$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft File: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json) Hash identifier: j2JkHIx4ibG1pn4CZ52O90gX2sed58pIoy/qyny/Nxs= Subject key identifier: 00:EC:4A:42:0A:A8:27:A3:E6:F1:A3:F6:67:84:E3:BA:9B:B8:21:C5 Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E Certificate issuer: /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft Manifest number: 067B Signing time: Fri 22 Nov 2024 21:51:28 +0000 Manifest this update: Fri 22 Nov 2024 21:51:27 +0000 Manifest next update: Fri 29 Nov 2024 21:51:27 +0000 Files and hashes: 1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: iOzynPRgqY4MPaPEggCWsRTRS+Q2MfWbq7yGh84w08s=) 2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: k3xfz7HPSwAtmddXj9lXyEkDd+pgrXYCFQcpo4v4ABA=) 3: 56617572537F11EB9C970658C4F9AE02.roa (hash: 2DIFhNd/HGOMPfn8KyshfkQGAl/ng92desoVaGGJW4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E Validity Not Before: Nov 22 21:51:27 2024 GMT Not After : Nov 29 21:51:27 2024 GMT Subject: CN=6740fce0-c62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a0:f6:49:e3:af:a6:33:08:2f:87:79:b5:35: 87:54:89:ca:e5:43:5e:03:b2:34:02:59:f0:73:a8: 16:97:49:bf:e9:88:66:e1:47:8d:c7:c0:29:ae:dd: 43:c6:b8:bd:d9:d4:be:2e:28:ca:18:f4:03:5b:2e: 7b:f2:dc:6b:6c:df:3b:f9:af:cd:dd:a9:b5:72:11: ce:11:1a:f6:e6:ab:63:11:7c:b8:b7:56:00:2c:dd: 25:88:92:e7:a1:e3:5d:e9:1d:9f:e6:f8:d0:99:c7: cf:c1:e7:5e:34:cc:38:1c:ee:82:67:f2:d8:46:47: c9:12:03:97:a8:c4:94:10:18:7d:00:ed:7b:83:b2: 83:7e:da:60:3d:4a:34:45:55:da:a6:7a:1b:d6:af: ad:78:41:6e:4e:5b:5d:6e:8e:97:8e:c6:ac:32:50: c5:9e:5a:21:6b:a0:ea:ce:7e:41:35:58:2e:c9:d2: 5d:b7:78:19:35:de:93:17:ec:ea:b1:0a:c1:3c:45: ed:f9:48:50:17:8f:62:78:95:60:04:ba:14:b7:50: 55:1a:cc:99:6e:72:bd:3f:6f:0e:6a:52:7d:33:ab: fe:1f:63:96:14:1c:b6:ae:28:e1:4f:58:c7:9a:6c: e2:45:f6:b7:4f:14:a1:85:0c:44:a6:1e:7f:06:40: 82:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EC:4A:42:0A:A8:27:A3:E6:F1:A3:F6:67:84:E3:BA:9B:B8:21:C5 X509v3 Authority Key Identifier: keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:d9:6d:71:a2:91:cd:7e:6e:91:6d:0e:9b:58:1b:00:28:de: df:97:e7:87:70:0d:58:59:8e:94:8b:01:31:f6:f8:5c:7b:24: 0a:5d:ba:81:2d:bb:f0:59:11:5c:07:e5:5f:b0:c8:7b:7c:b0: e2:fa:19:17:24:78:96:c0:7d:bf:01:d9:a8:b4:52:20:ab:dc: ab:57:48:e7:2e:2a:67:00:87:80:7d:b5:df:bd:08:f5:d1:8f: 1b:a3:bc:57:87:34:b1:41:90:6a:50:8b:e4:58:48:11:cf:fe: bb:51:a1:0a:25:16:b1:40:66:d6:3b:af:0a:15:f5:29:6e:73: e6:f0:f4:5d:39:43:9e:d2:7b:03:b2:46:5b:88:39:f0:d6:04: 92:1b:68:3f:f2:e1:3b:74:96:02:e1:e9:31:51:6b:04:bf:9d: ae:7c:b5:cd:40:36:af:2d:ba:c2:8e:6b:5a:19:70:cb:17:a6: 02:e2:15:c2:24:28:75:a8:25:df:63:c5:b6:7e:c6:b8:9d:0b: f2:0d:ca:21:ee:e3:32:c3:d2:20:48:fb:09:9e:87:0f:17:f6: 4f:95:c5:4c:ea:7a:cc:3a:14:68:c8:23:64:98:a5:92:90:5e: 18:48:78:4a:60:ee:36:a6:29:a5:a0:e6:91:55:a1:07:47:ae: d8:9b:ef:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyRjQxMTAvBgNVBAUTKDRCRUFFQzMzN0M2RTg5RjI3OTRBOTc0NEUxNkQ5MTlD OUM3OTNCMUUwHhcNMjQxMTIyMjE1MTI3WhcNMjQxMTI5MjE1MTI3WjAYMRYwFAYD VQQDEw02NzQwZmNlMC1jNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aD2SeOvpjMIL4d5tTWHVInK5UNeA7I0Alnwc6gWl0m/6Yhm4UeNx8Aprt1D xri92dS+LijKGPQDWy578txrbN87+a/N3am1chHOERr25qtjEXy4t1YALN0liJLn oeNd6R2f5vjQmcfPwedeNMw4HO6CZ/LYRkfJEgOXqMSUEBh9AO17g7KDftpgPUo0 RVXapnob1q+teEFuTltdbo6XjsasMlDFnloha6Dqzn5BNVguydJdt3gZNd6TF+zq sQrBPEXt+UhQF49ieJVgBLoUt1BVGsyZbnK9P28OalJ9M6v+H2OWFBy2rijhT1jH mmziRfa3TxShhQxEph5/BkCC3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADsSkIK qCej5vGj9meE47qbuCHFMB8GA1UdIwQYMBaAFEvq7DN8bonyeUqXROFtkZyceTse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODJGNC85MzZFNTlCRTUz N0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlmSjVTcGRFNFcyUm5KeDVP eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtcnNNM3h1aWZKNVNwZEU0VzJSbkp4NU94NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODJGNC85MzZFNTlCRTUzN0QxMUVCQjJCRDdCNTNDNEY5QUUwMi9TLXJzTTN4dWlm SjVTcGRFNFcyUm5KeDVPeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ2W1xopHNfm6RbQ6bWBsAKN7fl+eHcA1YWY6UiwEx9vhceyQKXbqB LbvwWRFcB+VfsMh7fLDi+hkXJHiWwH2/AdmotFIgq9yrV0jnLipnAIeAfbXfvQj1 0Y8bo7xXhzSxQZBqUIvkWEgRz/67UaEKJRaxQGbWO68KFfUpbnPm8PRdOUOe0nsD skZbiDnw1gSSG2g/8uE7dJYC4ekxUWsEv52ufLXNQDavLbrCjmtaGXDLF6YC4hXC JCh1qCXfY8W2fsa4nQvyDcoh7uMyw9IgSPsJnocPF/ZPlcVM6nrMOhRoyCNkmKWS kF4YSHhKYO42pimloOaRVaEHR67Ym+/K -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:35 2024 by rpki-client on console-fra.rpki-client.org