$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: vueVLAuDytdFayHlGzHwrnNg7zlzJXc+24pGG4CUweA= Subject key identifier: 56:78:E0:71:AE:2E:9E:01:92:92:AB:BA:D2:AD:21:DA:EC:4D:2B:3D Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 01F7 Signing time: Mon 25 Nov 2024 01:37:16 +0000 Manifest this update: Mon 25 Nov 2024 01:37:16 +0000 Manifest next update: Mon 02 Dec 2024 01:37:16 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: 8nqdgiQwdXqkU7WoJHZphXZ+2t32oZqzMCp1o6jOnDo=) 2: B0B897E62F4F11ED8B8A7165C4F9AE02.roa (hash: /O3qBAlIlKd7T2L1TISirBQILii08m9IgYjrq/KKrdc=) 3: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: pFkFEkTKQG0aukmaymkgeuPliGp48AQuLq3E4+kMcmU=) 4: 4D169ADAA58111EF9B0F614CC4F9AE02.roa (hash: 2fAw8FtnXPCUc3QNO8li3mfIw/5G9pkOZ2hB6eNEPeo=) 5: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: rfdeiioOombk9ugXAhar8jfxVQvhaRByjypcJo5xwas=) 6: F88E6A60A58011EFA3FFCB4BC4F9AE02.roa (hash: p5nvDrb5T8fA8cepcjnioVkPaj0kaRwx4ySM+a4cbkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 23:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Nov 25 01:37:16 2024 GMT Not After : Dec 2 01:37:16 2024 GMT Subject: CN=6743d4cc-b32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3a:6a:68:83:0d:92:13:c7:87:6c:2e:ea:c8: 3b:9e:a0:dd:ce:be:ee:89:a7:d9:63:7f:51:8d:a9: 1d:fb:45:c9:85:03:62:36:8f:f0:fe:23:d4:7d:40: 18:04:96:42:6d:d7:73:22:81:a1:02:d6:dd:cc:98: 35:c7:a6:e7:53:c2:8b:80:79:42:04:67:58:00:8e: 56:56:b8:bf:5a:0c:43:b5:7e:5b:0e:54:ca:9a:56: 9e:54:56:c6:7c:63:a0:04:f4:3f:ae:93:67:2f:69: 4a:17:7d:69:62:85:3c:4e:21:42:ed:bd:3a:df:bb: 44:32:68:ff:d4:99:57:8c:3f:5d:46:00:f2:22:6c: f6:bf:6c:f4:68:ae:0f:2e:43:6d:07:0e:07:21:5b: b4:e8:94:ca:45:f9:57:a9:39:16:59:5b:20:9a:4e: 4b:ac:5e:6b:a1:ce:fe:10:f3:38:60:3a:8a:38:2a: 6a:2c:70:7d:f5:f4:64:53:d8:57:16:fa:f5:27:25: b2:67:de:85:2f:12:2b:e9:0b:01:e1:e5:99:0f:e7: a8:a8:f3:4a:50:4a:9b:70:da:31:ce:95:54:8e:c0: 4c:13:56:69:55:5c:26:6c:92:cb:75:89:b2:57:8a: b7:e9:b3:a1:35:47:24:40:89:94:23:ef:77:45:0e: e4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:78:E0:71:AE:2E:9E:01:92:92:AB:BA:D2:AD:21:DA:EC:4D:2B:3D X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:92:ce:6a:aa:6e:53:9f:9e:f4:34:64:ab:e0:57:ee:97:32: 17:f8:9d:b8:7f:07:d5:3f:a8:e7:37:80:84:18:e3:c3:38:a7: cc:29:82:b8:18:fc:3a:32:b3:76:37:19:19:f3:05:4e:78:30: 9f:5f:ab:88:11:0b:c5:2c:96:62:a8:77:14:1b:c3:d2:b7:c5: 0e:4c:20:a6:fb:b4:84:d7:48:3e:96:28:39:3e:dc:84:68:e2: f0:af:af:f5:f3:17:a1:f5:06:b2:04:dd:fc:db:ee:1c:01:9f: 21:60:66:3f:23:50:ec:de:89:2a:5c:57:8f:94:8c:57:5e:54: d1:8b:38:29:15:2c:f2:ff:d0:38:dd:69:85:8d:72:0e:0d:d2: ff:ed:d4:b6:b9:4f:08:ca:eb:ac:0c:4e:98:1f:e0:ac:86:c2: 21:64:fd:05:d8:64:c1:da:17:e7:64:a1:f8:35:51:1d:14:f5: 96:1b:7b:7c:72:aa:48:b2:89:89:5d:38:25:7c:5d:c3:18:e3: 66:5a:d8:22:a7:96:e9:ca:84:e4:3a:71:f2:7f:6c:35:ed:6e: 9d:03:1d:d5:ab:d4:68:52:a6:35:18:f4:83:05:b3:5b:99:0c: 99:00:66:2e:d1:1e:9c:0c:38:a3:cd:49:88:62:ec:cc:47:c1: 23:3a:bb:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjQxMTI1MDEzNzE2WhcNMjQxMjAyMDEzNzE2WjAYMRYwFAYD VQQDEw02NzQzZDRjYy1iMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DpqaIMNkhPHh2wu6sg7nqDdzr7uiafZY39Rjakd+0XJhQNiNo/w/iPUfUAY BJZCbddzIoGhAtbdzJg1x6bnU8KLgHlCBGdYAI5WVri/WgxDtX5bDlTKmlaeVFbG fGOgBPQ/rpNnL2lKF31pYoU8TiFC7b0637tEMmj/1JlXjD9dRgDyImz2v2z0aK4P LkNtBw4HIVu06JTKRflXqTkWWVsgmk5LrF5roc7+EPM4YDqKOCpqLHB99fRkU9hX Fvr1JyWyZ96FLxIr6QsB4eWZD+eoqPNKUEqbcNoxzpVUjsBME1ZpVVwmbJLLdYmy V4q36bOhNUckQImUI+93RQ7k4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZ44HGu Lp4BkpKrutKtIdrsTSs9MB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDks5qqm5Tn570NGSr4FfulzIX+J24fwfVP6jnN4CEGOPDOKfMKYK4 GPw6MrN2NxkZ8wVOeDCfX6uIEQvFLJZiqHcUG8PSt8UOTCCm+7SE10g+lig5PtyE aOLwr6/18xeh9QayBN382+4cAZ8hYGY/I1Ds3okqXFePlIxXXlTRizgpFSzy/9A4 3WmFjXIODdL/7dS2uU8IyuusDE6YH+CshsIhZP0F2GTB2hfnZKH4NVEdFPWWG3t8 cqpIsomJXTglfF3DGONmWtgip5bpyoTkOnHyf2w17W6dAx3Vq9RoUqY1GPSDBbNb mQyZAGYu0R6cDDijzUmIYuzMR8EjOrsq -----END CERTIFICATE-----Generated at Mon Nov 25 02:49:06 2024 by rpki-client on console-ams.rpki-client.org