$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json) Hash identifier: Mrr1vUrExv/Sj2RvZhEMT1J/m3sZmEO/+K3Hb5hGD3U= Subject key identifier: 17:06:6E:CE:67:62:13:3E:53:17:ED:FC:E1:A4:7A:5B:3A:E6:99:33 Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 0996 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft Manifest number: 0977 Signing time: Fri 22 Nov 2024 19:53:41 +0000 Manifest this update: Fri 22 Nov 2024 19:53:41 +0000 Manifest next update: Fri 29 Nov 2024 19:53:41 +0000 Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: 274VCk6smjox7UeBXbJt89gTtGdMcVulPIsu4rNxRKo=) 2: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: KnSq+tmpd9AdFUTvcAQ7QfdDS17yvztfYvyXET6RzjI=) 3: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: vnLp/g0V/F/MvaYVIrAZzlUv5Vsmgf3IbBef1IThZtE=) 4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: y0IcN1cUF9ykncqdKFeigqZgKa6tLkow1aHuIiQMZL0=) 5: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: Jrpsdmhxrq96Kh9pejROB20rIhJCV4p20adoyvjb7AI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2454 (0x996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: Nov 22 19:53:41 2024 GMT Not After : Nov 29 19:53:41 2024 GMT Subject: CN=6740e145-d049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:cb:e7:a8:94:b4:2b:ad:11:df:f9:24:7e: e4:90:dd:4b:4f:36:13:b9:91:d7:8c:2c:35:e4:69: d7:57:55:4c:32:b1:26:c8:d5:4e:75:21:63:b2:65: 97:e4:5b:30:c3:d0:63:17:f1:a0:35:6c:c5:bc:29: d7:45:78:74:ec:40:7f:0c:89:9b:c6:ca:7e:93:83: b9:9f:40:0a:04:56:7a:80:ae:7d:e0:7e:6d:d6:eb: 95:54:05:6a:bb:c5:2b:a2:4c:ff:66:18:37:85:ec: b2:b2:2b:fe:6f:5d:17:b0:a0:a7:e7:1b:1a:4c:a0: 73:32:cb:75:f3:48:e1:f6:07:ab:5d:c0:b9:0a:e3: 07:b0:6d:dd:e4:8b:4b:ff:f3:4d:56:4d:59:25:4b: 2c:cc:43:4d:75:37:30:9f:0d:c3:3d:5b:07:71:0f: ab:f1:81:c2:03:54:f5:5d:8f:86:6b:dd:01:36:2a: 4d:c3:e7:fa:6b:72:42:11:ab:76:3a:69:a6:6d:0f: 07:ab:8a:2c:dc:1e:14:c8:c1:c7:16:61:06:03:8a: 3d:d0:f4:31:35:df:2e:06:63:b8:68:36:d8:d1:0d: 83:3f:9c:d4:3e:46:8f:ec:c3:dd:40:db:b6:b8:eb: fa:80:e9:35:18:b0:6c:46:b5:ba:d9:a2:12:75:06: 4b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:06:6E:CE:67:62:13:3E:53:17:ED:FC:E1:A4:7A:5B:3A:E6:99:33 X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ac:62:5f:f2:ef:a5:46:18:ac:b3:b8:6a:86:0d:f8:c1:03: a2:a0:ca:67:96:39:71:67:45:30:40:78:56:fd:ed:4b:d2:3e: e4:66:a0:95:17:a5:8e:57:a2:28:5b:43:8b:4b:38:9c:4e:c6: 83:8e:c1:16:3b:a3:1b:9c:a5:72:55:09:c0:71:2c:91:26:5d: c4:73:eb:0b:86:cf:e9:73:8d:74:ae:2d:76:69:d6:a6:ba:4e: e0:6d:37:e4:13:5b:07:76:1e:84:e2:bf:32:40:11:7f:4e:e9: ac:b3:10:52:80:1b:31:b5:7d:8b:a6:15:2a:33:55:0d:a3:dd: d3:02:f2:49:4d:26:e9:cf:d0:11:ef:c5:6e:c4:20:6d:e9:1d: 64:f7:b6:09:03:87:a8:19:44:51:2a:4e:14:04:f2:32:8d:9c: ab:b0:d9:ef:38:79:2d:90:ce:8e:93:b6:43:c5:6d:2c:20:1b: 52:a1:b1:0c:94:40:5c:b7:22:54:29:19:cb:81:72:ca:c2:f1: 2c:89:34:0f:20:0d:e0:84:ee:2f:f7:74:07:65:1f:9a:3c:e1: 5b:c1:0e:b2:ea:98:bd:19:a7:f0:b3:1b:c3:fb:04:b1:9b:ec: ca:95:85:cc:16:d2:67:30:54:73:2f:cc:6c:2a:a9:95:f8:69: fa:c2:87:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjQxMTIyMTk1MzQxWhcNMjQxMTI5MTk1MzQxWjAYMRYwFAYD VQQDEw02NzQwZTE0NS1kMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVzL56iUtCutEd/5JH7kkN1LTzYTuZHXjCw15GnXV1VMMrEmyNVOdSFjsmWX 5Fsww9BjF/GgNWzFvCnXRXh07EB/DImbxsp+k4O5n0AKBFZ6gK594H5t1uuVVAVq u8Urokz/Zhg3heyysiv+b10XsKCn5xsaTKBzMst180jh9gerXcC5CuMHsG3d5ItL //NNVk1ZJUsszENNdTcwnw3DPVsHcQ+r8YHCA1T1XY+Ga90BNipNw+f6a3JCEat2 OmmmbQ8Hq4os3B4UyMHHFmEGA4o90PQxNd8uBmO4aDbY0Q2DP5zUPkaP7MPdQNu2 uOv6gOk1GLBsRrW62aISdQZL4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcGbs5n YhM+Uxft/OGkels65pkzMB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTU4MC9DN0NFMkUxMDdGOEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJC RTZ5QWU0U1RRS3hsSVBDQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTrGJf8u+lRhiss7hqhg34wQOioMpnljlxZ0UwQHhW/e1L0j7kZqCV F6WOV6IoW0OLSzicTsaDjsEWO6MbnKVyVQnAcSyRJl3Ec+sLhs/pc410ri12adam uk7gbTfkE1sHdh6E4r8yQBF/TumssxBSgBsxtX2LphUqM1UNo93TAvJJTSbpz9AR 78VuxCBt6R1k97YJA4eoGURRKk4UBPIyjZyrsNnvOHktkM6Ok7ZDxW0sIBtSobEM lEBctyJUKRnLgXLKwvEsiTQPIA3ghO4v93QHZR+aPOFbwQ6y6pi9GafwsxvD+wSx m+zKlYXMFtJnMFRzL8xsKqmV+Gn6woeB -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org