$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft File: A0a2NPJj9jaEI52232S7us33-KQ.mft (raw, json) Hash identifier: hkz3aDiQQ5sxifRL349DrzY7bEcWRXKdrNDS8O+OagE= Subject key identifier: 51:C3:F2:B4:C1:DE:97:A9:D3:22:3C:DA:B4:ED:01:C2:E5:89:42:D4 Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4 Certificate issuer: /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4 Certificate serial: 1073 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft Manifest number: 0E68 Signing time: Fri 22 Nov 2024 18:09:51 +0000 Manifest this update: Fri 22 Nov 2024 18:09:50 +0000 Manifest next update: Fri 29 Nov 2024 18:09:50 +0000 Files and hashes: 1: A0a2NPJj9jaEI52232S7us33-KQ.crl (hash: kw70dky/ndT3WTqnxcMKlr0SIArncX3NyBGSnKyx1pw=) 2: 2BB8ADC445FF11EF962C0B77C4F9AE02.roa (hash: inEMJqTJQGTAjULwqkNAooRxYTCv7DSisP7ka0CjFeU=) 3: 26DA1E16247411EA8E1A1178C4F9AE02.roa (hash: 2d6B7dOvusdbolEglGxOmkSZdHYDTyLSYjs57fzYYnk=) 4: 86C887F4A24111EFACBC5769C4F9AE02.roa (hash: QWP4cBoDKf1PagQ5/bzH+y95pfNjQGdAHPGescHJQ+4=) 5: 161D8022A24611EF966F6286C4F9AE02.roa (hash: ceTZVpw7rCFHUlXqkaohAqOzq6O3kLILB+r7fOW1zYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4211 (0x1073) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4 Validity Not Before: Nov 22 18:09:50 2024 GMT Not After : Nov 29 18:09:50 2024 GMT Subject: CN=6740c8ef-08db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4a:35:9b:ec:ec:bc:81:dc:c3:a6:df:90:84: 77:75:d1:5a:c8:20:2f:b1:b1:61:d8:e8:89:c6:82: d5:ac:75:a3:f1:66:d7:37:5a:45:6d:9e:ff:89:fb: 64:23:cf:7a:45:f0:6e:25:af:d0:5a:ed:fe:57:1d: f8:41:68:25:df:7d:f5:6d:77:9d:21:c7:fd:d9:0e: 95:49:33:f1:22:34:00:c8:81:34:81:0a:5a:cb:f2: 92:ce:0b:72:97:b2:8c:4f:d0:b3:45:7a:1e:87:20: 9d:65:d0:51:92:0c:70:e6:dd:76:e6:e2:d5:f5:2d: 97:33:dd:b0:71:48:f0:32:63:1e:a8:3b:b3:64:dc: 52:7b:f8:ae:3d:01:1c:9e:03:3a:11:86:55:93:a1: 63:34:9a:10:fc:9e:0f:70:93:54:12:c7:13:be:f9: a0:8a:7b:50:63:83:7f:46:f0:48:1c:89:86:4d:7e: 46:4d:0d:fd:0a:2e:b6:49:97:0c:cb:62:57:f4:1f: e3:3d:a6:2e:2b:77:65:e6:3d:1c:67:00:75:49:9b: ac:20:84:4f:fe:65:86:6b:a8:a7:8d:ad:b6:49:ef: d4:b6:bb:ac:7c:4e:73:90:90:a1:2e:c3:22:4a:30: dd:a8:50:85:f0:98:f5:f1:c1:17:50:69:14:a9:8a: c6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C3:F2:B4:C1:DE:97:A9:D3:22:3C:DA:B4:ED:01:C2:E5:89:42:D4 X509v3 Authority Key Identifier: keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c5:f9:41:ee:8e:12:99:6d:95:02:c9:0d:13:f4:9a:ac:2f: 