$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft File: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft (raw, json) Hash identifier: Ojpfl1uY/e9XA9r1QKwiYlsh5P0DUxhKllshj60c05A= Subject key identifier: 0F:FA:43:6F:E3:28:5E:FF:AC:6D:CE:BC:7F:B2:D0:37:2B:5C:B6:6D Authority key identifier: 31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF Certificate issuer: /CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft Manifest number: 11 Signing time: Thu 21 Nov 2024 06:08:33 +0000 Manifest this update: Thu 21 Nov 2024 06:08:32 +0000 Manifest next update: Thu 28 Nov 2024 06:08:32 +0000 Files and hashes: 1: MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl (hash: cB4B0nyLkVy06jhbYpfhLmVbf9Mmi8zF94cW3ggfNvk=) 2: BE48D4AA927D11EF9651FC4AC4F9AE02.roa (hash: izRhlY7DGrfvs8MmjLdXrrQgAeYYKtyct/uQzFPAxkk=) 3: D9BE56E2927D11EFB83ACB5CC4F9AE02.roa (hash: gD5kq8/HSPW50HYpmldu2HRZWRqRsB+3dXKbKp9PeAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8203/serialNumber=31D21D5CEE5FACDEF3C8C1C87D0D7391F9F73AFF Validity Not Before: Nov 21 06:08:32 2024 GMT Not After : Nov 28 06:08:32 2024 GMT Subject: CN=673ece60-04e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:33:82:f2:70:2f:fe:d8:65:67:d5:8b:46:7b: c8:7f:ef:4c:8c:0b:5f:9a:78:0d:a2:23:d4:23:bf: a6:0f:87:f9:f5:25:8e:3b:30:18:63:e1:05:ba:7d: fe:67:f4:7d:22:2d:34:75:33:46:ae:f0:ef:6d:71: 1b:49:88:64:51:4d:40:eb:c1:14:69:ee:64:f0:c7: a8:db:82:e5:a9:6d:7a:e8:b2:0e:f5:20:b6:2d:1a: 2a:e2:ab:be:96:bf:80:3e:ac:7e:00:b8:78:a5:42: 73:2a:48:5a:ba:d4:4a:09:f4:56:d6:ab:4f:91:26: 6f:c9:df:1c:41:08:cc:37:3a:b9:2d:54:47:61:d7: 0c:e5:a5:da:15:80:ee:44:d0:01:de:33:bb:5b:f4: 67:18:d5:47:3e:69:3b:fb:1a:a8:83:a7:8c:02:eb: f7:17:0b:11:e4:4a:2d:90:35:c7:a8:e1:ea:ba:e4: 1a:18:52:bc:29:6b:7b:73:e2:1a:a9:0f:bb:cd:69: a6:fe:ed:4c:2d:d9:f7:4d:ea:e8:39:16:78:37:35: d3:9d:2e:62:73:ee:2c:65:a5:59:fa:e8:51:1b:be: 62:c2:3d:0a:b7:72:e6:7e:06:ce:49:c4:43:ad:2d: 18:fd:2c:8e:5f:0c:50:ca:56:72:03:80:f3:8d:06: 79:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FA:43:6F:E3:28:5E:FF:AC:6D:CE:BC:7F:B2:D0:37:2B:5C:B6:6D X509v3 Authority Key Identifier: keyid:31:D2:1D:5C:EE:5F:AC:DE:F3:C8:C1:C8:7D:0D:73:91:F9:F7:3A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8203/BC515DAA927A11EFB5643C4EC4F9AE02/MdIdXO5frN7zyMHIfQ1zkfn3Ov8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d0:58:61:01:ae:a9:e7:95:95:0d:00:f7:89:a7:7d:9a:66: 