$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft File: 4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json) Hash identifier: ZYlSKzw7LewFsDHZ5ikdO3hLOnm8hNoRlwexP6ks3fw= Subject key identifier: D6:AA:4B:83:38:A0:99:75:51:37:E6:8E:ED:C1:21:7D:B9:BE:67:5B Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 Certificate issuer: /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Certificate serial: 0B3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft Manifest number: 0B35 Signing time: Fri 22 Nov 2024 18:58:23 +0000 Manifest this update: Fri 22 Nov 2024 18:58:22 +0000 Manifest next update: Fri 29 Nov 2024 18:58:22 +0000 Files and hashes: 1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: 5iAsV27mAK8ZH83K9j0gbSDQGC7Jyw8XUEEPZHsW2w0=) 2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: rTO+bfWLGmW97SnjA21hfDIwj563kMQy0GF4rcuAWNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57 Validity Not Before: Nov 22 18:58:22 2024 GMT Not After : Nov 29 18:58:22 2024 GMT Subject: CN=6740d44e-1ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:10:a4:4c:f9:cd:a2:53:c7:78:c7:f1:28:dd: ef:82:b0:e5:72:81:67:21:6b:c9:9c:5f:38:34:f9: 7a:05:41:e8:f7:f8:62:59:1f:67:23:ec:2e:af:2f: 18:af:64:73:02:f0:37:08:c4:e3:33:8a:8e:74:2b: fb:93:f8:11:02:12:c1:59:45:28:69:71:30:18:14: 12:ec:10:01:be:b6:ce:3f:81:cb:7a:64:a4:51:ef: 76:23:a1:d1:9b:11:f8:56:ab:eb:0c:31:06:db:42: be:7e:69:03:a8:94:9c:af:d1:41:93:6a:04:48:2e: 0f:74:4a:7d:db:09:eb:37:fa:3b:bc:2b:d0:9a:c4: 8f:79:2a:7b:4e:46:26:f6:b4:32:b7:33:b0:3f:df: 5e:c6:de:e2:10:a7:38:ce:c7:c3:7f:f9:27:d7:53: a7:50:1b:4e:d6:95:9a:40:93:e3:f7:77:12:6d:d3: 96:db:fb:ff:2f:e4:ab:fb:4b:ab:80:a4:0f:0f:63: ea:0d:76:0e:6f:1f:1e:90:2b:9d:3a:27:47:44:fb: a8:97:17:f1:c4:1f:1a:0e:de:c5:12:64:21:fd:92: 75:c2:6b:25:5c:60:c1:1f:89:16:5d:97:0c:5c:69: f8:53:4c:53:d9:c7:ed:d3:c7:a2:a9:35:e3:93:a0: 27:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AA:4B:83:38:A0:99:75:51:37:E6:8E:ED:C1:21:7D:B9:BE:67:5B X509v3 Authority Key Identifier: keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:7a:92:c7:b6:9b:aa:03:74:d3:c9:cc:09:22:06:ec:e0:cb: d0:06:80:fe:54:b4:d8:a5:cd:45:e3:78:06:6e:8a:14:86:4a: 51:47:0e:09:99:86:31:83:84:49:80:b0:c0:6c:f2:c6:19:3c: d1:9f:4a:fb:b8:40:c5:8b:67:46:50:42:8f:ce:03:e0:34:06: bd:88:de:ac:df:32:39:e6:f3:9e:8c:83:76:c5:a6:9c:f4:34: 60:25:fc:e2:8f:f7:12:5a:25:2b:df:69:0a:fb:4e:1a:a8:e5: 85:82:63:ca:e1:ef:77:da:4e:e7:9d:3b:44:ed:8f:8f:b0:dc: 70:b7:ba:63:3b:6b:05:16:70:42:7a:22:a0:3a:dc:cb:20:3c: 2b:bd:6a:38:0e:3b:6d:96:b1:10:83:d7:72:a7:fa:b0:5a:dc: 5d:3f:7b:a8:1e:fe:ad:9e:4e:21:98:29:38:36:a1:a5:11:1e: 00:be:71:e9:5e:42:ae:d6:58:51:f5:f5:b0:79:3b:32:f7:a2: 69:b6:a0:ee:85:a1:43:4d:6e:47:5b:e5:1c:4e:19:2e:38:13: a5:6f:ed:bb:44:24:54:1f:29:a6:18:d1:e6:b6:d7:43:9d:bd: 6e:d0:f1:01:f3:2f:ad:1e:1c:17:c5:51:df:12:26:92:29:40: 39:3d:ee:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RGMUMxMTAvBgNVBAUTKEUyMDgxRUE0RDNDREI1OTlFMjYwODYwMjcwNEZEQjM1 ODZENDhGNTcwHhcNMjQxMTIyMTg1ODIyWhcNMjQxMTI5MTg1ODIyWjAYMRYwFAYD VQQDEw02NzQwZDQ0ZS0xYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBCkTPnNolPHeMfxKN3vgrDlcoFnIWvJnF84NPl6BUHo9/hiWR9nI+wury8Y r2RzAvA3CMTjM4qOdCv7k/gRAhLBWUUoaXEwGBQS7BABvrbOP4HLemSkUe92I6HR mxH4VqvrDDEG20K+fmkDqJScr9FBk2oESC4PdEp92wnrN/o7vCvQmsSPeSp7TkYm 9rQytzOwP99ext7iEKc4zsfDf/kn11OnUBtO1pWaQJPj93cSbdOW2/v/L+Sr+0ur gKQPD2PqDXYObx8ekCudOidHRPuolxfxxB8aDt7FEmQh/ZJ1wmslXGDBH4kWXZcM XGn4U0xT2cft08eiqTXjk6AnSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaqS4M4 oJl1UTfmju3BIX25vmdbMB8GA1UdIwQYMBaAFOIIHqTTzbWZ4mCGAnBP2zWG1I9X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREYxQy8zNkM5NjIyMDI2 M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRabmlZSVlDY0VfYk5ZYlVq MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRnZ2VwTlBOdFpuaVlJWUNjRV9iTlliVWoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REYxQy8zNkM5NjIyMDI2M0UxMUVBODRGMUJDODZDNEY5QUUwMi80Z2dlcE5QTnRa bmlZSVlDY0VfYk5ZYlVqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGepLHtpuqA3TTycwJIgbs4MvQBoD+VLTYpc1F43gGbooUhkpRRw4J mYYxg4RJgLDAbPLGGTzRn0r7uEDFi2dGUEKPzgPgNAa9iN6s3zI55vOejIN2xaac 9DRgJfzij/cSWiUr32kK+04aqOWFgmPK4e932k7nnTtE7Y+PsNxwt7pjO2sFFnBC eiKgOtzLIDwrvWo4DjttlrEQg9dyp/qwWtxdP3uoHv6tnk4hmCk4NqGlER4AvnHp XkKu1lhR9fWweTsy96JptqDuhaFDTW5HW+UcThkuOBOlb+27RCRUHymmGNHmttdD nb1u0PEB8y+tHhwXxVHfEiaSKUA5Pe5+ -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:03 2024 by rpki-client on console-fra.rpki-client.org