$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft File: 4vB0KtgKnbsodRhO4N1elN11eEs.mft (raw, json) Hash identifier: yR3qYwQZZAiQK7+OZi2sv+n5tVIDYikiG7f2gQS1gO8= Subject key identifier: E2:00:AD:F7:49:1A:4B:93:17:80:5D:9C:BA:27:F0:26:21:29:21:1F Authority key identifier: E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B Certificate issuer: /CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Certificate serial: 1B7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft Manifest number: 1B74 Signing time: Fri 22 Nov 2024 16:15:57 +0000 Manifest this update: Fri 22 Nov 2024 16:15:56 +0000 Manifest next update: Fri 29 Nov 2024 16:15:56 +0000 Files and hashes: 1: 4vB0KtgKnbsodRhO4N1elN11eEs.crl (hash: 4mUgWwuIXiVPhhrs/m6+DUIdsfgHamYNNd9bt+Td884=) 2: A88F22ECCC7011ED931BD15FC4F9AE02.roa (hash: BCcYD/VfHPlrE1idB6qMcYHXBoKVsq99H3ysbvhT4uw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7038 (0x1b7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23FE/serialNumber=E2F0742AD80A9DBB2875184EE0DD5E94DD75784B Validity Not Before: Nov 22 16:15:56 2024 GMT Not After : Nov 29 16:15:56 2024 GMT Subject: CN=6740ae3d-69b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0c:72:65:18:29:48:89:1e:29:28:ae:10:c1: b4:37:0f:74:b4:e7:f3:c0:d1:21:b6:46:f7:63:cf: 5f:1e:02:1e:41:1e:ed:04:14:6c:a8:c9:bd:b0:9d: 8a:3b:e4:9d:40:36:c6:0a:45:09:60:74:74:de:19: 4f:18:50:d3:83:79:76:6c:55:f0:3f:58:48:3a:0d: b4:6a:e9:1e:42:f9:4c:be:83:f4:9f:83:90:6a:2d: 19:ed:cc:81:e1:c4:7c:4a:aa:a3:13:b1:5d:06:f6: 01:4c:58:1a:71:80:83:aa:4e:eb:86:ce:16:6b:82: a3:75:06:46:25:2b:c5:b3:5a:84:1d:6e:88:2b:75: ac:d9:cb:fd:50:25:f8:c4:20:73:4a:12:bf:5d:49: 12:6a:f5:8c:27:1a:3e:a6:9d:2d:c5:35:6b:1d:fd: 5e:e0:a8:65:45:2e:02:6f:d4:85:49:36:9d:7c:4c: ce:29:38:40:2e:72:f7:3c:1d:80:79:13:00:06:a0: 11:69:f6:f1:00:15:64:7f:1d:6e:89:da:70:fa:6b: b5:fb:7f:14:9b:09:97:11:47:85:07:7a:42:ab:dd: 5a:8c:2b:40:88:66:2a:74:b9:0c:3f:e5:27:87:81: 0f:3b:be:11:b6:1f:9a:8e:42:38:e3:b7:58:58:37: 37:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:00:AD:F7:49:1A:4B:93:17:80:5D:9C:BA:27:F0:26:21:29:21:1F X509v3 Authority Key Identifier: keyid:E2:F0:74:2A:D8:0A:9D:BB:28:75:18:4E:E0:DD:5E:94:DD:75:78:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vB0KtgKnbsodRhO4N1elN11eEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23FE/825CE9AAF9EB11E6BDE7A968C4F9AE02/4vB0KtgKnbsodRhO4N1elN11eEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:c3:22:99:33:77:fb:f0:3f:c8:34:80:00:da:1f:64:3f:21: