$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: +Pf0VhedF7Y5R/9SczXkX+ZXHUtqCVGvg7M8BAr0dSY= Subject key identifier: 26:38:07:B6:8D:F6:0B:4F:2E:D6:41:60:38:64:9E:D9:65:7B:89:32 Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 06AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 0646 Signing time: Wed 20 Nov 2024 22:24:00 +0000 Manifest this update: Wed 20 Nov 2024 22:23:59 +0000 Manifest next update: Wed 27 Nov 2024 22:23:59 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: BkcNMg7ZSCJDiQAg1uNfmPS5XNmCZ8Di4LG2ckou02U=) 2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: YiFkayb2mucnPxSxU+1NlAOVg32mdQybW3UG3hiJAlY=) 3: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: QEtGmB7oTWw+1ELrOkqFPzSWqRypVJqPa25QYuXsots=) 4: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: B8cf+gykoiUdRA2SF3oc8jRg9pQg6awYYolexOaC74Y=) 5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: hcyonUFmxHDnVAf9RIiDBakzz9f3tlRJPynrnnL6Mf0=) 6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: nSUJ0/HqxNNnf+C4gJtmDgzN3iO6kzt2II7TMDE2rgA=) 7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: uV2UmQYkfzYcdxjPYQG2wuhRAMorkGhjJiNk6JKFedE=) 8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: pGZTk76nvEvH+X6mKbAJLcJp9iyzmP73pcve+h0fuy0=) 9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: +E0KzbFV6669WlE58ZMt1iHSfRG0oPeDGd3vMX3MCM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1708 (0x6ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Nov 20 22:23:59 2024 GMT Not After : Nov 27 22:23:59 2024 GMT Subject: CN=673e6180-524b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:d2:b5:77:40:36:13:18:b3:22:4f:54:95: fe:1a:ef:50:24:7c:42:3c:ba:34:6d:5c:2c:dc:35: a7:94:07:08:1d:dd:7c:1a:8b:37:9b:c9:15:8d:78: ef:99:f8:d5:98:af:6e:fb:78:11:bc:19:be:6e:e6: 74:d0:10:2e:a0:88:66:3b:85:69:27:4b:97:8c:dc: 96:be:2c:c6:6b:db:32:ed:b9:d4:31:52:b2:d0:6a: 3d:25:70:5b:d4:f5:02:5a:13:c9:8a:af:a7:6e:b1: d4:88:ea:7b:a1:4f:19:3b:51:b5:6d:54:5d:b5:cf: a9:49:a2:21:bd:61:0c:36:27:5b:86:8e:15:81:11: bb:dd:79:f3:e3:7d:75:0e:1a:3b:31:c0:08:0d:55: a3:ef:51:c3:96:0f:bf:ed:e6:6c:74:14:bf:97:4d: b2:f2:20:b2:50:4a:7e:15:20:16:c6:43:84:ec:83: 11:85:02:f4:ff:ba:10:e9:28:58:f6:f7:07:97:bd: aa:ad:61:84:67:f5:57:de:82:28:b5:4d:22:4a:a5: ab:ab:ab:3b:93:18:14:fd:ef:e6:fb:8e:75:a8:87: 5f:13:9c:b3:5e:8e:ab:c2:0f:3a:05:48:41:64:20: 1e:a6:ab:ce:f3:ce:54:90:06:d9:45:3a:a6:dc:4b: 3d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:38:07:B6:8D:F6:0B:4F:2E:D6:41:60:38:64:9E:D9:65:7B:89:32 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:a3:a2:13:81:7b:14:36:7f:ca:36:1f:bd:19:bc:1d:61:6d: 04:24:83:8d:2c:9a:48:24:20:85:4e:0f:e4:2f:62:b3:86:a4: d5:ee:22:12:4d:07:00:1a:b3:0e:f4:e8:58:d5:f9:d0:06:71: 8b:1b:89:ad:ae:eb:1e:ae:7b:78:46:2a:e1:0c:f5:d5:c3:a6: a1:69:52:fb:d2:b7:b1:d8:75:99:90:21:9d:c1:2b:ee:38:08: 27:93:e2:b0:c1:60:40:27:52:94:62:b4:63:84:03:59:82:6b: ea:d1:99:ed:8d:7a:49:97:62:29:11:1f:71:3c:ee:d1:6c:e8: be:ce:de:80:55:7c:0e:db:12:00:a4:36:08:82:8d:04:4a:c8: 69:ba:d9:54:9e:f7:93:21:da:9d:8c:01:51:a6:cc:ce:7c:43: cd:57:d6:a6:11:e9:91:9d:bd:53:ef:e2:b2:6e:bf:8a:39:2e: e0:7c:14:5f:8c:73:4f:48:05:ca:c4:0a:3c:35:28:e4:87:19: 7b:94:01:d5:6e:f4:6c:d7:9f:08:30:f6:18:0b:fd:6b:78:e7: b3:5c:70:ea:52:76:03:24:33:57:33:e2:20:fe:8f:40:3e:5d: 7e:ad:66:a1:9c:62:bb:7a:ac:66:04:01:ca:cf:6b:9e:c7:4a: 89:a2:98:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjQxMTIwMjIyMzU5WhcNMjQxMTI3MjIyMzU5WjAYMRYwFAYD VQQDEw02NzNlNjE4MC01MjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArg3StXdANhMYsyJPVJX+Gu9QJHxCPLo0bVws3DWnlAcIHd18Gos3m8kVjXjv mfjVmK9u+3gRvBm+buZ00BAuoIhmO4VpJ0uXjNyWvizGa9sy7bnUMVKy0Go9JXBb 1PUCWhPJiq+nbrHUiOp7oU8ZO1G1bVRdtc+pSaIhvWEMNidbho4VgRG73Xnz4311 Dho7McAIDVWj71HDlg+/7eZsdBS/l02y8iCyUEp+FSAWxkOE7IMRhQL0/7oQ6ShY 9vcHl72qrWGEZ/VX3oIotU0iSqWrq6s7kxgU/e/m+451qIdfE5yzXo6rwg86BUhB ZCAepqvO885UkAbZRTqm3Es9gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCY4B7aN 9gtPLtZBYDhkntlle4kyMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjo6ITgXsUNn/KNh+9GbwdYW0EJIONLJpIJCCFTg/kL2KzhqTV7iIS TQcAGrMO9OhY1fnQBnGLG4mtrusernt4RirhDPXVw6ahaVL70rex2HWZkCGdwSvu OAgnk+KwwWBAJ1KUYrRjhANZgmvq0ZntjXpJl2IpER9xPO7RbOi+zt6AVXwO2xIA pDYIgo0ESshputlUnveTIdqdjAFRpszOfEPNV9amEemRnb1T7+Kybr+KOS7gfBRf jHNPSAXKxAo8NSjkhxl7lAHVbvRs158IMPYYC/1reOezXHDqUnYDJDNXM+Ig/o9A Pl1+rWahnGK7eqxmBAHKz2uex0qJopj7 -----END CERTIFICATE-----Generated at Wed Nov 20 23:11:49 2024 by rpki-client on console-fra.rpki-client.org