$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: pLHQb21KXL8h4BQB7NAev+cMbr2921rHCsffn9OmSnc= Subject key identifier: C0:BA:22:86:CA:92:42:FA:35:89:B1:84:C2:66:3C:40:FB:F6:73:09 Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 1150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 1138 Signing time: Fri 22 Nov 2024 17:15:42 +0000 Manifest this update: Fri 22 Nov 2024 17:15:42 +0000 Manifest next update: Fri 29 Nov 2024 17:15:42 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: 7VsKnU094DEZI6aQ3tB8fdU0XQOAuH8rMHhCyT4lZ6s=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: 7/+tCt4S1TehzXEgy5vXWb10ZIir0doOODCzTHQK16s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4432 (0x1150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Nov 22 17:15:42 2024 GMT Not After : Nov 29 17:15:42 2024 GMT Subject: CN=6740bc3e-69c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:4d:ce:56:87:81:84:e0:b8:b1:b5:18:bd: 78:39:1c:cf:be:81:ae:7e:08:e5:a0:c0:3f:59:3d: 2f:d5:8c:7e:cc:dd:e0:33:0e:74:ff:94:7a:a0:09: 17:c9:b4:29:ee:cd:24:1a:64:fd:45:36:2c:88:5e: 8d:47:ad:32:53:0c:fa:5a:db:98:e3:56:66:08:91: d9:b2:19:79:bd:34:a8:22:df:8d:2a:ca:3f:e1:d2: 8a:0d:41:3e:85:21:3a:c4:58:b2:cd:fa:fb:b7:7b: 2f:4d:7f:f0:17:b6:45:f9:52:3b:dc:c0:9c:a0:fd: fc:f2:04:ab:bd:12:2d:0e:32:5c:80:1d:c0:97:50: 71:4c:04:f7:9b:6d:06:54:00:a2:25:2e:b0:0e:63: 9e:b2:6b:c8:d6:31:32:a4:f1:c1:4c:b4:26:de:27: 55:bb:88:69:45:be:72:01:00:4c:fc:c2:a3:cc:70: b3:e4:70:d2:79:29:42:8a:c9:a6:69:6f:b2:3d:93: 3b:24:bc:e3:01:fe:be:3d:e5:98:bd:fa:ac:7a:5c: 31:ae:dd:9b:bc:26:03:a9:e5:9c:cb:a6:b0:71:68: 9d:48:24:84:cb:10:96:36:f1:e0:3c:86:cb:30:65: ec:50:f5:5f:03:f7:e2:b8:5e:42:c1:27:78:1d:e6: 7d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BA:22:86:CA:92:42:FA:35:89:B1:84:C2:66:3C:40:FB:F6:73:09 X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:cf:04:6a:50:66:6d:a2:b3:cd:43:a4:6f:11:86:b5:ae:8e: 2a:58:0e:98:56:ba:d4:ee:46:cd:90:32:66:d4:d1:a0:e6:71: f9:12:9e:b1:e2:85:50:ba:57:81:4e:42:f8:de:1e:07:da:1c: 69:e8:89:da:58:bf:56:d7:b8:f7:20:40:bb:1f:40:4d:5c:7c: 79:17:e7:08:d9:1b:da:8d:1b:a2:23:74:05:6a:1b:3e:7f:75: b4:ed:56:e4:1c:4d:5b:de:50:7a:95:b2:e7:79:27:72:53:12: 5a:d1:78:4a:78:73:e7:67:51:5b:f0:50:3e:b6:71:7a:63:8e: b4:e0:f3:60:4b:41:47:29:ba:6c:77:ac:de:81:50:6e:78:44: 1a:1f:1f:be:57:2a:8b:f7:3f:5b:16:02:ae:0e:98:d8:06:a5: 93:b4:6e:d7:94:01:a6:b9:88:2a:70:7f:bb:c0:ef:2e:eb:8e: 86:f1:7e:d5:c5:dd:32:ff:96:b4:66:2a:c8:67:f2:44:37:56: 2d:12:2f:a9:6f:9a:27:9d:fd:22:54:9e:6c:ca:85:b9:d4:3e: f7:b2:9d:bb:eb:f6:ed:22:e6:8d:f8:2b:6a:4b:d8:ac:a6:e0: 72:10:56:f0:94:e0:13:7e:9d:4f:5f:ac:b1:3e:6c:16:7d:c7: ff:bb:32:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjQxMTIyMTcxNTQyWhcNMjQxMTI5MTcxNTQyWjAYMRYwFAYD VQQDEw02NzQwYmMzZS02OWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvX9NzlaHgYTguLG1GL14ORzPvoGufgjloMA/WT0v1Yx+zN3gMw50/5R6oAkX ybQp7s0kGmT9RTYsiF6NR60yUwz6WtuY41ZmCJHZshl5vTSoIt+NKso/4dKKDUE+ hSE6xFiyzfr7t3svTX/wF7ZF+VI73MCcoP388gSrvRItDjJcgB3Al1BxTAT3m20G VACiJS6wDmOesmvI1jEypPHBTLQm3idVu4hpRb5yAQBM/MKjzHCz5HDSeSlCismm aW+yPZM7JLzjAf6+PeWYvfqselwxrt2bvCYDqeWcy6awcWidSCSEyxCWNvHgPIbL MGXsUPVfA/fiuF5CwSd4HeZ9pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMC6IobK kkL6NYmxhMJmPED79nMJMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkzwRqUGZtorPNQ6RvEYa1ro4qWA6YVrrU7kbNkDJm1NGg5nH5Ep6x 4oVQuleBTkL43h4H2hxp6InaWL9W17j3IEC7H0BNXHx5F+cI2RvajRuiI3QFahs+ f3W07VbkHE1b3lB6lbLneSdyUxJa0XhKeHPnZ1Fb8FA+tnF6Y4604PNgS0FHKbps d6zegVBueEQaHx++VyqL9z9bFgKuDpjYBqWTtG7XlAGmuYgqcH+7wO8u646G8X7V xd0y/5a0ZirIZ/JEN1YtEi+pb5onnf0iVJ5syoW51D73sp276/btIuaN+CtqS9is puByEFbwlOATfp1PX6yxPmwWfcf/uzKc -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:05 2024 by rpki-client on console-fra.rpki-client.org