$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft File: AwfvDynPItsJcPUIPAI8KqDW9Rc.mft (raw, json) Hash identifier: MIexu55Z0HyB+QgkKHg4S0zIgRIdCaezzkGx1/yTaPM= Subject key identifier: 5A:6A:51:A2:78:44:2F:87:D2:BA:78:FB:6F:9F:BB:A6:D3:45:55:62 Authority key identifier: 03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 Certificate issuer: /CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Certificate serial: 083B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft Manifest number: 0835 Signing time: Fri 22 Nov 2024 20:28:58 +0000 Manifest this update: Fri 22 Nov 2024 20:28:57 +0000 Manifest next update: Fri 29 Nov 2024 20:28:57 +0000 Files and hashes: 1: AwfvDynPItsJcPUIPAI8KqDW9Rc.crl (hash: v7XgU3gg/pNNuqg5apXReGFcnnLzrL9WoC8193eFAPU=) 2: B1AAC5B2BC4111EA9A5B2786C4F9AE02.roa (hash: icXVNVT7p9gqqT6T6N/nqjjEgwvoL9M+Js5FxgE4rqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8704/serialNumber=0307EF0F29CF22DB0970F5083C023C2AA0D6F517 Validity Not Before: Nov 22 20:28:57 2024 GMT Not After : Nov 29 20:28:57 2024 GMT Subject: CN=6740e989-d106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:95:db:80:fb:87:20:46:ad:a4:09:16:42: 68:f9:a3:db:b0:d8:2d:8f:45:eb:9d:45:4f:5b:b3: 38:15:99:2e:7b:15:01:80:29:6b:a9:bb:90:cc:9e: b8:15:3c:de:b1:df:3f:c2:d1:19:aa:50:da:bf:1f: c9:79:bd:ab:4f:f5:63:83:e7:35:ce:ea:2a:78:fd: 4c:b8:ca:a2:1c:03:e7:ca:b3:15:c2:6a:45:2b:87: df:26:83:5c:8d:b4:b2:bf:88:e2:1a:8a:6f:6b:18: 57:e9:4a:18:a9:c0:0c:ea:1c:7f:f1:71:43:05:47: 68:89:ca:3f:49:87:4a:a7:17:bb:25:4a:67:40:2a: 35:33:ef:3d:24:33:e0:61:1e:6e:58:2b:21:85:57: 34:20:9b:22:64:fd:9a:cb:d9:4c:55:e9:ce:ea:07: 55:58:f1:0c:22:08:03:d1:5b:1f:fc:63:7b:1c:39: 1d:93:4e:13:bc:4d:dd:83:58:d3:67:9b:f9:46:b6: 88:97:88:2a:c9:8b:27:b7:d3:9e:ac:3d:ab:d8:b4: b6:c5:9a:5a:2c:da:df:05:8c:c9:c8:40:f1:00:39: 85:af:d1:bd:6f:f1:c6:97:80:af:fe:cb:f3:31:cc: f6:ce:4e:b1:18:9a:2d:40:0b:47:08:d2:9b:d0:58: fd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6A:51:A2:78:44:2F:87:D2:BA:78:FB:6F:9F:BB:A6:D3:45:55:62 X509v3 Authority Key Identifier: keyid:03:07:EF:0F:29:CF:22:DB:09:70:F5:08:3C:02:3C:2A:A0:D6:F5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwfvDynPItsJcPUIPAI8KqDW9Rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8704/5655AC98BC0C11EA91E09B68C4F9AE02/AwfvDynPItsJcPUIPAI8KqDW9Rc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:12:aa:6d:0f:77:5a:a3:f1:68:4a:fd:37:21:8c:25:29:b3: