$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft File: A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json) Hash identifier: S1yXVoUZANJ/BPX82GGfS+ZPdoxBbFtPpiUItbQKUl8= Subject key identifier: 72:F9:87:02:A0:90:41:EB:9B:45:C8:25:41:77:3A:11:DB:BB:F3:9A Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 Certificate issuer: /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Certificate serial: 0B8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft Manifest number: 0B7C Signing time: Fri 22 Nov 2024 18:48:46 +0000 Manifest this update: Fri 22 Nov 2024 18:48:45 +0000 Manifest next update: Fri 29 Nov 2024 18:48:45 +0000 Files and hashes: 1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: AdpY+lgTFSEw6cb2ucA8pexoSW1dk21gPbWkx4jq7uk=) 2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: d0pBZZ4RvHYAFaiTNU/2gKYjejf//tWF0XMSJbZsqXg=) 3: 398848523A0011EFB7007939C4F9AE02.roa (hash: g/48h2ExElnkoWctOHQeDXu24OxHb6yA2ORuNL7eIjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2959 (0xb8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263 Validity Not Before: Nov 22 18:48:45 2024 GMT Not After : Nov 29 18:48:45 2024 GMT Subject: CN=6740d20e-abd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1b:c0:d7:80:03:69:4d:57:8d:36:2b:b1:4a: 3b:c1:5e:ab:5b:d4:9e:49:a1:d1:f7:ea:a9:72:52: 07:20:6a:99:fd:d8:14:1c:ab:0b:e1:7d:51:f5:41: 09:d2:88:9b:a7:f5:10:95:00:3f:eb:d7:d0:39:0f: e1:44:dc:42:08:04:cc:5f:0e:e6:42:43:72:d9:a4: 36:93:dc:da:f3:9c:e2:34:aa:d1:6f:95:c5:23:9c: 73:7d:52:92:89:46:90:a9:60:94:e1:cb:e6:4e:0b: 2b:3f:6c:90:36:11:2d:30:d4:74:14:10:ce:66:e3: 45:6c:34:03:30:e7:24:93:c5:bc:c9:07:b8:fe:05: 50:43:9a:74:8a:89:32:6f:19:9e:de:ac:bd:e6:25: 2d:e8:42:f6:68:c7:bf:04:0b:b2:22:03:19:b1:f5: 63:43:27:fa:98:7b:76:29:43:b1:de:b0:26:49:31: e5:c8:15:ad:7f:bb:42:d8:d4:5d:2a:75:2f:bb:bb: 06:68:cc:ef:29:af:3d:d8:03:e3:f7:c7:c3:fd:f0: b9:a7:c5:00:d7:2b:67:52:9b:4d:41:eb:65:1f:bb: f4:15:cf:d3:bb:ae:ec:12:ea:0e:db:37:5e:fb:72: 4d:c5:18:ee:39:64:56:6b:c3:d1:46:2a:03:0a:7e: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F9:87:02:A0:90:41:EB:9B:45:C8:25:41:77:3A:11:DB:BB:F3:9A X509v3 Authority Key Identifier: keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:d1:1a:5d:27:dc:24:9e:44:05:66:f6:82:b4:94:1e:3a:7c: cf:0b:63:1f:5a:5a:ee:8c:1f:92:63:95:15:4f:e5:9c:90:d0: a0:74:36:79:3f:6f:1b:92:ed:c0:42:af:3c:71:89:4d:e4:a2: 37:82:50:7b:76:f6:63:17:aa:8f:68:e8:3c:1a:b4:c7:c4:c4: 8f:eb:94:f8:21:6b:b5:88:15:49:92:a2:44:30:9e:32:63:26: d2:3e:e9:0b:c9:11:aa:45:a5:06:e9:23:e2:d2:c1:c1:48:ea: be:e4:a6:cc:62:c8:2f:40:68:f3:d1:25:f2:6a:52:38:d5:16: c1:15:43:1e:d1:91:f8:cb:b6:ff:92:0a:81:d8:4f:bb:ba:be: ff:ca:4d:3e:80:c1:ad:66:ec:de:00:67:33:ea:c4:a8:6b:91: 32:29:f7:68:a0:a6:9c:61:2c:03:0e:5e:40:30:62:2c:fa:f1: cf:7e:a0:a2:42:46:22:69:0a:a7:91:51:6a:dc:51:f7:2f:28: 26:96:34:7d:5a:69:10:f2:da:12:c0:ce:c1:90:6f:82:f7:34: af:18:a3:31:0d:26:ba:51:59:86:86:14:e3:bc:58:35:69:ea: e4:c5:c2:53:62:eb:b2:dd:db:83:90:ee:ce:dd:3c:b5:18:cb: c8:14:38:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwMDMxMTAvBgNVBAUTKDAzOEE4NkYzNjJCMjU1N0Y5NEJFNzcyRUUwQzVGRDMx ODQ1RkUyNjMwHhcNMjQxMTIyMTg0ODQ1WhcNMjQxMTI5MTg0ODQ1WjAYMRYwFAYD VQQDEw02NzQwZDIwZS1hYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RvA14ADaU1XjTYrsUo7wV6rW9SeSaHR9+qpclIHIGqZ/dgUHKsL4X1R9UEJ 0oibp/UQlQA/69fQOQ/hRNxCCATMXw7mQkNy2aQ2k9za85ziNKrRb5XFI5xzfVKS iUaQqWCU4cvmTgsrP2yQNhEtMNR0FBDOZuNFbDQDMOckk8W8yQe4/gVQQ5p0ioky bxme3qy95iUt6EL2aMe/BAuyIgMZsfVjQyf6mHt2KUOx3rAmSTHlyBWtf7tC2NRd KnUvu7sGaMzvKa892APj98fD/fC5p8UA1ytnUptNQetlH7v0Fc/Tu67sEuoO2zde +3JNxRjuOWRWa8PRRioDCn6bcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL5hwKg kEHrm0XIJUF3OhHbu/OaMB8GA1UdIwQYMBaAFAOKhvNislV/lL53LuDF/TGEX+Jj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDAwMy9COEU4QUQ3MjFB RDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZYLVV2bmN1NE1YOU1ZUmY0 bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E0cUc4Mkt5VlgtVXZuY3U0TVg5TVlSZjRtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDAwMy9COEU4QUQ3MjFBRDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZY LVV2bmN1NE1YOU1ZUmY0bU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA40RpdJ9wknkQFZvaCtJQeOnzPC2MfWlrujB+SY5UVT+WckNCgdDZ5 P28bku3AQq88cYlN5KI3glB7dvZjF6qPaOg8GrTHxMSP65T4IWu1iBVJkqJEMJ4y YybSPukLyRGqRaUG6SPi0sHBSOq+5KbMYsgvQGjz0SXyalI41RbBFUMe0ZH4y7b/ kgqB2E+7ur7/yk0+gMGtZuzeAGcz6sSoa5EyKfdooKacYSwDDl5AMGIs+vHPfqCi QkYiaQqnkVFq3FH3LygmljR9WmkQ8toSwM7BkG+C9zSvGKMxDSa6UVmGhhTjvFg1 aerkxcJTYuuy3duDkO7O3Ty1GMvIFDhG -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org