$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json) Hash identifier: ZNmi8FL1XiqfkbOBp+UDExlnsgTTdpQYJL5C1YAKUHA= Subject key identifier: 0D:B3:9D:35:B5:2E:22:1A:13:DF:8C:CF:C3:91:32:0E:14:33:62:4E Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Certificate serial: 09DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft Manifest number: 09CB Signing time: Fri 22 Nov 2024 19:43:55 +0000 Manifest this update: Fri 22 Nov 2024 19:43:55 +0000 Manifest next update: Fri 29 Nov 2024 19:43:55 +0000 Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: Y/1YG7nNlgP0ritkVAnzNhl7KC20qHvF8lY2jEQjnEI=) 2: 57C25DB2E42811EA881AB667C4F9AE02.roa (hash: ciI39fi2c3oXroOIDaWusfSq44fRwlz++9AgtGTTQ/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2527 (0x9df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Validity Not Before: Nov 22 19:43:55 2024 GMT Not After : Nov 29 19:43:55 2024 GMT Subject: CN=6740defb-3bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:b1:69:ce:65:37:a9:54:03:0c:91:1d:89: 6a:3d:02:ee:a0:cb:49:97:60:88:f5:c1:b7:36:e6: 34:fe:b8:47:cd:e5:2e:75:ee:68:a5:0e:af:f8:3d: 03:fc:a8:71:37:80:69:59:63:55:96:79:5a:98:00: b4:75:3a:ac:96:e3:ac:99:c6:71:fb:77:f6:c8:3a: f1:f6:6d:91:37:9a:1e:ca:59:42:87:67:a9:2e:63: 8a:81:5d:f4:8f:ac:44:ea:83:7a:f5:ba:1b:8d:60: 2c:0d:a5:ac:fc:69:6f:af:22:33:fd:38:ca:5f:74: f5:21:ef:de:7e:c5:fa:50:3f:78:27:c1:c0:7d:1c: 66:6c:e5:49:0b:59:49:1e:41:be:1f:ea:38:ba:9c: bd:fb:73:85:83:ca:52:e4:f6:87:4d:f3:d7:79:74: 2b:8a:c8:58:5a:41:3a:76:28:1f:0a:3f:e5:d8:e2: db:4f:72:06:ba:ad:00:0a:1e:6f:8c:16:d7:92:c9: 24:22:93:67:7d:d6:55:38:2b:21:af:fe:65:a7:7b: 58:fd:2e:88:a6:0c:d0:e0:69:1f:8e:ac:e1:05:e5: 11:36:e1:9f:52:2b:87:1a:31:37:8d:e6:74:97:e4: 8b:37:b8:de:19:d1:64:5e:97:7d:31:f1:21:f0:a6: 7e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B3:9D:35:B5:2E:22:1A:13:DF:8C:CF:C3:91:32:0E:14:33:62:4E X509v3 Authority Key Identifier: keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:99:ee:92:f7:9b:98:d4:e3:61:4b:5c:de:34:11:03:f7:9b: f8:25:b9:92:ad:3d:2f:32:4b:0d:21:25:b9:a1:26:c7:0f:a4: f9:cb:7d:6c:aa:16:1f:22:18:2f:ab:51:e3:24:ff:a5:bb:a8: dc:0f:c1:75:c4:ae:f5:78:05:0f:2c:92:e3:bb:d1:51:5d:96: 65:cd:79:d8:73:2c:ac:85:ad:4d:32:7a:c7:ab:1d:cb:bc:ba: 68:54:f8:f5:6b:76:9e:bd:60:bf:48:00:f5:02:70:26:68:53: fa:07:31:c0:81:76:42:6e:50:53:3b:b7:1e:7e:40:cb:1a:6c: 8a:67:52:24:83:52:48:b7:73:bb:a5:e0:80:6d:9e:2b:93:3a: 69:c6:bd:43:28:60:f2:88:cf:54:d4:84:6d:05:64:d8:68:d1: aa:48:a0:06:1d:56:ca:8e:a9:ff:4f:b5:13:68:dc:d5:d5:97: 3e:a5:a7:0d:52:c8:47:65:b8:c3:2b:2c:63:89:93:51:e5:80: 94:e4:92:16:ff:4a:da:02:ba:a2:e1:7f:46:01:0d:76:08:47: 9a:cf:c2:be:04:14:b2:61:08:a5:b6:2f:e3:ee:92:22:99:1a: 9a:b6:75:7d:a8:95:c4:05:6f:b1:c8:15:36:cd:13:15:f8:69: 8c:d6:a1:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD NkI2NzkzNUEwHhcNMjQxMTIyMTk0MzU1WhcNMjQxMTI5MTk0MzU1WjAYMRYwFAYD VQQDEw02NzQwZGVmYi0zYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+Sxac5lN6lUAwyRHYlqPQLuoMtJl2CI9cG3NuY0/rhHzeUude5opQ6v+D0D /KhxN4BpWWNVlnlamAC0dTqsluOsmcZx+3f2yDrx9m2RN5oeyllCh2epLmOKgV30 j6xE6oN69bobjWAsDaWs/GlvryIz/TjKX3T1Ie/efsX6UD94J8HAfRxmbOVJC1lJ HkG+H+o4upy9+3OFg8pS5PaHTfPXeXQrishYWkE6digfCj/l2OLbT3IGuq0ACh5v jBbXkskkIpNnfdZVOCshr/5lp3tY/S6IpgzQ4GkfjqzhBeURNuGfUiuHGjE3jeZ0 l+SLN7jeGdFkXpd9MfEh8KZ+IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2znTW1 LiIaE9+Mz8ORMg4UM2JOMB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUFDNy84MUE0QzRENjZFNDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RK RFFXTWRCVXgyTm5HdG5rMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvme6S95uY1ONhS1zeNBED95v4JbmSrT0vMksNISW5oSbHD6T5y31s qhYfIhgvq1HjJP+lu6jcD8F1xK71eAUPLJLju9FRXZZlzXnYcyysha1NMnrHqx3L vLpoVPj1a3aevWC/SAD1AnAmaFP6BzHAgXZCblBTO7cefkDLGmyKZ1Ikg1JIt3O7 peCAbZ4rkzppxr1DKGDyiM9U1IRtBWTYaNGqSKAGHVbKjqn/T7UTaNzV1Zc+pacN UshHZbjDKyxjiZNR5YCU5JIW/0raArqi4X9GAQ12CEeaz8K+BBSyYQilti/j7pIi mRqatnV9qJXEBW+xyBU2zRMV+GmM1qFV -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org