$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json) Hash identifier: +d+xRPTciArLhMe6e0YMlYyk3Gg/XCScKPYxc2fTMGw= Subject key identifier: A4:E3:D6:1D:FE:08:97:79:3C:AA:67:44:40:2C:BD:5C:33:F5:1D:61 Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Certificate serial: 08AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft Manifest number: 08A8 Signing time: Fri 22 Nov 2024 20:15:33 +0000 Manifest this update: Fri 22 Nov 2024 20:15:33 +0000 Manifest next update: Fri 29 Nov 2024 20:15:33 +0000 Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: 6hUi91DpJlRqzTK7yXwSY9vhKbRsqT0dlte4Ix4D6l0=) 2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: X9HB94cWjBTgn2Vk1TJX8o07Q/D8RuXJYiqfr8e7UHo=) 3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: s7kmGV11LpR2uOYTQWsw6P4Bq6z4n3l1h0bh9iKPVCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2223 (0x8af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Validity Not Before: Nov 22 20:15:33 2024 GMT Not After : Nov 29 20:15:33 2024 GMT Subject: CN=6740e665-7ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:16:2a:30:0f:c1:db:f0:4f:8a:d1:a8:af:04: f5:b4:5e:4c:1e:47:6e:88:76:7b:b7:7d:42:62:e4: 9b:bb:f0:b9:4a:a6:b5:32:e5:77:eb:39:a0:6d:8c: 4b:bc:fd:0f:63:ce:e4:12:a3:65:db:be:cd:1e:d3: 89:58:9a:89:a4:c5:f4:d2:d1:94:9d:6d:40:73:8a: 93:2f:ff:7b:10:10:a2:6a:b2:f5:57:55:16:fb:86: 1d:f5:a4:bb:fc:d4:b6:a3:c3:db:e5:b1:58:9f:5d: dd:72:f9:dd:ca:5c:72:b4:f7:e3:97:eb:bc:da:08: 5c:1d:d9:88:fc:30:75:4b:1b:f2:c5:7d:79:49:7c: 42:82:0f:a2:5c:1e:e0:11:1f:c4:22:84:4a:7e:a9: 0e:13:20:7b:f8:8c:ba:9a:d3:37:9c:30:aa:46:2d: db:a3:f0:1a:99:e7:8a:7c:92:ce:1e:0f:55:65:d2: 67:37:ad:2e:75:c8:a4:1c:8c:ec:51:32:62:82:9e: a8:46:34:1b:16:58:60:28:db:f0:2e:21:5d:fb:88: f4:4c:5d:34:ed:3e:df:a2:c6:3c:e6:96:2a:d0:d8: 54:b7:70:23:b5:a6:a6:3b:c4:99:4f:50:9a:1c:6e: 04:6e:e3:7b:d7:bc:e2:4e:ab:61:1d:07:9b:63:44: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E3:D6:1D:FE:08:97:79:3C:AA:67:44:40:2C:BD:5C:33:F5:1D:61 X509v3 Authority Key Identifier: keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:53:f4:fb:82:b7:a7:ae:3c:36:28:af:10:45:19:76:ab:6d: fb:a4:39:42:2f:48:91:29:9e:c3:3f:2c:14:02:2e:80:00:6f: bd:19:05:28:c8:27:65:3e:0a:85:be:9b:e5:50:38:2d:66:eb: 72:4e:37:3d:89:d2:1d:39:e8:98:4e:4d:37:1a:35:6c:00:8a: 92:b7:c7:33:39:f9:54:14:20:f2:77:b0:43:4f:a5:a9:3e:b9: d6:47:8f:fd:bc:d4:7f:19:27:83:9d:5f:53:48:1d:5a:41:66: 23:24:10:d9:be:0c:5e:75:a8:21:82:e9:13:0c:8a:bb:1c:92: 52:6e:52:c4:14:29:74:f9:9f:52:95:46:2d:e4:57:5a:35:59: a0:da:83:6d:bf:89:d7:65:43:c1:05:a4:c9:7d:62:cb:b3:9b: 29:58:4d:d1:dd:21:74:12:ab:cd:8b:ac:c9:0d:fc:2c:f6:e4: 11:e5:95:02:a6:bb:07:91:cd:01:53:dd:7f:24:d2:7a:3c:11: ba:2c:26:44:6d:29:e3:1b:f9:7d:ae:ae:1d:b1:45:a5:59:ee: 3c:43:9e:de:91:28:82:b6:6a:63:36:6c:04:74:98:f1:ff:91: b7:10:37:fc:aa:05:cb:af:cc:45:9a:f9:65:2b:37:54:7d:2c: e1:83:37:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxNUYxMTAvBgNVBAUTKDRDNzBFMDIwMzJFQTU5QzJBRkQ1NDFBMTg3MEQ3NEIw NDBEMUI2QTIwHhcNMjQxMTIyMjAxNTMzWhcNMjQxMTI5MjAxNTMzWjAYMRYwFAYD VQQDEw02NzQwZTY2NS03ZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRYqMA/B2/BPitGorwT1tF5MHkduiHZ7t31CYuSbu/C5Sqa1MuV36zmgbYxL vP0PY87kEqNl277NHtOJWJqJpMX00tGUnW1Ac4qTL/97EBCiarL1V1UW+4Yd9aS7 /NS2o8Pb5bFYn13dcvndylxytPfjl+u82ghcHdmI/DB1SxvyxX15SXxCgg+iXB7g ER/EIoRKfqkOEyB7+Iy6mtM3nDCqRi3bo/AameeKfJLOHg9VZdJnN60udcikHIzs UTJigp6oRjQbFlhgKNvwLiFd+4j0TF007T7fosY85pYq0NhUt3AjtaamO8SZT1Ca HG4EbuN717ziTqthHQebY0THKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTj1h3+ CJd5PKpnREAsvVwz9R1hMB8GA1UdIwQYMBaAFExw4CAy6lnCr9VBoYcNdLBA0bai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjE1Ri9GMzEyQ0EyNkE2 M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdjS3YxVUdoaHcxMHNFRFJ0 cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIRGdJRExxV2NLdjFVR2hodzEwc0VEUnRxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjE1Ri9GMzEyQ0EyNkE2M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdj S3YxVUdoaHcxMHNFRFJ0cUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNU/T7grenrjw2KK8QRRl2q237pDlCL0iRKZ7DPywUAi6AAG+9GQUo yCdlPgqFvpvlUDgtZutyTjc9idIdOeiYTk03GjVsAIqSt8czOflUFCDyd7BDT6Wp PrnWR4/9vNR/GSeDnV9TSB1aQWYjJBDZvgxedaghgukTDIq7HJJSblLEFCl0+Z9S lUYt5FdaNVmg2oNtv4nXZUPBBaTJfWLLs5spWE3R3SF0EqvNi6zJDfws9uQR5ZUC prsHkc0BU91/JNJ6PBG6LCZEbSnjG/l9rq4dsUWlWe48Q57ekSiCtmpjNmwEdJjx /5G3EDf8qgXLr8xFmvllKzdUfSzhgzdt -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:41 2024 by rpki-client on console-ams.rpki-client.org