b4:a4:fc:f6:5f:86:77:97:82:b7:42:23:2d:ac:76:5d:f2:ad: b2:f4:ec:a5:22:da:02:ca:04:20:58:31:9c:fb:d2:4b:4f:91: 72:e5:e2:ae:84:b6:e2:0e:a0:74:13:b7:40:3a:be:e5:70:58: e0:4d:5a:23:ed:3b:ea:f5:54:bf:2e:ba:f7:bf:7b:fe:90:74: 18:d9:bd:52:38:50:0f:b6:ae:d6:81:60:43:dd:7c:ac:4f:2c: 96:3b:be:b8:d8:e0:72:eb:11:19:06:9f:11:54:74:0a:10:a2: be:8c:33:d7:17:a6:40:cb:c1:8a:a9:70:bf:34:8a:c6:a3:b3: c9:27:8b:8b:26:94:9f:d6:8d:47:5c:c6:d9:60:26:db:32:3d: 2b:72:22:ca:7f:65:7a:73:6e:7e:6c:72:9f:8e:1e:ae:aa:ca: cd:20:33:13:6e:0f:aa:bf:ff:b5:c0:68:53:47:f7:f3:d8:8f: 5d:fc:d8:1b:c6:4e:05:1d:9b:ba:a6:48:e5:dc:0e:49:c9:bb: 66:d7:a9:8c:95:c4:aa:c4:8f:70:a4:df:da:59:1b:2b:de:52: aa:06:ba:ae:4c:8c:88:ce:1f:9e:f8:ed:49:cd:91:ab:00:8c: dd:71:5b:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg3MDQxMTAvBgNVBAUTKDAzMDdFRjBGMjlDRjIyREIwOTcwRjUwODNDMDIzQzJB QTBENkY1MTcwHhcNMjQxMTIyMjAyODU3WhcNMjQxMTI5MjAyODU3WjAYMRYwFAYD VQQDEw02NzQwZTk4OS1kMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmfGV24D7hyBGraQJFkJo+aPbsNgtj0XrnUVPW7M4FZkuexUBgClrqbuQzJ64 FTzesd8/wtEZqlDavx/Jeb2rT/Vjg+c1zuoqeP1MuMqiHAPnyrMVwmpFK4ffJoNc jbSyv4jiGopvaxhX6UoYqcAM6hx/8XFDBUdoico/SYdKpxe7JUpnQCo1M+89JDPg YR5uWCshhVc0IJsiZP2ay9lMVenO6gdVWPEMIggD0Vsf/GN7HDkdk04TvE3dg1jT Z5v5RraIl4gqyYsnt9OerD2r2LS2xZpaLNrfBYzJyEDxADmFr9G9b/HGl4Cv/svz Mcz2zk6xGJotQAtHCNKb0Fj9PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpqUaJ4 RC+H0rp4+2+fu6bTRVViMB8GA1UdIwQYMBaAFAMH7w8pzyLbCXD1CDwCPCqg1vUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODcwNC81NjU1QUM5OEJD MEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0c0pjUFVJUEFJOEtxRFc5 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F3ZnZEeW5QSXRzSmNQVUlQQUk4S3FEVzlSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODcwNC81NjU1QUM5OEJDMEMxMUVBOTFFMDlCNjhDNEY5QUUwMi9Bd2Z2RHluUEl0 c0pjUFVJUEFJOEtxRFc5UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuEqptD3dao/FoSv03IYwlKbO0pPz2X4Z3l4K3QiMtrHZd8q2y9Oyl ItoCygQgWDGc+9JLT5Fy5eKuhLbiDqB0E7dAOr7lcFjgTVoj7Tvq9VS/Lrr3v3v+ kHQY2b1SOFAPtq7WgWBD3XysTyyWO7642OBy6xEZBp8RVHQKEKK+jDPXF6ZAy8GK qXC/NIrGo7PJJ4uLJpSf1o1HXMbZYCbbMj0rciLKf2V6c25+bHKfjh6uqsrNIDMT bg+qv/+1wGhTR/fz2I9d/Ngbxk4FHZu6pkjl3A5Jybtm16mMlcSqxI9wpN/aWRsr 3lKqBrquTIyIzh+e+O1JzZGrAIzdcVvp -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:13 2024 by rpki-client on console-fra.rpki-client.org