$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft File: 1xhrKGW4YA1mKCKv65AVcAbg9BA.mft (raw, json) Hash identifier: ZLllfxYTwB5Gs+r5cWuyE9iglDj7ytNjgrdx+q4yRLU= Subject key identifier: 4F:2A:03:08:54:E7:F0:6A:90:28:A9:DD:3E:27:5D:7B:E0:2A:59:75 Authority key identifier: D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 Certificate issuer: /CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Certificate serial: 342C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft Manifest number: 3428 Signing time: Fri 22 Nov 2024 15:05:19 +0000 Manifest this update: Fri 22 Nov 2024 15:05:18 +0000 Manifest next update: Fri 29 Nov 2024 15:05:18 +0000 Files and hashes: 1: 1xhrKGW4YA1mKCKv65AVcAbg9BA.crl (hash: qJGiXhLK0HSloQjUgdHTtcZbvZTxpnTHfDo967Qwu8I=) 2: B8201598BED111EC93B74C4FC4F9AE02.roa (hash: bZ78zYHCnstuVWjSxrFde4CQb6MOUeIvruPUliQa2hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13356 (0x342c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F428C/serialNumber=D7186B2865B8600D662822AFEB90157006E0F410 Validity Not Before: Nov 22 15:05:18 2024 GMT Not After : Nov 29 15:05:18 2024 GMT Subject: CN=67409daf-e8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:d0:f9:5f:a8:11:7b:f9:15:16:14:4b:3d: 5e:7f:46:a4:47:ac:02:e1:8c:1c:a3:06:3e:6c:ff: ec:c0:52:69:c5:7a:e6:33:b4:4f:69:c1:e1:96:de: a3:4a:cc:04:7e:db:e7:86:1f:83:01:36:65:38:63: 2c:63:8b:82:7f:64:25:47:73:4d:18:56:8f:26:18: 53:4b:d5:7c:36:9d:56:bb:12:b8:9f:94:1e:3c:1d: b4:8a:f3:6a:3d:ff:94:1f:17:a9:d4:55:f0:1e:1e: cf:13:70:b5:26:c9:26:8a:ad:78:53:3b:35:6f:8c: 91:f3:e1:be:68:a7:8b:7f:58:f0:14:ab:d0:6e:28: da:05:a9:90:9b:92:fc:82:59:dc:16:b9:29:5d:dc: 7f:13:0d:cb:65:5c:2b:2f:50:4e:f6:d2:c6:26:75: 61:5c:41:23:1b:7a:60:d9:e4:f5:bb:bb:42:0d:57: 41:bf:b2:e2:45:c0:25:60:35:99:07:1d:7b:4c:f0: 15:16:74:d0:ad:df:54:0f:36:aa:fa:de:9b:1a:b2: 8a:89:57:5a:71:9c:1e:ca:26:e8:95:92:d6:9a:02: 6a:a9:15:ba:49:29:f0:85:70:6c:a6:45:ae:56:93: 3a:7d:2c:79:a7:c7:bb:a0:58:19:c0:88:72:18:40: 0c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2A:03:08:54:E7:F0:6A:90:28:A9:DD:3E:27:5D:7B:E0:2A:59:75 X509v3 Authority Key Identifier: keyid:D7:18:6B:28:65:B8:60:0D:66:28:22:AF:EB:90:15:70:06:E0:F4:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xhrKGW4YA1mKCKv65AVcAbg9BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/52FCC6481DA011E2B6D8709108B02CD2/1xhrKGW4YA1mKCKv65AVcAbg9BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5b:d2:98:f4:99:59:46:da:18:84:c7:56:4b:8e:f6:f0:ad: 