$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json) Hash identifier: fo8zl2tDvChiQez3NSCAahtjbG+3abs/pvMwklqMMu8= Subject key identifier: 00:11:D1:21:6F:BA:DE:76:81:EA:EE:3B:D2:AC:83:BD:DC:74:87:19 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft Manifest number: 016E Signing time: Sat 23 Nov 2024 02:20:27 +0000 Manifest this update: Sat 23 Nov 2024 02:20:27 +0000 Manifest next update: Sat 30 Nov 2024 02:20:27 +0000 Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: KsHpNMQdQdZs8WrKFGhrD1G74N/FjgdxWrV60vGTltI=) 2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: P4Z6BspdcfvH0rYX+TT2qY8cpf0u8Fd6+AJpGOvZqU8=) 3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: 6XPd4l4/J8Za1jmQk4LwzbeIy3oyQ+M94zZ/CSC6pg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Nov 23 02:20:27 2024 GMT Not After : Nov 30 02:20:27 2024 GMT Subject: CN=67413beb-9639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:cd:7f:18:be:de:35:94:c9:ea:6e:ee:ae: fa:1b:57:8a:f0:14:53:14:08:d2:d5:c2:8d:88:50: bc:be:1a:5d:0e:b2:d3:8e:3f:79:bf:3d:88:71:7a: b9:83:3c:b7:2e:e2:78:64:19:16:ba:ce:d8:fe:ca: 44:da:25:d4:a3:33:6d:06:95:a7:5d:e6:77:40:b4: 28:56:f4:0f:a4:00:30:ee:0f:3c:91:cf:a7:02:e2: 35:93:ae:14:5e:e8:7a:9e:0c:69:68:28:d3:10:d5: 32:b9:30:17:7b:30:9b:2c:de:c8:3f:4b:db:c8:38: ee:af:74:b9:bf:bc:1a:5d:28:cb:3f:3c:2a:aa:76: c4:65:dd:a9:bc:0f:f8:85:8a:db:84:64:3c:9d:70: ff:09:b2:fd:83:2a:03:6e:12:cf:62:41:e8:29:68: 26:e3:1d:09:38:19:5d:b8:39:93:0c:ce:c0:60:cf: a6:e5:b7:ba:1e:e2:8a:56:81:bb:58:70:a9:ca:ba: 38:b8:9d:99:db:54:e5:26:15:06:5e:b8:f0:df:13: 3c:8f:d3:a7:e1:c1:5c:1e:6b:4e:0c:65:23:fd:da: d4:3f:a6:52:d3:14:d7:05:96:29:1a:8c:a6:00:d0: e3:95:65:6b:75:fd:8e:70:ed:5c:cb:4f:dd:f8:9e: cc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:11:D1:21:6F:BA:DE:76:81:EA:EE:3B:D2:AC:83:BD:DC:74:87:19 X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7d:ad:d4:ad:67:72:22:77:df:14:30:22:0a:13:04:65:0c: 41:09:6a:90:16:89:48:9c:12:f5:b3:56:47:ce:68:9c:b8:c6: 59:1e:1a:2d:69:4c:c4:d5:62:64:37:47:4b:ea:78:a3:25:e2: b4:a4:d6:ee:35:b7:2f:cf:85:02:8e:ba:8c:0d:f7:92:b2:72: 26:a6:01:74:9c:ec:a9:13:c5:ba:dd:ac:fc:f1:e6:0a:e5:9e: 4e:99:d4:b5:37:5a:26:bf:c8:23:78:da:80:e8:c1:6b:2c:9e: df:98:17:bd:d5:5b:a2:86:39:43:a0:2f:d1:e6:2b:0a:87:6d: b5:71:21:a1:e9:f2:be:c8:bb:08:d8:8a:c6:90:91:5a:1a:e0: 97:b7:8d:f3:9d:5e:53:f5:63:3e:d0:9e:5a:4e:80:db:37:d3: b0:19:c8:20:78:39:3c:63:83:84:9c:19:02:4d:bd:49:ee:d8: d0:d4:6d:13:5e:ae:d6:40:37:f4:c2:db:b0:b6:4d:81:97:21: ae:d7:79:d6:ed:10:8c:29:52:eb:77:cf:53:78:73:d7:9c:5e: f6:ee:6b:9a:07:f0:d8:e7:a8:bd:0c:28:55:ca:f4:23:af:66: 1e:28:d6:ad:ed:ed:f0:be:d6:27:40:fe:5b:0b:63:6f:f6:7a: 1c:30:c3:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjQxMTIzMDIyMDI3WhcNMjQxMTMwMDIyMDI3WjAYMRYwFAYD VQQDEw02NzQxM2JlYi05NjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBnNfxi+3jWUyepu7q76G1eK8BRTFAjS1cKNiFC8vhpdDrLTjj95vz2IcXq5 gzy3LuJ4ZBkWus7Y/spE2iXUozNtBpWnXeZ3QLQoVvQPpAAw7g88kc+nAuI1k64U Xuh6ngxpaCjTENUyuTAXezCbLN7IP0vbyDjur3S5v7waXSjLPzwqqnbEZd2pvA/4 hYrbhGQ8nXD/CbL9gyoDbhLPYkHoKWgm4x0JOBlduDmTDM7AYM+m5be6HuKKVoG7 WHCpyro4uJ2Z21TlJhUGXrjw3xM8j9On4cFcHmtODGUj/drUP6ZS0xTXBZYpGoym ANDjlWVrdf2OcO1cy0/d+J7MIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAR0SFv ut52geruO9Ksg73cdIcZMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJBRS9DNzBGRUEyQThDMjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1 aXNmejl0RTc2dXVtTEU3YWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdfa3UrWdyInffFDAiChMEZQxBCWqQFolInBL1s1ZHzmicuMZZHhot aUzE1WJkN0dL6nijJeK0pNbuNbcvz4UCjrqMDfeSsnImpgF0nOypE8W63az88eYK 5Z5OmdS1N1omv8gjeNqA6MFrLJ7fmBe91VuihjlDoC/R5isKh221cSGh6fK+yLsI 2IrGkJFaGuCXt43znV5T9WM+0J5aToDbN9OwGcggeDk8Y4OEnBkCTb1J7tjQ1G0T Xq7WQDf0wtuwtk2BlyGu13nW7RCMKVLrd89TeHPXnF727muaB/DY56i9DChVyvQj r2YeKNat7e3wvtYnQP5bC2Nv9nocMMPd -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:59 2024 by rpki-client on console-fra.rpki-client.org