$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft File: 4idah1qSyusBBPicRvSlhbet9bY.mft (raw, json) Hash identifier: jEqty36xZ7wnXC7BW2byNJj+Xe5121IcgqGAN/B44jU= Subject key identifier: 67:FC:5B:7D:15:75:EF:AD:CF:0C:35:BB:DA:9C:09:8B:F1:EF:C4:CB Authority key identifier: E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 Certificate issuer: /CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Certificate serial: 0C8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft Manifest number: 0C81 Signing time: Fri 22 Nov 2024 18:07:58 +0000 Manifest this update: Fri 22 Nov 2024 18:07:58 +0000 Manifest next update: Fri 29 Nov 2024 18:07:58 +0000 Files and hashes: 1: 4idah1qSyusBBPicRvSlhbet9bY.crl (hash: bji1puykJmCiapIWH98oyodUZlmAsDSXLYKj3Auojw8=) 2: 5A395E26E2DB11EB8608EA87C4F9AE02.roa (hash: HyiCAmkoy6Q9nHEPOoty8ar1ahmNO63ScaKha2Rnj6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC561/serialNumber=E2275A875A92CAEB0104F89C46F4A585B7ADF5B6 Validity Not Before: Nov 22 18:07:58 2024 GMT Not After : Nov 29 18:07:58 2024 GMT Subject: CN=6740c87e-b246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:68:2b:76:30:56:4f:12:2a:da:1c:bd:eb: 3b:41:bf:1c:dc:d6:77:78:5f:d3:f2:2c:44:ea:1a: df:3f:98:c5:0f:e1:a9:aa:36:b3:42:f1:47:5d:29: 51:06:a3:96:af:f4:1c:a4:d3:b3:81:39:79:f0:5c: 1c:10:c9:97:9b:ae:9d:cc:a5:64:5e:db:7e:3d:fb: 8f:0f:6b:7a:88:5c:b9:58:7b:69:47:f6:e8:6d:59: 7c:07:d7:9a:93:9b:03:aa:7c:8e:a2:b5:b5:53:3f: 6e:01:c7:08:dc:3c:a8:94:dd:bf:b3:79:f5:23:ac: 59:2e:23:27:bd:23:56:ad:89:5b:d0:64:c1:69:c0: e7:f6:1d:6f:28:72:b8:97:76:04:25:4b:f9:27:75: 0a:c0:4b:85:f2:f7:a3:31:6b:74:3e:80:e9:d0:68: 5e:50:1a:c6:89:09:f8:d6:ab:fb:7f:5b:be:db:50: 89:96:21:b6:88:5a:7c:c1:27:db:79:73:12:b2:1c: fe:20:c8:db:a7:73:d8:28:94:39:8d:6b:bb:4e:ba: 06:d2:cc:c8:87:f6:07:09:50:20:7f:66:17:9f:a3: 34:78:87:a3:e7:43:1d:8f:8d:b6:a1:4d:83:05:f7: ad:a9:f4:6a:8f:be:b8:af:ac:63:3e:33:3a:c6:7a: 23:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FC:5B:7D:15:75:EF:AD:CF:0C:35:BB:DA:9C:09:8B:F1:EF:C4:CB X509v3 Authority Key Identifier: keyid:E2:27:5A:87:5A:92:CA:EB:01:04:F8:9C:46:F4:A5:85:B7:AD:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4idah1qSyusBBPicRvSlhbet9bY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC561/86C30482E73411E99D8EAF47C4F9AE02/4idah1qSyusBBPicRvSlhbet9bY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ad:d0:31:83:fa:4f:ad:cf:7e:35:3a:de:90:77:76:cc:39: