$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft File: 788FLZiSks6xBQkSnI3iA9SfaAQ.mft (raw, json) Hash identifier: 0V1jTKdkXUwrVNrmSFt1ci/3EmcsNzBA4SaVXaDN1yk= Subject key identifier: 2E:86:31:3D:04:C2:7C:92:50:C3:7F:D6:B3:D2:94:58:69:C9:C2:16 Authority key identifier: EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 Certificate issuer: /CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Certificate serial: 0CF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft Manifest number: 0CEA Signing time: Fri 22 Nov 2024 18:00:35 +0000 Manifest this update: Fri 22 Nov 2024 18:00:35 +0000 Manifest next update: Fri 29 Nov 2024 18:00:35 +0000 Files and hashes: 1: 788FLZiSks6xBQkSnI3iA9SfaAQ.crl (hash: OQFYp5yWS+IC+KR1G9f9gn4d83wVf4P2LFhbUNJZq1k=) 2: 1004D41ED21D11E992825429C4F9AE02.roa (hash: VSbvOJwGGe/ohiP+L17bAesxp9bgmYgwB4Rs+JtW0oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3313 (0xcf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Validity Not Before: Nov 22 18:00:35 2024 GMT Not After : Nov 29 18:00:35 2024 GMT Subject: CN=6740c6c3-8bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c8:bb:e7:24:e5:ef:3a:4f:4b:f9:5e:ba:1e: 09:f9:d2:09:fb:4c:1a:4a:c1:8f:17:01:7b:7e:63: 49:14:32:a6:81:e0:72:78:5e:0d:91:33:91:e6:51: 4e:74:78:2d:cd:69:f8:a6:72:f7:4e:94:35:86:c7: 2a:77:24:32:f8:b5:03:3a:a0:ac:73:c5:20:d9:6c: cf:dd:b3:c4:a6:35:d9:2f:9d:3e:88:46:8c:b8:03: 43:40:2c:d5:90:13:c2:65:3c:85:17:16:60:ec:4b: a9:f6:0d:15:2e:b8:3a:24:47:e1:96:0e:53:ae:4e: 0b:73:8d:6b:31:80:71:8b:40:a2:68:40:e5:c1:a7: 1a:1e:3f:0b:cd:44:4f:6d:a2:2d:0b:8d:41:1f:c3: fc:b9:b2:08:b3:71:1b:a0:6e:ee:85:7e:ee:f5:5c: 6b:db:ab:47:81:53:e9:3c:7c:1b:c0:4f:86:19:40: 33:48:db:01:23:13:1d:d3:a6:4e:f0:67:b1:ac:15: f8:ca:4a:39:0f:5a:5b:e5:84:e1:d2:88:55:3f:b7: 4c:4c:cd:72:86:f2:8e:37:66:55:d5:49:80:ed:29: cb:4c:73:3b:42:61:c1:03:af:ad:10:0f:8b:9b:e2: 89:8d:8b:6e:97:9a:fd:b6:8c:ad:ab:4f:87:5a:95: 51:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:86:31:3D:04:C2:7C:92:50:C3:7F:D6:B3:D2:94:58:69:C9:C2:16 X509v3 Authority Key Identifier: keyid:EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:40:73:1e:33:3f:29:5d:f4:03:7a:c3:81:91:a5:7e:8b:24: 9b:73:52:b3:bd:fa:c3:c0:a3:ec:7f:8f:19:49:03:11:e2:8c: 20:61:33:9a:4f:45:96:e1:09:24:39:06:03:72:89:13:93:62: 6e:09:99:94:c2:93:d7:5c:16:b0:f0:5d:fe:af:a8:19:b3:25: ea:90:30:cb:27:99:ce:80:e7:35:2d:1e:86:c6:b3:7b:26:38: 31:5a:89:fb:26:a9:21:d9:79:8f:7e:63:d8:46:fb:f8:5c:89: 5e:ac:64:5a:06:74:04:fe:f8:d0:56:c3:0b:83:bd:1a:b5:e6: ff:cd:11:a4:09:39:62:da:1a:32:a7:73:11:2d:b3:3a:b1:44: a4:c0:6f:75:dc:7a:f7:f1:7c:f0:81:1e:f3:fa:95:db:b9:ea: 63:b3:f7:97:4a:6b:f8:24:3d:46:be:68:56:28:b6:f9:92:8a: 45:8e:55:7d:08:14:51:7e:28:39:3e:08:3a:95:16:5a:5f:a3: 86:85:17:0d:19:c8:9e:ab:6e:9c:8e:2c:94:fc:b5:17:42:f4: 0a:45:1c:bf:cb:c5:e8:9f:00:b0:50:26:95:c6:b9:20:1a:2d: 4c:fa:2e:42:0c:d8:85:f6:9a:c2:a8:c7:b5:93:39:7b:0d:2d: a1:8a:04:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5QzAxMTAvBgNVBAUTKEVGQ0YwNTJEOTg5MjkyQ0VCMTA1MDkxMjlDOERFMjAz RDQ5RjY4MDQwHhcNMjQxMTIyMTgwMDM1WhcNMjQxMTI5MTgwMDM1WjAYMRYwFAYD VQQDEw02NzQwYzZjMy04YmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18i75yTl7zpPS/leuh4J+dIJ+0waSsGPFwF7fmNJFDKmgeByeF4NkTOR5lFO dHgtzWn4pnL3TpQ1hscqdyQy+LUDOqCsc8Ug2WzP3bPEpjXZL50+iEaMuANDQCzV kBPCZTyFFxZg7Eup9g0VLrg6JEfhlg5Trk4Lc41rMYBxi0CiaEDlwacaHj8LzURP baItC41BH8P8ubIIs3EboG7uhX7u9Vxr26tHgVPpPHwbwE+GGUAzSNsBIxMd06ZO 8GexrBX4yko5D1pb5YTh0ohVP7dMTM1yhvKON2ZV1UmA7SnLTHM7QmHBA6+tEA+L m+KJjYtul5r9toytq0+HWpVRBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6GMT0E wnySUMN/1rPSlFhpycIWMB8GA1UdIwQYMBaAFO/PBS2YkpLOsQUJEpyN4gPUn2gE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjlDMC9EMzY0RjBDQ0Qy MUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tzNnhCUWtTbkkzaUE5U2Zh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OEZMWmlTa3M2eEJRa1NuSTNpQTlTZmFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjlDMC9EMzY0RjBDQ0QyMUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tz NnhCUWtTbkkzaUE5U2ZhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmQHMeMz8pXfQDesOBkaV+iySbc1KzvfrDwKPsf48ZSQMR4owgYTOa T0WW4QkkOQYDcokTk2JuCZmUwpPXXBaw8F3+r6gZsyXqkDDLJ5nOgOc1LR6GxrN7 JjgxWon7Jqkh2XmPfmPYRvv4XIlerGRaBnQE/vjQVsMLg70ateb/zRGkCTli2hoy p3MRLbM6sUSkwG913Hr38XzwgR7z+pXbuepjs/eXSmv4JD1GvmhWKLb5kopFjlV9 CBRRfig5Pgg6lRZaX6OGhRcNGcieq26cjiyU/LUXQvQKRRy/y8XonwCwUCaVxrkg Gi1M+i5CDNiF9prCqMe1kzl7DS2higRh -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org