$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft File: N3hUTiRpVIvwm1Td2APX19kPfmI.mft (raw, json) Hash identifier: dvrVJM0c0Py3VYGZLX2UOgi0Eug30P44HzDk/SSqUHQ= Subject key identifier: 48:5B:4C:9A:F9:20:5B:C3:D1:D4:E3:4B:05:0A:0F:FC:41:D9:0F:7E Authority key identifier: 37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 Certificate issuer: /CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft Manifest number: 81 Signing time: Thu 21 Nov 2024 04:45:25 +0000 Manifest this update: Thu 21 Nov 2024 04:45:25 +0000 Manifest next update: Thu 28 Nov 2024 04:45:25 +0000 Files and hashes: 1: N3hUTiRpVIvwm1Td2APX19kPfmI.crl (hash: AMNxUlzCCpofKklqMxnurg8DZnJsOip9AGiWN5AHiek=) 2: 1EC90968E1F211EEA360BE22C4F9AE02.roa (hash: t0a6+ZrtHXGmxUqi5+aimNkuYhnbf00cWYtVmydfQ2I=) 3: 1E4548E4E1F211EEA360BE22C4F9AE02.roa (hash: yQ1FIIFonh7cCfLctJ8d+Ls3IWEwlpiHbaUt9UxU1rY=) 4: 1DDBD99AE1F211EEA360BE22C4F9AE02.roa (hash: arm7UtKLc4xYXM+k/6yKC2LRVE/77rycSyZpvfnJw88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8CAA/serialNumber=3778544E2469548BF09B54DDD803D7D7D90F7E62 Validity Not Before: Nov 21 04:45:25 2024 GMT Not After : Nov 28 04:45:25 2024 GMT Subject: CN=673ebae5-8ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:89:d3:98:71:37:83:30:66:9f:8a:ca:25: 5a:d3:b2:cd:e2:b0:91:45:fd:2d:fc:d2:41:21:8b: 14:81:bc:7f:e4:70:f7:d5:cc:b1:18:f3:08:b7:a6: 3f:40:81:06:e3:b2:b1:07:e5:01:36:28:6a:b6:36: 69:30:f2:5e:22:ff:58:21:3c:04:7c:77:a5:e7:fa: 55:e1:82:7a:0d:89:fe:5d:4e:f2:a8:44:31:da:8d: de:f5:62:b7:c3:59:12:77:6a:f6:f4:88:10:04:84: ad:55:b1:a3:19:d7:84:84:05:61:29:64:4d:08:61: 43:d2:99:bf:13:26:e9:3d:75:dc:6d:49:73:6b:3f: f4:53:dd:7e:1d:5e:76:44:da:f9:62:c4:59:b5:a7: 7d:76:9d:55:4e:24:ad:dd:1c:b6:b5:e7:73:ff:a2: 43:14:55:3b:35:a8:5a:17:2b:d5:06:76:10:14:bd: d1:92:9d:fe:50:ee:a6:a4:f0:f7:2b:97:cb:fc:a8: 78:81:5d:a4:be:72:9c:aa:fb:69:a2:cb:8c:5c:5c: a1:e8:11:95:bc:3e:5c:b2:21:e7:ef:c0:3b:1d:03: df:41:11:4e:4a:0c:2b:b4:8c:fb:58:12:be:7a:37: 36:6a:a8:7d:6b:17:9a:4b:a0:0e:14:20:d7:68:5f: 69:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5B:4C:9A:F9:20:5B:C3:D1:D4:E3:4B:05:0A:0F:FC:41:D9:0F:7E X509v3 Authority Key Identifier: keyid:37:78:54:4E:24:69:54:8B:F0:9B:54:DD:D8:03:D7:D7:D9:0F:7E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3hUTiRpVIvwm1Td2APX19kPfmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8CAA/DCD02A20E1EA11EE999C702AC4F9AE02/N3hUTiRpVIvwm1Td2APX19kPfmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:64:47:79:17:fd:14:dd:49:39:86:41:b3:27:0f:e6:75:6c: