$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft File: akWKsPxWKCkzGD1GgFG_xQeRFjI.mft (raw, json) Hash identifier: 1Mr2cmrVD9ge+coy2xSAGWDP2OJBbYrV98dY0Lg6gdg= Subject key identifier: C8:49:6E:E4:02:94:A7:C1:CA:23:B8:C0:FB:54:0E:C5:25:A5:8B:ED Authority key identifier: 6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 Certificate issuer: /CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft Manifest number: 1B Signing time: Sat 23 Nov 2024 05:53:28 +0000 Manifest this update: Sat 23 Nov 2024 05:53:27 +0000 Manifest next update: Sat 30 Nov 2024 05:53:27 +0000 Files and hashes: 1: akWKsPxWKCkzGD1GgFG_xQeRFjI.crl (hash: HqlGlQ44G4wtX+yOk1QEyZIGB38xbreIvyqFnmYT8Jg=) 2: C14680A887BF11EF8804736AC4F9AE02.roa (hash: vUX/KRddfhkkOiY2HuYAilZhXg6VXmP4jwsIgzgvq3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCA92/serialNumber=6A458AB0FC56282933183D468051BFC507911632 Validity Not Before: Nov 23 05:53:27 2024 GMT Not After : Nov 30 05:53:27 2024 GMT Subject: CN=67416dd8-8cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:4f:08:88:3b:30:52:ea:7f:5f:24:7b:a4: ba:95:62:92:e2:c2:29:18:d4:97:21:5e:b1:72:80: 9e:b3:18:c4:44:73:9f:e5:97:5e:d8:28:e7:d3:d5: 0c:c0:24:73:5a:59:3c:30:b3:a8:7c:c6:4a:d4:09: ee:65:ef:f5:b6:10:0e:13:48:59:61:d9:29:d8:be: 71:85:a4:98:df:15:db:e9:f3:51:5c:86:2e:90:b2: 73:d3:86:25:65:dd:cb:a5:31:c8:00:5f:d5:00:9f: 80:81:3e:09:cb:02:d1:d0:42:6c:65:5c:04:85:f6: fa:58:c8:5b:56:59:2f:ab:f3:03:24:d2:99:d6:58: a8:42:ee:0c:c8:6c:25:7d:52:eb:cd:09:53:43:99: 13:14:90:5e:aa:ea:5f:eb:67:eb:3f:77:7a:c3:a4: 6c:62:f9:8f:14:11:21:13:64:63:8e:e2:01:3a:7f: c4:77:1c:3b:95:49:a8:92:87:a7:dd:7e:79:59:90: 7b:87:5a:03:57:89:5f:23:a1:32:28:c3:aa:8b:a5: 81:58:b1:55:ef:02:75:b1:10:40:80:75:8e:6a:1c: 8e:20:66:a1:41:87:5b:6d:b2:6e:91:84:31:c7:3d: 51:aa:92:54:ec:1f:2c:f7:3d:f2:47:e8:9c:0f:41: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:49:6E:E4:02:94:A7:C1:CA:23:B8:C0:FB:54:0E:C5:25:A5:8B:ED X509v3 Authority Key Identifier: keyid:6A:45:8A:B0:FC:56:28:29:33:18:3D:46:80:51:BF:C5:07:91:16:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akWKsPxWKCkzGD1GgFG_xQeRFjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA92/999E8EAC87BE11EFBC41C268C4F9AE02/akWKsPxWKCkzGD1GgFG_xQeRFjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:82:86:5c:9a:9b:e8:fb:15:e9:06:f1:57:f2:e5:75:cc:92: 