$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft File: pg-NpHi9dy9PKz5MedXBgd3laJM.mft (raw, json) Hash identifier: F1Fob1ITtsJeedMil+OAODrPFVsb4q1LmD+IXYhHHd0= Subject key identifier: A3:F6:80:9D:7D:0A:0A:22:1C:2E:1F:42:06:C8:D0:20:99:1B:91:52 Authority key identifier: A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93 Certificate issuer: /CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft Manifest number: 0134 Signing time: Sat 23 Nov 2024 02:46:21 +0000 Manifest this update: Sat 23 Nov 2024 02:46:21 +0000 Manifest next update: Sat 30 Nov 2024 02:46:21 +0000 Files and hashes: 1: pg-NpHi9dy9PKz5MedXBgd3laJM.crl (hash: g1giMRG0Nl1yeY331U5ASiyGW8brXUnCNunk9jEWlfU=) 2: 763018B4D29811ED8CDDB83AC4F9AE02.roa (hash: kB/0ibOjCq9dbW0BRMR/SkO1yELJz7RuZWoFT7e9L1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDADE/serialNumber=A60F8DA478BD772F4F2B3E4C79D5C181DDE56893 Validity Not Before: Nov 23 02:46:21 2024 GMT Not After : Nov 30 02:46:21 2024 GMT Subject: CN=674141fd-46bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:00:8c:86:0f:92:54:62:ed:59:37:0c:09: 77:39:b5:2c:23:c6:37:3e:12:97:f0:72:f8:49:7a: e9:9a:ac:8b:76:a8:12:40:7e:31:e7:42:fe:f6:86: f1:60:1e:59:c4:30:a1:e4:d0:a7:8b:40:c2:49:b2: 8c:9b:37:82:f6:2e:0d:1f:2a:0c:a8:74:15:46:1c: a3:96:f0:80:62:0f:d0:4f:a3:83:bf:f6:42:32:7b: 36:8e:3a:31:8e:92:28:26:98:ea:fc:da:46:90:50: 08:72:18:a0:9b:9a:05:48:3d:d1:f6:31:11:33:79: 01:a5:85:46:44:7a:5e:11:2a:db:26:cf:95:bc:16: 08:9b:bd:0f:1d:22:58:30:79:4d:11:1e:ea:73:3b: 87:19:00:2b:c5:79:fe:b3:3b:e1:03:60:b5:8a:8f: 71:b4:6d:2a:2c:83:1c:2f:ca:54:c2:f5:b4:ca:6e: 62:52:74:a6:fa:10:ca:6f:e2:67:fd:bd:ba:4e:fb: 3c:37:a9:d0:ae:81:36:2b:8e:e6:b5:a1:76:bc:00: f6:79:cc:6b:f3:9f:60:0b:09:ed:11:65:b5:fb:30: 0b:0e:e5:f6:ae:a7:99:3e:62:e7:89:90:1a:b8:a7: c4:c4:75:bd:54:60:e3:67:c0:3f:22:5a:44:9a:7a: 98:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F6:80:9D:7D:0A:0A:22:1C:2E:1F:42:06:C8:D0:20:99:1B:91:52 X509v3 Authority Key Identifier: keyid:A6:0F:8D:A4:78:BD:77:2F:4F:2B:3E:4C:79:D5:C1:81:DD:E5:68:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pg-NpHi9dy9PKz5MedXBgd3laJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDADE/7098F4DCD29511EDA2418439C4F9AE02/pg-NpHi9dy9PKz5MedXBgd3laJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:67:2a:47:95:24:25:ea:39:ed:e1:76:b6:9f:9b:43:0f:c3: 