$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: VD9jNUFO8Dd72Leizs8ayQibzFMzzdLvlVvNXOK96AM= Subject key identifier: FC:84:42:08:9B:E0:DD:71:EE:EE:AC:0B:C7:A8:DA:95:C2:FD:02:A7 Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0A2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0A1E Signing time: Fri 22 Nov 2024 19:35:13 +0000 Manifest this update: Fri 22 Nov 2024 19:35:12 +0000 Manifest next update: Fri 29 Nov 2024 19:35:12 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: 7YMP5DZi/ONgig4CVJPdR/Di4EyOXDe5vMlBMxRRS3E=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: XDiNSyvSEtWXI6wHIar737kbkmX0g3of9RTGZZqXm0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2603 (0xa2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Nov 22 19:35:12 2024 GMT Not After : Nov 29 19:35:12 2024 GMT Subject: CN=6740dcf0-5c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1c:bf:1a:d3:2d:93:31:83:44:e2:34:24:09: ed:a4:98:b1:e4:89:55:50:95:8b:a0:fd:42:57:de: 2b:c6:d5:dc:21:b2:36:ac:5d:20:5c:1d:c8:eb:c1: 89:2a:c6:c3:65:8e:fb:b2:7f:2c:11:6b:10:6f:6d: 2c:e8:53:12:b0:d1:89:72:4f:c4:ef:d5:ab:b1:0b: 7b:b9:b8:9d:58:06:d4:93:7d:a5:cb:50:e4:0e:95: d5:f5:98:2c:f6:d3:10:e8:b5:ba:6e:db:54:e0:4b: ea:7c:c8:4c:ec:bc:ca:bf:5a:ec:39:72:f4:2c:49: d6:be:06:6a:eb:11:20:9c:11:aa:f5:60:8b:0f:60: fb:6e:a8:e6:ce:46:29:f8:d6:a4:e1:19:30:2b:13: 8b:68:c5:cc:9f:f2:4c:88:ab:92:88:14:ca:25:b6: ef:7f:4b:f2:b7:58:f8:46:1f:24:53:66:f5:8e:de: e0:f3:93:f3:93:36:37:5f:e0:59:98:3b:5b:22:4d: 4f:5c:8b:f7:2a:c5:f4:52:4d:23:81:cb:4b:d8:1b: d0:be:66:1f:fa:da:60:81:51:e0:73:b0:11:d3:a2: 86:87:de:56:9d:29:5a:56:9c:3b:eb:1a:79:a1:31: ca:ac:f4:95:1f:f2:29:f6:ca:68:0d:55:1f:a8:42: 17:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:84:42:08:9B:E0:DD:71:EE:EE:AC:0B:C7:A8:DA:95:C2:FD:02:A7 X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:90:bd:f8:7b:4e:e6:71:49:7f:a5:26:b8:5c:7c:9a:14:ca: 87:9d:eb:c2:34:90:af:c3:e6:32:46:58:3a:dc:51:ba:c9:89: 01:96:89:99:cc:e6:ad:aa:1f:1b:c7:f8:e6:aa:2a:2a:5c:75: e7:9e:f7:b6:c1:45:22:42:6c:6f:4c:0c:6a:97:15:1a:5e:95: 1a:85:78:b3:87:bb:90:db:00:33:55:17:92:2e:7e:44:9a:fb: 60:82:2b:cf:c5:74:51:fc:04:89:91:fc:26:17:76:49:ca:81: 35:80:f3:f6:19:ca:68:98:f1:c7:3c:9a:b8:3d:e8:c0:4f:77: 12:6a:11:64:7d:60:e8:6a:c5:dc:9d:4e:e0:e3:47:b1:70:26: a6:0b:88:b8:a2:a7:c3:16:07:5a:66:6e:0e:db:27:cb:89:d1: 7e:33:42:7d:04:78:db:1b:8f:31:13:f7:d1:24:a6:aa:b2:46: 1c:e4:a9:b1:9a:a3:53:b3:46:e1:a7:48:01:27:4a:81:e6:06: 8c:6f:c3:aa:7c:f1:ba:b3:f9:66:10:86:d6:b3:5d:48:39:63: 8a:36:f0:12:b0:35:51:27:81:fb:02:10:cd:4f:36:a4:55:aa: 34:2d:ce:e6:9f:f7:3e:dd:e2:c1:03:f1:ee:78:cf:d1:5d:12: 3f:44:e3:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjQxMTIyMTkzNTEyWhcNMjQxMTI5MTkzNTEyWjAYMRYwFAYD VQQDEw02NzQwZGNmMC01YzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRy/GtMtkzGDROI0JAntpJix5IlVUJWLoP1CV94rxtXcIbI2rF0gXB3I68GJ KsbDZY77sn8sEWsQb20s6FMSsNGJck/E79WrsQt7ubidWAbUk32ly1DkDpXV9Zgs 9tMQ6LW6bttU4EvqfMhM7LzKv1rsOXL0LEnWvgZq6xEgnBGq9WCLD2D7bqjmzkYp +Nak4RkwKxOLaMXMn/JMiKuSiBTKJbbvf0vyt1j4Rh8kU2b1jt7g85PzkzY3X+BZ mDtbIk1PXIv3KsX0Uk0jgctL2BvQvmYf+tpggVHgc7AR06KGh95WnSlaVpw76xp5 oTHKrPSVH/Ip9spoDVUfqEIXZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyEQgib 4N1x7u6sC8eo2pXC/QKnMB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBukL34e07mcUl/pSa4XHyaFMqHnevCNJCvw+YyRlg63FG6yYkBlomZ zOatqh8bx/jmqioqXHXnnve2wUUiQmxvTAxqlxUaXpUahXizh7uQ2wAzVReSLn5E mvtggivPxXRR/ASJkfwmF3ZJyoE1gPP2GcpomPHHPJq4PejAT3cSahFkfWDoasXc nU7g40excCamC4i4oqfDFgdaZm4O2yfLidF+M0J9BHjbG48xE/fRJKaqskYc5Kmx mqNTs0bhp0gBJ0qB5gaMb8OqfPG6s/lmEIbWs11IOWOKNvASsDVRJ4H7AhDNTzak Vao0Lc7mn/c+3eLBA/HueM/RXRI/ROO/ -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:50 2024 by rpki-client on console-ams.rpki-client.org