$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft File: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json) Hash identifier: JOKc0YgUx4OyEsqBAKp7ZL/Ni7pZJQ9gdsZSRD2dUxw= Subject key identifier: F8:06:4B:62:76:38:E7:B6:8F:CC:2F:F4:0D:38:C4:AA:B4:2C:83:91 Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Certificate serial: 08EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft Manifest number: 08AF Signing time: Sun 24 Nov 2024 20:10:46 +0000 Manifest this update: Sun 24 Nov 2024 20:10:46 +0000 Manifest next update: Sun 01 Dec 2024 20:10:46 +0000 Files and hashes: 1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: 5qFqIH+hkZGlnw2znjL64pLQ9fh8S1tM0DKFhXUPvaI=) 2: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: Vhh+YHEkOAm0lTC6Mvlr9fVSy/b7j5HS4EmA8GcE6KE=) 3: 2857F2E4111A11EF86332415C4F9AE02.roa (hash: d8stm93qiMJHuD7A7Kjf0EChjXZv6Yi1Blkv29w2AO0=) 4: E3A0B86070F611EFA4CF2731C4F9AE02.roa (hash: IiCELpz1lNWn/wDk8+lG4EPk1Fz80QLORn5i0grUOVk=) 5: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: TjvAc6jpZ9U97nYJG6DnvYohT4lBnpgp5Lc+Qvz205I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Validity Not Before: Nov 24 20:10:46 2024 GMT Not After : Dec 1 20:10:46 2024 GMT Subject: CN=67438846-9702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:70:f9:8c:d8:05:da:9a:20:a6:e8:7b:05:6b: 4a:ae:25:82:f1:75:d1:03:36:73:54:5c:d4:c9:3d: 22:1e:15:88:4e:6b:4c:31:d0:d9:77:e9:72:25:93: 9b:55:09:5a:e0:87:db:6c:be:41:a5:c0:a1:33:f2: 2a:41:30:d3:81:e8:2d:52:48:fa:05:fd:cc:27:0b: be:e5:e3:67:75:d0:7c:75:a6:3d:d5:4f:d0:c1:af: bf:78:61:4d:0b:93:fa:f7:6b:3c:02:3d:c1:7e:95: c1:7f:f9:a0:c4:b1:b3:72:63:e4:de:5b:9c:34:8f: c5:fa:65:d6:7c:3d:31:26:53:a6:74:06:4e:da:1f: 80:6c:2c:6e:7b:9f:f3:59:aa:84:b2:8a:9a:d3:a0: e1:3a:51:7c:10:9f:93:67:a7:b8:65:a0:14:73:a3: b5:e4:5d:bc:58:69:9d:0a:8a:af:10:ff:ae:54:19: 99:1d:54:57:2a:b9:a8:46:5f:7a:e3:ca:8e:e4:07: 6c:4f:42:15:82:ad:06:11:00:51:67:f0:49:36:6d: b1:d5:a6:3d:e2:94:4d:29:d5:e3:c5:63:36:bd:6b: 49:6d:2b:1c:65:01:f6:97:1d:0e:2c:d4:d4:96:3c: aa:ee:4a:7b:a7:94:e4:c1:3b:57:16:01:49:e4:de: f5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:06:4B:62:76:38:E7:B6:8F:CC:2F:F4:0D:38:C4:AA:B4:2C:83:91 X509v3 Authority Key Identifier: keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:2b:99:dc:6a:8e:ee:88:b8:59:3a:5a:95:83:d4:24:b2:96: 07:24:ac:78:c0:8f:89:f6:f0:68:3f:ae:bb:73:ce:70:74:e4: 60:7b:d2:82:2d:16:e4:80:9d:12:94:bf:ce:9b:b8:9d:f9:0a: 26:5a:f6:65:9d:cc:96:5c:5c:63:5e:3a:14:d3:0b:cc:f2:33: 68:11:61:0d:0d:d6:79:c2:b3:5d:ad:ee:4e:9a:c3:04:dc:00: 52:e3:98:ae:dc:c0:bb:09:6f:f1:7d:2b:70:4e:47:2b:31:37: 88:f8:87:bf:87:6d:c8:02:af:94:05:9d:66:a2:cd:96:78:13: f2:11:af:22:19:12:4e:ac:ff:47:28:cb:82:bc:23:7c:1d:7b: c8:98:6a:36:d3:df:6c:ba:66:2c:12:11:1c:75:fa:a4:86:06: ca:71:07:52:b2:ea:7b:85:4d:0a:d9:5a:d3:ea:76:fc:4d:ea: 97:c2:0e:36:94:6f:49:64:c4:b9:38:cb:15:fc:33:8b:3f:5c: c1:16:8a:db:8e:90:e8:19:97:9f:d5:27:40:13:b7:a1:aa:6b: 39:89:58:88:54:31:a3:7f:10:52:b6:6e:22:07:fe:f0:13:16: a5:d2:0d:fa:68:5a:a0:ad:10:6b:e0:b5:7a:e2:82:22:db:c8: d6:a8:ff:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE RkRBMkNGRDAwHhcNMjQxMTI0MjAxMDQ2WhcNMjQxMjAxMjAxMDQ2WjAYMRYwFAYD VQQDEw02NzQzODg0Ni05NzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXD5jNgF2pogpuh7BWtKriWC8XXRAzZzVFzUyT0iHhWITmtMMdDZd+lyJZOb VQla4IfbbL5BpcChM/IqQTDTgegtUkj6Bf3MJwu+5eNnddB8daY91U/Qwa+/eGFN C5P692s8Aj3BfpXBf/mgxLGzcmPk3lucNI/F+mXWfD0xJlOmdAZO2h+AbCxue5/z WaqEsoqa06DhOlF8EJ+TZ6e4ZaAUc6O15F28WGmdCoqvEP+uVBmZHVRXKrmoRl96 48qO5AdsT0IVgq0GEQBRZ/BJNm2x1aY94pRNKdXjxWM2vWtJbSscZQH2lx0OLNTU ljyq7kp7p5TkwTtXFgFJ5N71bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgGS2J2 OOe2j8wv9A04xKq0LIORMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEYyNy83RjUyMjlBOEIwOTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZR Z25ZYVBiRS0zVERmMml6OUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIK5ncao7uiLhZOlqVg9QkspYHJKx4wI+J9vBoP667c85wdORge9KC LRbkgJ0SlL/Om7id+QomWvZlncyWXFxjXjoU0wvM8jNoEWENDdZ5wrNdre5OmsME 3ABS45iu3MC7CW/xfStwTkcrMTeI+Ie/h23IAq+UBZ1mos2WeBPyEa8iGRJOrP9H KMuCvCN8HXvImGo2099sumYsEhEcdfqkhgbKcQdSsup7hU0K2VrT6nb8TeqXwg42 lG9JZMS5OMsV/DOLP1zBForbjpDoGZef1SdAE7ehqms5iViIVDGjfxBStm4iB/7w Exal0g36aFqgrRBr4LV64oIi28jWqP/m -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:16 2024 by rpki-client on console-fra.rpki-client.org