a5:37:e8:9c:15:3f:ec:2c:4a:5a:4e:e6:3c:6f:94:45:38:62: 97:34:c1:4a:c1:85:6e:96:aa:65:7a:15:5c:93:29:ca:bf:29: f6:66:b6:1a:8e:b9:3b:bf:19:0e:2f:71:a0:a1:e9:b2:80:88: e0:b9:99:25:2e:13:bd:b6:51:0a:9e:2d:52:70:a5:24:8d:b7: 09:29:c2:57:68:cd:0c:19:fd:34:92:7d:10:35:9e:59:aa:0f: 61:46:a5:5c:a3:8d:c2:a3:83:33:5e:ce:eb:50:5f:78:99:cb: bb:24:fa:5a:b5:32:a8:f2:18:3d:df:5e:d7:19:89:f2:4d:df: 6c:9d:f3:f1:22:ec:f6:41:af:c0:56:a1:5d:05:8a:81:00:04: db:22:92:ae:bc:2c:5e:ee:59:8d:48:21:48:de:1b:7e:d9:83: dd:ef:ba:cc:8b:17:44:2f:43:83:93:8f:42:06:95:27:d3:d7: cb:38:cb:66:cd:56:3d:66:56:b1:ce:81:12:77:df:56:f2:9f: 2f:01:a9:7e:cf:cf:ea:f4:e8:f2:af:4e:74:31:1f:3f:a9:f9: 70:c4:02:59:01:db:9e:59:71:b2:ae:d2:19:fb:24:40:21:fd: 2e:69:be:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M1NjExMTAvBgNVBAUTKEUyMjc1QTg3NUE5MkNBRUIwMTA0Rjg5QzQ2RjRBNTg1 QjdBREY1QjYwHhcNMjQxMTIyMTgwNzU4WhcNMjQxMTI5MTgwNzU4WjAYMRYwFAYD VQQDEw02NzQwYzg3ZS1iMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYpoK3YwVk8SKtocves7Qb8c3NZ3eF/T8ixE6hrfP5jFD+GpqjazQvFHXSlR BqOWr/QcpNOzgTl58FwcEMmXm66dzKVkXtt+PfuPD2t6iFy5WHtpR/bobVl8B9ea k5sDqnyOorW1Uz9uAccI3DyolN2/s3n1I6xZLiMnvSNWrYlb0GTBacDn9h1vKHK4 l3YEJUv5J3UKwEuF8vejMWt0PoDp0GheUBrGiQn41qv7f1u+21CJliG2iFp8wSfb eXMSshz+IMjbp3PYKJQ5jWu7TroG0szIh/YHCVAgf2YXn6M0eIej50Mdj422oU2D BfetqfRqj764r6xjPjM6xnojFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf8W30V de+tzww1u9qcCYvx78TLMB8GA1UdIwQYMBaAFOInWodaksrrAQT4nEb0pYW3rfW2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzU2MS84NkMzMDQ4MkU3 MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1c0JCUGljUnZTbGhiZXQ5 YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRpZGFoMXFTeXVzQkJQaWNSdlNsaGJldDliWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzU2MS84NkMzMDQ4MkU3MzQxMUU5OUQ4RUFGNDdDNEY5QUUwMi80aWRhaDFxU3l1 c0JCUGljUnZTbGhiZXQ5YlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKrdAxg/pPrc9+NTrekHd2zDmlN+icFT/sLEpaTuY8b5RFOGKXNMFK wYVulqplehVckynKvyn2ZrYajrk7vxkOL3GgoemygIjguZklLhO9tlEKni1ScKUk jbcJKcJXaM0MGf00kn0QNZ5Zqg9hRqVco43Co4MzXs7rUF94mcu7JPpatTKo8hg9 317XGYnyTd9snfPxIuz2Qa/AVqFdBYqBAATbIpKuvCxe7lmNSCFI3ht+2YPd77rM ixdEL0ODk49CBpUn09fLOMtmzVY9ZlaxzoESd99W8p8vAal+z8/q9Ojyr050MR8/ qflwxAJZAdueWXGyrtIZ+yRAIf0uab43 -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org