$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft File: ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json) Hash identifier: Fs+6HmDYQZarUSmmWCAFE4fhlL2+5+iVv7i0Irn0IRs= Subject key identifier: 68:9F:2C:52:A7:3C:E9:C9:F1:26:44:E1:4F:58:01:76:0A:6D:D4:03 Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 Certificate issuer: /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Certificate serial: 0610 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft Manifest number: 0609 Signing time: Fri 22 Nov 2024 22:15:02 +0000 Manifest this update: Fri 22 Nov 2024 22:15:01 +0000 Manifest next update: Fri 29 Nov 2024 22:15:01 +0000 Files and hashes: 1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: YBzaKfRzeZ+PmlAQ1VmmpeWVGyPIlyzBvLUgfL5jIpo=) 2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: ch5lvybil+KBbySkYvZWkm3N5xvJLycUcNv3iDCsa/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1552 (0x610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Validity Not Before: Nov 22 22:15:01 2024 GMT Not After : Nov 29 22:15:01 2024 GMT Subject: CN=67410265-9063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:af:cf:b0:e7:5a:38:13:9a:bb:0d:f2:68:8d: 13:6a:46:25:cc:7c:a5:05:10:97:c9:90:6c:21:f9: b6:7b:e5:e6:60:dd:3e:d8:10:0a:36:09:5a:69:08: d4:07:7e:03:11:92:58:8e:54:c3:e0:35:41:7c:34: 6a:ae:f1:19:fb:9a:4e:fc:7a:ec:77:de:13:36:cb: 32:55:f2:5e:04:35:a4:70:df:2f:0b:75:47:4d:5d: 07:df:be:01:99:67:19:d4:97:fb:22:91:3e:7d:83: e6:c0:da:51:e9:27:da:90:0a:67:98:11:a3:17:1b: e8:9a:c8:b6:fb:02:ca:cc:c0:4d:92:50:c0:26:2e: 91:74:05:ca:c3:32:77:7f:a6:c7:27:36:c6:2a:88: 50:4b:4a:c3:f1:e2:b9:00:93:1f:ff:59:11:ec:95: 73:00:80:29:7f:61:31:71:dc:df:22:db:b2:24:0e: de:90:30:4e:2e:dd:69:bf:26:11:47:3b:72:82:e7: 71:32:95:03:94:dd:3e:23:73:b5:0a:f1:8d:c7:47: 76:17:d5:8f:1f:43:71:e4:ca:78:cc:fa:e5:b8:fb: 45:aa:ad:ff:49:d7:8a:df:4d:cc:b3:48:56:27:4c: 5a:19:7e:ff:7c:e0:24:a7:b2:ab:29:40:a8:ca:20: cb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9F:2C:52:A7:3C:E9:C9:F1:26:44:E1:4F:58:01:76:0A:6D:D4:03 X509v3 Authority Key Identifier: keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c4:c8:72:0a:8d:bb:eb:28:b0:55:12:08:c7:36:b7:52:dd: a3:43:7f:6b:17:1a:39:e1:0e:d9:50:f2:11:ca:2e:6b:79:34: 5b:80:79:c4:82:a7:d4:37:b4:13:a9:5f:f5:10:d2:03:6e:03: 46:55:67:9d:b0:81:d2:27:4a:b5:13:5f:3f:6a:1b:aa:c2:b6: 50:42:56:2b:42:3d:1a:6f:e2:92:5c:e0:d6:45:34:9f:5d:15: 4a:ca:3f:e2:78:1f:97:3f:1c:0e:80:34:15:02:f9:10:63:06: f1:80:ab:67:4a:c5:e5:5c:31:cb:79:60:f2:cf:4e:eb:fa:17: b4:f1:7e:51:1c:82:3e:39:b4:97:0d:3f:f6:63:c6:30:a5:d1: c3:69:0a:63:9b:f4:fe:fd:6d:06:b2:2e:ed:4a:fb:9c:9a:84: f3:50:cf:b3:71:41:e7:e2:1d:80:55:14:fa:b9:ae:ad:aa:46: 9d:41:91:d8:21:38:8b:61:43:87:23:37:d9:b8:89:0e:3f:55: 50:a9:a2:87:e1:e6:5e:be:82:cb:7f:3c:da:27:a7:5d:e6:3f: b0:c3:a6:e2:55:1f:92:2c:95:ac:b2:af:dc:0e:91:93:05:ec: 4d:e4:dd:de:ff:37:75:03:20:9f:c0:c2:48:1f:a2:c1:8f:11: 26:f6:11:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNDUxMTAvBgNVBAUTKDZBQkZFRkM4MzQxOTExNkVGMzRBRjNBNUE3RkY0OERF MDNCRTgzMzIwHhcNMjQxMTIyMjIxNTAxWhcNMjQxMTI5MjIxNTAxWjAYMRYwFAYD VQQDEw02NzQxMDI2NS05MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26/PsOdaOBOauw3yaI0TakYlzHylBRCXyZBsIfm2e+XmYN0+2BAKNglaaQjU B34DEZJYjlTD4DVBfDRqrvEZ+5pO/Hrsd94TNssyVfJeBDWkcN8vC3VHTV0H374B mWcZ1Jf7IpE+fYPmwNpR6SfakApnmBGjFxvomsi2+wLKzMBNklDAJi6RdAXKwzJ3 f6bHJzbGKohQS0rD8eK5AJMf/1kR7JVzAIApf2ExcdzfItuyJA7ekDBOLt1pvyYR RztygudxMpUDlN0+I3O1CvGNx0d2F9WPH0Nx5Mp4zPrluPtFqq3/SdeK303Ms0hW J0xaGX7/fOAkp7KrKUCoyiDLPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGifLFKn POnJ8SZE4U9YAXYKbdQDMB8GA1UdIwQYMBaAFGq/78g0GRFu80rzpaf/SN4DvoMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU0NS9GOEYxQzE5NDdG REUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVXN3pTdk9scF85STNnTy1n ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FyX3Z5RFFaRVc3elN2T2xwXzlJM2dPLWd6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEU0NS9GOEYxQzE5NDdGREUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVX N3pTdk9scF85STNnTy1nekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsxMhyCo276yiwVRIIxza3Ut2jQ39rFxo54Q7ZUPIRyi5reTRbgHnE gqfUN7QTqV/1ENIDbgNGVWedsIHSJ0q1E18/ahuqwrZQQlYrQj0ab+KSXODWRTSf XRVKyj/ieB+XPxwOgDQVAvkQYwbxgKtnSsXlXDHLeWDyz07r+he08X5RHII+ObSX DT/2Y8YwpdHDaQpjm/T+/W0Gsi7tSvucmoTzUM+zcUHn4h2AVRT6ua6tqkadQZHY ITiLYUOHIzfZuIkOP1VQqaKH4eZevoLLfzzaJ6dd5j+ww6biVR+SLJWssq/cDpGT BexN5N3e/zd1AyCfwMJIH6LBjxEm9hEi -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:51 2024 by rpki-client on console-ams.rpki-client.org