$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft File: IWrR11qT4DeulPbJGJbS1YLY_1Q.mft (raw, json) Hash identifier: zuwGFZGR7gyteLD87NcBPG5OCEsuZbwLph8pMZzIPso= Subject key identifier: 96:51:F1:3A:A2:28:7B:D7:FC:FD:CC:6A:67:79:1A:05:CA:1F:B0:0A Authority key identifier: 21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 Certificate issuer: /CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft Manifest number: F7 Signing time: Sat 23 Nov 2024 03:25:47 +0000 Manifest this update: Sat 23 Nov 2024 03:25:47 +0000 Manifest next update: Sat 30 Nov 2024 03:25:47 +0000 Files and hashes: 1: IWrR11qT4DeulPbJGJbS1YLY_1Q.crl (hash: WzGTfgNGBNzcVFd9ICTDSAnTWrFZ7xndxzCFcgo2DxM=) 2: 838096CA3BD311EE84056461C4F9AE02.roa (hash: MRW+pxq2rIQWqz0eewlHDxgHTLGzIYysThVYJrp2BDc=) 3: 27DB37683BD211EE8094355FC4F9AE02.roa (hash: Fv5yzaRaYXm7EcaxJ9d0RT5up4myTdlO4UPvIXp3L88=) 4: 82C54A1E3BD311EE84056461C4F9AE02.roa (hash: mGJXgF/PKI9FEq/cPxsdqAyVl2gi74HVL2n1gwNWhDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDDD1/serialNumber=216AD1D75A93E037AE94F6C91896D2D582D8FF54 Validity Not Before: Nov 23 03:25:47 2024 GMT Not After : Nov 30 03:25:47 2024 GMT Subject: CN=67414b3b-fc15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:75:93:8c:1f:c8:0d:a1:1b:43:a8:cb:ae: 89:f9:f0:13:ef:80:d6:19:82:71:fd:6a:8f:fc:0b: 90:0d:a2:9f:3c:3c:bb:a7:44:84:27:57:ac:9a:0d: 67:19:9b:b9:cc:9a:f1:eb:00:82:b0:49:f9:83:62: 85:32:b8:59:36:ab:1c:92:c2:af:a3:5c:b3:59:7e: e0:87:54:8f:b7:a7:37:27:c0:51:ff:1f:cf:9c:19: 55:ab:47:56:d4:6d:b9:6f:9d:0b:4a:63:84:b9:cf: 43:72:67:18:8b:9a:ba:bb:07:c0:10:55:9b:d3:4b: 3a:2c:20:e0:36:83:83:6c:89:96:6f:8e:1c:3d:15: d7:ab:21:e7:f9:50:37:25:65:fe:13:38:8f:fa:d8: 58:e6:9a:4f:43:8d:d0:b2:9a:2a:22:a7:71:8b:b1: 6c:72:1f:75:7e:b0:e2:b6:3f:fe:dd:e6:61:04:e1: f8:1e:fb:11:04:b3:fd:64:6f:62:17:8b:20:86:e3: e5:bb:d6:d6:a4:5a:97:67:d2:d0:22:ba:62:67:c9: e7:c7:04:9d:75:5a:89:5b:c1:7c:8b:68:73:e1:fe: 3b:a7:33:1c:25:9f:8c:d6:e3:06:6b:0e:43:f9:d4: 52:2b:c4:99:eb:72:81:d7:a7:8b:59:b2:b6:2c:c0: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:51:F1:3A:A2:28:7B:D7:FC:FD:CC:6A:67:79:1A:05:CA:1F:B0:0A X509v3 Authority Key Identifier: keyid:21:6A:D1:D7:5A:93:E0:37:AE:94:F6:C9:18:96:D2:D5:82:D8:FF:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IWrR11qT4DeulPbJGJbS1YLY_1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDDD1/68C1D4963BD011EE8BAC351AC4F9AE02/IWrR11qT4DeulPbJGJbS1YLY_1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:de:9a:e7:d8:d9:dd:cc:a2:d0:ae:b8:1d:c3:89:17:91:44: 