$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json) Hash identifier: OK460SvcU/ylWMMZd45v1eh5ONrVYhOtKFSWm1V++AM= Subject key identifier: AA:9F:EF:F9:E2:83:F1:6F:27:F5:0B:88:E1:48:A3:F8:26:6B:13:B7 Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Certificate serial: 07EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft Manifest number: 07E6 Signing time: Fri 22 Nov 2024 20:39:00 +0000 Manifest this update: Fri 22 Nov 2024 20:38:59 +0000 Manifest next update: Fri 29 Nov 2024 20:38:59 +0000 Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: RMZsBtEpXoshwSHQgRwzURJftczSXrrLL64laVhTgDI=) 2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: eM0/ieW68pT/1mH+cnfWrxugWCGoyMvD9LF24IpYcvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2027 (0x7eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Validity Not Before: Nov 22 20:38:59 2024 GMT Not After : Nov 29 20:38:59 2024 GMT Subject: CN=6740ebe4-06f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:25:30:5c:98:85:0d:c8:0f:b4:23:3d:80: d1:c1:97:80:ed:90:cd:8e:f6:af:c0:5e:3b:d9:3f: bc:e8:f9:e2:1e:1f:36:80:8c:fb:75:03:0c:fb:d2: fc:6f:07:df:59:cb:f1:50:f7:95:ab:28:2e:8e:ea: 08:46:03:f5:5e:fa:a5:d0:70:a7:d6:c9:25:e5:c7: 10:94:b5:4c:48:1c:f2:2e:ee:35:f4:69:e2:df:61: cb:1d:fb:08:45:93:05:ce:34:b3:df:ee:d8:c0:45: ae:2a:29:79:0e:67:c8:7b:d3:36:59:1f:35:aa:75: 03:d1:0d:7c:01:25:5c:f8:fc:c2:36:b9:d5:df:21: bf:af:9b:f5:63:17:da:75:11:85:7b:45:1a:1d:93: 22:c3:f3:2c:e8:ca:85:e0:af:e6:3d:34:12:9d:31: 53:27:56:a2:98:ee:1f:aa:79:97:9c:99:ea:5a:f0: 59:c3:a9:3a:74:51:8f:10:1e:ff:1e:b4:1f:dd:66: b5:02:37:7b:0c:e7:77:0f:f7:da:ea:9d:c8:67:4c: 74:47:3c:69:e1:46:d3:36:0c:4b:42:45:f5:b5:72: 4d:17:45:52:bf:a9:42:82:12:5f:af:66:f2:0e:33: 9d:c3:ab:cc:58:9a:b8:fe:d0:ba:34:ae:35:19:df: ca:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9F:EF:F9:E2:83:F1:6F:27:F5:0B:88:E1:48:A3:F8:26:6B:13:B7 X509v3 Authority Key Identifier: keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f6:28:61:bd:58:9a:60:81:e6:83:db:01:f3:c6:96:e9:d0:8b: 09:44:8d:04:e9:46:52:f7:05:e0:34:a6:00:78:98:7e:68:57: 5d:43:e7:a5:ef:7b:de:8f:e0:77:db:5b:9a:1f:d6:fd:b1:20: 4f:bf:f0:91:53:e0:8c:36:20:58:b4:8d:55:65:df:75:01:8e: 53:5d:c0:dc:b0:56:eb:bd:16:cf:5f:46:ed:10:42:1d:dd:b1: 59:ec:99:d1:e4:d5:f2:9c:3a:4f:ea:2e:1e:50:5b:86:6f:b4: 21:d2:31:8f:ef:c5:40:20:c6:d3:ae:25:f8:cd:4f:b8:9c:ab: 9e:2a:29:de:14:08:cf:8a:e7:9a:2f:01:ed:96:b4:06:fc:8d: 49:03:3f:7c:b4:04:7e:19:e9:2a:45:c9:0f:f4:7b:ab:3f:b6: 49:d6:34:e5:be:0d:7a:83:39:13:52:1e:f4:d6:13:b7:1c:bd: aa:4c:18:1a:dc:4b:4e:6b:f1:f4:50:f2:04:92:5b:98:8b:ef: 7a:a5:00:74:4f:7f:97:dd:de:43:cb:8f:c4:b0:43:d2:e4:bd: 96:cf:6f:09:17:d2:26:0f:c7:fd:72:fb:63:d8:58:30:6e:17: e5:d4:7e:17:85:92:87:51:24:dc:22:c4:eb:4b:08:c1:5c:8b: d2:ed:81:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCNDgxMTAvBgNVBAUTKDc1RDc1QkRBNTFCQ0EwMDYwRjcwODExMzIzNEM0MTQ1 RTQ0NDQyMUEwHhcNMjQxMTIyMjAzODU5WhcNMjQxMTI5MjAzODU5WjAYMRYwFAYD VQQDEw02NzQwZWJlNC0wNmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMIlMFyYhQ3ID7QjPYDRwZeA7ZDNjvavwF472T+86PniHh82gIz7dQMM+9L8 bwffWcvxUPeVqygujuoIRgP1Xvql0HCn1skl5ccQlLVMSBzyLu419Gni32HLHfsI RZMFzjSz3+7YwEWuKil5DmfIe9M2WR81qnUD0Q18ASVc+PzCNrnV3yG/r5v1Yxfa dRGFe0UaHZMiw/Ms6MqF4K/mPTQSnTFTJ1aimO4fqnmXnJnqWvBZw6k6dFGPEB7/ HrQf3Wa1Ajd7DOd3D/fa6p3IZ0x0Rzxp4UbTNgxLQkX1tXJNF0VSv6lCghJfr2by DjOdw6vMWJq4/tC6NK41Gd/KowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqf7/ni g/FvJ/ULiOFIo/gmaxO3MB8GA1UdIwQYMBaAFHXXW9pRvKAGD3CBEyNMQUXkREIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkI0OC85MEM0NzkxQ0NC QjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9BWVBjSUVUSTB4QlJlUkVR aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkZGIybEc4b0FZUGNJRVRJMHhCUmVSRVFoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkI0OC85MEM0NzkxQ0NCQjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9B WVBjSUVUSTB4QlJlUkVRaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD2KGG9WJpggeaD2wHzxpbp0IsJRI0E6UZS9wXgNKYAeJh+aFddQ+el 73vej+B321uaH9b9sSBPv/CRU+CMNiBYtI1VZd91AY5TXcDcsFbrvRbPX0btEEId 3bFZ7JnR5NXynDpP6i4eUFuGb7Qh0jGP78VAIMbTriX4zU+4nKueKineFAjPiuea LwHtlrQG/I1JAz98tAR+GekqRckP9HurP7ZJ1jTlvg16gzkTUh701hO3HL2qTBga 3EtOa/H0UPIEkluYi+96pQB0T3+X3d5Dy4/EsEPS5L2Wz28JF9ImD8f9cvtj2Fgw bhfl1H4XhZKHUSTcIsTrSwjBXIvS7YFG -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:40 2024 by rpki-client on console-ams.rpki-client.org