$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json) Hash identifier: siDxZKSjLmHolg9Em/5URrSCWV/EUvBVrt1isHlWk4w= Subject key identifier: 00:BB:1E:68:93:AA:B4:BB:ED:08:17:2F:7A:E1:EB:85:0A:0A:1A:FF Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft Manifest number: 011E Signing time: Sat 23 Nov 2024 03:15:22 +0000 Manifest this update: Sat 23 Nov 2024 03:15:22 +0000 Manifest next update: Sat 30 Nov 2024 03:15:22 +0000 Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: VxK2PyinmO+CkC7MyD5PszUshtGsrSqZ9db/D8ci9V4=) 2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: 61jykwbjSWlecTxQbXexQrYBIHCiEouIxmqT8SrgbD0=) 3: 109D6B8897BC11EFAA7DDA47C4F9AE02.roa (hash: 2TTooaidGX9aXMJeD/f8vmO/tLuUyUMzYqaEiy6npsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6 Validity Not Before: Nov 23 03:15:22 2024 GMT Not After : Nov 30 03:15:22 2024 GMT Subject: CN=674148ca-d343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:71:56:cf:9b:9a:74:d2:f6:fe:49:64:18: 78:12:46:a5:c6:ba:ea:9b:a6:c7:a0:6b:b6:a7:c4: be:ac:43:ab:0b:8d:16:ea:2f:de:29:bf:35:a2:89: 55:bf:74:9f:b8:37:32:6f:22:fb:fd:68:ae:73:86: 08:15:12:2c:eb:16:21:77:3a:e7:f5:a8:ad:13:ff: 33:6c:ff:b3:a6:56:ea:84:fd:00:ed:1d:e9:c6:0c: 0e:ea:1a:57:f9:9f:ce:f5:3d:2a:70:94:49:58:7d: 56:99:11:ec:cd:29:f6:78:88:5a:b0:df:ef:54:e1: 59:65:c8:80:79:ae:45:24:69:36:35:0f:eb:2a:fa: 4f:c8:f5:9f:a1:43:9e:fe:f4:dd:cc:45:71:70:51: c5:2e:ab:e8:95:b2:ae:15:df:1a:94:87:4f:36:0f: 0a:9e:66:0a:d4:b7:db:8f:43:33:d8:1f:1f:e9:48: ab:30:2a:01:a7:a5:fe:d8:9b:1c:1d:ec:d5:f3:80: bc:03:7a:b9:00:c3:9c:84:93:3b:8f:87:7e:18:89: dd:2f:a9:e6:3b:ce:d2:36:e4:be:bb:7f:f9:58:40: e0:ef:57:5c:0e:e5:8e:3c:a1:4b:ba:7b:5f:f1:15: a3:18:a6:8c:0f:60:83:aa:be:e0:7c:61:74:e5:a5: 1d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BB:1E:68:93:AA:B4:BB:ED:08:17:2F:7A:E1:EB:85:0A:0A:1A:FF X509v3 Authority Key Identifier: keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a1:b1:e6:da:53:31:2d:64:f7:8f:1c:90:84:19:d4:ef:d9: 03:3f:10:4f:cd:8a:e8:42:2f:34:1d:44:9c:91:d3:00:24:5c: 37:59:4c:02:01:04:c5:d7:dc:67:e5:ca:00:a9:8c:27:9c:a5: d1:92:b6:be:fe:56:95:12:75:44:7f:32:43:de:58:93:78:7e: 44:4b:da:e5:e9:49:13:a7:db:0b:9c:98:64:eb:36:9a:65:62: 10:b5:8f:67:73:11:b8:c7:36:46:9b:54:95:5f:9e:9b:dc:bd: 15:a5:14:75:f9:ec:96:c2:da:1e:d7:6c:72:13:f9:8f:f6:18: 6b:fb:0a:dc:e4:fa:50:9b:ed:9b:b5:ea:a1:d9:f6:fc:82:97: 93:35:75:2b:03:8b:79:19:83:ac:ac:8a:7e:f4:3f:9e:27:8d: 97:b8:4e:0f:7c:29:1f:bb:f9:ea:75:74:51:95:20:c4:29:08: 20:f0:83:a6:f3:45:3b:ae:7e:de:f2:e5:f7:35:03:65:c8:7d: 45:7c:11:3c:34:d3:c6:e8:f8:8e:38:34:9c:c2:e7:b7:0e:75: cc:b6:1d:73:7c:54:35:3a:b8:60:25:f4:1c:81:28:e1:3d:03: 0d:4e:cd:d1:44:fa:e5:f4:96:f2:32:5f:29:d0:1d:ae:2f:6f: 9c:d9:30:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNGOEUxMTAvBgNVBAUTKEQ0MDA1MUJDOEREQTYwQzkzMkVFMDc3NjlBQjg2N0JF RkE4RDQyRjYwHhcNMjQxMTIzMDMxNTIyWhcNMjQxMTMwMDMxNTIyWjAYMRYwFAYD VQQDEw02NzQxNDhjYS1kMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdFxVs+bmnTS9v5JZBh4Ekalxrrqm6bHoGu2p8S+rEOrC40W6i/eKb81oolV v3SfuDcybyL7/Wiuc4YIFRIs6xYhdzrn9aitE/8zbP+zplbqhP0A7R3pxgwO6hpX +Z/O9T0qcJRJWH1WmRHszSn2eIhasN/vVOFZZciAea5FJGk2NQ/rKvpPyPWfoUOe /vTdzEVxcFHFLqvolbKuFd8alIdPNg8KnmYK1Lfbj0Mz2B8f6UirMCoBp6X+2Jsc HezV84C8A3q5AMOchJM7j4d+GIndL6nmO87SNuS+u3/5WEDg71dcDuWOPKFLuntf 8RWjGKaMD2CDqr7gfGF05aUdgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAC7HmiT qrS77QgXL3rh64UKChr/MB8GA1UdIwQYMBaAFNQAUbyN2mDJMu4Hdpq4Z776jUL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Y4RS82QzQwODlCQTIx NkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlNa3k3Z2QybXJobnZ2cU5R dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBQlJ2STNhWU1reTdnZDJtcmhudnZxTlF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0Y4RS82QzQwODlCQTIxNkMxMUVFQjI4QkYyNENDNEY5QUUwMi8xQUJSdkkzYVlN a3k3Z2QybXJobnZ2cU5RdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClobHm2lMxLWT3jxyQhBnU79kDPxBPzYroQi80HUSckdMAJFw3WUwC AQTF19xn5coAqYwnnKXRkra+/laVEnVEfzJD3liTeH5ES9rl6UkTp9sLnJhk6zaa ZWIQtY9ncxG4xzZGm1SVX56b3L0VpRR1+eyWwtoe12xyE/mP9hhr+wrc5PpQm+2b teqh2fb8gpeTNXUrA4t5GYOsrIp+9D+eJ42XuE4PfCkfu/nqdXRRlSDEKQgg8IOm 80U7rn7e8uX3NQNlyH1FfBE8NNPG6PiOODScwue3DnXMth1zfFQ1OrhgJfQcgSjh PQMNTs3RRPrl9JbyMl8p0B2uL2+c2TCK -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:24 2024 by rpki-client on console-ams.rpki-client.org