$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: bDc1WFVtU12GhdXezDu652wGVI2IUzC4z9rXjwcxN2o= Subject key identifier: 5C:49:C7:19:25:87:B0:58:21:95:CC:40:9A:27:7B:37:BB:39:AE:18 Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: B8 Signing time: Thu 21 Nov 2024 04:07:18 +0000 Manifest this update: Thu 21 Nov 2024 04:07:17 +0000 Manifest next update: Thu 28 Nov 2024 04:07:17 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: l1nHwuXxmta7/zdx/EF7iCqxU4lZRUOnUCMrkgNRdMo=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: U1iKIhn+RPx+rD5AgF1tzZvG20IRrHp9nRZuh3D7zzQ=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: P51d+Bkf7r+1HRm8wiTQGVSP6FQQzYCf10d/cp8/V38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Nov 21 04:07:17 2024 GMT Not After : Nov 28 04:07:17 2024 GMT Subject: CN=673eb1f6-b345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:ed:3e:44:2d:c3:d4:d4:b7:46:01:cb:2e: 2f:9a:51:34:72:35:91:f5:02:51:07:a4:74:8a:84: ff:b5:ee:6e:c2:b2:da:02:b1:dd:79:3c:b2:81:d2: d9:e1:2f:4f:e9:fd:5d:98:02:73:a5:85:f5:7a:57: 22:30:11:5c:17:33:28:88:26:db:9f:40:fe:e1:12: bf:09:f2:86:44:20:46:76:5c:5d:29:ef:dc:3b:b8: e4:6f:8c:1d:35:71:7f:59:ac:af:87:54:b2:39:a5: 42:c0:4a:6a:63:f6:01:bb:42:90:82:c3:e6:0e:68: bb:ee:8c:cc:5d:7a:52:12:32:42:db:f3:05:28:e3: 42:f8:46:b7:4b:7e:57:ad:3c:e3:70:43:c5:29:af: a0:c0:0e:22:4b:7b:29:f2:cc:4a:70:7e:2f:f1:bb: 8b:ad:11:d4:a6:aa:f5:78:5f:46:95:cf:1e:b9:44: 2e:45:fb:73:9f:17:28:d8:b1:d0:40:1f:dc:14:07: 5e:8f:0c:db:4c:e7:52:ec:37:76:fc:b2:cd:78:3f: 80:a3:c6:e8:82:a3:21:92:9d:fb:6c:df:86:18:96: 7d:44:5f:d1:d7:66:45:98:cf:fd:dd:54:5d:8f:61: 84:28:60:02:3a:9c:1f:7f:07:1f:e8:c3:88:fc:3a: 6e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:49:C7:19:25:87:B0:58:21:95:CC:40:9A:27:7B:37:BB:39:AE:18 X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:01:b2:da:34:e3:d6:f2:fa:90:43:4b:a9:e1:4a:c8:f5:90: 82:42:25:2f:89:eb:fc:41:2a:9e:1e:6c:03:18:c8:17:65:f6: d0:1e:95:2c:21:e8:47:17:5b:b3:e2:ba:68:e7:87:31:22:1b: 80:f1:a7:d3:51:cf:a1:92:4f:3a:d7:9d:2a:f9:e6:e1:f7:e7: d5:7a:73:cd:79:ae:04:6f:87:c2:f3:67:c1:70:8c:f6:06:a3: c1:5a:4d:81:47:3f:e3:a4:e2:31:2b:e9:24:bb:78:42:e7:ee: 4c:c9:16:54:4e:5d:a2:94:67:f9:ac:0f:bd:61:1d:81:81:6f: 87:e8:80:df:46:62:ee:02:c7:ea:67:94:c3:18:72:f4:a7:7e: 39:df:36:f0:b7:03:8d:19:37:db:7c:5e:b0:c1:da:82:78:c2: 27:ff:94:71:1e:de:6f:be:bb:df:46:01:e4:4f:db:e3:5d:2a: 21:ad:af:99:0c:d7:1b:f0:2a:5a:42:3f:86:9b:4e:cf:5b:76: 31:5e:f8:49:ea:bc:b9:10:0f:8d:f2:98:7e:89:65:27:26:08: c7:1c:62:10:82:97:52:3d:10:5c:a1:6d:76:8c:00:5b:c4:ab: 99:2c:52:42:cb:2b:84:a0:e9:24:da:3f:fb:d8:21:84:09:e6: 5c:25:dd:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjQxMTIxMDQwNzE3WhcNMjQxMTI4MDQwNzE3WjAYMRYwFAYD VQQDEw02NzNlYjFmNi1iMzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfXtPkQtw9TUt0YByy4vmlE0cjWR9QJRB6R0ioT/te5uwrLaArHdeTyygdLZ 4S9P6f1dmAJzpYX1elciMBFcFzMoiCbbn0D+4RK/CfKGRCBGdlxdKe/cO7jkb4wd NXF/Wayvh1SyOaVCwEpqY/YBu0KQgsPmDmi77ozMXXpSEjJC2/MFKONC+Ea3S35X rTzjcEPFKa+gwA4iS3sp8sxKcH4v8buLrRHUpqr1eF9Glc8euUQuRftznxco2LHQ QB/cFAdejwzbTOdS7Dd2/LLNeD+Ao8bogqMhkp37bN+GGJZ9RF/R12ZFmM/93VRd j2GEKGACOpwffwcf6MOI/DpuuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxJxxkl h7BYIZXMQJoneze7Oa4YMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMAbLaNOPW8vqQQ0up4UrI9ZCCQiUviev8QSqeHmwDGMgXZfbQHpUs IehHF1uz4rpo54cxIhuA8afTUc+hkk86150q+ebh9+fVenPNea4Eb4fC82fBcIz2 BqPBWk2BRz/jpOIxK+kku3hC5+5MyRZUTl2ilGf5rA+9YR2BgW+H6IDfRmLuAsfq Z5TDGHL0p3453zbwtwONGTfbfF6wwdqCeMIn/5RxHt5vvrvfRgHkT9vjXSohra+Z DNcb8CpaQj+Gm07PW3YxXvhJ6ry5EA+N8ph+iWUnJgjHHGIQgpdSPRBcoW12jABb xKuZLFJCyyuEoOkk2j/72CGECeZcJd3e -----END CERTIFICATE-----Generated at Thu Nov 21 05:06:04 2024 by rpki-client on console-fra.rpki-client.org