$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft File: r80S80CYeM1KtEXERVRK6NqFGoQ.mft (raw, json) Hash identifier: 4JqMJX7XfMHW8s/miBg7ikRXHPA+AZBmDMzWnSppNrY= Subject key identifier: 28:57:84:6F:C8:D1:09:17:E3:B5:A7:B0:6D:31:5C:C7:CA:30:78:0D Authority key identifier: AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 Certificate issuer: /CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Certificate serial: 0798 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft Manifest number: 078C Signing time: Fri 22 Nov 2024 20:53:29 +0000 Manifest this update: Fri 22 Nov 2024 20:53:28 +0000 Manifest next update: Fri 29 Nov 2024 20:53:28 +0000 Files and hashes: 1: r80S80CYeM1KtEXERVRK6NqFGoQ.crl (hash: rXhTBqh6DaEjKXd1J+Pthhc3yXrhLFwQwlZfBzLfCSg=) 2: 85A0A1086C9711EEA4941846C4F9AE02.roa (hash: Luw/We75eG/rirHUsOqrwHt6bzrOeuG6Cw782K1mlaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1944 (0x798) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Validity Not Before: Nov 22 20:53:28 2024 GMT Not After : Nov 29 20:53:28 2024 GMT Subject: CN=6740ef48-9854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:cf:ad:6c:0c:e3:75:96:dc:53:56:67:33: f9:36:03:45:95:75:14:3c:49:e3:93:1a:1f:69:f6: 10:d9:1d:c0:ca:da:3f:23:c5:9f:29:76:25:3f:e7: ae:3c:96:7d:08:8d:3f:94:69:b9:f4:30:d5:f9:33: 50:24:9f:92:94:67:5e:82:1c:ac:59:0e:45:ab:a9: a2:6e:1d:e2:73:12:70:68:97:6f:ee:6c:e3:69:75: 8d:01:a2:5d:a6:d3:60:7a:f7:24:1f:c8:49:19:29: dd:cd:26:0c:9f:94:99:20:dd:75:25:74:7e:3f:21: 8a:6d:56:1c:df:bb:84:8c:62:02:42:27:5e:7f:5f: 75:a7:ab:a2:43:8a:89:14:28:df:de:83:95:87:a2: 5d:49:9d:ef:0a:cc:4f:f1:fa:26:d2:b5:0a:6c:fa: f0:1e:95:54:c4:ae:11:f3:21:06:10:d8:c7:c8:60: 6a:f6:e5:0f:3e:bd:39:1b:f9:a1:a0:92:b6:23:b9: f2:8c:15:72:42:7a:68:b9:68:fd:79:c4:0e:70:27: 42:cf:3f:a6:99:f7:56:dd:44:8f:15:48:0c:f8:2c: da:c6:e8:ae:62:ed:c2:34:cd:ab:be:b2:cf:8b:ce: a4:10:22:45:07:7d:40:25:c2:3e:65:1a:19:f8:19: 9e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:57:84:6F:C8:D1:09:17:E3:B5:A7:B0:6D:31:5C:C7:CA:30:78:0D X509v3 Authority Key Identifier: keyid:AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5e:34:e0:1c:bf:67:71:e6:0c:f1:a0:13:23:9e:77:0b:0c: ba:be:ab:78:d8:4b:b2:e2:57:02:f8:8b:38:94:88:cf:6a:d0: 08:bf:cf:45:95:9d:c8:20:37:da:11:df:6e:c7:f4:59:0a:28: b2:b7:c3:2e:f9:f8:d9:33:94:fe:d5:bf:0c:90:02:28:cf:4b: 24:6e:38:d8:1d:1d:3b:de:19:5a:48:f9:5f:8f:3f:05:3e:d8: e5:b3:e7:91:d7:e1:ac:bb:8c:b3:04:cb:5f:74:db:ff:a4:5d: 5b:2d:80:36:88:4b:d0:d2:56:e6:60:ee:e4:76:26:70:4c:74: d4:e4:6e:cc:b6:bb:7c:e7:9e:03:91:ea:82:6b:64:9c:39:eb: cc:45:3d:7c:06:15:a7:7e:27:5a:a7:3b:a5:cf:09:31:57:a8: 88:c2:ef:0d:2d:65:1f:27:fd:83:d0:02:3f:b7:c1:01:60:66: 40:15:29:6b:24:f0:62:64:25:d2:e0:3b:9d:2d:c5:e8:e6:37: 2a:bf:56:b4:3b:08:bd:93:85:1a:ca:3d:c8:e6:ee:ba:38:05: 71:93:78:ce:10:f8:dd:7a:63:05:f4:d8:dd:d5:0c:e0:67:db: 41:2a:6e:b6:d1:c4:fc:fe:36:12:94:71:fe:e8:d1:f9:7a:96: ae:27:20:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCRDkxMTAvBgNVBAUTKEFGQ0QxMkYzNDA5ODc4Q0Q0QUI0NDVDNDQ1NTQ0QUU4 REE4NTFBODQwHhcNMjQxMTIyMjA1MzI4WhcNMjQxMTI5MjA1MzI4WjAYMRYwFAYD VQQDEw02NzQwZWY0OC05ODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHnPrWwM43WW3FNWZzP5NgNFlXUUPEnjkxofafYQ2R3Ayto/I8WfKXYlP+eu PJZ9CI0/lGm59DDV+TNQJJ+SlGdeghysWQ5Fq6mibh3icxJwaJdv7mzjaXWNAaJd ptNgevckH8hJGSndzSYMn5SZIN11JXR+PyGKbVYc37uEjGICQidef191p6uiQ4qJ FCjf3oOVh6JdSZ3vCsxP8fom0rUKbPrwHpVUxK4R8yEGENjHyGBq9uUPPr05G/mh oJK2I7nyjBVyQnpouWj9ecQOcCdCzz+mmfdW3USPFUgM+CzaxuiuYu3CNM2rvrLP i86kECJFB31AJcI+ZRoZ+BmeRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChXhG/I 0QkX47WnsG0xXMfKMHgNMB8GA1UdIwQYMBaAFK/NEvNAmHjNSrRFxEVUSujahRqE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJEOS8wNDgxRjc4NkVD MTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVNMUt0RVhFUlZSSzZOcUZH b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4MFM4MENZZU0xS3RFWEVSVlJLNk5xRkdvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJEOS8wNDgxRjc4NkVDMTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVN MUt0RVhFUlZSSzZOcUZHb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVXjTgHL9nceYM8aATI553Cwy6vqt42Euy4lcC+Is4lIjPatAIv89F lZ3IIDfaEd9ux/RZCiiyt8Mu+fjZM5T+1b8MkAIoz0skbjjYHR073hlaSPlfjz8F Ptjls+eR1+Gsu4yzBMtfdNv/pF1bLYA2iEvQ0lbmYO7kdiZwTHTU5G7Mtrt8554D keqCa2ScOevMRT18BhWnfidapzulzwkxV6iIwu8NLWUfJ/2D0AI/t8EBYGZAFSlr JPBiZCXS4DudLcXo5jcqv1a0Owi9k4Uayj3I5u66OAVxk3jOEPjdemMF9Njd1Qzg Z9tBKm620cT8/jYSlHH+6NH5epauJyDD -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:49 2024 by rpki-client on console-ams.rpki-client.org