2e:70:ef:1c:5d:db:28:74:bb:c5:28:ed:1a:cc:a5:ea:19:50: d6:d8:ed:24:5d:1b:58:74:44:05:ef:a6:68:00:d7:d1:78:0a: 46:0f:b9:b9:c5:d2:4b:c3:b1:38:51:f8:63:97:60:6b:81:ee: 1c:aa:8d:b9:06:27:34:87:40:c1:41:59:35:e7:41:bc:e0:b0: 87:b3:76:1c:3c:6d:f3:8d:02:62:a2:c2:02:dd:de:01:65:16: 3a:f0:ac:0b:64:fd:e2:36:6f:86:9e:54:6c:4c:fe:d8:76:03: 49:a5:b8:90:78:af:74:72:b5:fd:69:30:71:b2:d3:9e:f6:1a: 3d:b2:66:55:de:39:95:61:3d:9a:8f:21:b9:c5:e1:d4:2a:15: f9:76:75:3d:68:a2:2c:67:71:8c:ce:37:be:e7:f2:63:10:53: 84:b3:bf:bd:e2:ad:7c:97:43:2a:92:39:c0:3f:dd:2a:d4:c2: 4a:50:a1:0d:0f:19:11:16:1c:02:4b:f0:6d:ba:ee:ee:72:9a: 62:29:6d:5a:f2:5f:cb:b5:c4:5a:43:5c:2a:82:1c:d4:d2:15: a6:e9:33:fa:5e:97:57:cc:43:73:53:d6:6f:7d:03:22:c7:8c: f5:58:8b:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0E5MjExMC8GA1UEBRMoNkE0NThBQjBGQzU2MjgyOTMzMTgzRDQ2ODA1MUJGQzUw NzkxMTYzMjAeFw0yNDExMjMwNTUzMjdaFw0yNDExMzAwNTUzMjdaMBgxFjAUBgNV BAMTDTY3NDE2ZGQ4LThjZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAn08IiDswUup/XyR7pLqVYpLiwikY1JchXrFygJ6zGMREc5/ll17YKOfT1QzA JHNaWTwws6h8xkrUCe5l7/W2EA4TSFlh2SnYvnGFpJjfFdvp81Fchi6QsnPThiVl 3culMcgAX9UAn4CBPgnLAtHQQmxlXASF9vpYyFtWWS+r8wMk0pnWWKhC7gzIbCV9 UuvNCVNDmRMUkF6q6l/rZ+s/d3rDpGxi+Y8UESETZGOO4gE6f8R3HDuVSaiSh6fd fnlZkHuHWgNXiV8joTIow6qLpYFYsVXvAnWxEECAdY5qHI4gZqFBh1ttsm6RhDHH PVGqklTsHyz3PfJH6JwPQUKPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyElu5AKU p8HKI7jA+1QOxSWli+0wHwYDVR0jBBgwFoAUakWKsPxWKCkzGD1GgFG/xQeRFjIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQTkyLzk5OUU4RUFDODdC RTExRUZCQzQxQzI2OEM0RjlBRTAyL2FrV0tzUHhXS0NrekdEMUdnRkdfeFFlUkZq SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYWtXS3NQeFdLQ2t6R0QxR2dGR194UWVSRmpJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QTkyLzk5OUU4RUFDODdCRTExRUZCQzQxQzI2OEM0RjlBRTAyL2FrV0tzUHhXS0Nr ekdEMUdnRkdfeFFlUkZqSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF+Chlyam+j7FekG8Vfy5XXMki5w7xxd2yh0u8Uo7RrMpeoZUNbY7SRd G1h0RAXvpmgA19F4CkYPubnF0kvDsThR+GOXYGuB7hyqjbkGJzSHQMFBWTXnQbzg sIezdhw8bfONAmKiwgLd3gFlFjrwrAtk/eI2b4aeVGxM/th2A0mluJB4r3Rytf1p MHGy0572Gj2yZlXeOZVhPZqPIbnF4dQqFfl2dT1ooixncYzON77n8mMQU4Szv73i rXyXQyqSOcA/3SrUwkpQoQ0PGREWHAJL8G267u5ymmIpbVryX8u1xFpDXCqCHNTS FabpM/pel1fMQ3NT1m99AyLHjPVYi/c= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org