$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft File: azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json) Hash identifier: M/L/4qPPiIxkgaSu+8hGRp6O3x1JzhyKtRl/1hj2yn4= Subject key identifier: 58:D6:71:4B:27:EA:1A:66:61:19:4D:0B:61:F5:0A:06:7F:4D:0E:74 Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE Certificate issuer: /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft Manifest number: 0259 Signing time: Sat 23 Nov 2024 01:18:19 +0000 Manifest this update: Sat 23 Nov 2024 01:18:18 +0000 Manifest next update: Sat 30 Nov 2024 01:18:18 +0000 Files and hashes: 1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: vbJ2F73MJtQ1RSgfZg7VKc/L0MZnlmr//trPISkRWGU=) 2: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: QErLnurbIXvxhMRBkoUfFlZlnlUaVJAze8ZqVt/qUq4=) 3: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: P+1Rqy+ACA4e0I+pwLJRreU8z9vqEtggvk9g8eqBcwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE Validity Not Before: Nov 23 01:18:18 2024 GMT Not After : Nov 30 01:18:18 2024 GMT Subject: CN=67412d5b-6958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2e:fa:5e:ca:6f:f3:b1:d1:d2:eb:ce:12:3b: 27:63:ba:0c:1b:d8:cd:3c:c1:16:6f:5d:e4:0c:43: d7:12:9a:24:53:8c:98:6d:76:ba:72:4e:d8:8d:df: 06:65:e6:de:84:66:a3:d5:41:b5:42:16:05:ff:18: 6f:f0:2e:cb:29:46:cf:c4:77:de:00:68:66:47:95: d4:2b:d6:05:70:fa:f2:b5:96:59:3e:39:a9:f2:01: 9a:29:17:f3:e0:b1:41:04:3e:44:56:c3:50:e9:ae: 53:fa:19:83:e4:21:bb:0c:0a:7f:33:74:18:bb:61: d2:c5:dd:75:04:3b:de:39:56:5b:83:1a:58:f2:95: 32:c9:b3:97:e0:7d:0d:92:f2:50:8c:fb:60:f7:4a: 61:d5:01:56:19:e3:2a:85:25:5e:8c:e6:a0:d6:ab: 82:05:9d:ea:5d:f6:99:d6:11:ac:c5:d6:d3:6d:b1: 7e:85:a0:ce:2c:70:da:6c:d9:8b:4f:0b:9e:b2:ca: 9b:ca:94:e1:e9:37:51:a1:2a:d1:70:ca:c8:02:04: b4:ef:17:57:38:72:76:9f:51:3b:38:58:ad:27:49: 50:ca:8e:e2:f5:e2:af:4b:13:e1:f2:35:43:74:12: f7:e6:ec:e8:7d:82:05:13:cc:da:26:c1:e4:be:42: 72:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D6:71:4B:27:EA:1A:66:61:19:4D:0B:61:F5:0A:06:7F:4D:0E:74 X509v3 Authority Key Identifier: keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:bd:ff:f6:1c:42:62:62:67:0d:21:d6:a8:51:b3:ba:bb:de: f3:a0:9f:f7:a9:93:d0:c6:72:11:75:dd:1e:3d:56:4a:94:a0: ab:1a:4d:7f:47:66:d0:56:a1:17:fa:d5:3b:10:ff:9a:df:c2: cb:c8:d1:af:49:d2:a1:c9:68:34:87:58:90:28:41:6e:cb:a5: ce:f8:7d:93:6f:5b:ae:43:5b:0d:f7:12:fa:0f:6f:2b:c3:bc: 75:7c:ee:9f:dc:94:8c:97:b9:03:42:ef:69:6f:7e:1a:53:ee: 5b:16:bf:70:85:4d:1b:be:2c:59:b1:74:e2:c9:4f:bd:89:1c: da:2d:5c:9b:cd:bc:0d:f9:8f:1c:54:0e:71:4d:2f:e7:58:d6: 1b:0c:2f:10:53:8f:d0:c9:cc:c8:82:5a:3d:6c:e3:b1:10:4c: 86:89:77:57:d0:08:20:5d:d5:c6:e7:cd:34:c8:59:b9:6e:d3: ff:1a:c2:4b:17:0d:f7:e0:2c:46:b3:55:cf:14:4a:04:65:a9: da:68:74:28:38:ac:01:2a:6b:95:81:33:c4:f2:55:39:d8:d8: 5a:9d:51:1f:c0:3c:ff:53:69:6a:2e:ec:b0:f2:0d:7e:24:a8: 74:bb:d3:c7:fb:7e:1c:d2:04:88:ce:54:ca:d9:98:05:e4:d5: 64:26:e5:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5 Q0RCODFEQ0UwHhcNMjQxMTIzMDExODE4WhcNMjQxMTMwMDExODE4WjAYMRYwFAYD VQQDEw02NzQxMmQ1Yi02OTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAty76Xspv87HR0uvOEjsnY7oMG9jNPMEWb13kDEPXEpokU4yYbXa6ck7Yjd8G ZebehGaj1UG1QhYF/xhv8C7LKUbPxHfeAGhmR5XUK9YFcPrytZZZPjmp8gGaKRfz 4LFBBD5EVsNQ6a5T+hmD5CG7DAp/M3QYu2HSxd11BDveOVZbgxpY8pUyybOX4H0N kvJQjPtg90ph1QFWGeMqhSVejOag1quCBZ3qXfaZ1hGsxdbTbbF+haDOLHDabNmL TwuessqbypTh6TdRoSrRcMrIAgS07xdXOHJ2n1E7OFitJ0lQyo7i9eKvSxPh8jVD dBL35uzofYIFE8zaJsHkvkJywwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjWcUsn 6hpmYRlNC2H1CgZ/TQ50MB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4 OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP SndEWVlpZnZTYU9jMjRIYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFvf/2HEJiYmcNIdaoUbO6u97zoJ/3qZPQxnIRdd0ePVZKlKCrGk1/ R2bQVqEX+tU7EP+a38LLyNGvSdKhyWg0h1iQKEFuy6XO+H2Tb1uuQ1sN9xL6D28r w7x1fO6f3JSMl7kDQu9pb34aU+5bFr9whU0bvixZsXTiyU+9iRzaLVybzbwN+Y8c VA5xTS/nWNYbDC8QU4/QyczIglo9bOOxEEyGiXdX0AggXdXG5800yFm5btP/GsJL Fw334CxGs1XPFEoEZanaaHQoOKwBKmuVgTPE8lU52NhanVEfwDz/U2lqLuyw8g1+ JKh0u9PH+34c0gSIzlTK2ZgF5NVkJuXk -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:52 2024 by rpki-client on console-fra.rpki-client.org