$ rpki-client -vvf rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft File: mPVq6odEo9Few5KtBtYIN3BGJUE.mft (raw, json) Hash identifier: SXwe2440y08JEgmG1KU+sh9CKUHnXXgEcC1lF/4zDTA= Subject key identifier: 39:A2:59:55:D1:C3:17:7A:D0:2D:C2:61:06:0A:67:C1:06:E7:59:A9 Authority key identifier: 98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 Certificate issuer: /CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft Manifest number: 041B Signing time: Fri 22 Nov 2024 23:56:21 +0000 Manifest this update: Fri 22 Nov 2024 23:56:20 +0000 Manifest next update: Fri 29 Nov 2024 23:56:20 +0000 Files and hashes: 1: mPVq6odEo9Few5KtBtYIN3BGJUE.crl (hash: oGlYFUG3wgMsI+dc7NUHxWwk/gxkYgORhEj+/Ru37+k=) 2: D061270A9C5111EEB28AC931C4F9AE02.roa (hash: 8Xa/VwyU4s9nAISVSMWl7RHJ83XTMNtNTrp4qhGQTeQ=) 3: 920570C69B3711EEB43EFD3BC4F9AE02.roa (hash: Xz1iVZgdXYaRYkwacJw220rRWcAV4lYe4PDqq9waBwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D774B/serialNumber=98F56AEA8744A3D15EC392AD06D6083770462541 Validity Not Before: Nov 22 23:56:20 2024 GMT Not After : Nov 29 23:56:20 2024 GMT Subject: CN=67411a24-1c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:78:58:b1:1e:2e:1a:81:1b:c7:a5:8b:2b:67: 5b:cd:50:3d:fd:9d:40:09:a7:24:df:c4:03:07:fe: e1:79:c1:5f:91:bc:7d:5b:81:6f:9a:e4:06:f6:77: b5:14:15:3d:d2:ec:c7:4a:cb:b9:93:08:d1:d6:1c: a3:30:50:fe:18:e5:69:0c:9b:26:0f:d9:83:e9:91: 05:86:86:0d:7a:45:8c:1d:55:e4:d6:2d:f1:bb:23: 87:51:9c:56:46:40:62:b2:db:f0:6d:67:49:50:0a: 51:f4:bb:c9:98:4e:91:5a:a3:8d:ba:12:88:39:29: 80:9e:44:29:8c:b2:11:90:46:04:9c:dc:ed:3b:74: 32:d9:15:13:5a:8d:d0:b6:ef:ea:ed:c8:7f:ab:81: b1:87:73:f7:75:c2:75:59:5e:32:7c:91:89:a0:34: d5:95:47:44:40:e1:95:ef:db:07:72:ba:1e:55:0c: 93:1d:ca:65:99:06:91:81:24:4a:60:99:90:24:a9: 2a:b3:ef:07:fe:21:0b:bf:3f:ff:76:61:56:49:cc: 0e:b2:fc:11:c3:33:57:51:9b:4b:db:f8:3e:29:d9: 02:b1:4f:2e:84:eb:cf:16:08:0c:1c:bb:b5:9c:16: 32:7d:70:bf:3f:36:8d:60:3a:48:c2:ae:b9:ea:63: e7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A2:59:55:D1:C3:17:7A:D0:2D:C2:61:06:0A:67:C1:06:E7:59:A9 X509v3 Authority Key Identifier: keyid:98:F5:6A:EA:87:44:A3:D1:5E:C3:92:AD:06:D6:08:37:70:46:25:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPVq6odEo9Few5KtBtYIN3BGJUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D774B/8FAB216643B111EC9A51A52EC4F9AE02/mPVq6odEo9Few5KtBtYIN3BGJUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:99:8a:b4:4a:d5:57:96:29:02:72:75:08:92:e2:06:c3:ab: 