$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft File: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft (raw, json) Hash identifier: J/cpR2VBzvO4jwiXOr5rJD4zsPlBZrZlXY697+ZohEg= Subject key identifier: BF:A9:F9:62:C8:60:CD:22:EA:6F:DE:2B:9B:14:8E:47:5A:A7:AD:CF Authority key identifier: DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E Certificate issuer: /CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Certificate serial: 1AF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft Manifest number: 1AD9 Signing time: Fri 22 Nov 2024 16:18:53 +0000 Manifest this update: Fri 22 Nov 2024 16:18:52 +0000 Manifest next update: Fri 29 Nov 2024 16:18:52 +0000 Files and hashes: 1: 3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl (hash: eGzYrhG1btlYPzrWfFoxXd7ZMu6TehAKWrRMThT7CJc=) 2: D129428E25DF11E7AC03C03EC4F9AE02.roa (hash: ynwGG0zQPee7d/WWj4UfcSNuuY3z6zRAMBpddvVXj/U=) 3: 20772F82207611E7AD8F8459C4F9AE02.roa (hash: Pb6kM9WouPrp2XawpESgoX55xTNZIYJEDsvGscWBa08=) 4: 920126A625F011E7AB40BB69C4F9AE02.roa (hash: 0hZ3+OpFZYBUYKTlpJLUadJMlerF9D86c90f8Z02T0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6904 (0x1af8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC4E1/serialNumber=DC1B39B54F60891AC778A9316D71B0BE8006396E Validity Not Before: Nov 22 16:18:52 2024 GMT Not After : Nov 29 16:18:52 2024 GMT Subject: CN=6740aeec-7cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:03:61:47:23:2f:44:b4:88:97:17:f7:d7: d0:c4:38:02:83:22:1d:7c:d3:94:fa:3a:a3:a6:8d: a8:1f:cc:2c:d5:a0:33:39:5a:8c:37:a5:2f:2b:87: 25:c1:14:0a:b4:a5:be:1b:2b:57:b3:ef:96:51:01: f0:db:82:d8:47:a5:f6:8a:5d:4b:14:76:76:d6:68: 16:8f:3b:09:ea:84:35:47:44:1b:33:24:02:77:a4: 95:57:a6:70:ae:c9:73:fb:1f:8b:c9:9e:30:a0:32: 93:3f:17:b1:28:a2:fc:b3:0d:89:8b:fd:6a:9c:f4: e3:09:6e:f3:ce:a0:8e:00:f5:b8:89:c8:2d:69:55: b7:11:21:4d:47:a3:85:81:80:dc:90:50:ec:63:bf: 1b:12:ff:71:0d:ef:ae:e2:41:4f:96:17:bd:9e:a7: 5f:ff:d9:f5:66:d1:f5:df:de:2a:d7:a5:3d:2f:33: 0a:f0:30:61:55:73:17:fb:1f:23:df:3f:36:fc:6f: a2:f6:17:8e:63:6a:38:12:0a:73:db:b0:5d:a9:97: bf:0e:ee:7d:5a:62:52:bf:07:85:1b:a4:c8:00:74: d7:e4:74:c6:8a:e7:da:8c:a4:2d:e3:0f:1e:5e:60: db:26:9c:f4:af:c6:0e:89:2e:09:0b:9d:27:b0:9e: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A9:F9:62:C8:60:CD:22:EA:6F:DE:2B:9B:14:8E:47:5A:A7:AD:CF X509v3 Authority Key Identifier: