$ rpki-client -vvf rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft File: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft (raw, json) Hash identifier: I+td4TwyWvdzwb4/8lRNlJHHjX1dzLuxb5eEmvXpIOA= Subject key identifier: B9:0E:82:E3:1E:6C:32:F3:27:F2:C8:D7:52:14:18:B4:8F:DC:8D:A1 Authority key identifier: A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 Certificate issuer: /CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Certificate serial: 210D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft Manifest number: 2106 Signing time: Fri 22 Nov 2024 15:55:40 +0000 Manifest this update: Fri 22 Nov 2024 15:55:39 +0000 Manifest next update: Fri 29 Nov 2024 15:55:39 +0000 Files and hashes: 1: o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl (hash: sc6dkt+G3KY9bC41+O9zsKXtGlMjxviDw1FL1r9eQJI=) 2: A257A95EA9DC11E9AA03780DC4F9AE02.roa (hash: c5EKgRZbwGkR1Dt53R8CSRSf7zLCY2912iZh8le8ZQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8461 (0x210d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C77BD/serialNumber=A3EB7C435063BC54D3573D81DBDC1873987663E0 Validity Not Before: Nov 22 15:55:39 2024 GMT Not After : Nov 29 15:55:39 2024 GMT Subject: CN=6740a97b-2688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fb:ef:73:80:2d:a1:85:dc:7b:92:0b:41:c8: 2c:11:5c:0d:94:21:f1:64:38:e4:0e:e7:28:52:c2: 5c:4a:c2:de:a2:d9:8e:98:a0:85:2a:e3:1c:56:ca: 4c:5a:dc:d1:aa:ee:1a:ef:91:89:0f:22:6a:91:d2: 2e:d4:20:9c:4d:19:1f:52:1b:aa:e7:26:8a:a5:d9: 3d:fd:70:b6:86:e1:ae:9d:f1:18:c4:1e:a8:12:65: 70:2e:03:bd:7b:3a:72:aa:2d:c8:63:6f:44:7c:94: 89:e5:5e:8f:3c:8e:b8:5b:49:df:f6:12:14:e0:78: ef:a6:34:9d:95:2b:73:49:ea:aa:67:e2:24:fb:63: 89:48:ce:04:26:7a:bd:19:80:19:ae:ad:ed:94:26: a7:56:37:f5:6b:d3:7b:78:da:17:b0:4b:bc:95:ed: 8a:4a:fe:84:7f:2d:24:58:43:0e:a0:7e:a9:e1:ae: 5d:33:18:7f:d2:39:fb:c2:ad:bf:97:2d:20:c5:fa: a0:6e:83:8a:1e:a9:67:30:1e:96:10:70:fe:59:4e: 0e:61:c3:88:cb:2f:07:68:fb:9e:92:aa:cc:ad:66: 43:de:7b:b4:8f:bb:28:56:0d:a0:ea:0b:e1:da:e0: 84:be:dd:11:c2:c4:a9:b5:0b:48:d1:47:27:ed:5f: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:82:E3:1E:6C:32:F3:27:F2:C8:D7:52:14:18:B4:8F:DC:8D:A1 X509v3 Authority Key Identifier: keyid:A3:EB:7C:43:50:63:BC:54:D3:57:3D:81:DB:DC:18:73:98:76:63:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C77BD/38937198DF4011E58232734AC4F9AE02/o-t8Q1BjvFTTVz2B29wYc5h2Y-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ef:f8:b8:f2:5c:c8:20:42:fd:ad:60:cb:8b:b1:8e:d7:91: 45:4d:e3:eb:b7:ed:84:1b:5b:f0:71:a3:0e:84:63:92:14:d4: c1:9d:46:33:d9:4f:c4:32:61:38:6c:4a:1d:99:13:16:c3:7b: fe:62:f9:dd:b1:a1:5b:98:67:43:95:7c:9a:50:a3:87:e0:ab: 44:fc:a4:cd:27:99:0f:03:e6:3d:99:29:74:b6:6d:86:3d:ba: 7b:e3:6b:10:f6:55:67:7f:18:52:9b:b6:ae:fc:25:3e:51:e6: cb:1e:21:50:db:21:49:b0:4e:63:f9:93:21:5e:47:e4:cb:fb: 87:64:aa:2f:7e:60:cd:9b:29:f0:47:49:48:70:c2:24:25:87: 91:e2:c5:c6:41:77:3c:4d:f1:d9:ba:3b:d4:f0:0d:e8:1f:52: f4:47:65:7b:68:ca:87:56:0d:ee:bb:ba:c4:9a:92:df:bc:ac: 9b:83:d8:fe:75:b1:d7:48:25:dc:9e:42:1f:c1:c5:01:a4:13: 76:93:f3:0e:bc:fe:bc:4e:5a:cc:bd:97:3e:49:39:34:ae:3d: 21:52:70:59:80:3e:5f:e1:51:c3:56:29:ab:91:43:1e:32:a8: 12:19:ec:11:4e:30:a0:20:e7:c8:fa:ff:2a:66:85:17:fe:2a: fe:8b:5b:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3QkQxMTAvBgNVBAUTKEEzRUI3QzQzNTA2M0JDNTREMzU3M0Q4MURCREMxODcz OTg3NjYzRTAwHhcNMjQxMTIyMTU1NTM5WhcNMjQxMTI5MTU1NTM5WjAYMRYwFAYD VQQDEw02NzQwYTk3Yi0yNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vvvc4AtoYXce5ILQcgsEVwNlCHxZDjkDucoUsJcSsLeotmOmKCFKuMcVspM WtzRqu4a75GJDyJqkdIu1CCcTRkfUhuq5yaKpdk9/XC2huGunfEYxB6oEmVwLgO9 ezpyqi3IY29EfJSJ5V6PPI64W0nf9hIU4HjvpjSdlStzSeqqZ+Ik+2OJSM4EJnq9 GYAZrq3tlCanVjf1a9N7eNoXsEu8le2KSv6Efy0kWEMOoH6p4a5dMxh/0jn7wq2/ ly0gxfqgboOKHqlnMB6WEHD+WU4OYcOIyy8HaPuekqrMrWZD3nu0j7soVg2g6gvh 2uCEvt0RwsSptQtI0Ucn7V8gQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkOguMe bDLzJ/LI11IUGLSP3I2hMB8GA1UdIwQYMBaAFKPrfENQY7xU01c9gdvcGHOYdmPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzdCRC8zODkzNzE5OERG NDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZGVFRWejJCMjl3WWM1aDJZ LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28tdDhRMUJqdkZUVFZ6MkIyOXdZYzVoMlktQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzdCRC8zODkzNzE5OERGNDAxMUU1ODIzMjczNEFDNEY5QUUwMi9vLXQ4UTFCanZG VFRWejJCMjl3WWM1aDJZLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE7/i48lzIIEL9rWDLi7GO15FFTePrt+2EG1vwcaMOhGOSFNTBnUYz 2U/EMmE4bEodmRMWw3v+YvndsaFbmGdDlXyaUKOH4KtE/KTNJ5kPA+Y9mSl0tm2G Pbp742sQ9lVnfxhSm7au/CU+UebLHiFQ2yFJsE5j+ZMhXkfky/uHZKovfmDNmynw R0lIcMIkJYeR4sXGQXc8TfHZujvU8A3oH1L0R2V7aMqHVg3uu7rEmpLfvKybg9j+ dbHXSCXcnkIfwcUBpBN2k/MOvP68TlrMvZc+STk0rj0hUnBZgD5f4VHDVimrkUMe MqgSGewRTjCgIOfI+v8qZoUX/ir+i1uU -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org