$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: c7oR2NcCEpl2/MewDOgXXR1hU2Sc4L2xQBYI5zSk1w4= Subject key identifier: 47:05:0A:A5:B6:06:19:1A:E3:EF:DD:92:ED:F7:DD:2F:76:D0:62:1D Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: 03 Signing time: Thu 21 Nov 2024 06:18:09 +0000 Manifest this update: Thu 21 Nov 2024 06:18:09 +0000 Manifest next update: Thu 28 Nov 2024 06:18:09 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: bgoiNygKIZw17m++kzyGhDijgclzl6RO4QIFTlX6tYs=) 2: A62D8646A70811EFB1511445C4F9AE02.roa (hash: cDepa/JWzfUR3fg1KcJ2ZxnATSMi2ZOoyezIOl4P6WM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Nov 21 06:18:09 2024 GMT Not After : Nov 28 06:18:09 2024 GMT Subject: CN=673ed0a1-7771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:82:72:47:20:dc:e3:0d:d2:9e:e1:1e:fd: e8:35:22:33:82:bf:9e:20:c7:87:14:6d:1e:e3:1e: 57:46:91:47:e7:fc:80:9e:0f:14:e5:32:9e:46:fd: 06:bb:18:ab:c6:42:d7:df:ce:62:b1:b5:0b:48:95: 25:d6:1a:23:35:41:e1:78:bb:6b:1d:87:43:4f:df: 87:d9:53:d1:f0:fe:fd:96:c5:89:c0:3b:7a:9d:e5: 5e:ac:cd:4b:f9:33:38:26:ca:64:e3:dd:13:df:c1: 7a:d6:da:a9:81:68:e0:62:49:7f:73:0b:1f:48:56: dc:9e:1e:de:d3:0a:9f:0e:1e:a2:21:70:7b:e1:ed: 89:35:44:a9:1c:30:e1:e6:97:9a:54:73:e8:06:e6: 76:75:31:5a:b4:53:e0:af:ea:7a:57:fa:50:f7:42: b9:4f:9b:2f:ae:db:6c:16:30:d1:83:14:4d:9f:6c: eb:69:fd:86:03:e5:35:c3:1a:8f:0e:38:22:6f:7c: 75:9e:de:47:16:f2:c9:5d:02:15:05:b9:bf:c0:67: 77:b5:97:e4:99:c9:7d:56:5a:cc:66:0f:71:6a:d5: a7:87:91:e2:1e:25:89:ee:a1:c0:4d:b5:69:d0:e6: ce:cf:9a:d9:8d:d1:34:2b:9f:8a:ee:97:a5:b5:e3: 7b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:05:0A:A5:B6:06:19:1A:E3:EF:DD:92:ED:F7:DD:2F:76:D0:62:1D X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b7:cc:6e:b3:69:b6:5f:91:2d:cf:b2:5b:6b:65:bc:7d:da: 5a:cb:cc:e3:61:6e:37:41:14:3b:d9:b2:29:7d:8f:db:7b:90: f3:e3:7a:13:99:63:4a:bd:24:0f:88:e5:02:1a:75:97:48:fb: 5c:3b:d0:05:79:14:c8:38:8f:97:59:75:41:64:3c:93:d2:37: d2:28:b8:18:c0:fc:82:48:04:1a:cc:98:e2:3a:67:33:24:21: 04:7e:de:ea:c7:f6:dd:32:e2:3b:1c:f0:1d:f6:17:53:b2:5f: 7c:fd:5a:75:7a:f7:7c:3e:7c:25:cc:2c:5e:65:a6:5d:f1:b5: 8c:a7:d6:0b:37:06:2f:e5:c7:4d:bd:25:f8:a3:d6:d1:a2:4f: 22:0d:2a:8b:f0:84:02:93:90:4b:dd:65:07:21:96:85:71:5a: 1f:80:6f:b9:69:ae:d1:07:30:a1:2d:2f:3d:fb:ba:69:f6:01: d0:64:1a:fc:2f:84:81:80:22:8b:f8:ee:6a:7d:ca:fe:01:e0: fe:3c:6c:c2:96:47:49:eb:6e:1d:e6:c5:16:fc:e1:ef:cf:61: b7:7e:d0:ed:6a:c9:c3:21:5b:13:aa:21:ed:43:12:6b:c1:d7: 10:6f:65:42:7d:22:9e:12:d1:f6:43:fb:89:5c:b5:72:94:e6: 76:35:e2:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoRjE1RDExNzkwQjBFNzUzNTc0MDY2MTFEQzU3MDU4RjY5 REM1NzhBMDAeFw0yNDExMjEwNjE4MDlaFw0yNDExMjgwNjE4MDlaMBgxFjAUBgNV BAMTDTY3M2VkMGExLTc3NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLKoJyRyDc4w3SnuEe/eg1IjOCv54gx4cUbR7jHldGkUfn/ICeDxTlMp5G/Qa7 GKvGQtffzmKxtQtIlSXWGiM1QeF4u2sdh0NP34fZU9Hw/v2WxYnAO3qd5V6szUv5 MzgmymTj3RPfwXrW2qmBaOBiSX9zCx9IVtyeHt7TCp8OHqIhcHvh7Yk1RKkcMOHm l5pUc+gG5nZ1MVq0U+Cv6npX+lD3QrlPmy+u22wWMNGDFE2fbOtp/YYD5TXDGo8O OCJvfHWe3kcW8sldAhUFub/AZ3e1l+SZyX1WWsxmD3Fq1aeHkeIeJYnuocBNtWnQ 5s7PmtmN0TQrn4rul6W143ufAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURwUKpbYG GRrj792S7ffdL3bQYh0wHwYDVR0jBBgwFoAU8V0ReQsOdTV0BmEdxXBY9p3FeKAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0NCODgyRTdFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVL QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFYwUmVRc09kVFYwQm1FZHhYQlk5cDNGZUtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw OUJDL0NCODgyRTdFQTcwNzExRUY5OUE1Nzc0MUM0RjlBRTAyLzhWMFJlUXNPZFRW MEJtRWR4WEJZOXAzRmVLQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKG3zG6zabZfkS3PsltrZbx92lrLzONhbjdBFDvZsil9j9t7kPPjehOZ Y0q9JA+I5QIadZdI+1w70AV5FMg4j5dZdUFkPJPSN9IouBjA/IJIBBrMmOI6ZzMk IQR+3urH9t0y4jsc8B32F1OyX3z9WnV693w+fCXMLF5lpl3xtYyn1gs3Bi/lx029 Jfij1tGiTyINKovwhAKTkEvdZQchloVxWh+Ab7lprtEHMKEtLz37umn2AdBkGvwv hIGAIov47mp9yv4B4P48bMKWR0nrbh3mxRb84e/PYbd+0O1qycMhWxOqIe1DEmvB 1xBvZUJ9Ip4S0fZD+4lctXKU5nY14mQ= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:38 2024 by rpki-client on console-ams.rpki-client.org