$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json) Hash identifier: kWIsCUJ5NtboK70owwy5+n7m3ZCkEeT3L8eDKaigxPo= Subject key identifier: 5B:2F:4E:7E:86:D8:3A:2A:5A:19:06:6C:CD:D0:B9:04:36:A3:F9:18 Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Certificate serial: 0A7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft Manifest number: 0A70 Signing time: Wed 20 Nov 2024 19:22:56 +0000 Manifest this update: Wed 20 Nov 2024 19:22:56 +0000 Manifest next update: Wed 27 Nov 2024 19:22:56 +0000 Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: FzYyWzZ0JytU5+hsZN3R03ILe5tiygK6Df0lrZzdlTI=) 2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: TXPw1rBEL7FEvLcSdgq3HIrDA+j+HPbArLAJjSl35pE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2685 (0xa7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136 Validity Not Before: Nov 20 19:22:56 2024 GMT Not After : Nov 27 19:22:56 2024 GMT Subject: CN=673e3710-e0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a4:50:8d:e2:a4:2d:c5:9d:c2:3f:a4:7e:a8: 7d:fb:a6:50:3a:64:fe:23:1e:d7:96:b4:c9:d3:03: 9f:b6:79:c9:74:a1:8e:74:c6:05:88:5f:47:e0:bc: 5f:3e:ed:52:09:79:db:7a:29:8e:eb:26:51:da:05: 36:ed:ac:a5:33:f9:2a:f2:34:89:fe:a7:5d:5d:25: a0:28:37:83:bb:0f:ec:6b:56:d6:f6:35:48:c9:fb: b3:41:e1:72:69:be:a7:bf:c2:f1:fb:e4:96:08:3e: b2:40:6b:c1:ea:11:39:4c:76:61:0f:01:bf:ef:db: c4:df:23:78:6a:ab:3a:23:8d:91:b5:36:f7:bb:23: fc:e5:a0:da:d0:bc:e0:b2:75:50:c5:f2:04:75:49: 5f:94:39:30:83:f7:00:f2:ac:bd:8a:df:91:bb:f1: dc:46:27:ee:a5:ea:a4:37:b5:c1:79:07:57:3a:ca: ed:2a:91:c8:4d:6f:14:86:e5:5c:86:ee:8f:42:65: 02:79:84:ef:cc:1c:38:c8:2b:b7:07:25:37:12:f3: 50:1c:5c:ff:d3:cf:3c:45:aa:d0:7d:76:48:79:ff: 1c:21:1c:ec:c9:4c:b7:3c:d2:56:b9:1c:ad:a8:86: 55:61:66:0d:5c:e0:6e:c2:68:e2:79:14:9f:20:42: 7f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2F:4E:7E:86:D8:3A:2A:5A:19:06:6C:CD:D0:B9:04:36:A3:F9:18 X509v3 Authority Key Identifier: keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:f6:2a:ae:99:4b:f9:dd:a8:8f:5f:75:ae:4e:28:91:21:ae: dc:2c:82:18:ed:96:bd:76:f2:21:42:cd:0c:67:75:af:96:7a: c3:7f:83:48:1e:29:5c:e5:78:3b:46:b3:e9:2a:bf:6d:86:53: 57:eb:d8:ea:9e:c4:d7:b6:75:77:67:f7:48:e1:0c:96:2e:b0: e5:b0:1e:7c:c2:f9:21:b3:d0:c9:ee:b5:01:a1:f8:ea:20:3e: f4:6f:24:cf:77:5e:98:4d:54:7c:30:77:a8:da:24:9f:65:ec: 39:ef:a7:1e:19:1d:0f:6c:60:2c:15:8e:ea:5e:22:bf:a4:e3: a2:85:05:1b:8d:ab:3b:63:7c:fc:a3:f7:26:dc:9a:92:60:a0: d3:bc:11:06:f0:45:1b:69:53:e2:4a:16:fc:53:c6:42:72:b1: 38:d0:75:7d:77:58:81:f9:a9:76:0b:06:1a:ba:d0:fb:7a:fb: e7:11:7a:9a:21:25:66:f6:76:48:28:a8:cd:af:12:27:f1:01: 81:e3:1e:7e:75:b4:fe:ed:79:72:b5:c3:d3:33:32:d0:73:56: 5f:ec:39:29:82:d4:e8:22:33:24:df:eb:56:6c:bf:bc:10:68: b5:ce:df:ce:12:49:e9:f9:06:c2:23:14:3e:f2:15:01:18:68: 64:15:5c:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFDODIxMTAvBgNVBAUTKDBBOUI2OTgxQjEyRDVBNEQyREYzNkVFOUQyODBBNjU5 NUMzMjUxMzYwHhcNMjQxMTIwMTkyMjU2WhcNMjQxMTI3MTkyMjU2WjAYMRYwFAYD VQQDEw02NzNlMzcxMC1lMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6RQjeKkLcWdwj+kfqh9+6ZQOmT+Ix7XlrTJ0wOftnnJdKGOdMYFiF9H4Lxf Pu1SCXnbeimO6yZR2gU27aylM/kq8jSJ/qddXSWgKDeDuw/sa1bW9jVIyfuzQeFy ab6nv8Lx++SWCD6yQGvB6hE5THZhDwG/79vE3yN4aqs6I42RtTb3uyP85aDa0Lzg snVQxfIEdUlflDkwg/cA8qy9it+Ru/HcRifupeqkN7XBeQdXOsrtKpHITW8UhuVc hu6PQmUCeYTvzBw4yCu3ByU3EvNQHFz/0888RarQfXZIef8cIRzsyUy3PNJWuRyt qIZVYWYNXOBuwmjieRSfIEJ/pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsvTn6G 2DoqWhkGbM3QuQQ2o/kYMB8GA1UdIwQYMBaAFAqbaYGxLVpNLfNu6dKApllcMlE2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUM4Mi9DQkQ4OTNBMDRF RDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdrMHQ4MjdwMG9DbVdWd3lV VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwdHBnYkV0V2swdDgyN3Awb0NtV1Z3eVVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUM4Mi9DQkQ4OTNBMDRFRDMxMUVBQUQ3QkEyMTFDNEY5QUUwMi9DcHRwZ2JFdFdr MHQ4MjdwMG9DbVdWd3lVVFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS9iqumUv53aiPX3WuTiiRIa7cLIIY7Za9dvIhQs0MZ3WvlnrDf4NI Hilc5Xg7RrPpKr9thlNX69jqnsTXtnV3Z/dI4QyWLrDlsB58wvkhs9DJ7rUBofjq ID70byTPd16YTVR8MHeo2iSfZew576ceGR0PbGAsFY7qXiK/pOOihQUbjas7Y3z8 o/cm3JqSYKDTvBEG8EUbaVPiShb8U8ZCcrE40HV9d1iB+al2CwYautD7evvnEXqa ISVm9nZIKKjNrxIn8QGB4x5+dbT+7XlytcPTMzLQc1Zf7DkpgtToIjMk3+tWbL+8 EGi1zt/OEknp+QbCIxQ+8hUBGGhkFVyb -----END CERTIFICATE-----Generated at Wed Nov 20 21:35:04 2024 by rpki-client on console-ams.rpki-client.org