$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft File: G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json) Hash identifier: J1kfEvItcnC0XoLx3K5HweFlPHbiCre913HIJX3Tvuk= Subject key identifier: 7A:5B:95:F5:3A:A3:BA:09:EA:52:62:30:00:46:4F:96:99:F0:20:CE Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 Certificate issuer: /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Certificate serial: 10F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft Manifest number: 10D5 Signing time: Fri 22 Nov 2024 17:18:36 +0000 Manifest this update: Fri 22 Nov 2024 17:18:36 +0000 Manifest next update: Fri 29 Nov 2024 17:18:36 +0000 Files and hashes: 1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: W85qpexd1hWhra40STWINVtnkXF52Zq7dFUmdyNp5C8=) 2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: PIKYTs3IrpkMUSvX1sNDaeeoCH4EYsiDAQY9Uv29lzU=) 3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: Gf+bv3uHiT7vriKDC0F8LA615sNUkJxRAdXI9q2xpKE=) 4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: H+bVwVMApI3aWhLRhuXUPNJypEGXjtDXGqGsyJRJ7SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4345 (0x10f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752 Validity Not Before: Nov 22 17:18:36 2024 GMT Not After : Nov 29 17:18:36 2024 GMT Subject: CN=6740bcec-7e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:6e:25:f8:dd:0c:5f:93:b5:07:16:20:e3: f0:2a:c5:be:0b:41:ec:96:d1:fa:7c:a0:cb:5f:80: 5e:14:d3:e8:6d:04:07:25:50:6c:01:6b:e7:4e:0e: 1a:32:37:f6:5d:3b:f4:a6:00:15:aa:fd:fd:72:7d: b1:ad:49:a6:3c:1b:fd:9e:85:ee:71:b0:de:e7:4a: 58:70:dd:ce:19:d7:db:57:77:4f:0d:04:2f:b9:70: db:c4:2d:29:0d:f5:98:c8:b4:c5:80:c8:a9:a1:de: a4:7f:40:5e:63:cf:fe:fc:af:9a:1a:96:91:9c:ef: dc:79:75:db:59:f1:83:1d:71:59:92:e8:1d:5b:6e: 8b:0c:c7:f6:09:39:99:cf:85:3e:4c:61:c2:98:a1: 60:52:d9:79:fc:ce:46:d7:df:f7:4f:ea:10:87:eb: 70:18:ce:1f:87:5f:50:e8:8c:c5:5b:b8:21:67:72: 5b:f6:06:a4:2f:9e:8f:90:e8:e7:5e:95:58:fb:f6: 02:ac:22:e5:e0:77:7f:be:7d:58:d2:34:e6:31:9a: 71:ea:6c:7e:da:00:0a:30:92:04:95:a9:54:5a:37: af:f8:71:d0:ff:68:7c:83:d4:d0:1d:ff:8d:66:99: c8:91:58:ca:20:1f:79:d4:13:15:cd:4f:27:45:82: 84:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5B:95:F5:3A:A3:BA:09:EA:52:62:30:00:46:4F:96:99:F0:20:CE X509v3 Authority Key Identifier: keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:8d:50:32:64:8c:70:75:1a:77:ae:10:5a:a5:92:fa:c5:16: 46:35:cb:cf:26:1f:df:09:b2:32:7d:28:e0:3d:7a:9e:ae:e6: 9c:36:a0:a2:30:b7:f7:54:12:7b:19:09:80:69:9e:f9:8b:0d: 8d:b5:73:bc:7b:da:25:89:1a:4f:f2:38:09:be:47:7c:15:ac: 5b:4d:d0:02:a6:4e:65:24:69:7b:2f:c7:db:c0:f1:3d:5c:aa: cb:43:d6:1d:cf:0c:0c:9c:ec:d3:65:43:8a:5e:39:1a:4b:5d: 6a:5d:e9:89:17:2d:1d:a5:11:61:89:77:7a:b3:94:fa:f3:6d: b5:dd:be:47:07:5a:06:90:86:c5:f1:c3:0e:5c:28:4c:a3:97: 2d:1e:0b:39:76:1e:0a:9a:db:2b:43:c2:ac:b9:c9:9e:07:c0: f0:35:ba:ca:3e:c9:9f:e0:5b:eb:08:b5:c9:c6:e1:6d:d1:86: d6:60:b2:cd:b6:57:39:24:89:e8:e5:be:45:3f:01:80:45:87: 95:36:2d:4a:b4:16:02:d0:14:ff:b6:68:2e:ae:49:35:0d:fb: c8:63:28:47:7e:c0:e7:24:2e:44:33:5f:5e:55:fd:ad:24:1e: 48:0a:a7:1d:b9:92:63:25:27:4e:ad:07:f1:a1:92:28:a8:6c: 09:69:61:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKDFCRjVBOEQ5NENFMDZDRTMwMUZDMzVEODY5RjcwRDc0 MEQ3MDk3NTIwHhcNMjQxMTIyMTcxODM2WhcNMjQxMTI5MTcxODM2WjAYMRYwFAYD VQQDEw02NzQwYmNlYy03ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyxuJfjdDF+TtQcWIOPwKsW+C0HsltH6fKDLX4BeFNPobQQHJVBsAWvnTg4a Mjf2XTv0pgAVqv39cn2xrUmmPBv9noXucbDe50pYcN3OGdfbV3dPDQQvuXDbxC0p DfWYyLTFgMipod6kf0BeY8/+/K+aGpaRnO/ceXXbWfGDHXFZkugdW26LDMf2CTmZ z4U+TGHCmKFgUtl5/M5G19/3T+oQh+twGM4fh19Q6IzFW7ghZ3Jb9gakL56PkOjn XpVY+/YCrCLl4Hd/vn1Y0jTmMZpx6mx+2gAKMJIElalUWjev+HHQ/2h8g9TQHf+N ZpnIkVjKIB951BMVzU8nRYKEDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpblfU6 o7oJ6lJiMABGT5aZ8CDOMB8GA1UdIwQYMBaAFBv1qNlM4GzjAfw12Gn3DXQNcJdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9DOURCODlFRTBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JPTUJfRFhZYWZjTmRBMXds MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfV28yVXpnYk9NQl9EWFlhZmNOZEExd2wxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9DOURCODlFRTBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi9HX1dvMlV6Z2JP TUJfRFhZYWZjTmRBMXdsMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUjVAyZIxwdRp3rhBapZL6xRZGNcvPJh/fCbIyfSjgPXqeruacNqCi MLf3VBJ7GQmAaZ75iw2NtXO8e9oliRpP8jgJvkd8FaxbTdACpk5lJGl7L8fbwPE9 XKrLQ9YdzwwMnOzTZUOKXjkaS11qXemJFy0dpRFhiXd6s5T682213b5HB1oGkIbF 8cMOXChMo5ctHgs5dh4KmtsrQ8KsucmeB8DwNbrKPsmf4FvrCLXJxuFt0YbWYLLN tlc5JIno5b5FPwGARYeVNi1KtBYC0BT/tmgurkk1DfvIYyhHfsDnJC5EM19eVf2t JB5ICqcduZJjJSdOrQfxoZIoqGwJaWE6 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:22 2024 by rpki-client on console-ams.rpki-client.org