$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft File: RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft (raw, json) Hash identifier: 4blXTNIrnKltyZXQEuf4mZKsJxw5aikAVyOaKgo2pKA= Subject key identifier: 2F:69:70:C8:7F:D9:3F:1C:0A:71:69:D7:53:1C:83:6C:66:A3:F0:D6 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0B0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft Manifest number: 0AF0 Signing time: Wed 20 Nov 2024 19:05:46 +0000 Manifest this update: Wed 20 Nov 2024 19:05:46 +0000 Manifest next update: Wed 27 Nov 2024 19:05:46 +0000 Files and hashes: 1: RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl (hash: 8eCMc3XrtLMg+aT0S0q27wQUq0Edg3TNRIenz4CHZDI=) 2: BFE21FE09B0511EDB2F0BD4EC4F9AE02.roa (hash: HsUFhnyNSyJhti2UoaZI6KVexsqtQUo3nTuJz6oOW4Q=) 3: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (hash: 6biR6MQ0JUDTuMdhFEHjNfr8X+saMuO1Yl6P4/jh0zs=) 4: 3C726724C06211EC93514712C4F9AE02.roa (hash: KMcvzUrwYvv7qojBnwefCUmBg96+35aVlS8PqzGenGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2826 (0xb0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Nov 20 19:05:46 2024 GMT Not After : Nov 27 19:05:46 2024 GMT Subject: CN=673e330a-667c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ab:88:c0:47:d6:d5:a4:c3:38:3d:4a:c1:91: 80:46:43:98:fe:be:f5:bb:50:59:bb:2d:4e:8c:63: 98:a3:87:7a:91:e6:37:46:59:9c:cf:b6:8f:fa:04: ae:0f:f0:c6:90:93:8a:19:85:d0:3f:e5:b8:59:92: 34:36:c2:d9:7f:fb:5b:77:85:eb:d5:c6:e4:d3:26: 58:20:02:93:9b:7f:b0:f7:12:bc:9a:96:44:89:e4: 62:54:79:09:10:34:38:1e:85:09:2f:f1:7c:7c:4e: 64:73:ae:28:95:67:eb:cf:f6:da:e2:15:af:3f:b0: f1:0a:26:7f:8e:35:81:6b:fb:23:41:97:b6:b6:ce: fb:b1:b4:e9:38:33:21:b6:ba:51:b5:3a:c6:dc:c8: 82:3e:9c:8f:5f:b7:86:00:b2:02:d3:43:53:9e:30: a2:fc:66:dc:e1:71:e1:9e:78:bd:c7:5d:0a:56:d5: ce:42:44:e5:0b:46:16:07:28:a8:c9:3a:62:f7:a7: c0:ad:a7:23:97:4f:e7:a0:c6:e3:b2:0d:97:ad:05: 94:aa:d3:54:36:dd:04:af:79:ce:e0:d7:99:05:47: 13:95:0e:e8:51:23:16:30:ce:91:33:92:b2:d6:c4: aa:73:fd:88:c7:21:70:ee:c1:39:f0:98:98:90:f5: b7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:69:70:C8:7F:D9:3F:1C:0A:71:69:D7:53:1C:83:6C:66:A3:F0:D6 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:e1:f2:32:30:2b:2e:8e:55:05:35:36:61:cc:d4:f8:66:61: 49:88:01:39:28:b6:3e:96:ee:c5:4f:5a:28:52:95:73:d3:2b: a8:0a:bb:3e:1b:c7:35:c3:a3:10:10:f8:b3:60:59:c7:38:eb: 3c:37:29:3d:7b:0e:36:8b:a0:e6:6b:a5:81:39:c2:7a:54:7c: 8a:08:b4:27:80:31:6a:d0:bd:b8:38:14:9d:01:a2:0b:48:7a: 72:73:c8:e9:67:6e:d3:f9:4d:2b:68:ce:07:9b:82:56:88:33: 31:f3:6b:a6:32:a6:20:24:3f:74:8b:c8:b8:7b:b6:9b:45:44: c5:dd:38:c7:9d:9d:b9:45:e5:21:81:04:d0:10:24:fc:18:b9: e6:3e:66:b2:29:f4:d2:20:2f:ba:3f:1e:5f:f3:ce:55:d1:98: 9c:e4:10:3e:d6:34:74:20:de:14:3a:23:21:c8:92:61:3a:2c: dc:dc:d0:8d:dc:a0:44:13:e4:ad:63:f0:18:fb:7c:1c:7d:17: 16:fd:f4:ae:b9:20:df:49:c2:59:ae:70:4f:53:60:66:1f:9e: 0a:c7:2c:96:02:6a:6b:45:94:38:58:71:c9:cb:ee:42:97:f6: 19:d4:f6:86:f7:ce:ff:10:10:38:13:91:6e:44:96:27:21:ba: 17:da:db:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjQxMTIwMTkwNTQ2WhcNMjQxMTI3MTkwNTQ2WjAYMRYwFAYD VQQDEw02NzNlMzMwYS02NjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0quIwEfW1aTDOD1KwZGARkOY/r71u1BZuy1OjGOYo4d6keY3Rlmcz7aP+gSu D/DGkJOKGYXQP+W4WZI0NsLZf/tbd4Xr1cbk0yZYIAKTm3+w9xK8mpZEieRiVHkJ EDQ4HoUJL/F8fE5kc64olWfrz/ba4hWvP7DxCiZ/jjWBa/sjQZe2ts77sbTpODMh trpRtTrG3MiCPpyPX7eGALIC00NTnjCi/Gbc4XHhnni9x10KVtXOQkTlC0YWByio yTpi96fAracjl0/noMbjsg2XrQWUqtNUNt0Er3nO4NeZBUcTlQ7oUSMWMM6RM5Ky 1sSqc/2IxyFw7sE58JiYkPW3fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9pcMh/ 2T8cCnFp11Mcg2xmo/DWMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0I4QS8wOEM0MzkyNDM4NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9Z cnhFdHgydGZYZm5tdDVRTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF4fIyMCsujlUFNTZhzNT4ZmFJiAE5KLY+lu7FT1ooUpVz0yuoCrs+ G8c1w6MQEPizYFnHOOs8Nyk9ew42i6Dma6WBOcJ6VHyKCLQngDFq0L24OBSdAaIL SHpyc8jpZ27T+U0raM4Hm4JWiDMx82umMqYgJD90i8i4e7abRUTF3TjHnZ25ReUh gQTQECT8GLnmPmayKfTSIC+6Px5f885V0Zic5BA+1jR0IN4UOiMhyJJhOizc3NCN 3KBEE+StY/AY+3wcfRcW/fSuuSDfScJZrnBPU2BmH54KxyyWAmprRZQ4WHHJy+5C l/YZ1PaG987/EBA4E5FuRJYnIboX2tvB -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:58 2024 by rpki-client on console-ams.rpki-client.org