$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: YZY4h0M9cfrwNIbeCjYr4B7pIzy0Faq3cv8BHfJhVfc= Subject key identifier: E0:CC:77:FC:C5:96:5A:15:00:9B:AA:36:6C:1B:F1:6B:B9:F5:2F:74 Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 06E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 06DB Signing time: Fri 22 Nov 2024 21:37:20 +0000 Manifest this update: Fri 22 Nov 2024 21:37:19 +0000 Manifest next update: Fri 29 Nov 2024 21:37:19 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: GnZARXShP0QYN1vCazddRB6sxj6XxdrvNy6GWK4FGjk=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: SdQIXAZgLAYC0wC8aVzYt0Gf/I3END/T1//qc7xaDnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1764 (0x6e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Nov 22 21:37:19 2024 GMT Not After : Nov 29 21:37:19 2024 GMT Subject: CN=6740f990-27b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:4a:70:a4:ac:9b:c1:44:31:f2:7a:a5:dc: 2c:2b:4e:be:d0:c2:4a:00:a8:ee:91:14:ab:20:fc: 30:08:21:32:95:50:c1:4a:27:62:5b:16:37:d9:73: 1c:92:f6:ca:1e:70:5d:48:21:6d:66:6a:05:e5:0d: ed:d2:a3:eb:5f:54:53:ee:9d:47:0e:ea:91:b5:7a: c5:f0:a2:16:2a:19:ec:2a:26:41:ae:77:44:77:80: 68:26:cd:87:bb:37:0e:dd:e7:47:38:4b:c8:3c:fa: a5:65:ca:b9:15:a1:7d:15:63:87:1b:08:34:9d:9d: da:d9:f6:f4:a9:94:ff:e4:68:08:cf:89:f4:27:07: 05:a0:75:82:ee:e6:3a:c4:f8:91:ae:fd:d1:78:e8: 0f:1a:4f:16:f5:db:c0:7d:0e:c4:0b:29:1c:70:af: 93:b0:73:e3:99:92:19:12:53:cf:48:d3:a4:d8:b7: 1c:89:5c:c6:ec:7d:e1:e2:8e:a4:85:fa:23:db:11: 97:1a:2e:1f:95:c3:1b:c3:27:07:2c:61:2d:4e:80: 0b:80:5d:73:18:7f:b4:0f:10:17:99:22:c2:c4:cf: c7:8c:03:a6:11:10:03:98:b3:07:78:18:af:aa:d5: d6:84:57:f8:0c:be:f4:1b:e3:d4:96:58:44:1b:ca: 6d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CC:77:FC:C5:96:5A:15:00:9B:AA:36:6C:1B:F1:6B:B9:F5:2F:74 X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:18:25:20:fd:d2:e5:f4:00:90:00:5d:38:8d:cd:30:61:67: 04:b0:be:56:b4:b4:78:91:65:45:63:48:87:a4:c8:e4:68:42: 55:a0:5e:be:9c:68:42:7c:35:c5:6e:43:1e:82:9a:fa:7c:31: 70:5b:af:f3:74:45:e3:a0:64:b3:0e:ec:66:5f:ce:e4:44:f8: eb:61:73:0c:d8:44:04:7b:11:aa:ce:76:48:00:03:eb:49:e0: 1c:7f:3f:de:49:a1:b1:5a:6c:8a:44:13:09:da:eb:82:74:2a: d4:4e:f5:59:8a:d3:71:60:d2:05:8b:9f:70:3c:6d:ef:2b:13: 23:c4:03:b7:3f:95:ca:7f:15:df:88:30:10:00:af:f8:97:47: 78:61:43:c5:17:04:98:aa:9b:c3:bf:47:74:b1:48:95:20:be: 54:8f:ac:d3:f4:f3:38:fe:e1:74:6f:73:e9:68:41:22:8a:1b: 8d:56:3f:2f:ec:18:a5:50:ee:b1:0b:73:4f:76:e8:7a:22:c8: 77:89:2a:ce:fc:0a:2e:93:69:f2:50:de:5f:98:d8:8b:48:73: 62:71:95:8d:cb:24:5c:b1:1d:bc:a8:19:e6:79:7b:50:d0:22: b5:84:fd:bd:fe:62:0f:0f:6f:52:98:74:66:98:09:98:65:28: 07:03:df:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjQxMTIyMjEzNzE5WhcNMjQxMTI5MjEzNzE5WjAYMRYwFAYD VQQDEw02NzQwZjk5MC0yN2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu01KcKSsm8FEMfJ6pdwsK06+0MJKAKjukRSrIPwwCCEylVDBSidiWxY32XMc kvbKHnBdSCFtZmoF5Q3t0qPrX1RT7p1HDuqRtXrF8KIWKhnsKiZBrndEd4BoJs2H uzcO3edHOEvIPPqlZcq5FaF9FWOHGwg0nZ3a2fb0qZT/5GgIz4n0JwcFoHWC7uY6 xPiRrv3ReOgPGk8W9dvAfQ7ECykccK+TsHPjmZIZElPPSNOk2LcciVzG7H3h4o6k hfoj2xGXGi4flcMbwycHLGEtToALgF1zGH+0DxAXmSLCxM/HjAOmERADmLMHeBiv qtXWhFf4DL70G+PUllhEG8ptMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODMd/zF lloVAJuqNmwb8Wu59S90MB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChGCUg/dLl9ACQAF04jc0wYWcEsL5WtLR4kWVFY0iHpMjkaEJVoF6+ nGhCfDXFbkMegpr6fDFwW6/zdEXjoGSzDuxmX87kRPjrYXMM2EQEexGqznZIAAPr SeAcfz/eSaGxWmyKRBMJ2uuCdCrUTvVZitNxYNIFi59wPG3vKxMjxAO3P5XKfxXf iDAQAK/4l0d4YUPFFwSYqpvDv0d0sUiVIL5Uj6zT9PM4/uF0b3PpaEEiihuNVj8v 7BilUO6xC3NPduh6Ish3iSrO/Aouk2nyUN5fmNiLSHNicZWNyyRcsR28qBnmeXtQ 0CK1hP29/mIPD29SmHRmmAmYZSgHA994 -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org