$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json) Hash identifier: RnrTAAiB0dg13ANoG9dU6X24bCUP+SLIDNUbiJvcU3g= Subject key identifier: EF:8A:BA:78:C5:A4:51:B6:E5:60:A1:C6:C6:18:74:84:FC:88:4C:EA Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft Manifest number: 011E Signing time: Sat 23 Nov 2024 02:58:14 +0000 Manifest this update: Sat 23 Nov 2024 02:58:13 +0000 Manifest next update: Sat 30 Nov 2024 02:58:13 +0000 Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: JWNbaevnIj3Bl21yDZtgW+zzqiMKDVBv3HlqqW7HP0Y=) 2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: ElQvBJV6B10UNvlVIlGas46V55/K9saRpZMoFdDMc0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Validity Not Before: Nov 23 02:58:13 2024 GMT Not After : Nov 30 02:58:13 2024 GMT Subject: CN=674144c6-852b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b0:bb:45:8a:f2:87:0e:90:b2:b7:3d:82:fe: 40:15:6f:c9:90:b4:93:be:9d:59:d6:6c:69:6d:44: c2:4b:41:33:18:ed:c6:da:ac:c7:69:3a:13:5a:64: c5:8b:54:97:87:65:3c:2f:1e:7e:da:ab:43:51:bc: 61:b3:fa:df:c4:03:36:95:2f:8e:f7:bf:81:c0:03: bf:4b:00:2f:bd:79:ab:c9:84:50:6a:77:72:cb:28: 09:0b:5c:2e:97:99:f4:bc:b1:f5:16:b6:34:13:03: 1f:9f:e0:8d:49:4e:15:89:e2:fc:c7:8b:ff:4d:00: a4:61:70:85:2f:62:0a:94:2e:68:84:bd:2b:7b:51: 27:16:93:5a:f3:bb:11:e3:83:88:81:1d:bb:c9:43: 4a:b9:c0:f4:4c:68:7e:6f:43:3e:63:01:e8:c5:a9: ab:22:ab:46:94:b9:be:be:e5:95:c0:be:8b:7c:0b: 8b:58:6e:a5:11:94:0f:04:6c:d0:c8:07:1a:98:e9: 16:1b:fd:34:fa:20:70:08:69:d1:c7:01:60:cd:77: c2:80:44:a7:49:b9:62:b1:e9:fc:a6:dd:17:ae:c9: e8:14:70:77:44:68:cf:92:b0:8f:8d:3b:f8:f7:cb: 10:37:f6:cd:69:16:ee:46:79:c2:ff:d8:8d:4e:4f: 8e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8A:BA:78:C5:A4:51:B6:E5:60:A1:C6:C6:18:74:84:FC:88:4C:EA X509v3 Authority Key Identifier: keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0d:79:10:0d:db:22:3c:e4:49:96:16:b6:40:c4:7d:20:e2: 80:19:72:db:04:ab:56:14:7b:29:db:38:a6:4f:7a:5a:ea:a8: d2:77:3f:93:23:5c:8c:e8:b6:9f:48:c1:9b:3d:e0:12:de:ad: 9a:04:4d:42:d9:39:32:bb:c1:c7:74:7f:c8:06:ac:53:e9:49: f5:e0:de:3e:12:29:65:10:0e:ab:22:08:0f:02:7a:5a:3d:bb: a3:b2:26:ec:6c:f2:f0:68:58:14:df:13:31:66:8e:55:fe:c6: 02:d5:fa:e4:5c:7e:0f:e5:b8:46:a7:99:24:4c:f1:1e:32:1d: c7:1d:d3:93:27:7c:bb:47:d6:46:92:f9:59:ee:01:de:22:ea: 8b:78:6b:7e:17:f3:d1:2c:95:31:9b:a4:ce:e8:33:12:65:0d: 48:d0:43:54:3d:19:aa:ce:2b:5c:1e:3d:53:c5:03:dc:6d:7a: 23:23:08:13:10:7e:b4:fe:9e:73:f6:71:c7:51:ea:44:31:96: 21:77:d5:7b:02:08:57:52:bd:5d:37:2e:2d:d0:45:9f:b9:b3: 42:54:5b:9e:2c:d8:51:22:1b:e1:8b:08:d2:8b:08:fe:2a:ef: 8f:be:bb:ff:ed:f1:6c:b1:8f:9d:8a:18:43:7b:bf:5a:c9:11: 26:cb:53:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC OUUxRkYxMDQwHhcNMjQxMTIzMDI1ODEzWhcNMjQxMTMwMDI1ODEzWjAYMRYwFAYD VQQDEw02NzQxNDRjNi04NTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrC7RYryhw6Qsrc9gv5AFW/JkLSTvp1Z1mxpbUTCS0EzGO3G2qzHaToTWmTF i1SXh2U8Lx5+2qtDUbxhs/rfxAM2lS+O97+BwAO/SwAvvXmryYRQandyyygJC1wu l5n0vLH1FrY0EwMfn+CNSU4VieL8x4v/TQCkYXCFL2IKlC5ohL0re1EnFpNa87sR 44OIgR27yUNKucD0TGh+b0M+YwHoxamrIqtGlLm+vuWVwL6LfAuLWG6lEZQPBGzQ yAcamOkWG/00+iBwCGnRxwFgzXfCgESnSblisen8pt0XrsnoFHB3RGjPkrCPjTv4 98sQN/bNaRbuRnnC/9iNTk+OTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+KunjF pFG25WChxsYYdIT8iEzqMB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2 M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2 cEdnc3JjTnBObUM1NGY4UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfDXkQDdsiPORJlha2QMR9IOKAGXLbBKtWFHsp2zimT3pa6qjSdz+T I1yM6LafSMGbPeAS3q2aBE1C2Tkyu8HHdH/IBqxT6Un14N4+EillEA6rIggPAnpa PbujsibsbPLwaFgU3xMxZo5V/sYC1frkXH4P5bhGp5kkTPEeMh3HHdOTJ3y7R9ZG kvlZ7gHeIuqLeGt+F/PRLJUxm6TO6DMSZQ1I0ENUPRmqzitcHj1TxQPcbXojIwgT EH60/p5z9nHHUepEMZYhd9V7AghXUr1dNy4t0EWfubNCVFueLNhRIhvhiwjSiwj+ Ku+Pvrv/7fFssY+dihhDe79ayREmy1M2 -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:59 2024 by rpki-client on console-ams.rpki-client.org