$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft File: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json) Hash identifier: mTpdKgv+j4z2rHoTcJEUX5ZzlgpTAUr/ccIZlNH0dcc= Subject key identifier: 1C:4C:5F:A4:B6:7D:5D:EE:51:0C:58:7E:F6:2D:41:AA:7D:66:EB:B2 Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A Certificate issuer: /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A Certificate serial: 07B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft Manifest number: 07AF Signing time: Fri 22 Nov 2024 20:44:39 +0000 Manifest this update: Fri 22 Nov 2024 20:44:39 +0000 Manifest next update: Fri 29 Nov 2024 20:44:39 +0000 Files and hashes: 1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: CsX0EKW53g5xd4kWI+0qPsVx4KKmiLszd6bfyN8KQt4=) 2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: Uilk1jJBfDMGY2sckuokao9InqlSOEodf+Dfn/tc4QA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1974 (0x7b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A Validity Not Before: Nov 22 20:44:39 2024 GMT Not After : Nov 29 20:44:39 2024 GMT Subject: CN=6740ed37-736d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7b:e3:7f:bd:9f:73:ff:87:00:e1:9d:c9:64: 8c:22:cc:62:92:54:c5:e4:a9:27:b7:a9:c4:1e:8a: 34:ca:4b:81:ae:d4:d0:11:ea:16:0f:e0:d2:bb:8e: 33:e6:71:47:06:c6:3f:f4:c4:bd:79:4c:97:69:99: a4:b1:5d:ef:d6:a2:32:59:ee:be:63:c2:67:80:e0: f9:26:8e:fc:58:42:c7:87:4b:ed:36:d6:e0:6f:38: 67:ae:97:67:24:b2:42:3b:a3:bc:64:81:79:27:05: 8b:a7:ea:63:b6:14:82:ee:42:c7:8b:bc:34:a5:b0: f4:eb:5e:00:13:81:96:4f:a9:20:e4:da:4d:91:03: 0f:b7:17:11:cd:52:ea:e2:9e:25:aa:cf:ae:cf:02: ac:61:05:5a:e0:41:d3:de:03:dd:c1:b4:d3:86:0e: 86:af:95:89:d3:b1:05:af:d8:33:55:ce:c3:87:17: 93:3b:62:a9:c7:6b:b7:d4:79:66:d8:c5:f8:80:07: 21:7c:5a:23:16:ff:dd:90:1c:64:d3:1b:11:e5:5c: 31:5b:51:ad:ad:1f:b5:f8:55:3b:39:23:d6:61:64: 6e:ef:1c:22:b2:d7:4e:93:6c:e5:3b:e4:7a:6a:8b: c6:e2:d2:f5:57:25:5c:b4:a1:4f:76:f3:f4:d9:c9: 38:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4C:5F:A4:B6:7D:5D:EE:51:0C:58:7E:F6:2D:41:AA:7D:66:EB:B2 X509v3 Authority Key Identifier: keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:58:2c:49:95:d9:c6:47:dd:29:b5:e4:6c:b1:9c:f0:be:99: a1:24:99:15:12:48:34:00:5d:4d:7d:74:83:f7:d5:b1:0b:e4: 37:36:51:47:21:97:97:f1:84:78:9f:07:01:22:1b:29:1d:f6: e5:6e:70:e3:d7:ec:57:9d:b7:be:3f:08:b3:93:12:7b:e0:21: ce:58:d4:dd:0f:4c:86:27:28:5b:aa:3c:4f:32:9d:4e:ea:9b: 3d:be:ec:4c:37:2a:0d:df:03:30:ad:1b:55:0b:25:47:65:6c: 06:21:f0:34:1a:b7:b3:ad:0d:a8:bd:3c:85:8a:4e:41:be:16: 3e:59:28:f3:9e:b8:73:71:aa:57:82:40:b8:89:2f:ce:d9:cf: c1:04:43:c4:89:70:64:41:a9:12:c3:ed:0e:f6:51:fd:b4:33: df:2d:1a:e1:76:98:35:db:3a:dd:6e:36:b1:69:9b:ff:46:0f: a4:93:df:fd:21:0d:72:f8:d7:c8:c7:ca:86:eb:64:fb:29:0c: 1f:d5:f2:3a:fa:86:ff:3c:44:6c:48:83:99:e3:e4:fb:1f:61: e2:18:1b:0a:5c:60:2b:61:33:5e:2e:d2:0d:f8:cf:8a:21:3e: e2:32:f3:59:d8:fe:4b:80:9a:fe:45:66:e5:fd:3c:75:4c:3b: 16:0b:52:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ3NTAxMTAvBgNVBAUTKDY4NzYzRTkyQTJDMTc4NTMxNjc1NzY2NTExMDNGODFG NTlBQ0RDMUEwHhcNMjQxMTIyMjA0NDM5WhcNMjQxMTI5MjA0NDM5WjAYMRYwFAYD VQQDEw02NzQwZWQzNy03MzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHvjf72fc/+HAOGdyWSMIsxiklTF5Kknt6nEHoo0ykuBrtTQEeoWD+DSu44z 5nFHBsY/9MS9eUyXaZmksV3v1qIyWe6+Y8JngOD5Jo78WELHh0vtNtbgbzhnrpdn JLJCO6O8ZIF5JwWLp+pjthSC7kLHi7w0pbD0614AE4GWT6kg5NpNkQMPtxcRzVLq 4p4lqs+uzwKsYQVa4EHT3gPdwbTThg6Gr5WJ07EFr9gzVc7DhxeTO2Kpx2u31Hlm 2MX4gAchfFojFv/dkBxk0xsR5VwxW1GtrR+1+FU7OSPWYWRu7xwistdOk2zlO+R6 aovG4tL1VyVctKFPdvP02ck4EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxMX6S2 fV3uUQxYfvYtQap9ZuuyMB8GA1UdIwQYMBaAFGh2PpKiwXhTFnV2ZRED+B9ZrNwa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDc1MC85MEQ1RUM1QURB QkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVGTVdkWFpsRVFQNEgxbXMz Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIWS1rcUxCZUZNV2RYWmxFUVA0SDFtczNCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDc1MC85MEQ1RUM1QURBQkQxMUVBOEZDNjIzODdDNEY5QUUwMi9hSFkta3FMQmVG TVdkWFpsRVFQNEgxbXMzQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3WCxJldnGR90pteRssZzwvpmhJJkVEkg0AF1NfXSD99WxC+Q3NlFH IZeX8YR4nwcBIhspHfblbnDj1+xXnbe+PwizkxJ74CHOWNTdD0yGJyhbqjxPMp1O 6ps9vuxMNyoN3wMwrRtVCyVHZWwGIfA0GrezrQ2ovTyFik5BvhY+WSjznrhzcapX gkC4iS/O2c/BBEPEiXBkQakSw+0O9lH9tDPfLRrhdpg12zrdbjaxaZv/Rg+kk9/9 IQ1y+NfIx8qG62T7KQwf1fI6+ob/PERsSIOZ4+T7H2HiGBsKXGArYTNeLtIN+M+K IT7iMvNZ2P5LgJr+RWbl/Tx1TDsWC1IF -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:39 2024 by rpki-client on console-ams.rpki-client.org