$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json) Hash identifier: qG+LYROFxJf+eg7Bmyro4mVLn9C/pJR7R5HNbQzJLjw= Subject key identifier: 97:A0:FD:72:38:28:97:1F:B8:7E:0C:82:09:28:10:AA:5E:A4:CC:C4 Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft Manifest number: 61 Signing time: Sat 23 Nov 2024 05:02:27 +0000 Manifest this update: Sat 23 Nov 2024 05:02:27 +0000 Manifest next update: Sat 30 Nov 2024 05:02:27 +0000 Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: Ix5AogUdGVu270wMa+DrWKXJHgPCMnHYEwEfs7IuBKs=) 2: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: nq8ODXuG2X1On3FZK6D1Ybw7+HTqr1F1kxAZ6zyabRU=) 3: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: 1y/ITkoFaBAOp9EAsg22Me68ifQMXDcby23ipO0Xd9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Validity Not Before: Nov 23 05:02:27 2024 GMT Not After : Nov 30 05:02:27 2024 GMT Subject: CN=674161e3-9b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:07:1a:b8:ee:21:9e:ec:45:b8:67:89:0b: 42:6b:fa:d1:00:f3:3a:5d:3e:d0:0a:77:03:c7:6e: b8:a8:4b:59:83:12:87:21:d4:0a:24:d7:60:5a:c4: 98:ee:40:b7:1e:16:0f:e0:08:c6:57:be:64:48:dd: e2:04:2d:0a:cb:96:b2:78:4b:19:57:40:27:63:bf: 3c:1e:6e:01:a3:bf:32:79:50:d3:8c:3f:b4:ea:82: aa:5f:29:4f:1d:57:ed:12:19:d5:7b:9f:fa:98:10: d1:7d:3b:8e:8f:47:06:fc:01:aa:5d:5f:d3:a8:8f: 3e:f6:29:20:d0:e6:7f:1a:ce:74:88:49:99:12:4a: 6e:cf:d0:4f:77:be:6c:9b:7b:07:5b:c7:0f:eb:5f: 1b:8f:28:b9:e1:ac:6a:0c:86:3b:28:35:07:62:dd: f4:a4:fc:7f:21:b8:c9:b0:39:a2:06:73:37:69:8f: 95:08:a2:86:4c:cd:6b:e8:5e:a2:ff:30:0b:84:f1: 34:72:99:0b:3a:b0:8e:0c:30:22:89:fa:1d:81:4a: c4:1b:9d:14:f4:19:f6:51:d9:8f:30:e8:3c:84:86: fa:4b:a6:65:4e:f8:7c:a8:93:70:d4:fb:92:16:60: 1f:03:fd:19:38:81:7d:6d:5d:e9:2a:38:02:8b:70: 90:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A0:FD:72:38:28:97:1F:B8:7E:0C:82:09:28:10:AA:5E:A4:CC:C4 X509v3 Authority Key Identifier: keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:61:71:21:cf:7b:2f:46:b2:5e:80:44:0c:1a:46:21:f4:f1: 71:5c:f7:cd:83:37:fc:46:e6:ad:cf:01:0a:58:e5:0e:56:d9: 8c:d9:cc:6d:94:a9:6d:01:cb:f9:4a:df:dc:fb:4d:a8:5c:d8: ea:66:62:85:6c:71:a1:8e:97:c3:04:61:74:de:cb:eb:01:6e: c0:4d:39:e9:0c:4e:00:30:41:f5:08:9a:d3:5b:3e:38:cd:2b: b1:84:ce:04:f2:2d:6a:50:da:cc:74:1b:90:81:5b:9c:21:b5: f5:83:14:06:3f:95:41:4f:e2:3e:56:c0:7f:7f:39:8f:97:68: 9e:fa:70:d8:b8:cf:89:fc:6d:dd:95:b6:e1:91:cf:2f:f0:a7: 5e:68:22:8d:24:5c:e1:26:a1:c9:35:24:4e:1e:fb:bb:63:67: a3:9e:50:74:be:90:7d:94:5f:24:71:d2:28:88:a1:45:bb:f7: a2:ba:d7:63:c3:03:66:e4:23:bd:37:ae:82:b8:72:e7:f3:b2: 01:f2:4c:40:3a:a4:09:00:66:9f:f2:8f:55:e1:5d:67:bf:56: 56:db:26:7a:be:05:a9:ef:e6:29:d1:23:b5:5d:6b:e9:fe:6b: ea:36:45:bb:d1:94:92:e7:f0:1b:1d:52:53:0d:32:22:de:ef: 02:41:20:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDNGQzExMC8GA1UEBRMoMEY1OTE0Q0JCOTZBNzBEQTA2QjExRUYzREQyQjYzQzlF NDA3QjMxQzAeFw0yNDExMjMwNTAyMjdaFw0yNDExMzAwNTAyMjdaMBgxFjAUBgNV BAMTDTY3NDE2MWUzLTliMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8SQcauO4hnuxFuGeJC0Jr+tEA8zpdPtAKdwPHbrioS1mDEoch1Aok12BaxJju QLceFg/gCMZXvmRI3eIELQrLlrJ4SxlXQCdjvzwebgGjvzJ5UNOMP7TqgqpfKU8d V+0SGdV7n/qYENF9O46PRwb8AapdX9Oojz72KSDQ5n8aznSISZkSSm7P0E93vmyb ewdbxw/rXxuPKLnhrGoMhjsoNQdi3fSk/H8huMmwOaIGczdpj5UIooZMzWvoXqL/ MAuE8TRymQs6sI4MMCKJ+h2BSsQbnRT0GfZR2Y8w6DyEhvpLpmVO+Hyok3DU+5IW YB8D/Rk4gX1tXekqOAKLcJDzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl6D9cjgo lx+4fgyCCSgQql6kzMQwHwYDVR0jBBgwFoAUD1kUy7lqcNoGsR7z3StjyeQHsxww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwM0ZDL0M3QjA5MzU2MUQ3 MTExRUY5NUUyNjg0MEM0RjlBRTAyL0Qxa1V5N2xxY05vR3NSN3ozU3RqeWVRSHN4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRDFrVXk3bHFjTm9Hc1I3ejNTdGp5ZVFIc3h3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw M0ZDL0M3QjA5MzU2MUQ3MTExRUY5NUUyNjg0MEM0RjlBRTAyL0Qxa1V5N2xxY05v R3NSN3ozU3RqeWVRSHN4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALBhcSHPey9Gsl6ARAwaRiH08XFc982DN/xG5q3PAQpY5Q5W2YzZzG2U qW0By/lK39z7Tahc2OpmYoVscaGOl8MEYXTey+sBbsBNOekMTgAwQfUImtNbPjjN K7GEzgTyLWpQ2sx0G5CBW5whtfWDFAY/lUFP4j5WwH9/OY+XaJ76cNi4z4n8bd2V tuGRzy/wp15oIo0kXOEmock1JE4e+7tjZ6OeUHS+kH2UXyRx0iiIoUW796K612PD A2bkI703roK4cufzsgHyTEA6pAkAZp/yj1XhXWe/VlbbJnq+Banv5inRI7Vda+n+ a+o2RbvRlJLn8BsdUlMNMiLe7wJBIGs= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:23 2024 by rpki-client on console-ams.rpki-client.org