$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft File: x8kdlvp-jS2SIZUipkBEI3UR4FE.mft (raw, json) Hash identifier: qmOx3fLxxr9hwtDrEG2GnvVPmhEhMq2mEo7JP3liNTo= Subject key identifier: 25:3F:14:27:84:2E:70:21:A7:73:00:BA:7A:29:7A:FB:94:C1:FA:1C Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Certificate serial: 0314 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft Manifest number: 030D Signing time: Thu 21 Nov 2024 00:46:32 +0000 Manifest this update: Thu 21 Nov 2024 00:46:32 +0000 Manifest next update: Thu 28 Nov 2024 00:46:32 +0000 Files and hashes: 1: x8kdlvp-jS2SIZUipkBEI3UR4FE.crl (hash: gRZPZjpIhdZ5ZNgl0sJ2VlyUfkVKJrzUabuDSmcLkwk=) 2: 89F6EEC4C82711EEBCC49737C4F9AE02.roa (hash: AArq8t/jhxU12JazlbbWzfn6Htlf8feOYH1MiOaqv2s=) 3: C0BBFCC003A911EF9DE2F919C4F9AE02.roa (hash: a3TV3Qr98YNHe55DJ7WbLvKYcURrK12GnbhFOXLtRjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 788 (0x314) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051 Validity Not Before: Nov 21 00:46:32 2024 GMT Not After : Nov 28 00:46:32 2024 GMT Subject: CN=673e82e8-6d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9f:e2:21:9b:c1:ed:b7:71:b5:4d:71:04:a4: 15:b9:9c:35:8f:1d:c4:16:2e:1b:8b:f7:65:d3:be: aa:21:22:4b:b3:ca:8e:d2:71:7b:06:5a:41:77:df: 7b:2e:ae:58:c8:6a:2f:a5:55:c2:da:bf:77:b4:cf: b9:c9:0c:e1:a8:46:2f:2a:b7:7b:59:d2:18:7d:67: e0:ee:50:55:03:fa:3f:8e:94:0d:4a:75:21:ee:2d: 10:16:8c:bf:2a:35:32:3e:5a:21:da:fb:3a:dc:10: 7a:9b:dd:3a:00:73:9e:90:6d:b4:1c:dc:87:28:83: 82:17:6c:0c:ce:aa:68:c8:95:c3:b4:31:55:27:39: ae:2d:48:9a:c1:03:74:ec:04:ff:e1:ae:84:9f:36: 44:41:2a:a9:e0:8b:a9:95:aa:83:08:44:60:35:f4: 3b:09:66:d1:f5:80:3e:3d:f3:99:c3:de:18:0e:07: 9e:29:79:0c:aa:b6:b4:e2:99:a1:2d:75:a8:17:b8: e9:0d:fd:78:b7:f5:0c:6a:a4:66:59:69:13:b6:82: 23:d0:cb:fe:2d:8e:ad:c2:9a:9e:95:72:af:97:09: e3:1c:2e:b8:3a:ce:0c:c6:4a:8e:6f:b5:d4:e8:83: 4e:05:3b:9b:9c:85:9b:9f:9b:45:cb:4e:25:20:81: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3F:14:27:84:2E:70:21:A7:73:00:BA:7A:29:7A:FB:94:C1:FA:1C X509v3 Authority Key Identifier: keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4d:94:b9:c1:d4:a0:7a:87:e5:e6:c7:d7:c2:19:60:36:04: f5:e5:43:f9:22:59:7a:18:20:a0:63:64:b4:3f:72:d4:45:00: c1:23:9b:19:e3:0d:91:dd:4c:25:1e:a2:9d:34:1e:bf:8b:52: ec:84:ce:f5:f9:54:d8:db:b2:ab:4b:38:1b:62:7f:cc:af:c7: d4:c5:2c:c8:45:07:14:54:f9:c9:dc:9a:a7:41:85:f8:d2:79: 25:f1:b9:cd:7c:54:b4:9b:ee:45:71:33:d2:f3:83:72:07:ec: 25:6d:71:93:d1:9b:7f:d3:24:70:8d:07:25:4d:6c:8a:5a:48: a7:be:e4:6a:e4:83:de:02:4d:0b:b3:40:a7:b5:fc:1c:2d:3c: 4e:b5:2c:c5:11:e1:98:a0:73:07:f5:87:3b:13:ca:5f:b8:32: 34:da:85:51:b3:c0:33:14:bd:8c:69:c4:13:c6:11:c6:f7:8e: c8:d2:f7:b1:e9:a5:32:37:94:bf:aa:b8:91:21:7c:65:ac:6b: 2a:95:e4:9f:52:88:fe:61:90:6f:ad:e3:a4:43:da:3a:54:72: f2:72:50:c0:b6:41:a8:95:04:2d:f7:42:d5:d9:c1:e6:26:bc: 28:a7:61:19:f3:df:d5:a2:89:e4:99:e9:3b:d5:c2:b2:77:e7: 63:4a:14:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyRTgxMTAvBgNVBAUTKEM3QzkxRDk2RkE3RThEMkQ5MjIxOTUyMkE2NDA0NDIz NzUxMUUwNTEwHhcNMjQxMTIxMDA0NjMyWhcNMjQxMTI4MDA0NjMyWjAYMRYwFAYD VQQDEw02NzNlODJlOC02ZDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZ/iIZvB7bdxtU1xBKQVuZw1jx3EFi4bi/dl076qISJLs8qO0nF7BlpBd997 Lq5YyGovpVXC2r93tM+5yQzhqEYvKrd7WdIYfWfg7lBVA/o/jpQNSnUh7i0QFoy/ KjUyPloh2vs63BB6m906AHOekG20HNyHKIOCF2wMzqpoyJXDtDFVJzmuLUiawQN0 7AT/4a6EnzZEQSqp4IuplaqDCERgNfQ7CWbR9YA+PfOZw94YDgeeKXkMqra04pmh LXWoF7jpDf14t/UMaqRmWWkTtoIj0Mv+LY6twpqelXKvlwnjHC64Os4MxkqOb7XU 6INOBTubnIWbn5tFy04lIIHg7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCU/FCeE LnAhp3MAunopevuUwfocMB8GA1UdIwQYMBaAFMfJHZb6fo0tkiGVIqZARCN1EeBR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTJFOC8xMTI3Q0QzRUFF NjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpTMlNJWlVpcGtCRUkzVVI0 RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4a2RsdnAtalMyU0laVWlwa0JFSTNVUjRGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTJFOC8xMTI3Q0QzRUFFNjUxMUVDQkNGOEM2NENDNEY5QUUwMi94OGtkbHZwLWpT MlNJWlVpcGtCRUkzVVI0RkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfTZS5wdSgeofl5sfXwhlgNgT15UP5Ill6GCCgY2S0P3LURQDBI5sZ 4w2R3UwlHqKdNB6/i1LshM71+VTY27KrSzgbYn/Mr8fUxSzIRQcUVPnJ3JqnQYX4 0nkl8bnNfFS0m+5FcTPS84NyB+wlbXGT0Zt/0yRwjQclTWyKWkinvuRq5IPeAk0L s0CntfwcLTxOtSzFEeGYoHMH9Yc7E8pfuDI02oVRs8AzFL2MacQTxhHG947I0vex 6aUyN5S/qriRIXxlrGsqleSfUoj+YZBvreOkQ9o6VHLyclDAtkGolQQt90LV2cHm Jrwop2EZ89/Voonkmek71cKyd+djShTb -----END CERTIFICATE-----Generated at Thu Nov 21 03:21:57 2024 by rpki-client on console-ams.rpki-client.org