 +0000 Manifest next update: Fri 29 Nov 2024 19:19:24 +0000 Files and hashes: 1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: 37kt3DaIr5mox49efeyM+N6YNdms81jKKURg1sPf5l0=) 2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: +EH85YAp1dcpIF99ICzGj5geNh5nH/fjSqrNCHc2CX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2715 (0xa9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Validity Not Before: Nov 22 19:19:24 2024 GMT Not After : Nov 29 19:19:24 2024 GMT Subject: CN=6740d93c-4a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:44:11:b4:8e:b4:97:40:52:ae:a5:c4:d6: 34:7e:d4:13:9d:65:6c:e7:7c:1d:5c:bb:ff:d7:d0: 52:26:5a:16:d5:b8:e6:77:7d:69:5e:b3:91:7b:09: c5:cc:6c:a0:8e:8d:c9:6f:ed:d0:08:26:71:08:74: 2f:92:50:72:8d:8c:25:e7:61:8e:de:9c:f5:a1:df: 79:b9:1c:32:3c:25:76:a1:c5:f3:fa:7e:e0:bb:25: 80:be:83:dc:b2:e4:e9:14:c4:89:a7:6f:b9:f1:28: a9:c8:07:6e:a9:09:90:47:63:83:f8:a1:f6:a3:8c: 6f:ef:68:dc:51:61:96:e5:9a:01:15:cf:89:38:26: 05:48:6e:a5:0e:cd:5b:15:6a:5c:76:fe:8b:2f:20: 56:b1:a8:40:41:ce:83:0a:c4:ec:e8:d0:c0:49:96: 1c:8e:d3:7a:0e:39:30:04:6d:99:fd:89:0d:11:d1: 4b:d2:85:39:3a:23:0e:92:ac:fd:b6:5e:9d:a6:3b: 1b:ec:f6:9b:39:1b:f0:f0:d4:ee:0a:0d:c2:9d:d7: 68:ec:36:88:c2:55:2b:7e:ed:b4:5b:50:90:1a:af: 9b:72:1b:27:d5:9a:3f:20:1b:e5:c2:d8:12:0a:c1: 83:89:50:5f:97:b5:29:2f:b9:c8:a7:0e:7a:b9:65: 0b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:68:94:13:87:F5:FE:C4:BF:F0:EE:71:4B:BD:79:9D:9F:F7:C5:36 X509v3 Authority Key Identifier: keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:ad:b6:c1:00:bb:f1:fa:f9:26:2c:16:05:07:9d:05:9b:8a: ce:85:eb:07:79:4f:28:55:97:ae:77:5b:50:92:3b:ee:96:01: 35:5a:4f:da:52:1d:84:f7:19:01:32:22:5a:a0:f1:d0:5a:34: 3e:c4:57:68:51:a7:90:a7:cf:01:00:7b:15:ce:c0:0c:09:8a: 20:f0:ad:b7:25:21:07:2f:b1:dc:c7:2f:6e:64:72:b5:13:0d: 2f:cf:54:50:cc:2d:9a:2c:f2:80:0e:b5:45:ac:59:14:49:61: ff:45:d5:1a:fd:a9:ac:8b:cd:33:06:2f:86:58:eb:df:0b:a8: 17:79:cf:d1:c3:c2:f8:a6:88:12:57:20:a6:34:0d:d5:ce:6d: 0c:a5:83:13:79:19:ec:8d:58:ea:05:29:f6:98:5a:05:a3:5b: c2:c5:c1:6e:7b:8a:0c:d3:02:fb:3b:ed:1a:6a:44:4b:36:5c: 26:b8:af:37:b2:8c:39:1a:35:f6:f3:fc:b6:ae:33:12:f0:6b: 97:c6:8e:d8:91:3d:a1:f9:3e:6e:fd:bf:35:53:9a:17:4a:36: 5e:ef:c3:13:a5:43:88:fb:96:48:d6:1e:44:72:59:d3:06:0b: 12:d4:d1:9d:93:40:48:71:ed:b1:6b:f6:09:ad:07:56:56:4e: 73:ff:e0:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw RjcyODdDOUEwHhcNMjQxMTIyMTkxOTI0WhcNMjQxMTI5MTkxOTI0WjAYMRYwFAYD VQQDEw02NzQwZDkzYy00YTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVhEEbSOtJdAUq6lxNY0ftQTnWVs53wdXLv/19BSJloW1bjmd31pXrORewnF zGygjo3Jb+3QCCZxCHQvklByjYwl52GO3pz1od95uRwyPCV2ocXz+n7guyWAvoPc suTpFMSJp2+58SipyAduqQmQR2OD+KH2o4xv72jcUWGW5ZoBFc+JOCYFSG6lDs1b FWpcdv6LLyBWsahAQc6DCsTs6NDASZYcjtN6DjkwBG2Z/YkNEdFL0oU5OiMOkqz9 tl6dpjsb7PabORvw8NTuCg3Cnddo7DaIwlUrfu20W1CQGq+bchsn1Zo/IBvlwtgS CsGDiVBfl7UpL7nIpw56uWULtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJolBOH 9f7Ev/DucUu9eZ2f98U2MB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1 QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAzOS8yNTY3NkRGMDQ1QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBH LXEzSkl6aUxtR1lQY29mSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSrbbBALvx+vkmLBYFB50Fm4rOhesHeU8oVZeud1tQkjvulgE1Wk/a Uh2E9xkBMiJaoPHQWjQ+xFdoUaeQp88BAHsVzsAMCYog8K23JSEHL7Hcxy9uZHK1 Ew0vz1RQzC2aLPKADrVFrFkUSWH/RdUa/amsi80zBi+GWOvfC6gXec/Rw8L4pogS VyCmNA3Vzm0MpYMTeRnsjVjqBSn2mFoFo1vCxcFue4oM0wL7O+0aakRLNlwmuK83 sow5GjX28/y2rjMS8GuXxo7YkT2h+T5u/b81U5oXSjZe78MTpUOI+5ZI1h5EclnT BgsS1NGdk0BIce2xa/YJrQdWVk5z/+CV -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:32 2024 by rpki-client on console-fra.rpki-client.org