$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json) Hash identifier: Obae3EdoUX/erXQlUCCmZGk51UKZRLo66G6pQPfd/g0= Subject key identifier: 90:E2:FA:C4:0A:62:15:6C:15:89:3B:23:C1:06:F1:BF:C5:AB:1C:76 Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Certificate serial: 0B48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft Manifest number: 0B3E Signing time: Fri 22 Nov 2024 18:57:15 +0000 Manifest this update: Fri 22 Nov 2024 18:57:14 +0000 Manifest next update: Fri 29 Nov 2024 18:57:14 +0000 Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: 0NAWVjX4oKceIYpyqsr77Ic5ZVKHnm2BnXH0fhLSH8k=) 2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: NP9fffigQ0ImiLL3SzcAQICpaRrCia/9CD7L49arMZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2888 (0xb48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Validity Not Before: Nov 22 18:57:14 2024 GMT Not After : Nov 29 18:57:14 2024 GMT Subject: CN=6740d40a-e1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:ba:0a:a1:1d:c2:ae:2c:5a:36:37:ed:a7: 43:2b:b5:54:2d:7b:24:07:9b:7f:d2:e8:4b:88:e8: 61:a8:1f:81:e5:7f:9d:c3:37:eb:9f:a8:18:f0:5d: 0a:a6:d1:66:06:4d:39:e4:29:9a:fe:08:38:d5:63: 44:03:63:e8:f4:eb:51:2a:7a:9e:48:77:3b:58:91: ee:8a:62:86:0d:3c:47:82:30:7c:b3:a1:25:b6:4e: 9a:1b:b3:88:b7:6d:52:8b:55:20:da:11:25:eb:e0: 18:46:a2:61:4b:96:5d:21:a8:32:fa:b4:af:fa:c5: 17:4f:9d:9f:14:05:a7:b0:bb:c8:55:dc:51:4e:5f: 85:94:fa:f0:09:82:37:7c:af:36:71:46:96:3a:f7: 35:02:66:59:bf:90:8f:17:09:06:38:a7:9e:b2:67: 25:de:0d:5e:09:66:fa:73:fc:dc:fd:cc:f5:ae:de: d9:6f:fa:84:58:7d:51:fa:eb:ef:84:4c:e1:f8:02: 6c:d8:73:70:cd:c6:09:84:4b:d8:b3:06:88:10:2b: c0:ea:db:8a:93:75:ac:43:55:4b:2a:db:8e:df:99: 0d:97:f9:7c:05:02:b7:ee:64:5b:74:22:c6:b1:43: b3:97:87:ec:31:64:5d:18:59:b2:d9:84:c9:9b:88: 11:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E2:FA:C4:0A:62:15:6C:15:89:3B:23:C1:06:F1:BF:C5:AB:1C:76 X509v3 Authority Key Identifier: keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bc:f8:02:5c:0e:5e:e9:ee:63:08:54:a7:6b:b3:ba:85:b6: cd:b1:10:04:91:74:dd:51:87:06:41:74:63:df:75:4d:6f:32: a1:b3:63:8d:00:85:ed:57:49:10:c6:d5:04:8e:c1:e2:9b:ee: d5:26:3a:75:f4:77:8a:00:e3:23:20:25:7f:fb:c9:f2:80:5d: 13:00:4c:8f:13:91:a7:3d:6e:23:83:be:87:fa:d0:b1:d8:88: c1:64:a8:c3:0a:29:f7:2f:aa:2e:f3:89:fc:bd:0d:0b:31:b2: 42:e5:51:a0:37:fe:32:de:d2:d8:c2:23:4b:65:dd:9b:1a:55: fa:89:7b:8f:c9:8f:bf:c7:26:fb:1f:86:9e:2a:3e:79:bd:9c: 86:a5:c0:11:f7:e3:38:85:d9:91:a6:db:d9:29:08:11:27:77: f9:52:81:bb:b0:0e:ed:01:03:3b:cb:c8:7d:00:72:12:2d:2f: e5:ab:4e:a4:ca:57:8c:3e:fd:fd:ce:3e:26:2f:c2:73:49:3e: 46:4e:6b:66:34:14:9c:57:20:93:11:64:cb:e8:53:41:e9:7c: 76:11:af:75:c8:c0:2d:be:86:6e:d9:24:ef:ad:d2:8a:c5:d0: 06:dd:ff:4c:7f:ac:aa:9a:c1:dd:a7:5f:51:75:eb:ee:02:97: 11:30:37:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4NjExMTAvBgNVBAUTKDZGQjBBQTU3Q0U4NEE1Q0QyOUFDNDdEOUQ3RDA4OTQ4 RUIyMUYwNkEwHhcNMjQxMTIyMTg1NzE0WhcNMjQxMTI5MTg1NzE0WjAYMRYwFAYD VQQDEw02NzQwZDQwYS1lMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK26CqEdwq4sWjY37adDK7VULXskB5t/0uhLiOhhqB+B5X+dwzfrn6gY8F0K ptFmBk055Cma/gg41WNEA2Po9OtRKnqeSHc7WJHuimKGDTxHgjB8s6Eltk6aG7OI t21Si1Ug2hEl6+AYRqJhS5ZdIagy+rSv+sUXT52fFAWnsLvIVdxRTl+FlPrwCYI3 fK82cUaWOvc1AmZZv5CPFwkGOKeesmcl3g1eCWb6c/zc/cz1rt7Zb/qEWH1R+uvv hEzh+AJs2HNwzcYJhEvYswaIECvA6tuKk3WsQ1VLKtuO35kNl/l8BQK37mRbdCLG sUOzl4fsMWRdGFmy2YTJm4gRmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDi+sQK YhVsFYk7I8EG8b/Fqxx2MB8GA1UdIwQYMBaAFG+wqlfOhKXNKaxH2dfQiUjrIfBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjg2MS81Q0MyMTAwMDI1 NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBjMHByRWZaMTlDSlNPc2g4 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I3Q3FWODZFcGMwcHJFZloxOUNKU09zaDhHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njg2MS81Q0MyMTAwMDI1NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBj MHByRWZaMTlDSlNPc2g4R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMvPgCXA5e6e5jCFSna7O6hbbNsRAEkXTdUYcGQXRj33VNbzKhs2ON AIXtV0kQxtUEjsHim+7VJjp19HeKAOMjICV/+8nygF0TAEyPE5GnPW4jg76H+tCx 2IjBZKjDCin3L6ou84n8vQ0LMbJC5VGgN/4y3tLYwiNLZd2bGlX6iXuPyY+/xyb7 H4aeKj55vZyGpcAR9+M4hdmRptvZKQgRJ3f5UoG7sA7tAQM7y8h9AHISLS/lq06k yleMPv39zj4mL8JzST5GTmtmNBScVyCTEWTL6FNB6Xx2Ea91yMAtvoZu2STvrdKK xdAG3f9Mf6yqmsHdp19RdevuApcRMDcB -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org