$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft File: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft (raw, json) Hash identifier: EOX0rcqW/kvcyt9opyG++3Bswf2vOx9uupLiMsXW5Yk= Subject key identifier: B8:F6:40:25:59:89:66:48:23:02:AE:CD:EC:ED:C7:45:CF:CD:FD:0C Authority key identifier: 02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD Certificate issuer: /CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Certificate serial: 0A99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft Manifest number: 0A91 Signing time: Fri 22 Nov 2024 19:21:01 +0000 Manifest this update: Fri 22 Nov 2024 19:21:00 +0000 Manifest next update: Fri 29 Nov 2024 19:21:00 +0000 Files and hashes: 1: Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl (hash: QbYQfOsUaNIrjRqvbXCqYcR8Yc2sGo+e4VNJJ0wwrsI=) 2: 81D0374C475111EA82F8B821C4F9AE02.roa (hash: WtyrulsdejF5XDbIrnH7eySluYuKPV92/ol6mKYzbjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2713 (0xa99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2FC0/serialNumber=029F8212430A8DD7E7954FEC313F15DA47CB44DD Validity Not Before: Nov 22 19:21:00 2024 GMT Not After : Nov 29 19:21:00 2024 GMT Subject: CN=6740d99d-69ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1e:dd:dc:78:3e:2c:36:50:2a:53:b9:b9:be: 7b:e9:45:83:8d:95:2e:26:cd:f4:c3:db:a3:c4:80: 0f:cf:b4:54:1d:47:32:c5:1e:b0:e0:61:c4:20:aa: 82:a4:a9:f3:ef:c9:db:c2:16:d9:e9:b5:35:dd:c0: 14:1e:ad:08:c8:14:14:31:65:f8:18:54:73:45:60: 6e:85:b1:4e:fa:0f:98:19:2e:ec:5b:07:18:4d:19: 7f:ad:e1:50:cc:19:fb:62:be:6c:be:5c:e7:bd:35: d7:b3:6d:4f:d5:9e:43:13:29:86:d3:b0:89:0a:4d: 36:00:e5:c6:3e:40:54:95:6a:c1:1d:00:13:b1:c5: d7:12:fe:a2:38:3c:a9:7a:fb:43:63:31:5c:18:d0: 4e:53:35:3a:dd:a7:c8:b9:2a:4d:25:03:7c:c4:46: 89:be:3b:b3:84:26:18:cb:b7:80:6c:84:14:9f:d9: 73:d8:47:e0:41:35:dc:2d:4d:41:b8:d2:1c:78:c7: 99:df:a2:e7:35:0c:98:5b:b8:b0:b3:3c:4a:1a:1f: 3b:10:74:ba:4c:70:3c:fb:e4:1c:30:7c:6a:f1:fc: 91:45:f9:96:c4:f3:d7:b5:f2:8c:05:5c:a5:34:c7: 06:84:f5:27:83:5e:05:a8:94:69:85:fe:9b:92:13: 6c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F6:40:25:59:89:66:48:23:02:AE:CD:EC:ED:C7:45:CF:CD:FD:0C X509v3 Authority Key Identifier: keyid:02:9F:82:12:43:0A:8D:D7:E7:95:4F:EC:31:3F:15:DA:47:CB:44:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2FC0/2A815A08475011EA8CD9761FC4F9AE02/Ap-CEkMKjdfnlU_sMT8V2kfLRN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:4b:ca:53:e8:15:59:46:9a:58:b3:4b:cb:d7:01:ff:89:e4: b8:3a:8e:98:ac:6d:9a:22:ca:cf:8b:da:47:0a:17:33:8e:01: d1:c8:a4:10:f4:52:94:6a:bb:03:3e:68:30:73:a7:e7:07:8c: 5f:19:39:70:e7:ef:db:5a:3d:23:30:90:35:4e:c3:a8:bb:f9: 9b:a8:c7:dc:b5:7e:0c:07:b6:87:dc:6e:6e:e9:07:11:2f:07: d4:95:5d:cc:fd:7f:49:81:8d:e1:e4:77:ec:fa:5f:d9:ef:b1: 9f:22:cd:fe:c9:16:2f:9c:ea:16:e4:ca:87:b3:e0:ab:53:d4: e1:35:17:65:be:99:71:18:57:0d:72:3d:2c:f3:50:f0:d4:29: f7:3b:2d:c6:93:76:90:9f:e5:53:5a:f7:fb:53:31:65:3b:02: fc:e7:51:94:18:9f:3d:57:ef:92:33:ca:04:fb:5e:31:42:ae: 86:bc:8d:06:9a:58:d1:1a:14:8e:17:62:71:68:f0:02:1e:36: 0d:4b:d1:c2:1e:f1:c7:47:ee:b0:19:25:8d:8d:db:74:a3:17: 20:8f:71:07:1b:11:8c:3c:03:4a:55:03:01:86:d5:ac:1e:5d: a6:db:54:75:54:77:a9:29:5a:e7:11:5c:99:60:9c:33:9e:f9: a6:32:73:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGQzAxMTAvBgNVBAUTKDAyOUY4MjEyNDMwQThERDdFNzk1NEZFQzMxM0YxNURB NDdDQjQ0REQwHhcNMjQxMTIyMTkyMTAwWhcNMjQxMTI5MTkyMTAwWjAYMRYwFAYD VQQDEw02NzQwZDk5ZC02OWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1x7d3Hg+LDZQKlO5ub576UWDjZUuJs30w9ujxIAPz7RUHUcyxR6w4GHEIKqC pKnz78nbwhbZ6bU13cAUHq0IyBQUMWX4GFRzRWBuhbFO+g+YGS7sWwcYTRl/reFQ zBn7Yr5svlznvTXXs21P1Z5DEymG07CJCk02AOXGPkBUlWrBHQATscXXEv6iODyp evtDYzFcGNBOUzU63afIuSpNJQN8xEaJvjuzhCYYy7eAbIQUn9lz2EfgQTXcLU1B uNIceMeZ36LnNQyYW7iwszxKGh87EHS6THA8++QcMHxq8fyRRfmWxPPXtfKMBVyl NMcGhPUng14FqJRphf6bkhNs8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLj2QCVZ iWZIIwKuzeztx0XPzf0MMB8GA1UdIwQYMBaAFAKfghJDCo3X55VP7DE/FdpHy0Td MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkZDMC8yQTgxNUEwODQ3 NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pkZm5sVV9zTVQ4VjJrZkxS TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FwLUNFa01LamRmbmxVX3NNVDhWMmtmTFJOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkZDMC8yQTgxNUEwODQ3NTAxMUVBOENEOTc2MUZDNEY5QUUwMi9BcC1DRWtNS2pk Zm5sVV9zTVQ4VjJrZkxSTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiS8pT6BVZRppYs0vL1wH/ieS4Oo6YrG2aIsrPi9pHChczjgHRyKQQ 9FKUarsDPmgwc6fnB4xfGTlw5+/bWj0jMJA1TsOou/mbqMfctX4MB7aH3G5u6QcR LwfUlV3M/X9JgY3h5Hfs+l/Z77GfIs3+yRYvnOoW5MqHs+CrU9ThNRdlvplxGFcN cj0s81Dw1Cn3Oy3Gk3aQn+VTWvf7UzFlOwL851GUGJ89V++SM8oE+14xQq6GvI0G mljRGhSOF2JxaPACHjYNS9HCHvHHR+6wGSWNjdt0oxcgj3EHGxGMPANKVQMBhtWs Hl2m21R1VHepKVrnEVyZYJwznvmmMnNx -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org