cd:ec:08:ab:30:ce:a3:fe:6d:46:cb:d8:fd:ac:24:0f:72:3d: b7:89:d2:0a:66:ba:cc:06:a2:a1:55:e2:2f:c2:53:bc:f8:ed: 39:6d:7b:51:cd:ce:f8:40:63:b4:41:e1:7a:11:41:e3:c8:77: 9b:bf:61:f0:f6:dc:75:87:64:6f:59:58:26:fe:9c:ad:9d:f2: ac:e0:07:77:b3:9b:0d:e3:8b:c7:59:5d:21:3a:99:86:4f:f5: ca:73:28:ce:8c:18:7b:ac:70:c8:91:4c:a1:99:10:e1:b6:54: 60:9d:65:94:9f:f5:83:d6:23:72:5e:3b:39:3d:25:45:1a:20: 70:74:5f:b5:b5:69:04:b2:30:31:7e:41:96:6b:52:3d:b8:1a: 07:d7:e6:10:90:1b:0f:14:07:35:85:66:06:2f:aa:37:c2:70: f1:51:4b:61:d2:75:00:1d:b6:ed:73:35:7f:08:7c:c9:aa:89: ea:93:82:ef:bd:d9:ce:a9:98:98:b8:c4:07:69:65:27:ef:6c: 61:cc:f9:09:e0:6c:e9:de:7c:21:22:2f:b1:e4:79:97:3e:d7: f1:d9:b3:e6:38:6f:4c:ec:f3:bd:58:6b:df:32:7c:7f:aa:f6: 30:4c:a1:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhDQUExMTAvBgNVBAUTKDM3Nzg1NDRFMjQ2OTU0OEJGMDlCNTREREQ4MDNEN0Q3 RDkwRjdFNjIwHhcNMjQxMTIxMDQ0NTI1WhcNMjQxMTI4MDQ0NTI1WjAYMRYwFAYD VQQDEw02NzNlYmFlNS04YWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzg+J05hxN4MwZp+KyiVa07LN4rCRRf0t/NJBIYsUgbx/5HD31cyxGPMIt6Y/ QIEG47KxB+UBNihqtjZpMPJeIv9YITwEfHel5/pV4YJ6DYn+XU7yqEQx2o3e9WK3 w1kSd2r29IgQBIStVbGjGdeEhAVhKWRNCGFD0pm/EybpPXXcbUlzaz/0U91+HV52 RNr5YsRZtad9dp1VTiSt3Ry2tedz/6JDFFU7NahaFyvVBnYQFL3Rkp3+UO6mpPD3 K5fL/Kh4gV2kvnKcqvtposuMXFyh6BGVvD5csiHn78A7HQPfQRFOSgwrtIz7WBK+ ejc2aqh9axeaS6AOFCDXaF9pnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhbTJr5 IFvD0dTjSwUKD/xB2Q9+MB8GA1UdIwQYMBaAFDd4VE4kaVSL8JtU3dgD19fZD35i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOENBQS9EQ0QwMkEyMEUx RUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJdndtMVRkMkFQWDE5a1Bm bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04zaFVUaVJwVkl2d20xVGQyQVBYMTlrUGZtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OENBQS9EQ0QwMkEyMEUxRUExMUVFOTk5QzcwMkFDNEY5QUUwMi9OM2hVVGlScFZJ dndtMVRkMkFQWDE5a1BmbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+ZEd5F/0U3Uk5hkGzJw/mdWzN7AirMM6j/m1Gy9j9rCQPcj23idIK ZrrMBqKhVeIvwlO8+O05bXtRzc74QGO0QeF6EUHjyHebv2Hw9tx1h2RvWVgm/pyt nfKs4Ad3s5sN44vHWV0hOpmGT/XKcyjOjBh7rHDIkUyhmRDhtlRgnWWUn/WD1iNy Xjs5PSVFGiBwdF+1tWkEsjAxfkGWa1I9uBoH1+YQkBsPFAc1hWYGL6o3wnDxUUth 0nUAHbbtczV/CHzJqonqk4LvvdnOqZiYuMQHaWUn72xhzPkJ4Gzp3nwhIi+x5HmX Ptfx2bPmOG9M7PO9WGvfMnx/qvYwTKEf -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:53 2024 by rpki-client on console-fra.rpki-client.org