$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft File: SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json) Hash identifier: sCdr7EYjS/66T7GHLDeLV/hXWpCetRbViX95/QqigjU= Subject key identifier: 7C:48:7D:1B:EF:AA:2B:CF:F9:3C:18:84:EE:2E:A4:C9:2F:A4:75:A9 Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F Certificate issuer: /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Certificate serial: 1F67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft Manifest number: 1F5C Signing time: Fri 22 Nov 2024 16:00:31 +0000 Manifest this update: Fri 22 Nov 2024 16:00:31 +0000 Manifest next update: Fri 29 Nov 2024 16:00:31 +0000 Files and hashes: 1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: NFeGDMWHnY2CkH1gYahXRMhWv9UqZUFaTw3uk+Yv03U=) 2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: hqQQAaZRgcjCgg9dxqCtWyXjW9YlU7f12oZXVkvMZlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8039 (0x1f67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F Validity Not Before: Nov 22 16:00:31 2024 GMT Not After : Nov 29 16:00:31 2024 GMT Subject: CN=6740aa9f-928e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ab:32:d2:ef:d8:cb:24:ff:84:5f:bc:60:51: 45:fd:84:fc:2c:f1:cf:b1:1a:66:41:ca:4f:9b:7a: 06:d5:40:fd:87:6f:1b:29:00:61:2a:e7:68:8b:d1: f7:ee:75:bc:aa:e2:1e:d7:4c:68:71:ee:36:36:dc: 85:9e:7f:01:77:19:b5:01:67:e8:46:a3:73:a0:c0: 82:54:90:1d:34:d9:ca:54:57:09:bf:b9:0c:00:b2: 0a:d0:20:ce:79:ce:85:21:b7:af:94:1b:6d:d1:98: 17:0b:80:db:80:b3:6f:aa:e7:e1:05:5f:77:2f:6a: cc:fc:b3:6a:6e:9b:fb:d7:a4:07:87:b4:e9:45:1d: a2:76:a1:63:5a:a0:55:7a:da:3f:83:e7:99:1e:de: e2:69:2d:b9:b5:7e:66:86:19:18:84:d6:df:e5:1d: 15:5e:b8:16:be:91:e3:08:65:e4:72:8f:fb:71:9b: 8e:b2:d5:c4:80:b2:ce:75:59:9d:21:57:7f:7c:69: 18:de:7c:a9:b7:46:0c:c5:d8:c1:2d:c9:88:8c:ed: 0c:69:ea:5b:47:ca:8e:ce:d6:b3:86:ae:9f:a8:fd: 13:e7:ce:ae:db:4a:46:cb:cc:3a:cc:3f:0b:0e:bb: 07:54:4a:15:c7:f5:3c:8e:0e:5a:5f:1f:68:32:5e: 2d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:48:7D:1B:EF:AA:2B:CF:F9:3C:18:84:EE:2E:A4:C9:2F:A4:75:A9 X509v3 Authority Key Identifier: keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:d9:79:e6:e9:05:e2:7f:68:37:28:f4:28:92:54:1f:4a:9c: af:93:a2:c3:b6:70:cb:10:45:56:90:70:d1:25:e4:70:05:42: b2:07:d4:f7:f2:89:41:27:33:5f:8a:0e:de:21:3b:03:79:45: 7f:87:1e:98:c5:f6:d6:e5:53:6f:87:c3:b7:8a:7c:a3:8b:e6: 11:5d:67:38:4d:a8:ad:95:7b:49:b5:ba:f6:8e:d2:5a:32:31: 39:45:95:47:b0:aa:8f:c0:05:98:7e:21:cd:d0:ba:91:60:36: 1f:5b:2b:f8:a2:ea:66:93:cf:2d:37:de:58:c9:6e:5a:20:e7: 61:fe:1b:46:c3:a9:e3:c6:64:04:b6:9a:ae:b9:d1:83:a4:7a: b5:ba:64:86:5d:33:2c:55:2b:2a:e0:2a:84:18:9d:d1:bc:fa: ee:55:a1:9a:4b:8d:d7:a0:f8:09:06:ad:1b:22:be:fa:20:29: 0f:b7:b5:99:fd:cf:d3:f5:7d:e7:a4:9a:f5:28:9e:11:cf:bd: f9:53:88:1c:bf:94:81:52:19:df:cc:25:6b:be:34:11:0a:c2: 05:03:8a:3f:70:78:78:7f:e3:9e:f0:90:d9:ac:75:93:9a:18: 9b:4d:d5:96:3c:cf:32:82:ec:56:29:9c:e5:82:30:79:75:0c: e1:78:1c:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQTkxMTAvBgNVBAUTKDRBNTc1RjJCRjMzMTI0NjJGODU2NDYxQUU5REREMEEz ODQ0QUJEMkYwHhcNMjQxMTIyMTYwMDMxWhcNMjQxMTI5MTYwMDMxWjAYMRYwFAYD VQQDEw02NzQwYWE5Zi05MjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qsy0u/YyyT/hF+8YFFF/YT8LPHPsRpmQcpPm3oG1UD9h28bKQBhKudoi9H3 7nW8quIe10xoce42NtyFnn8Bdxm1AWfoRqNzoMCCVJAdNNnKVFcJv7kMALIK0CDO ec6FIbevlBtt0ZgXC4DbgLNvqufhBV93L2rM/LNqbpv716QHh7TpRR2idqFjWqBV eto/g+eZHt7iaS25tX5mhhkYhNbf5R0VXrgWvpHjCGXkco/7cZuOstXEgLLOdVmd IVd/fGkY3nypt0YMxdjBLcmIjO0MaepbR8qOztazhq6fqP0T586u20pGy8w6zD8L DrsHVEoVx/U8jg5aXx9oMl4tYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxIfRvv qivP+TwYhO4upMkvpHWpMB8GA1UdIwQYMBaAFEpXXyvzMSRi+FZGGund0KOESr0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBOS84M0MzMTEwODMz NUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpHTDRWa1lhNmQzUW80Ukt2 UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NsZGZLX014SkdMNFZrWWE2ZDNRbzRSS3ZTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBOS84M0MzMTEwODMzNUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpH TDRWa1lhNmQzUW80Ukt2UzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ2Xnm6QXif2g3KPQoklQfSpyvk6LDtnDLEEVWkHDRJeRwBUKyB9T3 8olBJzNfig7eITsDeUV/hx6YxfbW5VNvh8O3inyji+YRXWc4TaitlXtJtbr2jtJa MjE5RZVHsKqPwAWYfiHN0LqRYDYfWyv4oupmk88tN95YyW5aIOdh/htGw6njxmQE tpquudGDpHq1umSGXTMsVSsq4CqEGJ3RvPruVaGaS43XoPgJBq0bIr76ICkPt7WZ /c/T9X3npJr1KJ4Rz735U4gcv5SBUhnfzCVrvjQRCsIFA4o/cHh4f+Oe8JDZrHWT mhibTdWWPM8yguxWKZzlgjB5dQzheBz1 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org