22:b4:79:48:31:ab:20:1e:bf:1e:79:61:02:27:e9:bb:fd:75: 69:fa:f1:e3:56:7f:e6:1b:b1:16:a4:05:65:a3:99:ce:f3:bd: 66:c2:a6:c6:f4:97:82:61:fc:9c:26:90:db:ac:fb:50:86:3f: af:a9:8e:bc:56:ca:f8:4b:d3:09:b4:12:92:82:e1:61:3c:80: 82:e0:aa:aa:2c:e3:f8:84:d4:6c:72:6c:c4:b4:bc:9e:2c:61: 00:9f:7b:3e:a5:84:53:79:77:cd:69:35:c9:75:20:32:2e:53: 37:cd:6f:bc:1b:8b:5d:55:e9:65:b6:7a:61:19:28:be:5c:5b: 4e:da:b5:0d:29:31:af:04:ef:30:df:2d:c5:2f:26:06:10:ba: 30:39:35:ba:ef:e2:30:e2:8e:ec:62:06:41:1e:61:7b:34:5b: 01:2b:3f:94:26:f2:a2:86:c1:76:55:21:83:1b:da:1a:0a:b1: 13:51:6b:70:fc:a9:2e:4d:ab:6e:93:17:73:06:bc:4a:9b:91: 66:58:c6:61:46:a1:66:55:62:9f:c9:da:d5:d7:b8:20:41:e4: bb:f2:02:e7:8e:ac:76:6b:a2:fc:59:c4:fe:ee:2f:68:c0:4c: 69:fb:6e:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOEMxMTAvBgNVBAUTKEQ3MTg2QjI4NjVCODYwMEQ2NjI4MjJBRkVCOTAxNTcw MDZFMEY0MTAwHhcNMjQxMTIyMTUwNTE4WhcNMjQxMTI5MTUwNTE4WjAYMRYwFAYD VQQDEw02NzQwOWRhZi1lOGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPrQ+V+oEXv5FRYUSz1ef0akR6wC4YwcowY+bP/swFJpxXrmM7RPacHhlt6j SswEftvnhh+DATZlOGMsY4uCf2QlR3NNGFaPJhhTS9V8Np1WuxK4n5QePB20ivNq Pf+UHxep1FXwHh7PE3C1Jskmiq14Uzs1b4yR8+G+aKeLf1jwFKvQbijaBamQm5L8 glncFrkpXdx/Ew3LZVwrL1BO9tLGJnVhXEEjG3pg2eT1u7tCDVdBv7LiRcAlYDWZ Bx17TPAVFnTQrd9UDzaq+t6bGrKKiVdacZweyibolZLWmgJqqRW6SSnwhXBspkWu VpM6fSx5p8e7oFgZwIhyGEAMOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8qAwhU 5/BqkCip3T4nXXvgKll1MB8GA1UdIwQYMBaAFNcYayhluGANZigir+uQFXAG4PQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4Qy81MkZDQzY0ODFE QTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlBMW1LQ0t2NjVBVmNBYmc5 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4aHJLR1c0WUExbUtDS3Y2NUFWY0FiZzlCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4Qy81MkZDQzY0ODFEQTAxMUUyQjZEODcwOTEwOEIwMkNEMi8xeGhyS0dXNFlB MW1LQ0t2NjVBVmNBYmc5QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIW9KY9JlZRtoYhMdWS4728K0itHlIMasgHr8eeWECJ+m7/XVp+vHj Vn/mG7EWpAVlo5nO871mwqbG9JeCYfycJpDbrPtQhj+vqY68Vsr4S9MJtBKSguFh PICC4KqqLOP4hNRscmzEtLyeLGEAn3s+pYRTeXfNaTXJdSAyLlM3zW+8G4tdVell tnphGSi+XFtO2rUNKTGvBO8w3y3FLyYGELowOTW67+Iw4o7sYgZBHmF7NFsBKz+U JvKihsF2VSGDG9oaCrETUWtw/KkuTatukxdzBrxKm5FmWMZhRqFmVWKfydrV17gg QeS78gLnjqx2a6L8WcT+7i9owExp+245 -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:06 2024 by rpki-client on console-ams.rpki-client.org