$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: 3yH0yUoq3Ca3PeNPB/GZPbFL+t00S4q/3gi6yyoD2MU= Subject key identifier: 0C:28:27:89:F9:C8:1C:0E:AD:41:E1:15:0B:46:CB:51:E3:77:2F:03 Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 0784 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 06DD Signing time: Fri 22 Nov 2024 22:20:37 +0000 Manifest this update: Fri 22 Nov 2024 22:20:37 +0000 Manifest next update: Fri 29 Nov 2024 22:20:36 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: 1yLbJ4uTYREDHAssMQpDppg9tWIGmHyYl0Zuq0keTBc=) 2: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: WO3P7J6kH8GHMXL59YwFi42dBM3PbTzsCl3nAQGVmAk=) 3: 81F4B3B47FCE11EF9ED5B02BC4F9AE02.roa (hash: oMuKzCS+JX69x13DBp+JZgqV6xw6ee+OEpdlTnBBba0=) 4: EFC7DBD264DA11EF92775E34C4F9AE02.roa (hash: k/unWYK0qbqTZIUAnZTc6IuxCkln58Rat1ytVVKutxQ=) 5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: tHohMDezcM2Z918uKGH0lOYypWieJQz8Tcbr5jbijDE=) 6: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: j9o+sw78b4Reo066OzFM88rEvDSWA1ctfrVAkjl9EHg=) 7: 720987748DBD11EBB4566432C4F9AE02.roa (hash: xrB/mhOTbgIhOI2yzkyZG3bhw0HWQQTWYavn+zCyChM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1924 (0x784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Nov 22 22:20:37 2024 GMT Not After : Nov 29 22:20:36 2024 GMT Subject: CN=674103b5-5d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:77:4b:f3:2f:bf:b0:0e:fe:b6:50:80:bb: df:c1:ba:a5:3b:42:df:bb:45:1e:a9:31:28:2d:23: 0e:52:18:1a:7b:92:19:8c:10:1b:e9:3c:97:42:1a: 0e:ec:37:0a:cb:3e:ac:21:14:4e:2f:49:f6:77:81: 74:e1:41:bd:37:11:e7:64:4a:d5:b8:91:73:78:d5: be:c1:3c:57:80:d1:38:4d:81:6f:4a:37:7d:75:2b: 86:09:02:55:97:7f:ce:60:58:b8:7d:b4:a5:9a:a7: 23:08:39:b3:2b:f9:ca:ff:ce:a7:14:b3:31:81:ca: 11:89:53:14:83:62:dc:04:24:45:02:4f:f3:8f:d4: ab:9d:80:79:f8:e9:e2:de:a2:7c:2b:bd:9e:97:ed: ff:3d:dc:9c:73:48:20:18:ed:fd:72:9e:cd:5e:63: 12:9d:67:45:fc:a7:d1:e7:c0:f3:18:f1:fa:23:42: 29:ce:1e:73:c3:c4:44:f3:86:55:f6:6e:6a:e5:23: d9:35:51:24:93:5a:be:b2:97:0a:34:31:4f:ec:a0: 8b:54:47:d1:c4:f4:be:ef:3a:6a:8a:0d:dd:07:fe: 1e:19:85:04:98:5a:21:05:46:01:17:d6:81:fc:e9: ae:93:1a:37:1b:bd:fb:cd:74:41:a8:87:4a:4e:13: 52:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:28:27:89:F9:C8:1C:0E:AD:41:E1:15:0B:46:CB:51:E3:77:2F:03 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:43:a9:08:8d:0c:8b:5f:ee:19:4a:a7:3a:2b:ab:17:10:cc: a1:57:9b:31:db:c0:e3:78:75:94:d0:7c:78:fd:b3:79:dd:b0: 1a:52:e0:d0:d0:44:4f:52:b2:14:a6:fb:16:d4:4b:4a:fe:7b: 15:d6:9b:06:35:d9:3f:50:7e:99:83:10:da:6c:1b:b6:a2:b2: 27:f0:0d:af:13:a1:98:7f:fa:b5:eb:1e:3a:0b:7e:e1:c2:71: 74:d6:6b:a5:c9:4f:77:0f:fa:92:f3:27:2d:ec:97:a8:ff:25: cc:e6:0d:59:4d:c1:a8:8e:d0:8e:6e:29:3b:38:8f:e0:9e:84: c6:09:9f:0c:89:69:4b:7f:4c:ef:a0:ff:49:89:30:67:5a:8c: 28:f7:2f:bd:30:f1:24:9b:35:f4:5a:5d:e2:c0:90:a0:44:bd: 11:41:71:fe:9a:77:a5:87:39:82:e9:9c:5a:9a:55:0a:c2:12: 48:91:be:0a:e4:72:84:ec:68:41:f1:1d:44:18:e2:2b:82:0e: ef:d0:e4:24:a0:27:61:2f:2c:09:59:ba:72:c8:89:05:50:cf: 5d:98:03:7d:a2:1c:45:b7:10:40:e6:d6:a6:f9:00:2d:8d:07: 55:7f:6f:85:2e:22:0f:6f:4b:99:d2:1c:df:9f:97:77:35:2d: 15:dd:d2:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjQxMTIyMjIyMDM3WhcNMjQxMTI5MjIyMDM2WjAYMRYwFAYD VQQDEw02NzQxMDNiNS01ZDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuht3S/Mvv7AO/rZQgLvfwbqlO0Lfu0UeqTEoLSMOUhgae5IZjBAb6TyXQhoO 7DcKyz6sIRROL0n2d4F04UG9NxHnZErVuJFzeNW+wTxXgNE4TYFvSjd9dSuGCQJV l3/OYFi4fbSlmqcjCDmzK/nK/86nFLMxgcoRiVMUg2LcBCRFAk/zj9SrnYB5+Oni 3qJ8K72el+3/Pdycc0ggGO39cp7NXmMSnWdF/KfR58DzGPH6I0Ipzh5zw8RE84ZV 9m5q5SPZNVEkk1q+spcKNDFP7KCLVEfRxPS+7zpqig3dB/4eGYUEmFohBUYBF9aB /Omukxo3G737zXRBqIdKThNScwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwoJ4n5 yBwOrUHhFQtGy1Hjdy8DMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdQ6kIjQyLX+4ZSqc6K6sXEMyhV5sx28DjeHWU0Hx4/bN53bAaUuDQ 0ERPUrIUpvsW1EtK/nsV1psGNdk/UH6ZgxDabBu2orIn8A2vE6GYf/q16x46C37h wnF01mulyU93D/qS8yct7Jeo/yXM5g1ZTcGojtCObik7OI/gnoTGCZ8MiWlLf0zv oP9JiTBnWowo9y+9MPEkmzX0Wl3iwJCgRL0RQXH+mnelhzmC6ZxamlUKwhJIkb4K 5HKE7GhB8R1EGOIrgg7v0OQkoCdhLywJWbpyyIkFUM9dmAN9ohxFtxBA5tam+QAt jQdVf2+FLiIPb0uZ0hzfn5d3NS0V3dLu -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:35 2024 by rpki-client on console-fra.rpki-client.org