$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: DVOKUb0QAHMry7KkbvIlX2Bi0K2nxCIgcvjWlDokQ/8= Subject key identifier: 58:A3:AF:1D:07:15:A4:AF:D3:2A:9D:77:24:93:18:5B:7D:EC:BF:E7 Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0A09 Signing time: Fri 22 Nov 2024 19:35:53 +0000 Manifest this update: Fri 22 Nov 2024 19:35:53 +0000 Manifest next update: Fri 29 Nov 2024 19:35:52 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: 9yKVHp1vRC0aXwLqutF5kvX0TsK90AsF4HLk9Hvh1bw=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: M+Tax7VG5rWwMeFmLKAhTKuNTWFgY09O4MxcZyAINIM=) 3: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: atmi78TUPnJSElHg9rmGVGz4tW8Pja2ubn4FGuQeO3A=) 4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: JiElKZX5FAky3YUtr16s6rTxBUIiCodYWGxVZrlNjio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Nov 22 19:35:53 2024 GMT Not After : Nov 29 19:35:52 2024 GMT Subject: CN=6740dd19-5921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:52:f7:62:7b:fa:23:69:4e:b1:8e:0c:d6: 92:19:c9:6e:86:76:80:f8:1c:d1:0f:f8:83:69:e4: 34:54:3f:bc:d1:8b:7a:f7:21:b6:83:94:21:3f:2d: e1:89:1f:ac:b3:60:a1:88:eb:1a:5c:42:54:51:f9: 1a:76:f3:78:f6:3d:c2:c8:31:bb:1b:68:34:8c:70: 4e:87:5f:80:33:ad:ef:4f:94:1b:7d:ad:d8:0e:6b: df:a5:15:4a:27:97:42:76:38:fb:2f:bd:98:7e:9a: e3:96:f6:cc:d2:28:a4:f6:73:ea:77:64:fc:a4:61: 83:43:e1:8d:eb:c2:b0:6d:fc:38:b7:d5:45:f2:01: b0:01:27:5d:bf:1a:67:3e:88:f6:dc:d6:ec:b9:21: d9:08:1d:94:a7:32:52:0c:a9:5c:1f:1c:df:da:65: 35:c8:05:68:19:11:57:97:1c:65:bc:06:02:dd:36: 5d:30:60:43:97:14:e3:d0:c4:cd:d9:4c:16:57:20: e4:ea:49:ea:31:1e:d7:92:5c:20:28:f2:98:d6:5a: 0b:cc:91:3e:2a:65:4b:aa:4f:ad:cb:7f:e2:30:6c: a2:eb:bc:78:a4:d4:6b:3c:7f:12:52:83:f6:bd:aa: b6:22:61:c4:97:88:bb:8b:9b:ae:a0:95:8e:c0:36: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A3:AF:1D:07:15:A4:AF:D3:2A:9D:77:24:93:18:5B:7D:EC:BF:E7 X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:12:88:53:92:0f:36:61:e8:bd:8e:c2:2c:ec:e6:c9:17:35: 0d:4c:c0:66:1b:de:63:54:0d:63:df:57:cd:78:92:8d:2a:bd: 01:66:0d:4d:cc:c0:6c:a5:8c:de:a0:6c:52:49:6c:e3:99:16: 8d:7b:ea:1d:b8:f4:70:2c:eb:76:cd:84:3f:f0:6e:90:33:58: 15:0c:2d:5d:a4:b7:8e:c9:6a:f2:ca:eb:22:8c:65:24:69:cc: 67:99:c0:69:b9:f7:c6:0e:d2:79:cb:b3:3c:6d:ac:1b:bb:70: b1:7a:eb:43:a3:6b:83:3b:e6:64:5d:70:c1:e9:ef:48:d7:fb: 1f:78:60:b0:8c:3a:a2:7b:91:63:61:62:6a:0c:ac:60:44:ee: da:ec:06:0b:64:78:e0:fb:c7:2a:37:4e:9d:12:e8:38:3d:32: 9e:ba:5d:04:c4:fd:d5:a8:7e:f4:ca:a1:cb:2c:ab:9e:04:71: 43:f2:8c:31:72:bf:6b:57:b3:71:ba:4c:2f:12:f5:ae:85:ce: d0:6b:18:0e:1a:33:a4:bb:bd:04:1c:07:1e:fa:1e:9e:18:be: 6c:fc:7b:a2:64:db:1e:01:49:92:34:33:cb:23:c4:d5:8d:0a: b5:51:1c:5b:15:79:4f:fe:cf:01:35:5b:7d:14:ab:9c:b5:07: c3:a4:dd:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjQxMTIyMTkzNTUzWhcNMjQxMTI5MTkzNTUyWjAYMRYwFAYD VQQDEw02NzQwZGQxOS01OTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLVS92J7+iNpTrGODNaSGcluhnaA+BzRD/iDaeQ0VD+80Yt69yG2g5QhPy3h iR+ss2ChiOsaXEJUUfkadvN49j3CyDG7G2g0jHBOh1+AM63vT5Qbfa3YDmvfpRVK J5dCdjj7L72YfprjlvbM0iik9nPqd2T8pGGDQ+GN68Kwbfw4t9VF8gGwASddvxpn Poj23NbsuSHZCB2UpzJSDKlcHxzf2mU1yAVoGRFXlxxlvAYC3TZdMGBDlxTj0MTN 2UwWVyDk6knqMR7XklwgKPKY1loLzJE+KmVLqk+ty3/iMGyi67x4pNRrPH8SUoP2 vaq2ImHEl4i7i5uuoJWOwDZhXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFijrx0H FaSv0yqddySTGFt97L/nMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjEohTkg82Yei9jsIs7ObJFzUNTMBmG95jVA1j31fNeJKNKr0BZg1N zMBspYzeoGxSSWzjmRaNe+oduPRwLOt2zYQ/8G6QM1gVDC1dpLeOyWryyusijGUk acxnmcBpuffGDtJ5y7M8bawbu3CxeutDo2uDO+ZkXXDB6e9I1/sfeGCwjDqie5Fj YWJqDKxgRO7a7AYLZHjg+8cqN06dEug4PTKeul0ExP3VqH70yqHLLKueBHFD8owx cr9rV7NxukwvEvWuhc7QaxgOGjOku70EHAce+h6eGL5s/HuiZNseAUmSNDPLI8TV jQq1URxbFXlP/s8BNVt9FKuctQfDpN2o -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org