$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft File: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft (raw, json) Hash identifier: FJToa0PVVaXGF8IKf+aitfho+OBVaNt4s8WIBipR9Tw= Subject key identifier: AD:BE:FC:03:6F:7A:0C:81:B0:D8:71:3C:DC:55:D0:7B:C8:35:52:86 Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 0F52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft Manifest number: 0EE9 Signing time: Wed 20 Nov 2024 17:37:48 +0000 Manifest this update: Wed 20 Nov 2024 17:37:48 +0000 Manifest next update: Wed 27 Nov 2024 17:37:48 +0000 Files and hashes: 1: d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl (hash: Tzuo9+1pJ+GIIkAOb9TWukfXKrea+c7tgU5zX9Rjjgo=) 2: 931E0F7681C911EFA5B1D80BC4F9AE02.roa (hash: 3+LMg/UqEn9I3nJe/StT1XRQjadAQ+o1wAjq5EdYwx0=) 3: B35E5B46334111EF9770A542C4F9AE02.roa (hash: POv6am3kG0Q+Q6wUXCA7wbkvozTpMjE+VV+U9mmfNA0=) 4: B1F39E9C334111EF9770A542C4F9AE02.roa (hash: o5RIBT+FmS+BivBjv2JSc02ogBWHDPfxehOosN6/sX4=) 5: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (hash: XBeLByasLFAR8do7tNTxhh0jQtZtivMveMhhIQYYpGw=) 6: B2A71CE2334111EF9770A542C4F9AE02.roa (hash: 2b7V4cYLeCzYjzBXZFvQMUaMHyWPksazIYG9zve5Hx8=) 7: B431D7F0334111EF9770A542C4F9AE02.roa (hash: Xr2vVZFsdoKESdLFd5/aMVSCMJCON8AUPU5aD5Gvk7Y=) 8: 7BD12E3A480811EE8C512B0DC4F9AE02.roa (hash: xDNVgmjN9DxZxjXVEWTQzbIsIGQRcVSh7mJ/JhS9bSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 17:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3922 (0xf52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Nov 20 17:37:48 2024 GMT Not After : Nov 27 17:37:48 2024 GMT Subject: CN=673e1e6c-f63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:5c:76:d8:72:46:aa:1e:7a:bf:aa:5f:7c: 78:b6:85:e3:c3:3b:fd:b4:cc:82:b1:00:0f:3b:45: 7d:f2:b4:56:8b:15:56:83:a4:4e:79:10:11:7e:be: a1:98:9e:a6:31:08:40:74:f8:01:a3:51:b0:ab:07: 44:71:31:11:a5:f5:3f:b7:3b:25:f2:a1:d2:1f:78: 31:01:1e:5c:04:97:61:dd:73:c4:8a:28:ab:34:65: 98:7a:4a:60:30:77:fe:df:7c:6c:ab:47:45:2a:8e: 7e:75:49:72:aa:17:4c:f3:e4:2b:8d:4b:67:74:89: c9:6d:51:e9:18:b3:0f:e6:d8:c1:6c:07:b9:e4:b6: 0d:d6:da:9f:8d:70:85:19:af:9f:ec:37:f9:58:aa: 94:c3:3b:d2:75:c7:72:97:be:52:e3:6b:e0:bc:27: 6b:6e:be:1a:95:fb:23:7f:0e:a4:18:d6:ac:bc:65: 35:ca:0f:48:a4:a4:d6:cc:c5:b0:d8:a1:fe:e7:0d: 5d:68:27:f4:66:35:3d:8e:62:1b:4a:df:c1:a2:14: 8b:85:2f:8a:5f:99:bf:2d:3c:5d:1a:31:c7:34:57: 5c:a0:a7:ba:a1:27:70:50:db:5e:8a:01:ae:4c:a9: 6e:89:37:f2:ad:da:cb:7b:ea:f9:be:23:78:6e:33: de:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BE:FC:03:6F:7A:0C:81:B0:D8:71:3C:DC:55:D0:7B:C8:35:52:86 X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:0a:8c:e4:55:b4:f4:93:f1:97:51:14:2b:8b:72:8b:67:45: f5:ed:18:4b:51:95:49:ba:1a:15:b5:c8:8d:b5:3e:84:d0:91: a7:3c:68:40:b7:aa:e0:af:c1:01:6c:fd:3b:54:da:38:cc:48: e4:7f:f9:c3:83:99:d3:85:ed:10:ed:34:f8:43:c1:e5:f8:e0: 72:cf:b0:7e:3c:1f:4e:06:44:05:69:d8:23:2e:30:47:bc:2d: bb:46:2e:f2:36:42:c6:0e:d2:6b:d0:91:91:04:36:79:19:5e: bb:a5:16:3e:c7:90:66:50:13:c2:28:0d:36:67:9b:57:1a:48: de:69:e7:ab:61:bb:e2:cb:ce:2e:b8:f1:67:20:19:43:96:1c: 1b:a6:47:88:85:44:51:78:c8:90:05:13:9b:1d:07:0f:82:15: a8:59:3a:25:72:72:be:3e:66:cf:03:78:8e:dd:24:00:86:dd: 25:47:69:ac:09:8b:f1:12:ab:d0:23:50:d6:d8:c7:aa:04:72: 48:01:bf:80:4d:92:29:07:1e:48:94:de:99:b3:00:45:df:2e: c3:ce:0b:51:24:98:87:fe:b6:8f:65:d2:69:d0:28:84:59:2c: 3d:c4:6f:d7:e2:b0:d8:57:4e:37:80:a2:25:49:77:de:a8:d8: 71:00:63:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjQxMTIwMTczNzQ4WhcNMjQxMTI3MTczNzQ4WjAYMRYwFAYD VQQDEw02NzNlMWU2Yy1mNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEdcdthyRqoeer+qX3x4toXjwzv9tMyCsQAPO0V98rRWixVWg6ROeRARfr6h mJ6mMQhAdPgBo1GwqwdEcTERpfU/tzsl8qHSH3gxAR5cBJdh3XPEiiirNGWYekpg MHf+33xsq0dFKo5+dUlyqhdM8+QrjUtndInJbVHpGLMP5tjBbAe55LYN1tqfjXCF Ga+f7Df5WKqUwzvSdcdyl75S42vgvCdrbr4alfsjfw6kGNasvGU1yg9IpKTWzMWw 2KH+5w1daCf0ZjU9jmIbSt/BohSLhS+KX5m/LTxdGjHHNFdcoKe6oSdwUNteigGu TKluiTfyrdrLe+r5viN4bjPetQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2+/ANv egyBsNhxPNxV0HvINVKGMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNDNy83OTFDNkEzNDdCMzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91 dmFqeVZjVUJRUnNCOFlfMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARCozkVbT0k/GXURQri3KLZ0X17RhLUZVJuhoVtciNtT6E0JGnPGhA t6rgr8EBbP07VNo4zEjkf/nDg5nThe0Q7TT4Q8Hl+OByz7B+PB9OBkQFadgjLjBH vC27Ri7yNkLGDtJr0JGRBDZ5GV67pRY+x5BmUBPCKA02Z5tXGkjeaeerYbviy84u uPFnIBlDlhwbpkeIhURReMiQBRObHQcPghWoWTolcnK+PmbPA3iO3SQAht0lR2ms CYvxEqvQI1DW2MeqBHJIAb+ATZIpBx5IlN6ZswBF3y7DzgtRJJiH/raPZdJp0CiE WSw9xG/X4rDYV043gKIlSXfeqNhxAGMA -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:06 2024 by rpki-client on console-ams.rpki-client.org