$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json) Hash identifier: ilEYz8XfDTpX6qBhqAd51GdFmQlEoC9z73p6xIpX8Oo= Subject key identifier: 6E:64:69:65:4C:F1:7E:07:E6:0F:3B:F0:D7:88:BB:B2:B0:47:7A:51 Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Certificate serial: 1AEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft Manifest number: 1ADE Signing time: Fri 22 Nov 2024 16:18:39 +0000 Manifest this update: Fri 22 Nov 2024 16:18:38 +0000 Manifest next update: Fri 29 Nov 2024 16:18:38 +0000 Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: sYqcziqil6yv4hpmaSnKSrnbW61EnCrL0IBa2/TEE/s=) 2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: bS80mdbbpLv10s+nKT/O4x1wBvZSb86FmOe0/bfy2b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6890 (0x1aea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522 Validity Not Before: Nov 22 16:18:38 2024 GMT Not After : Nov 29 16:18:38 2024 GMT Subject: CN=6740aede-6465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:6f:5b:26:c4:e8:69:17:82:9e:0c:a8:f0: 16:65:98:e1:ab:79:93:64:c5:d8:76:71:d6:e9:50: bc:65:f3:84:de:4a:2c:9a:b4:91:da:47:eb:8b:e2: e4:8e:cf:39:c5:73:e4:51:3e:f7:e2:4f:b6:2d:56: 68:88:bd:75:71:18:8f:49:a1:8a:d3:b5:1c:91:63: a5:1a:c6:7c:1a:f6:f4:3b:ec:a9:c2:5b:23:c1:2b: 64:48:63:60:9a:cd:65:f1:fa:8e:ab:fd:81:53:fe: f5:0b:26:51:22:73:c9:33:07:de:0b:c1:7a:52:19: b7:f8:24:d8:95:8c:20:ae:2b:32:62:16:45:c2:dd: fb:83:65:72:c6:da:77:40:be:ae:6f:d3:b7:2b:8d: 9e:88:0a:dc:c2:02:01:0f:9e:f2:10:61:77:a1:1d: e8:8b:c6:ff:ae:01:65:3a:57:4d:b7:ab:dc:9b:94: b7:45:c9:8a:5e:87:68:e3:71:89:6a:39:9f:03:89: 2c:20:40:a6:94:c2:98:9a:41:47:9a:d4:1d:10:6b: f0:86:88:93:27:37:33:2d:11:c2:65:1f:51:c2:6f: e3:19:4f:f1:67:9f:41:f6:c3:46:6e:f8:4c:65:7c: 12:e9:77:7c:cc:58:00:0d:3f:47:85:0c:e8:80:1e: f8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:64:69:65:4C:F1:7E:07:E6:0F:3B:F0:D7:88:BB:B2:B0:47:7A:51 X509v3 Authority Key Identifier: keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:fa:ff:e5:dc:0d:d4:76:f0:a9:e7:6b:14:c3:b7:ca:74:12: 63:0b:07:69:ec:0f:b7:3f:6c:90:30:c4:69:38:d4:b3:62:c1: f8:46:7d:c2:8a:fc:5c:a1:27:99:40:3a:79:08:0d:97:53:e9: a2:aa:a4:db:2f:88:87:24:3e:4d:cb:89:32:19:bf:95:14:38: ea:d1:a5:fa:2a:e5:ea:c1:2a:6d:a6:a7:86:75:d6:f9:a4:bc: 88:76:2d:cb:1d:d7:90:36:2b:b1:63:bb:57:d6:b2:4d:ac:f1: 1b:30:03:b7:cf:50:b3:9f:48:41:6d:3c:21:09:2b:4a:e8:6f: 2b:2f:b0:f4:91:00:e3:e3:7a:b3:d5:d2:b5:c9:5d:f1:e0:02: 6f:b3:b1:50:28:75:a2:85:75:7c:dd:39:ff:88:00:f1:bf:89: 8b:a1:5b:3c:91:67:f4:89:a7:be:70:c3:06:dc:7a:54:bd:2d: e4:46:cd:49:60:c0:a2:92:41:b8:94:bf:50:d4:a1:a4:87:61: 6b:29:b7:58:ed:ea:85:25:29:ed:32:e9:fe:40:80:42:4f:25: 90:e9:35:92:c8:62:22:a0:37:22:8d:f0:68:23:7a:b3:e5:7d: 73:b6:e0:db:ab:93:80:d4:71:9c:8b:3b:b2:4b:6b:49:6f:97: 8c:19:39:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFENkYxMTAvBgNVBAUTKDZCODY0MjQxREYwMTJGMjM5MjdBMDFDMEUzODZFMDdB QUI0OUM1MjIwHhcNMjQxMTIyMTYxODM4WhcNMjQxMTI5MTYxODM4WjAYMRYwFAYD VQQDEw02NzQwYWVkZS02NDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooJvWybE6GkXgp4MqPAWZZjhq3mTZMXYdnHW6VC8ZfOE3kosmrSR2kfri+Lk js85xXPkUT734k+2LVZoiL11cRiPSaGK07UckWOlGsZ8Gvb0O+ypwlsjwStkSGNg ms1l8fqOq/2BU/71CyZRInPJMwfeC8F6Uhm3+CTYlYwgrisyYhZFwt37g2Vyxtp3 QL6ub9O3K42eiArcwgIBD57yEGF3oR3oi8b/rgFlOldNt6vcm5S3RcmKXodo43GJ ajmfA4ksIECmlMKYmkFHmtQdEGvwhoiTJzczLRHCZR9Rwm/jGU/xZ59B9sNGbvhM ZXwS6Xd8zFgADT9HhQzogB74HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5kaWVM 8X4H5g878NeIu7KwR3pRMB8GA1UdIwQYMBaAFGuGQkHfAS8jknoBwOOG4HqrScUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUQ2Ri80NkM5NDA5NDE0 NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5T1NlZ0hBNDRiZ2VxdEp4 U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E0WkNRZDhCTHlPU2VnSEE0NGJnZXF0SnhTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUQ2Ri80NkM5NDA5NDE0NEIxMUU3ODhBMjc5NUVDNEY5QUUwMi9hNFpDUWQ4Qkx5 T1NlZ0hBNDRiZ2VxdEp4U0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3+v/l3A3UdvCp52sUw7fKdBJjCwdp7A+3P2yQMMRpONSzYsH4Rn3C ivxcoSeZQDp5CA2XU+miqqTbL4iHJD5Ny4kyGb+VFDjq0aX6KuXqwSptpqeGddb5 pLyIdi3LHdeQNiuxY7tX1rJNrPEbMAO3z1Czn0hBbTwhCStK6G8rL7D0kQDj43qz 1dK1yV3x4AJvs7FQKHWihXV83Tn/iADxv4mLoVs8kWf0iae+cMMG3HpUvS3kRs1J YMCikkG4lL9Q1KGkh2FrKbdY7eqFJSntMun+QIBCTyWQ6TWSyGIioDcijfBoI3qz 5X1ztuDbq5OA1HGcizuyS2tJb5eMGTkI -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:23 2024 by rpki-client on console-ams.rpki-client.org