$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft File: EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json) Hash identifier: eSNjAyNTPnvJ11wwuu+pZIEuxAw9nR5qJae7uogZJPU= Subject key identifier: 46:7B:9E:5E:FA:CB:18:93:F2:8D:C3:66:6B:D8:30:54:D4:2B:E6:B7 Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 Certificate issuer: /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Certificate serial: 0609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft Manifest number: 0601 Signing time: Wed 20 Nov 2024 22:15:50 +0000 Manifest this update: Wed 20 Nov 2024 22:15:50 +0000 Manifest next update: Wed 27 Nov 2024 22:15:50 +0000 Files and hashes: 1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: iPMvsa5Z4O4H9K/3W8EN2dybReWjEB0PFCPYBClhfTU=) 2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: iZtU7p2H+nbvolRW4eT5L4QU3hEP3JYUgVmrgZqLQNM=) 3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: i/Y56z8Q4Q+yar6QyBHt4z2ceej9ppk32c4UgS/H+XY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1545 (0x609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Validity Not Before: Nov 20 22:15:50 2024 GMT Not After : Nov 27 22:15:50 2024 GMT Subject: CN=673e5f96-ccae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:32:b2:4e:b0:7c:e8:11:2a:1c:a0:a1:0c:7c: 42:2b:5c:53:96:2f:c2:0f:cc:f1:75:cf:c0:7f:8f: 86:b9:4d:47:10:b4:f0:20:96:8f:c7:6e:9b:49:84: 06:ee:6e:7d:69:af:97:c7:d6:50:17:47:5d:14:9d: 30:35:dd:9b:94:7c:a7:a4:8c:7f:32:69:b4:52:6a: 4d:23:94:44:80:e7:54:70:4d:1a:8f:c6:8c:c3:93: 06:9b:0a:a0:3f:c3:79:33:3b:6d:c3:d2:6c:f5:80: 91:a6:41:74:9d:97:59:a7:4e:eb:66:6d:80:22:3e: db:e8:a3:58:2b:fd:9f:3a:6b:7f:32:ba:66:ae:f0: c7:e2:28:af:46:5a:5d:28:c3:fa:9a:13:d6:38:81: 91:4d:50:bd:8c:ab:2b:19:76:0d:5f:ce:b5:26:24: 53:eb:c1:90:5a:19:85:b8:0e:f0:87:58:3e:bd:9f: 68:db:54:87:03:ee:85:4e:82:6c:a8:c8:19:32:69: d2:bd:51:ac:6b:f3:04:55:df:99:46:d4:47:dd:fc: 76:ef:82:76:58:68:af:f4:18:95:6a:47:16:70:9c: 90:05:74:7c:53:59:64:18:1d:5c:7f:f2:4d:42:4d: 68:42:15:4c:d6:24:f5:47:98:ef:3c:15:68:70:6e: 52:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7B:9E:5E:FA:CB:18:93:F2:8D:C3:66:6B:D8:30:54:D4:2B:E6:B7 X509v3 Authority Key Identifier: keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e2:dc:76:b5:26:4d:05:11:c4:d4:8b:59:61:7c:fb:19:f7: 57:3c:fc:4c:a9:96:49:00:7d:a5:ed:11:10:d6:74:bc:fa:3a: 00:69:59:97:1e:47:0b:05:76:18:c0:3a:ef:64:7e:a6:23:73: 19:68:69:9c:48:b9:1c:8a:fd:00:d2:dc:b4:f4:05:44:f1:b9: d5:98:6e:7f:78:5b:b1:6c:ad:aa:be:d7:76:63:dc:95:31:95: 50:18:cd:d6:25:16:63:ca:39:dc:ea:0d:25:4f:7f:58:34:ea: 09:f6:81:d0:66:bc:46:4e:33:43:b0:01:80:13:cd:a8:83:c8: aa:81:c8:18:2e:45:88:ed:71:86:81:ee:28:4d:bf:e4:21:bb: 41:75:0e:ce:30:bf:68:8e:80:3b:d9:8d:ae:09:5c:5d:90:a1: 8e:58:93:10:79:15:ed:33:1e:d4:3d:04:12:1c:58:ea:21:b5: 8b:02:d7:bd:55:3d:f5:49:a7:43:73:eb:ff:ae:2c:88:4d:d1: 9a:37:41:14:df:2a:fc:77:18:c5:68:97:31:a2:0f:e4:71:bb: 00:c2:c2:97:ad:98:dd:76:73:b5:d9:e3:c1:5e:f0:d5:5b:66: 05:3f:b6:ab:31:d5:b7:58:7c:3d:aa:aa:9c:e3:0c:6d:c2:bc: e5:95:19:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyMjIxMTAvBgNVBAUTKDExQjQ0NTU2Qjc5NjI3ODUzRjQwMzFFRDZERDU3Mjg0 MDU2RUZGNTMwHhcNMjQxMTIwMjIxNTUwWhcNMjQxMTI3MjIxNTUwWjAYMRYwFAYD VQQDEw02NzNlNWY5Ni1jY2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzKyTrB86BEqHKChDHxCK1xTli/CD8zxdc/Af4+GuU1HELTwIJaPx26bSYQG 7m59aa+Xx9ZQF0ddFJ0wNd2blHynpIx/Mmm0UmpNI5REgOdUcE0aj8aMw5MGmwqg P8N5Mzttw9Js9YCRpkF0nZdZp07rZm2AIj7b6KNYK/2fOmt/MrpmrvDH4iivRlpd KMP6mhPWOIGRTVC9jKsrGXYNX861JiRT68GQWhmFuA7wh1g+vZ9o21SHA+6FToJs qMgZMmnSvVGsa/MEVd+ZRtRH3fx274J2WGiv9BiVakcWcJyQBXR8U1lkGB1cf/JN Qk1oQhVM1iT1R5jvPBVocG5SbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZ7nl76 yxiT8o3DZmvYMFTUK+a3MB8GA1UdIwQYMBaAFBG0RVa3lieFP0Ax7W3VcoQFbv9T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzIyMi9DQTA3NjE1ODgw NzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0VV9RREh0YmRWeWhBVnVf MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ViUkZWcmVXSjRVX1FESHRiZFZ5aEFWdV8xTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzIyMi9DQTA3NjE1ODgwNzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0 VV9RREh0YmRWeWhBVnVfMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ4tx2tSZNBRHE1ItZYXz7GfdXPPxMqZZJAH2l7REQ1nS8+joAaVmX HkcLBXYYwDrvZH6mI3MZaGmcSLkciv0A0ty09AVE8bnVmG5/eFuxbK2qvtd2Y9yV MZVQGM3WJRZjyjnc6g0lT39YNOoJ9oHQZrxGTjNDsAGAE82og8iqgcgYLkWI7XGG ge4oTb/kIbtBdQ7OML9ojoA72Y2uCVxdkKGOWJMQeRXtMx7UPQQSHFjqIbWLAte9 VT31SadDc+v/riyITdGaN0EU3yr8dxjFaJcxog/kcbsAwsKXrZjddnO12ePBXvDV W2YFP7arMdW3WHw9qqqc4wxtwrzllRkq -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:01 2024 by rpki-client on console-ams.rpki-client.org