$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json) Hash identifier: A7n/YwVE8+8hXyjtCtOA5r5396agovPODR2VxXO6W4E= Subject key identifier: 84:E0:5E:FA:69:03:BE:21:D7:B6:80:AA:9F:29:79:55:CA:C7:5D:21 Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft Manifest number: 91 Signing time: Sat 23 Nov 2024 04:31:52 +0000 Manifest this update: Sat 23 Nov 2024 04:31:51 +0000 Manifest next update: Sat 30 Nov 2024 04:31:51 +0000 Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: e7U591bwtAY3DFjikKDGHZzvFt8v85jm/WsnRaVtrQo=) 2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: Ed+WGj4YoSK8RoZY5/E6txkQiwmhNLhgRfvyu7U8cGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Validity Not Before: Nov 23 04:31:51 2024 GMT Not After : Nov 30 04:31:51 2024 GMT Subject: CN=67415ab8-db61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:10:57:2b:5c:76:a6:7d:c6:71:29:34:93: f2:95:de:1f:fd:c6:c6:59:0c:1d:93:79:24:72:6d: 7d:3b:9c:a6:77:eb:38:f4:8e:5e:ad:13:e8:38:1e: aa:8e:7c:88:1f:bd:ed:ea:22:c1:e5:d3:75:34:42: bb:11:36:ec:c2:e3:46:3a:86:22:54:28:e2:dd:d2: 52:18:88:20:d3:12:f1:09:f6:ae:af:82:72:d6:f7: a9:0f:a3:d6:37:f9:33:0a:a9:77:9a:ee:40:57:ec: 4e:04:48:c4:11:55:e9:b1:0e:22:17:af:cd:a2:c2: 1c:1d:f2:74:54:05:4e:71:3a:4f:7e:6a:bf:f0:e5: e1:6c:54:86:9e:53:ae:a2:5b:a6:82:14:20:04:2b: 78:10:6c:2c:ff:c5:fb:1d:f2:3a:28:51:be:73:27: 68:1b:9c:d3:5b:80:85:97:97:2c:35:1f:1d:aa:63: 74:96:c5:a1:60:16:e4:45:ef:c4:f6:b5:af:33:1a: b9:a4:c8:87:25:57:7a:88:7f:87:00:4f:91:dc:24: 2f:59:50:72:19:dc:b3:4c:c2:65:40:86:ea:40:8e: b4:d7:16:e9:3c:81:fe:ee:5b:17:f6:3e:7d:d8:36: 15:01:2d:25:ec:be:bd:57:07:bd:fd:fe:43:97:55: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E0:5E:FA:69:03:BE:21:D7:B6:80:AA:9F:29:79:55:CA:C7:5D:21 X509v3 Authority Key Identifier: keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:82:05:1f:7f:87:d0:f2:fb:b3:87:39:2b:da:30:62:5a:71: 6c:9c:7b:0c:5b:12:bb:c5:32:09:bf:75:a2:47:1b:b5:a7:c2: a2:ab:3a:e0:b2:5e:76:4c:41:60:a5:1d:d0:e6:3d:e9:1f:c8: 7a:fb:90:2b:d1:6b:dd:cc:9b:4f:ab:c6:34:cf:10:80:14:e0: 46:71:23:6c:d5:7c:1b:54:fa:c6:d4:4d:cf:52:42:b8:02:7c: 65:80:4a:a1:ec:b5:22:4f:b8:69:08:a5:1c:19:9a:22:e6:02: 42:0d:e0:f3:bc:35:1b:f0:b7:85:fd:65:71:7e:a4:94:17:74: 49:26:f7:f9:84:42:af:80:47:d2:c2:fc:71:62:dc:94:62:ca: 31:4e:da:4c:28:05:61:ba:6b:1a:bc:16:43:67:69:29:46:b8: 97:39:c2:32:cb:db:3b:18:03:d4:93:11:b9:e3:2d:83:f2:9e: f3:b5:44:15:51:cf:04:ac:d0:49:e4:68:3f:29:9d:27:9b:d5: 13:0c:ea:2e:10:93:a6:0c:1d:fd:37:10:5f:38:2c:89:65:ba: 34:dc:93:38:b6:28:53:ff:4a:2a:33:f6:58:ce:0a:06:dc:96: db:b3:f3:0f:aa:da:e4:19:30:67:d2:43:ab:e8:a0:55:e0:6b: 7e:08:5b:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFREYxMTAvBgNVBAUTKDhCNjQxOTY4NjkxMTdCOTlCODc5QjREQ0JBRjA0Mjkw QkMxNjgxMEMwHhcNMjQxMTIzMDQzMTUxWhcNMjQxMTMwMDQzMTUxWjAYMRYwFAYD VQQDEw02NzQxNWFiOC1kYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiIQVytcdqZ9xnEpNJPyld4f/cbGWQwdk3kkcm19O5ymd+s49I5erRPoOB6q jnyIH73t6iLB5dN1NEK7ETbswuNGOoYiVCji3dJSGIgg0xLxCfaur4Jy1vepD6PW N/kzCql3mu5AV+xOBEjEEVXpsQ4iF6/NosIcHfJ0VAVOcTpPfmq/8OXhbFSGnlOu olumghQgBCt4EGws/8X7HfI6KFG+cydoG5zTW4CFl5csNR8dqmN0lsWhYBbkRe/E 9rWvMxq5pMiHJVd6iH+HAE+R3CQvWVByGdyzTMJlQIbqQI601xbpPIH+7lsX9j59 2DYVAS0l7L69Vwe9/f5Dl1XjkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITgXvpp A74h17aAqp8peVXKx10hMB8GA1UdIwQYMBaAFItkGWhpEXuZuHm03LrwQpC8FoEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEVERi8zREUzOUU4MkNG QUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1bTRlYlRjdXZCQ2tMd1dn UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEVERi8zREUzOUU4MkNGQUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1 bTRlYlRjdXZCQ2tMd1dnUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ggUff4fQ8vuzhzkr2jBiWnFsnHsMWxK7xTIJv3WiRxu1p8Kiqzrg sl52TEFgpR3Q5j3pH8h6+5Ar0WvdzJtPq8Y0zxCAFOBGcSNs1XwbVPrG1E3PUkK4 AnxlgEqh7LUiT7hpCKUcGZoi5gJCDeDzvDUb8LeF/WVxfqSUF3RJJvf5hEKvgEfS wvxxYtyUYsoxTtpMKAVhumsavBZDZ2kpRriXOcIyy9s7GAPUkxG54y2D8p7ztUQV Uc8ErNBJ5Gg/KZ0nm9UTDOouEJOmDB39NxBfOCyJZbo03JM4tihT/0oqM/ZYzgoG 3Jbbs/MPqtrkGTBn0kOr6KBV4Gt+CFtP -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:22 2024 by rpki-client on console-ams.rpki-client.org