$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft File: myAvlYUe_EtkzjtAnGxgSzW0mNg.mft (raw, json) Hash identifier: 2bQMq0VWEGkputdGf8bLNsJkBN34FkEmWxDd/7pwomU= Subject key identifier: 5A:67:57:C0:73:91:0B:F9:33:9B:F9:11:79:36:EC:0D:FD:04:A4:AC Authority key identifier: 9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8 Certificate issuer: /CN=A91F5CE4/serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8 Certificate serial: 095B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft Manifest number: 094F Signing time: Fri 22 Nov 2024 19:59:41 +0000 Manifest this update: Fri 22 Nov 2024 19:59:41 +0000 Manifest next update: Fri 29 Nov 2024 19:59:41 +0000 Files and hashes: 1: myAvlYUe_EtkzjtAnGxgSzW0mNg.crl (hash: jINsAG29IlmHJlhi2K7OgQj+WvAk1xJ4iTTgqzVynZg=) 2: 1EEB10267CFB11EBA8C7B009C4F9AE02.roa (hash: O77zp6ks0TqxaDAkJp4Lm1+BoJkZNosQNYkw2uGOZ3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.crl rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2395 (0x95b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5CE4/serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8 Validity Not Before: Nov 22 19:59:41 2024 GMT Not After : Nov 29 19:59:41 2024 GMT Subject: CN=6740e2ad-4fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:16:8e:03:ea:cf:27:e5:d9:5a:96:09:2f: 67:6d:b8:fc:5a:18:ea:72:63:23:95:c2:e5:6d:7a: b2:af:78:64:0c:54:13:8b:e3:28:02:5f:2c:f8:7f: 97:a2:b4:e0:fc:3c:5b:49:57:df:c2:ff:b0:6c:fc: 75:c8:58:90:43:4f:bf:5f:07:05:e1:40:05:0e:0f: 96:b1:53:3e:0f:a0:db:33:85:f9:09:8f:70:b8:4d: 1f:8f:1b:46:94:eb:99:54:82:ca:9e:53:ba:b7:16: f7:4b:44:ab:4a:19:70:8e:c4:3a:c4:4c:c5:c6:9a: 25:1c:ec:92:f0:77:c3:d5:95:e6:d6:f7:9b:56:48: 54:7b:58:fa:2a:a1:46:05:1b:b2:26:a6:85:78:e5: b9:e9:35:12:84:42:dd:96:60:74:75:f6:54:b1:f0: d3:cb:e1:06:e4:51:5a:29:b4:67:11:62:c3:4b:0c: 39:66:fe:aa:cd:a3:e7:3e:3a:f0:60:02:2d:64:ba: 66:59:dd:fa:c9:c5:3b:e8:84:5f:40:78:dc:f0:b5: 35:93:76:d6:4c:a4:45:54:15:bb:c2:17:18:fb:a8: 39:33:04:f4:28:ca:1a:61:ba:a8:5a:92:04:7f:df: 9e:9f:f9:9d:23:4d:3b:bf:b3:fd:f2:84:fd:0b:d9: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:67:57:C0:73:91:0B:F9:33:9B:F9:11:79:36:EC:0D:FD:04:A4:AC X509v3 Authority Key Identifier: keyid:9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fd:12:7f:6a:dc:5e:6f:15:42:70:21:dd:e4:df:20:ee:bd: 52:fc:8a:de:ac:1f:50:59:eb:8a:38:ec:be:11:10:78:ee:1f: 30:62:c6:6c:4d:c6:8a:5d:20:52:96:7a:9d:9a:0e:cb:f8:74: 95:2c:a6:bf:53:c5:95:3c:7f:1c:30:b0:e7:b0:b2:22:53:c0: 3d:78:ab:0e:57:dd:ca:dd:ad:a0:07:80:18:df:0a:90:52:c0: a8:b8:03:c1:08:68:9c:a8:da:6b:40:39:60:71:6e:69:c4:5e: 85:61:72:e9:02:9c:a5:bf:97:29:1e:f8:10:66:c7:3c:40:7a: 44:3a:fd:b5:f4:4d:89:19:5f:bb:fe:0e:e9:75:76:48:78:e3: 55:8a:ac:e2:3f:02:1d:c0:6b:b0:81:56:0f:4e:a1:36:f0:ca: 49:05:b0:a7:33:bc:12:10:28:5c:cb:50:41:d2:06:ae:44:88: 61:62:4e:90:90:1a:53:d0:fc:cf:7d:67:06:f3:b6:77:ef:d1: ae:9e:3c:a2:5a:71:a3:88:9a:06:7d:ef:10:6a:ba:8a:b1:78: 41:64:0e:b1:2d:22:a6:1a:7f:46:51:85:cb:22:57:ff:45:bb: 2e:a8:5d:a4:36:bd:6a:b6:53:bf:04:a0:79:8e:bf:a8:be:bc: 86:77:83:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVDRTQxMTAvBgNVBAUTKDlCMjAyRjk1ODUxRUZDNEI2NENFM0I0MDlDNkM2MDRC MzVCNDk4RDgwHhcNMjQxMTIyMTk1OTQxWhcNMjQxMTI5MTk1OTQxWjAYMRYwFAYD VQQDEw02NzQwZTJhZC00ZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsYWjgPqzyfl2VqWCS9nbbj8WhjqcmMjlcLlbXqyr3hkDFQTi+MoAl8s+H+X orTg/DxbSVffwv+wbPx1yFiQQ0+/XwcF4UAFDg+WsVM+D6DbM4X5CY9wuE0fjxtG lOuZVILKnlO6txb3S0SrShlwjsQ6xEzFxpolHOyS8HfD1ZXm1vebVkhUe1j6KqFG BRuyJqaFeOW56TUShELdlmB0dfZUsfDTy+EG5FFaKbRnEWLDSww5Zv6qzaPnPjrw YAItZLpmWd36ycU76IRfQHjc8LU1k3bWTKRFVBW7whcY+6g5MwT0KMoaYbqoWpIE f9+en/mdI007v7P98oT9C9kQ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpnV8Bz kQv5M5v5EXk27A39BKSsMB8GA1UdIwQYMBaAFJsgL5WFHvxLZM47QJxsYEs1tJjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUNFNC8zRUZGMUE5QTg2 MzYxMUVBQUU2QjExNDJDNEY5QUUwMi9teUF2bFlVZV9FdGt6anRBbkd4Z1N6VzBt TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL215QXZsWVVlX0V0a3pqdEFuR3hnU3pXMG1OZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUNFNC8zRUZGMUE5QTg2MzYxMUVBQUU2QjExNDJDNEY5QUUwMi9teUF2bFlVZV9F dGt6anRBbkd4Z1N6VzBtTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW/RJ/atxebxVCcCHd5N8g7r1S/IrerB9QWeuKOOy+ERB47h8wYsZs TcaKXSBSlnqdmg7L+HSVLKa/U8WVPH8cMLDnsLIiU8A9eKsOV93K3a2gB4AY3wqQ UsCouAPBCGicqNprQDlgcW5pxF6FYXLpApylv5cpHvgQZsc8QHpEOv219E2JGV+7 /g7pdXZIeONViqziPwIdwGuwgVYPTqE28MpJBbCnM7wSEChcy1BB0gauRIhhYk6Q kBpT0PzPfWcG87Z379GunjyiWnGjiJoGfe8QarqKsXhBZA6xLSKmGn9GUYXLIlf/ RbsuqF2kNr1qtlO/BKB5jr+ovryGd4PR -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org