$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json) Hash identifier: pyOPmfzshlv0LAese85oyIofGA28ZXQsc1KsVWxGuRk= Subject key identifier: C2:78:91:3E:70:BB:5A:27:2A:03:DB:D7:82:2F:A7:01:45:9D:46:50 Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Certificate serial: 0A96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft Manifest number: 0A88 Signing time: Fri 22 Nov 2024 19:22:57 +0000 Manifest this update: Fri 22 Nov 2024 19:22:56 +0000 Manifest next update: Fri 29 Nov 2024 19:22:56 +0000 Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: 9dYFFP/2gy9kPVHJRA2eGiUw9HN8WxNO+HTZLHikaBA=) 2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: Aiioa6HROkA0Wu9hWdqlc2P5ZsuUkz08muRFBZ4+o1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2710 (0xa96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Validity Not Before: Nov 22 19:22:56 2024 GMT Not After : Nov 29 19:22:56 2024 GMT Subject: CN=6740da11-999b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:3e:8f:a8:94:2d:8b:77:d2:f5:62:47:d8: 46:f2:54:cc:bb:49:80:1a:ad:4b:56:da:db:1a:69: 1c:77:7c:1a:c2:f2:20:67:e8:c9:37:13:a4:26:f2: bb:29:ab:df:f1:1d:57:f3:db:f9:f7:e9:96:b1:72: fa:11:7d:86:e2:70:c3:b9:19:22:3a:65:70:7f:7e: b5:ae:5a:d1:19:5c:ab:73:0c:74:6b:5e:f9:6c:68: be:63:9d:82:8c:64:fd:d1:ca:58:de:72:6c:84:68: 55:8c:3c:dd:09:50:b2:3f:9c:74:9d:c4:da:06:76: f3:ef:ad:0d:83:cf:28:22:de:89:5a:52:dc:1f:a5: c9:c1:77:e5:ab:58:76:2b:b4:4f:b7:85:f1:97:f6: a6:b8:63:9b:10:8a:63:b1:85:f7:e7:e8:a4:eb:a9: 07:38:42:78:72:2b:6d:52:98:cf:51:8c:6d:0b:21: 86:e5:e4:ec:ec:2b:27:c3:85:f8:5e:3a:47:6c:ee: ef:9a:1e:32:55:4b:35:4f:21:d3:37:4f:bf:6a:a8: 0e:4d:8c:ab:e3:10:b4:23:5a:bc:bf:56:d8:e9:fa: a0:69:ce:a3:7f:d0:56:a3:ff:fd:c7:eb:48:c1:8c: 79:61:e3:25:33:2d:7d:51:41:f9:2c:33:a6:78:46: 55:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:78:91:3E:70:BB:5A:27:2A:03:DB:D7:82:2F:A7:01:45:9D:46:50 X509v3 Authority Key Identifier: keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:62:b4:b8:6a:38:32:09:89:e5:67:c1:d8:e9:31:fa:8c:f5: c9:cf:6c:5b:0f:39:9e:44:58:3f:9e:a7:2f:bd:d9:b2:f3:87: 2d:2e:66:db:64:d8:14:42:1c:98:61:4a:61:50:5b:ea:d7:05: 28:59:12:4f:ed:7d:2e:d6:a0:49:0d:cf:58:c0:dd:00:98:a0: b1:de:b7:42:7d:2d:29:dd:af:bc:33:7b:96:d8:fa:13:ff:57: c1:98:60:77:31:ab:f7:07:96:ef:3f:ba:d4:29:f7:86:a3:82: 5b:83:51:9e:b1:48:1c:ac:6f:4d:a0:37:96:f7:93:41:0d:0b: 7d:87:a0:cf:29:df:4b:68:a9:0b:f6:db:34:e7:b8:52:f5:29: 1d:d5:1d:08:8a:06:56:9a:e1:bb:9b:e4:0e:07:64:8e:eb:08: 4e:30:75:e4:03:44:14:29:72:4d:ae:90:b5:39:29:66:3a:09: 74:f7:67:28:61:91:3a:bb:39:94:8d:7e:18:ff:6f:32:1c:80: 7b:b0:d6:04:3e:0b:1e:b9:53:46:64:8e:b4:b2:c2:cf:ff:a8: e2:58:d1:66:9f:27:e6:fd:a7:5c:3c:99:84:de:27:96:fe:90: cd:fd:79:38:bb:b3:40:35:ac:dc:97:39:0a:9c:e9:51:af:7a: 63:41:a9:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3 MTkzQThCQzIwHhcNMjQxMTIyMTkyMjU2WhcNMjQxMTI5MTkyMjU2WjAYMRYwFAYD VQQDEw02NzQwZGExMS05OTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsO8+j6iULYt30vViR9hG8lTMu0mAGq1LVtrbGmkcd3wawvIgZ+jJNxOkJvK7 Kavf8R1X89v59+mWsXL6EX2G4nDDuRkiOmVwf361rlrRGVyrcwx0a175bGi+Y52C jGT90cpY3nJshGhVjDzdCVCyP5x0ncTaBnbz760Ng88oIt6JWlLcH6XJwXflq1h2 K7RPt4Xxl/amuGObEIpjsYX35+ik66kHOEJ4cittUpjPUYxtCyGG5eTs7Csnw4X4 XjpHbO7vmh4yVUs1TyHTN0+/aqgOTYyr4xC0I1q8v1bY6fqgac6jf9BWo//9x+tI wYx5YeMlMy19UUH5LDOmeEZVvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJ4kT5w u1onKgPb14IvpwFFnUZQMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5 N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi SmNNV2taTFN2YzF4azZpOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHYrS4ajgyCYnlZ8HY6TH6jPXJz2xbDzmeRFg/nqcvvdmy84ctLmbb ZNgUQhyYYUphUFvq1wUoWRJP7X0u1qBJDc9YwN0AmKCx3rdCfS0p3a+8M3uW2PoT /1fBmGB3Mav3B5bvP7rUKfeGo4Jbg1GesUgcrG9NoDeW95NBDQt9h6DPKd9LaKkL 9ts057hS9Skd1R0IigZWmuG7m+QOB2SO6whOMHXkA0QUKXJNrpC1OSlmOgl092co YZE6uzmUjX4Y/28yHIB7sNYEPgseuVNGZI60ssLP/6jiWNFmnyfm/adcPJmE3ieW /pDN/Xk4u7NANazclzkKnOlRr3pjQane -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org