21:ee:1e:e2:16:d6:9d:8a:bb:28:3e:a1:fd:e1:84:f0:05:a5: 54:02:9d:3a:30:87:cd:97:9a:28:e9:a6:70:c0:a0:14:12:ba: 36:ba:a4:12:36:a8:e5:68:23:1b:f9:ce:25:d1:b1:3e:61:ae: 82:58:43:9c:3d:54:a4:3d:22:ef:77:02:f0:33:d8:7d:2b:1c: b2:21:c7:fe:9d:a7:aa:18:df:97:a0:c9:9e:92:18:c6:f9:8a: cb:af:9c:f5:b4:08:b8:33:23:54:d4:0b:cb:82:3b:60:5c:81: 8b:d3:68:f6:75:f7:99:0a:57:81:55:5b:f1:de:7d:d5:6a:eb: ba:c6:ed:4f:b0:65:f2:09:17:7a:28:79:05:13:f8:9f:1f:fc: 07:fe:11:ee:40:38:76:c2:8e:a0:25:39:4c:41:6c:57:03:63: 8d:da:87:ef:59:02:2a:ea:d9:48:70:25:81:00:84:58:93:00: 7a:79:82:f2:6a:3f:e9:64:41:6e:cb:dd:ae:d8:e1:1b:f5:e6: e4:60:31:e4:bf:20:85:65:12:f2:7a:20:6b:e9:49:5c:6f:db: 13:a0:e7:f2:d8:0b:1b:3d:56:bf:3e:6d:27:bd:7c:18:67:15: 4b:f0:fd:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxNTYxMTAvBgNVBAUTKDAzNDZCNjM0RjI2M0Y2MzY4NDIzOURCNkRGNjRCQkJB Q0RGN0Y4QTQwHhcNMjQxMTIyMTgwOTUwWhcNMjQxMTI5MTgwOTUwWjAYMRYwFAYD VQQDEw02NzQwYzhlZi0wOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70o1m+zsvIHcw6bfkIR3ddFayCAvsbFh2OiJxoLVrHWj8WbXN1pFbZ7/iftk I896RfBuJa/QWu3+Vx34QWgl3331bXedIcf92Q6VSTPxIjQAyIE0gQpay/KSzgty l7KMT9CzRXoehyCdZdBRkgxw5t125uLV9S2XM92wcUjwMmMeqDuzZNxSe/iuPQEc ngM6EYZVk6FjNJoQ/J4PcJNUEscTvvmgintQY4N/RvBIHImGTX5GTQ39Ci62SZcM y2JX9B/jPaYuK3dl5j0cZwB1SZusIIRP/mWGa6inja22Se/UtrusfE5zkJChLsMi SjDdqFCF8Jj18cEXUGkUqYrG4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHD8rTB 3pep0yI82rTtAcLliULUMB8GA1UdIwQYMBaAFANGtjTyY/Y2hCOdtt9ku7rN9/ik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzE1Ni9COUYwODQ0Q0Yy M0QxMUU5QUY4NDI3MjRDNEY5QUUwMi9BMGEyTlBKajlqYUVJNTIyMzJTN3VzMzMt S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EwYTJOUEpqOWphRUk1MjIzMlM3dXMzMy1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzE1Ni9COUYwODQ0Q0YyM0QxMUU5QUY4NDI3MjRDNEY5QUUwMi9BMGEyTlBKajlq YUVJNTIyMzJTN3VzMzMtS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrxflB7o4SmW2VAskNE/SarC8h7h7iFtadirsoPqH94YTwBaVUAp06 MIfNl5oo6aZwwKAUEro2uqQSNqjlaCMb+c4l0bE+Ya6CWEOcPVSkPSLvdwLwM9h9 KxyyIcf+naeqGN+XoMmekhjG+YrLr5z1tAi4MyNU1AvLgjtgXIGL02j2dfeZCleB VVvx3n3Vauu6xu1PsGXyCRd6KHkFE/ifH/wH/hHuQDh2wo6gJTlMQWxXA2ON2ofv WQIq6tlIcCWBAIRYkwB6eYLyaj/pZEFuy92u2OEb9ebkYDHkvyCFZRLyeiBr6Ulc b9sToOfy2AsbPVa/Pm0nvXwYZxVL8P0s -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:04 2024 by rpki-client on console-fra.rpki-client.org