$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json) Hash identifier: 2pxjiPVOgr2bxtwh7+2ETgyYhzBrj3CYOzirrRquVUs= Subject key identifier: B0:87:35:0E:DF:98:10:F2:38:B5:A1:F3:80:95:96:A1:93:C5:53:A9 Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Certificate serial: 07F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft Manifest number: 07C4 Signing time: Fri 22 Nov 2024 20:56:40 +0000 Manifest this update: Fri 22 Nov 2024 20:56:40 +0000 Manifest next update: Fri 29 Nov 2024 20:56:40 +0000 Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: bhNrCpZMpBV+Lc1J4mnA/hf9XvVw7UXNIcT4eUB+UkQ=) 2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: o9tC3xGk/ryfBi7Xpc0uX9OG3rCVXHi+ADtUKveFW/g=) 3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: RqQ3FtgVLAL1IFIF/43vRyoNKwfkZ4KsetRcvw+Y+Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Validity Not Before: Nov 22 20:56:40 2024 GMT Not After : Nov 29 20:56:40 2024 GMT Subject: CN=6740f008-ce8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5b:e2:10:b1:4c:5a:01:3b:cb:ad:0d:ce:1f: 0c:45:c0:66:da:5d:76:ed:5b:96:5e:63:b9:22:ad: f9:0e:02:6e:3c:9b:cb:70:a7:b1:4f:2f:90:74:7f: 62:8b:28:3d:ef:fa:28:8b:02:38:ad:1e:ba:1c:99: aa:0a:59:ed:59:3d:6f:f2:a3:fb:bb:d3:69:c6:b0: fd:94:90:c0:74:15:e8:14:ee:50:eb:dc:e7:be:c2: 2a:c7:c3:03:ac:91:54:59:2b:fc:71:0a:c1:e9:72: a5:4c:c1:d6:2b:e5:00:f0:23:be:64:aa:c5:58:5b: 94:00:90:9c:8e:0e:d8:3c:e2:f2:76:f2:2c:01:ff: fa:90:a9:92:a5:df:2d:f1:05:5e:a0:18:6f:6e:34: 66:42:d3:a3:55:60:2c:eb:9a:17:69:bd:04:41:65: 2b:00:ef:0e:61:68:36:d2:7d:44:c2:8e:43:ac:a9: d8:de:39:0f:73:b4:ae:17:65:9d:7a:3b:e2:da:38: d1:a6:98:99:b6:3a:70:67:d7:79:9e:48:54:ae:10: b6:b0:b8:ba:02:8c:88:35:6c:d8:17:de:9d:1d:62: 5a:da:ee:fa:8b:b2:85:be:58:c1:94:c9:f6:22:db: 31:db:bb:57:62:80:da:5e:7c:05:30:a6:3d:a7:53: 37:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:87:35:0E:DF:98:10:F2:38:B5:A1:F3:80:95:96:A1:93:C5:53:A9 X509v3 Authority Key Identifier: keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:49:e9:2e:6d:cc:e9:73:24:a0:d5:7a:e8:ff:08:04:d9:7f: 6c:14:c1:43:a3:df:bf:a5:a3:11:75:ee:a3:00:ac:c5:c1:86: 61:d0:2c:25:86:a5:41:f4:0d:f7:8a:a2:63:33:f5:29:c0:e9: 1f:a7:9f:58:3a:31:0d:1c:40:ab:61:4b:b1:d3:fe:48:56:04: c6:35:82:e2:ba:a2:1a:cf:af:c1:f9:09:d2:8b:e1:39:81:a9: 5e:0e:c9:51:8e:cc:57:56:e6:d6:6b:58:8e:cf:8e:11:55:b1: f7:ae:bf:63:3e:94:c2:95:bc:05:f9:8a:e0:5a:ec:66:ca:9b: a6:7c:f9:2f:63:eb:a1:3b:38:b0:7d:df:ba:d0:36:69:13:53: 06:7f:bd:20:80:05:36:6b:1c:14:b7:dc:4c:c0:2e:29:c7:6c: c3:17:17:d8:1f:10:fe:0a:3a:09:6a:a7:5b:ed:df:20:94:e6: 4e:49:6c:79:2d:f7:e1:39:60:d0:6f:d9:51:63:a6:33:28:78: 4d:30:42:bd:56:e0:84:fd:b0:55:02:8f:36:ea:4d:54:cd:c4: 77:75:6f:fd:69:3d:42:dd:20:03:94:1b:1c:65:8c:0e:81:6e: 33:d3:5d:0c:ca:eb:54:55:6c:e5:1b:7a:9e:17:e7:78:63:df: e9:b4:16:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx Nzc4RDA2QkYwHhcNMjQxMTIyMjA1NjQwWhcNMjQxMTI5MjA1NjQwWjAYMRYwFAYD VQQDEw02NzQwZjAwOC1jZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VviELFMWgE7y60Nzh8MRcBm2l127VuWXmO5Iq35DgJuPJvLcKexTy+QdH9i iyg97/ooiwI4rR66HJmqClntWT1v8qP7u9NpxrD9lJDAdBXoFO5Q69znvsIqx8MD rJFUWSv8cQrB6XKlTMHWK+UA8CO+ZKrFWFuUAJCcjg7YPOLydvIsAf/6kKmSpd8t 8QVeoBhvbjRmQtOjVWAs65oXab0EQWUrAO8OYWg20n1Ewo5DrKnY3jkPc7SuF2Wd ejvi2jjRppiZtjpwZ9d5nkhUrhC2sLi6AoyINWzYF96dHWJa2u76i7KFvljBlMn2 Itsx27tXYoDaXnwFMKY9p1M3mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCHNQ7f mBDyOLWh84CVlqGTxVOpMB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBESekubczpcySg1Xro/wgE2X9sFMFDo9+/paMRde6jAKzFwYZh0Cwl hqVB9A33iqJjM/UpwOkfp59YOjENHECrYUux0/5IVgTGNYLiuqIaz6/B+QnSi+E5 galeDslRjsxXVubWa1iOz44RVbH3rr9jPpTClbwF+YrgWuxmypumfPkvY+uhOziw fd+60DZpE1MGf70ggAU2axwUt9xMwC4px2zDFxfYHxD+CjoJaqdb7d8glOZOSWx5 LffhOWDQb9lRY6YzKHhNMEK9VuCE/bBVAo826k1UzcR3dW/9aT1C3SADlBscZYwO gW4z010MyutUVWzlG3qeF+d4Y9/ptBZj -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org