68:bb:50:f6:c3:87:77:be:3c:e0:10:e4:aa:e5:72:85:21:7a: 48:9e:89:6d:08:a2:6f:db:61:22:b6:d0:00:58:79:2b:f6:d3: d0:85:23:60:8c:c1:9d:76:b1:ca:83:70:45:03:f6:51:43:b1: 56:9f:3d:3f:3c:0d:37:92:aa:0a:74:dd:d9:f5:08:db:4f:a2: 65:80:fa:1c:87:90:64:49:e6:82:93:3a:87:2d:b0:b8:db:86: e9:03:40:dd:51:7f:c8:33:95:6d:88:67:0e:03:ff:dc:eb:ce: a2:ab:56:a9:2d:cc:a0:2e:7e:25:87:49:4c:ac:b2:0d:e6:89: 34:36:9f:c4:3c:f5:85:55:9d:9b:77:a4:92:b5:37:7d:51:fe: b4:a8:23:51:7e:e4:01:dc:54:68:80:2d:56:de:32:58:db:ef: ae:73:06:8a:ea:20:c1:1c:df:f6:8e:d4:ea:fc:62:e9:ed:cd: d3:96:8c:e7:69:80:ce:43:0d:6f:bd:ba:08:4e:f4:81:c0:c4: e3:d8:08:67:f6:11:f2:8a:b4:cc:16:cc:ae:9a:35:3b:91:22: 94:e3:50:85:dd:86:d5:e6:bd:88:0a:d1:6f:47:c3:7f:09:41: 58:4a:be:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODIwMzExMC8GA1UEBRMoMzFEMjFENUNFRTVGQUNERUYzQzhDMUM4N0QwRDczOTFG OUY3M0FGRjAeFw0yNDExMjEwNjA4MzJaFw0yNDExMjgwNjA4MzJaMBgxFjAUBgNV BAMTDTY3M2VjZTYwLTA0ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOM4LycC/+2GVn1YtGe8h/70yMC1+aeA2iI9Qjv6YPh/n1JY47MBhj4QW6ff5n 9H0iLTR1M0au8O9tcRtJiGRRTUDrwRRp7mTwx6jbguWpbXrosg71ILYtGiriq76W v4A+rH4AuHilQnMqSFq61EoJ9FbWq0+RJm/J3xxBCMw3OrktVEdh1wzlpdoVgO5E 0AHeM7tb9GcY1Uc+aTv7GqiDp4wC6/cXCxHkSi2QNceo4eq65BoYUrwpa3tz4hqp D7vNaab+7Uwt2fdN6ug5Fng3NdOdLmJz7ixlpVn66FEbvmLCPQq3cuZ+Bs5JxEOt LRj9LI5fDFDKVnIDgPONBnl7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD/pDb+Mo Xv+sbc68f7LQNytctm0wHwYDVR0jBBgwFoAUMdIdXO5frN7zyMHIfQ1zkfn3Ov8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4MjAzL0JDNTE1REFBOTI3 QTExRUZCNTY0M0M0RUM0RjlBRTAyL01kSWRYTzVmck43enlNSElmUTF6a2ZuM092 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTWRJZFhPNWZyTjd6eU1ISWZRMXprZm4zT3Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 MjAzL0JDNTE1REFBOTI3QTExRUZCNTY0M0M0RUM0RjlBRTAyL01kSWRYTzVmck43 enlNSElmUTF6a2ZuM092OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAATQWGEBrqnnlZUNAPeJp32aZmi7UPbDh3e+POAQ5KrlcoUhekieiW0I om/bYSK20ABYeSv209CFI2CMwZ12scqDcEUD9lFDsVafPT88DTeSqgp03dn1CNtP omWA+hyHkGRJ5oKTOoctsLjbhukDQN1Rf8gzlW2IZw4D/9zrzqKrVqktzKAufiWH SUyssg3miTQ2n8Q89YVVnZt3pJK1N31R/rSoI1F+5AHcVGiALVbeMljb765zBorq IMEc3/aO1Or8YuntzdOWjOdpgM5DDW+9ughO9IHAxOPYCGf2EfKKtMwWzK6aNTuR IpTjUIXdhtXmvYgK0W9Hw38JQVhKvn8= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org