1d:24:0e:78:aa:3f:1f:b8:b3:17:49:a2:79:8e:40:bc:97:3f: 5f:38:3b:a1:34:7f:93:2a:74:b5:40:22:b5:f0:c6:a5:26:97: 16:a8:0e:13:aa:93:05:9f:51:bb:f7:42:14:66:8d:88:29:7a: d3:a7:22:31:06:57:66:7f:c2:f3:ba:05:66:58:05:e4:6a:d3: b9:98:bc:ed:61:d3:df:79:98:3f:b4:68:56:a6:7f:8a:83:18: 0f:3b:73:95:42:76:ee:54:a8:1f:e6:cc:67:c4:24:78:c8:a0: 89:6d:21:d4:6c:d3:e8:25:4d:ca:88:9f:04:2f:63:11:85:33: 5b:c9:53:5b:86:7a:bb:18:c0:bd:b6:ae:e5:90:14:93:db:f1: c9:a7:2e:b8:83:03:4d:57:48:a1:d3:2f:30:48:c0:2a:5f:6e: aa:13:a1:83:ef:0e:7e:34:99:8c:90:39:7e:6a:76:83:d6:81: 3a:83:ae:1f:6c:b9:b4:cc:44:5c:f5:62:ba:e6:21:fb:69:4f: f6:9e:7e:27:70:00:08:c0:01:c9:13:86:7f:77:09:a1:6a:f4: 42:02:43:bc:d2:52:8d:f8:0b:3f:42:5d:07:6e:78:d7:24:ba: 85:b8:34:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc3NEIxMTAvBgNVBAUTKDk4RjU2QUVBODc0NEEzRDE1RUMzOTJBRDA2RDYwODM3 NzA0NjI1NDEwHhcNMjQxMTIyMjM1NjIwWhcNMjQxMTI5MjM1NjIwWjAYMRYwFAYD VQQDEw02NzQxMWEyNC0xYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5HhYsR4uGoEbx6WLK2dbzVA9/Z1ACack38QDB/7hecFfkbx9W4FvmuQG9ne1 FBU90uzHSsu5kwjR1hyjMFD+GOVpDJsmD9mD6ZEFhoYNekWMHVXk1i3xuyOHUZxW RkBistvwbWdJUApR9LvJmE6RWqONuhKIOSmAnkQpjLIRkEYEnNztO3Qy2RUTWo3Q tu/q7ch/q4Gxh3P3dcJ1WV4yfJGJoDTVlUdEQOGV79sHcroeVQyTHcplmQaRgSRK YJmQJKkqs+8H/iELvz//dmFWScwOsvwRwzNXUZtL2/g+KdkCsU8uhOvPFggMHLu1 nBYyfXC/PzaNYDpIwq656mPnzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmiWVXR wxd60C3CYQYKZ8EG51mpMB8GA1UdIwQYMBaAFJj1auqHRKPRXsOSrQbWCDdwRiVB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc0Qi84RkFCMjE2NjQz QjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85RmV3NUt0QnRZSU4zQkdK VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21QVnE2b2RFbzlGZXc1S3RCdFlJTjNCR0pVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Nzc0Qi84RkFCMjE2NjQzQjExMUVDOUE1MUE1MkVDNEY5QUUwMi9tUFZxNm9kRW85 RmV3NUt0QnRZSU4zQkdKVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgmYq0StVXlikCcnUIkuIGw6sdJA54qj8fuLMXSaJ5jkC8lz9fODuh NH+TKnS1QCK18MalJpcWqA4TqpMFn1G790IUZo2IKXrTpyIxBldmf8LzugVmWAXk atO5mLztYdPfeZg/tGhWpn+KgxgPO3OVQnbuVKgf5sxnxCR4yKCJbSHUbNPoJU3K iJ8EL2MRhTNbyVNbhnq7GMC9tq7lkBST2/HJpy64gwNNV0ih0y8wSMAqX26qE6GD 7w5+NJmMkDl+anaD1oE6g64fbLm0zERc9WK65iH7aU/2nn4ncAAIwAHJE4Z/dwmh avRCAkO80lKN+As/Ql0HbnjXJLqFuDSj -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org