keyid:DC:1B:39:B5:4F:60:89:1A:C7:78:A9:31:6D:71:B0:BE:80:06:39:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bs5tU9giRrHeKkxbXGwvoAGOW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC4E1/2004F144160111E7A8AC225DC4F9AE02/3Bs5tU9giRrHeKkxbXGwvoAGOW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:ba:2f:0b:4d:76:55:82:09:1c:8b:84:a9:a5:e7:62:cb:22: f8:06:6c:0e:77:27:48:d1:9a:c3:2b:ce:33:b8:14:5c:25:cc: f1:ad:66:08:ee:ec:44:97:3b:5c:2d:0d:61:6f:3a:13:2d:8b: 12:f5:2a:e6:86:a8:3f:13:72:15:0e:f6:2d:3b:4a:43:9c:a5: 0a:ae:c4:85:35:7a:8c:f8:1d:e9:ac:5e:b7:9f:6b:74:cc:d4: 87:1d:ec:ae:cf:b4:da:6d:1e:fd:f4:8a:17:74:2c:47:07:72: 34:c2:9b:02:59:d0:e3:6c:ac:dc:0a:07:05:0c:3a:1e:c0:78: 80:0b:0b:01:de:8c:a5:63:31:7e:c5:0f:0a:ea:b7:55:f9:0c: 28:28:65:ef:36:cb:d0:b8:0f:51:42:84:22:46:b9:48:e2:4d: 06:a4:c4:d2:fa:14:33:77:70:24:db:6a:96:a5:56:8a:38:3a: c4:24:b1:6e:3d:cf:7e:91:c9:50:32:67:91:8e:f4:9c:0a:87: 8b:44:0b:62:59:d9:4f:aa:17:f8:78:e1:ee:e4:2c:0b:4d:6c: 97:4b:a8:f8:09:2b:be:21:0f:4f:09:fa:5b:d3:77:5f:4a:f1: e2:ef:f5:92:ba:f7:75:6e:aa:73:e7:aa:f4:9d:90:e7:05:71: 2c:71:5e:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM0RTExMTAvBgNVBAUTKERDMUIzOUI1NEY2MDg5MUFDNzc4QTkzMTZENzFCMEJF ODAwNjM5NkUwHhcNMjQxMTIyMTYxODUyWhcNMjQxMTI5MTYxODUyWjAYMRYwFAYD VQQDEw02NzQwYWVlYy03Y2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquYDYUcjL0S0iJcX99fQxDgCgyIdfNOU+jqjpo2oH8ws1aAzOVqMN6UvK4cl wRQKtKW+GytXs++WUQHw24LYR6X2il1LFHZ21mgWjzsJ6oQ1R0QbMyQCd6SVV6Zw rslz+x+LyZ4woDKTPxexKKL8sw2Ji/1qnPTjCW7zzqCOAPW4icgtaVW3ESFNR6OF gYDckFDsY78bEv9xDe+u4kFPlhe9nqdf/9n1ZtH1394q16U9LzMK8DBhVXMX+x8j 3z82/G+i9heOY2o4Egpz27BdqZe/Du59WmJSvweFG6TIAHTX5HTGiufajKQt4w8e XmDbJpz0r8YOiS4JC50nsJ7QSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+p+WLI YM0i6m/eK5sUjkdap63PMB8GA1UdIwQYMBaAFNwbObVPYIkax3ipMW1xsL6ABjlu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzRFMS8yMDA0RjE0NDE2 MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lSckhlS2t4YlhHd3ZvQUdP VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCczV0VTlnaVJySGVLa3hiWEd3dm9BR09XNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzRFMS8yMDA0RjE0NDE2MDExMUU3QThBQzIyNURDNEY5QUUwMi8zQnM1dFU5Z2lS ckhlS2t4YlhHd3ZvQUdPVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwui8LTXZVggkci4SppediyyL4BmwOdydI0ZrDK84zuBRcJczxrWYI 7uxElztcLQ1hbzoTLYsS9Srmhqg/E3IVDvYtO0pDnKUKrsSFNXqM+B3prF63n2t0 zNSHHeyuz7TabR799IoXdCxHB3I0wpsCWdDjbKzcCgcFDDoewHiACwsB3oylYzF+ xQ8K6rdV+QwoKGXvNsvQuA9RQoQiRrlI4k0GpMTS+hQzd3Ak22qWpVaKODrEJLFu Pc9+kclQMmeRjvScCoeLRAtiWdlPqhf4eOHu5CwLTWyXS6j4CSu+IQ9PCfpb03df SvHi7/WSuvd1bqpz56r0nZDnBXEscV4T -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:21 2024 by rpki-client on console-fra.rpki-client.org