$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json) Hash identifier: Yl4brdq30dS7uPVPrEEmqj2k1K1BMNpnAeo3Z+wOIhs= Subject key identifier: F2:FD:9B:B3:55:C9:3A:67:93:D9:82:E8:91:CF:7B:12:74:5D:D3:05 Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Certificate serial: 0D1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft Manifest number: 0D14 Signing time: Fri 22 Nov 2024 17:58:20 +0000 Manifest this update: Fri 22 Nov 2024 17:58:19 +0000 Manifest next update: Fri 29 Nov 2024 17:58:19 +0000 Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: fn1pAk4zq8QptRwme8Or4PfVv83jm6FxhdgaxH21LlI=) 2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: YVUIxsB3E3XvSbRByHJIlW/SMSZ9WdbizIM0/QfshuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3354 (0xd1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Validity Not Before: Nov 22 17:58:19 2024 GMT Not After : Nov 29 17:58:19 2024 GMT Subject: CN=6740c63c-77e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:cf:3e:ad:23:71:3f:c6:f8:64:0f:c2:93: 51:8c:83:d6:f9:3e:57:b1:89:5a:02:c2:3a:3e:12: e7:6f:7c:42:59:4a:b7:99:92:8f:1f:6d:51:a0:d2: ae:1e:84:14:99:04:aa:f2:93:67:98:bc:3b:f8:df: 03:f1:93:79:4f:8c:91:ea:7b:d3:3d:de:36:30:ec: 23:d9:54:2a:98:79:24:da:7d:7f:95:e0:64:b8:c7: e5:83:54:06:2f:9a:a6:66:ba:7f:29:36:31:d1:aa: e7:69:de:60:61:4a:0f:fd:31:7c:18:96:7d:39:16: 57:8f:70:8f:7f:a0:65:66:97:a2:60:1c:5b:80:de: 65:d5:3f:ab:98:ce:88:69:06:97:bf:dd:28:2a:70: ca:46:e4:3b:8a:6c:38:1d:ad:2c:34:24:2f:8c:68: 5a:f3:fe:51:0b:2f:4e:72:3b:33:7b:f0:31:d3:28: 71:af:0a:6d:c2:fe:ab:13:0b:d7:e9:b7:f1:2b:a3: 40:2a:f2:69:5d:6b:8a:be:cd:45:29:71:f6:a0:d2: 29:a3:13:28:fb:06:8b:4d:f1:64:ea:0a:92:f4:52: 67:e2:d4:30:a3:3b:ad:94:fb:a7:2e:75:41:78:48: 9d:0d:d7:5a:92:9e:94:ae:6b:e0:2d:e6:a4:f1:36: 2b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FD:9B:B3:55:C9:3A:67:93:D9:82:E8:91:CF:7B:12:74:5D:D3:05 X509v3 Authority Key Identifier: keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:38:bd:9d:12:13:4a:b3:3a:00:13:ab:ff:1b:ff:0e:97:e3: 11:e3:f3:5d:86:03:36:ba:50:9d:05:91:49:7b:38:f8:05:70: 0a:88:ce:7f:c0:ba:86:cb:0e:89:4e:48:44:5a:53:4e:e4:fa: 49:0a:da:bf:2b:b6:3a:6c:00:3e:a6:11:eb:4a:bf:dd:28:6b: 46:2e:79:3d:ee:85:68:6d:08:5f:ca:5f:e2:4c:09:a5:bd:b8: 51:38:c3:64:6f:7f:6b:61:77:fc:e0:26:05:de:90:27:4f:7f: 24:d0:e7:2d:5b:a2:49:60:ad:6d:f3:4c:d4:49:ad:41:19:d3: 31:21:28:f8:64:58:98:fc:7a:29:bd:eb:db:7e:c6:2f:9b:da: be:1a:ac:7e:e8:72:45:72:20:a4:05:bf:52:77:75:6c:cd:be: e2:0d:0a:9d:08:90:2a:fa:45:7e:8d:a4:d7:86:94:91:c0:b1: 15:07:e3:92:2c:d6:ae:06:34:e4:9b:cc:79:35:c2:34:ec:0d: 31:04:5c:03:7e:01:d1:cc:7d:1c:eb:22:54:27:48:fd:cd:26: 1d:30:7f:a3:ec:56:43:f0:67:90:7a:f2:bb:fa:12:38:01:77: aa:d8:52:cf:af:ce:89:c7:84:08:cc:4b:e0:34:7e:8c:ee:23: 3e:e9:fe:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkExMTAvBgNVBAUTKDgyQjNENEE1OTZCQjk3ODg1NUExNTVDQUFGQThCMjYy NTMzMERFOEQwHhcNMjQxMTIyMTc1ODE5WhcNMjQxMTI5MTc1ODE5WjAYMRYwFAYD VQQDEw02NzQwYzYzYy03N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqvPPq0jcT/G+GQPwpNRjIPW+T5XsYlaAsI6PhLnb3xCWUq3mZKPH21RoNKu HoQUmQSq8pNnmLw7+N8D8ZN5T4yR6nvTPd42MOwj2VQqmHkk2n1/leBkuMflg1QG L5qmZrp/KTYx0arnad5gYUoP/TF8GJZ9ORZXj3CPf6BlZpeiYBxbgN5l1T+rmM6I aQaXv90oKnDKRuQ7imw4Ha0sNCQvjGha8/5RCy9Ocjsze/Ax0yhxrwptwv6rEwvX 6bfxK6NAKvJpXWuKvs1FKXH2oNIpoxMo+waLTfFk6gqS9FJn4tQwozutlPunLnVB eEidDddakp6UrmvgLeak8TYrywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPL9m7NV yTpnk9mC6JHPexJ0XdMFMB8GA1UdIwQYMBaAFIKz1KWWu5eIVaFVyq+osmJTMN6N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyQS9GM0I1MkU3MkM4 NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0aFZvVlhLcjZpeVlsTXcz bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyUFVwWmE3bDRoVm9WWEtyNml5WWxNdzNvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyQS9GM0I1MkU3MkM4NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0 aFZvVlhLcjZpeVlsTXczbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzOL2dEhNKszoAE6v/G/8Ol+MR4/NdhgM2ulCdBZFJezj4BXAKiM5/ wLqGyw6JTkhEWlNO5PpJCtq/K7Y6bAA+phHrSr/dKGtGLnk97oVobQhfyl/iTAml vbhROMNkb39rYXf84CYF3pAnT38k0OctW6JJYK1t80zUSa1BGdMxISj4ZFiY/Hop vevbfsYvm9q+Gqx+6HJFciCkBb9Sd3Vszb7iDQqdCJAq+kV+jaTXhpSRwLEVB+OS LNauBjTkm8x5NcI07A0xBFwDfgHRzH0c6yJUJ0j9zSYdMH+j7FZD8GeQevK7+hI4 AXeq2FLPr86Jx4QIzEvgNH6M7iM+6f4G -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:23 2024 by rpki-client on console-ams.rpki-client.org