$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: Z3CGsVC8KE4GLHtwqX6LLob7qbeI66HFtzEe2gq9AeQ= Subject key identifier: B1:8A:9F:64:10:95:04:C3:0B:1F:19:FA:A0:C8:0B:A3:76:AC:64:97 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 0522 Signing time: Fri 22 Nov 2024 23:09:34 +0000 Manifest this update: Fri 22 Nov 2024 23:09:34 +0000 Manifest next update: Fri 29 Nov 2024 23:09:34 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: rbTfmfEs6cOAue1V0jH94cgwxSOAxtWSuShNmQKapEY=) 2: 660A349884C511EFB2831C16C4F9AE02.roa (hash: q2RN3xLXUOsYwfNjHGYHuCEJyjXQ1ifjwY5JK1sjpVs=) 3: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: 5+nKIDKYjPUjJXitKA/NG2KaCsn8s1r6GRZFIHnwdms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Nov 22 23:09:34 2024 GMT Not After : Nov 29 23:09:34 2024 GMT Subject: CN=67410f2e-c0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:08:69:f7:b0:75:12:7c:f0:43:0d:5d:9f: 7a:a9:9c:76:49:02:5e:5b:3f:8b:26:e4:6a:c6:3e: 5c:c3:6a:1a:93:a8:42:4d:e4:be:95:95:93:70:22: 37:c0:6f:d9:67:04:95:06:9a:eb:cd:d8:25:46:7d: 6b:3e:f0:63:2e:9a:e9:00:7f:6d:ff:c3:d7:bf:87: bc:6a:e2:30:41:57:a9:fe:b4:c9:98:ca:44:fb:8f: 05:e2:b9:0f:b4:a5:6a:16:ee:f2:66:5b:2a:d8:50: 88:7a:29:2c:de:dc:5e:11:eb:d2:be:99:6a:b0:de: 14:30:8b:91:aa:cd:29:da:95:4a:00:5d:71:02:f5: e6:f8:23:1f:16:be:26:3e:78:84:bd:91:c0:2f:1e: 50:f6:4c:ef:d9:1b:71:1a:cf:5f:26:a2:e5:38:1a: 74:74:6f:e4:73:75:ed:76:d4:4d:d4:c3:e5:4a:a4: bc:d4:75:fd:35:5e:c2:c9:a1:02:85:ff:87:8b:29: 11:cd:93:52:de:ef:d1:c2:e3:00:f6:b7:2e:4f:56: 90:10:f5:82:5c:4c:14:31:70:b1:5f:6c:44:1a:50: 48:d4:2a:d5:52:55:dc:e0:e7:4f:99:01:c2:89:2b: ac:55:0d:f0:34:8b:2f:ef:37:80:13:27:d0:de:d1: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8A:9F:64:10:95:04:C3:0B:1F:19:FA:A0:C8:0B:A3:76:AC:64:97 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:3d:05:29:09:95:e2:57:3c:4d:57:3b:c6:c1:a1:3b:8d:06: 04:b0:3a:70:f2:24:04:b2:dc:3a:d3:d4:e6:fa:54:aa:35:b3: 52:b5:d6:52:4b:fb:69:40:ef:b5:5e:cf:86:ac:90:2e:da:90: c8:6b:b0:fc:49:77:5f:25:e6:a3:1f:a6:89:52:3d:ed:32:bb: 67:aa:d4:2a:bf:ca:a1:a4:06:99:34:f6:32:c0:96:b3:e9:1a: 08:32:a7:e1:12:f4:61:4f:ba:8b:fd:6d:d6:fd:53:2a:ab:7d: c8:ea:92:d9:fe:af:de:fc:3f:ad:8d:8b:16:65:f6:96:56:e9: 83:06:c3:db:d1:4d:73:85:5d:7d:d0:ba:3e:d4:dd:bf:c0:97: 2a:95:98:8d:13:2e:64:d9:9c:9c:51:4c:d5:22:07:36:0c:f7: ee:17:37:f6:ff:82:38:2f:17:96:26:11:ac:31:f9:b7:72:16: 84:10:c9:06:b9:75:34:c0:7f:80:dc:8c:8e:4b:f2:88:6f:07: 17:39:45:8f:fe:a4:de:63:11:70:ae:45:97:d8:a1:e9:5b:6c: 30:da:c0:fa:6e:f0:74:13:08:3e:1a:b1:65:02:7c:dc:7d:7d: 34:48:9e:27:11:95:46:e0:34:50:46:6f:37:7b:14:e3:02:8f: 2f:84:92:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjQxMTIyMjMwOTM0WhcNMjQxMTI5MjMwOTM0WjAYMRYwFAYD VQQDEw02NzQxMGYyZS1jMGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvsIafewdRJ88EMNXZ96qZx2SQJeWz+LJuRqxj5cw2oak6hCTeS+lZWTcCI3 wG/ZZwSVBprrzdglRn1rPvBjLprpAH9t/8PXv4e8auIwQVep/rTJmMpE+48F4rkP tKVqFu7yZlsq2FCIeiks3txeEevSvplqsN4UMIuRqs0p2pVKAF1xAvXm+CMfFr4m PniEvZHALx5Q9kzv2RtxGs9fJqLlOBp0dG/kc3XtdtRN1MPlSqS81HX9NV7CyaEC hf+HiykRzZNS3u/RwuMA9rcuT1aQEPWCXEwUMXCxX2xEGlBI1CrVUlXc4OdPmQHC iSusVQ3wNIsv7zeAEyfQ3tFkjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGKn2QQ lQTDCx8Z+qDIC6N2rGSXMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBPQUpCZXiVzxNVzvGwaE7jQYEsDpw8iQEstw609Tm+lSqNbNStdZS S/tpQO+1Xs+GrJAu2pDIa7D8SXdfJeajH6aJUj3tMrtnqtQqv8qhpAaZNPYywJaz 6RoIMqfhEvRhT7qL/W3W/VMqq33I6pLZ/q/e/D+tjYsWZfaWVumDBsPb0U1zhV19 0Lo+1N2/wJcqlZiNEy5k2ZycUUzVIgc2DPfuFzf2/4I4LxeWJhGsMfm3chaEEMkG uXU0wH+A3IyOS/KIbwcXOUWP/qTeYxFwrkWX2KHpW2ww2sD6bvB0Ewg+GrFlAnzc fX00SJ4nEZVG4DRQRm83exTjAo8vhJLl -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:38 2024 by rpki-client on console-fra.rpki-client.org