41:35:4a:a2:75:fa:91:97:db:77:c9:7d:88:be:df:70:54:ad: dc:0f:2a:c5:07:0c:f3:ff:d5:73:3e:8a:88:28:4e:22:91:5d: 65:a6:7d:e8:aa:c8:c8:8f:9b:a3:ee:fb:96:57:eb:95:8b:cb: f4:e4:5e:6c:c7:8c:a3:73:d3:90:78:43:f8:dc:e9:4b:d9:88: 94:e2:d5:18:3b:e4:28:5d:9e:45:b3:a2:f3:9e:d6:e2:00:7e: 4d:5e:6e:84:e3:c4:fd:a4:7d:54:52:b4:59:c9:08:1f:15:5f: f1:42:21:3e:12:4c:62:dc:72:0d:69:6d:b6:cc:b7:14:b4:ad: 2c:d3:e4:ea:39:17:90:fd:18:ab:56:fc:b1:32:c1:ff:ad:ca: 46:c8:99:eb:9a:5b:d3:95:d3:5b:b2:da:55:6e:47:86:96:c9: 1d:68:45:3b:b8:c2:44:80:27:a6:f5:74:5d:6a:44:6d:09:ae: cf:97:c3:94:8b:83:af:51:f9:2a:74:53:f9:35:08:d3:a5:e3: 88:d8:f5:86:64:7a:9d:3a:02:96:b7:5b:7f:55:a1:de:75:ba: d5:22:90:91:71:08:4b:d6:1c:a3:d5:05:bd:9f:2c:52:69:6d: 09:16:e0:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURBREUxMTAvBgNVBAUTKEE2MEY4REE0NzhCRDc3MkY0RjJCM0U0Qzc5RDVDMTgx RERFNTY4OTMwHhcNMjQxMTIzMDI0NjIxWhcNMjQxMTMwMDI0NjIxWjAYMRYwFAYD VQQDEw02NzQxNDFmZC00NmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhUAjIYPklRi7Vk3DAl3ObUsI8Y3PhKX8HL4SXrpmqyLdqgSQH4x50L+9obx YB5ZxDCh5NCni0DCSbKMmzeC9i4NHyoMqHQVRhyjlvCAYg/QT6ODv/ZCMns2jjox jpIoJpjq/NpGkFAIchigm5oFSD3R9jERM3kBpYVGRHpeESrbJs+VvBYIm70PHSJY MHlNER7qczuHGQArxXn+szvhA2C1io9xtG0qLIMcL8pUwvW0ym5iUnSm+hDKb+Jn /b26Tvs8N6nQroE2K47mtaF2vAD2ecxr859gCwntEWW1+zALDuX2rqeZPmLniZAa uKfExHW9VGDjZ8A/IlpEmnqYYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKP2gJ19 CgoiHC4fQgbI0CCZG5FSMB8GA1UdIwQYMBaAFKYPjaR4vXcvTys+THnVwYHd5WiT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREFERS83MDk4RjREQ0Qy OTUxMUVEQTI0MTg0MzlDNEY5QUUwMi9wZy1OcEhpOWR5OVBLejVNZWRYQmdkM2xh Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BnLU5wSGk5ZHk5UEt6NU1lZFhCZ2QzbGFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REFERS83MDk4RjREQ0QyOTUxMUVEQTI0MTg0MzlDNEY5QUUwMi9wZy1OcEhpOWR5 OVBLejVNZWRYQmdkM2xhSk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAZypHlSQl6jnt4Xa2n5tDD8NBNUqidfqRl9t3yX2Ivt9wVK3cDyrF Bwzz/9VzPoqIKE4ikV1lpn3oqsjIj5uj7vuWV+uVi8v05F5sx4yjc9OQeEP43OlL 2YiU4tUYO+QoXZ5Fs6LzntbiAH5NXm6E48T9pH1UUrRZyQgfFV/xQiE+Ekxi3HIN aW22zLcUtK0s0+TqOReQ/RirVvyxMsH/rcpGyJnrmlvTldNbstpVbkeGlskdaEU7 uMJEgCem9XRdakRtCa7Pl8OUi4OvUfkqdFP5NQjTpeOI2PWGZHqdOgKWt1t/VaHe dbrVIpCRcQhL1hyj1QW9nyxSaW0JFuD+ -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:58 2024 by rpki-client on console-ams.rpki-client.org