bb:74:b2:6e:89:eb:93:12:de:90:93:93:5c:c0:39:d1:d1:9b: 58:cf:48:49:b6:7e:4f:24:5c:4d:37:3e:35:c4:45:0b:ef:7f: 23:3e:6a:bd:3e:2d:7a:fe:0d:75:1e:6d:69:16:db:a8:6d:64: 56:26:6a:25:7e:42:b2:9a:e8:df:0c:63:bc:b1:81:72:b7:4f: ec:f7:b6:ef:7a:9b:5b:b8:a7:6b:31:e3:91:e0:bd:f5:28:1e: 83:cb:9b:b5:2e:4f:f0:62:bd:5c:e5:ed:8d:b2:b0:8c:b7:cb: 30:49:ea:fd:33:1d:18:27:39:d9:33:59:87:7c:33:c0:21:03: 99:02:e6:ac:32:48:54:7f:b7:df:82:23:9f:eb:3e:97:df:45: 69:b9:35:9d:1e:55:f4:cc:bc:dd:2a:84:ce:3e:2a:90:63:86: d2:f8:d2:2d:75:bd:5a:63:e0:84:42:e7:16:12:25:cc:8a:67: 90:41:81:c6:5e:14:8e:40:8c:bf:7d:ba:0a:bb:f3:07:34:b8: e4:8e:96:ec:6e:79:98:be:8c:aa:9a:f6:90:6a:57:ae:ee:25: 61:62:79:9e:b5:23:40:b9:c3:99:93:09:e2:c0:e7:4e:2c:7b: 62:15:ac:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzRkUxMTAvBgNVBAUTKEUyRjA3NDJBRDgwQTlEQkIyODc1MTg0RUUwREQ1RTk0 REQ3NTc4NEIwHhcNMjQxMTIyMTYxNTU2WhcNMjQxMTI5MTYxNTU2WjAYMRYwFAYD VQQDEw02NzQwYWUzZC02OWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gxyZRgpSIkeKSiuEMG0Nw90tOfzwNEhtkb3Y89fHgIeQR7tBBRsqMm9sJ2K O+SdQDbGCkUJYHR03hlPGFDTg3l2bFXwP1hIOg20aukeQvlMvoP0n4OQai0Z7cyB 4cR8SqqjE7FdBvYBTFgacYCDqk7rhs4Wa4KjdQZGJSvFs1qEHW6IK3Ws2cv9UCX4 xCBzShK/XUkSavWMJxo+pp0txTVrHf1e4KhlRS4Cb9SFSTadfEzOKThALnL3PB2A eRMABqARafbxABVkfx1uidpw+mu1+38UmwmXEUeFB3pCq91ajCtAiGYqdLkMP+Un h4EPO74Rth+ajkI447dYWDc3dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIArfdJ GkuTF4BdnLon8CYhKSEfMB8GA1UdIwQYMBaAFOLwdCrYCp27KHUYTuDdXpTddXhL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNGRS84MjVDRTlBQUY5 RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25ic29kUmhPNE4xZWxOMTFl RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR2QjBLdGdLbmJzb2RSaE80TjFlbE4xMWVFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNGRS84MjVDRTlBQUY5RUIxMUU2QkRFN0E5NjhDNEY5QUUwMi80dkIwS3RnS25i c29kUmhPNE4xZWxOMTFlRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQwyKZM3f78D/INIAA2h9kPyG7dLJuieuTEt6Qk5NcwDnR0ZtYz0hJ tn5PJFxNNz41xEUL738jPmq9Pi16/g11Hm1pFtuobWRWJmolfkKymujfDGO8sYFy t0/s97bveptbuKdrMeOR4L31KB6Dy5u1Lk/wYr1c5e2NsrCMt8swSer9Mx0YJznZ M1mHfDPAIQOZAuasMkhUf7ffgiOf6z6X30VpuTWdHlX0zLzdKoTOPiqQY4bS+NIt db1aY+CEQucWEiXMimeQQYHGXhSOQIy/fboKu/MHNLjkjpbsbnmYvoyqmvaQaleu 7iVhYnmetSNAucOZkwniwOdOLHtiFaxu -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:16 2024 by rpki-client on console-ams.rpki-client.org