85:f4:b0:ad:65:4a:10:96:4d:91:ed:58:6b:2d:d3:26:39:5a: a6:e9:5a:5a:42:f0:a0:7e:ab:d3:dc:32:da:1a:be:d7:85:c7: bb:4e:3f:3a:3b:23:b1:b9:cf:2f:0d:85:d9:0f:b4:04:d8:36: 7e:fb:58:51:53:86:54:ec:d6:7d:e1:b6:23:e5:51:7b:72:62: cf:d9:8c:8a:81:78:f2:61:d2:bc:d7:3d:7b:0f:bb:68:47:a6: 8f:cb:69:1b:3d:27:72:93:93:26:d7:eb:bf:60:3d:82:d7:7c: 73:74:ca:a7:dd:13:f7:ae:c9:b9:5d:b8:67:77:c6:b8:2e:42: a1:69:c3:03:61:6e:db:cb:38:1f:1b:58:d7:c7:49:1d:50:77: f2:2c:7c:c1:4d:54:68:85:01:0e:56:47:73:31:49:ce:be:d9: 4c:8a:21:0e:4a:f4:11:86:85:6e:7e:00:df:b5:78:ad:be:2b: ca:79:65:33:6b:ef:07:21:e2:31:d4:55:e0:8b:de:b1:3d:78: a9:a0:fd:9b:eb:3a:ce:e6:9a:5f:4f:02:28:74:b5:68:55:35: d0:0f:b1:0c:05:ab:7f:ba:d3:96:6a:b5:f2:a8:38:01:aa:12: 16:08:eb:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRERDExMTAvBgNVBAUTKDIxNkFEMUQ3NUE5M0UwMzdBRTk0RjZDOTE4OTZEMkQ1 ODJEOEZGNTQwHhcNMjQxMTIzMDMyNTQ3WhcNMjQxMTMwMDMyNTQ3WjAYMRYwFAYD VQQDEw02NzQxNGIzYi1mYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOh1k4wfyA2hG0Ooy66J+fAT74DWGYJx/WqP/AuQDaKfPDy7p0SEJ1esmg1n GZu5zJrx6wCCsEn5g2KFMrhZNqscksKvo1yzWX7gh1SPt6c3J8BR/x/PnBlVq0dW 1G25b50LSmOEuc9DcmcYi5q6uwfAEFWb00s6LCDgNoODbImWb44cPRXXqyHn+VA3 JWX+EziP+thY5ppPQ43QspoqIqdxi7Fsch91frDitj/+3eZhBOH4HvsRBLP9ZG9i F4sghuPlu9bWpFqXZ9LQIrpiZ8nnxwSddVqJW8F8i2hz4f47pzMcJZ+M1uMGaw5D +dRSK8SZ63KB16eLWbK2LMBICwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZR8Tqi KHvX/P3Mamd5GgXKH7AKMB8GA1UdIwQYMBaAFCFq0ddak+A3rpT2yRiW0tWC2P9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREREMS82OEMxRDQ5NjNC RDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDREZXVsUGJKR0piUzFZTFlf MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lXclIxMXFUNERldWxQYkpHSmJTMVlMWV8xUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REREMS82OEMxRDQ5NjNCRDAxMUVFOEJBQzM1MUFDNEY5QUUwMi9JV3JSMTFxVDRE ZXVsUGJKR0piUzFZTFlfMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ3prn2NndzKLQrrgdw4kXkUSF9LCtZUoQlk2R7VhrLdMmOVqm6Vpa QvCgfqvT3DLaGr7Xhce7Tj86OyOxuc8vDYXZD7QE2DZ++1hRU4ZU7NZ94bYj5VF7 cmLP2YyKgXjyYdK81z17D7toR6aPy2kbPSdyk5Mm1+u/YD2C13xzdMqn3RP3rsm5 Xbhnd8a4LkKhacMDYW7byzgfG1jXx0kdUHfyLHzBTVRohQEOVkdzMUnOvtlMiiEO SvQRhoVufgDftXitvivKeWUza+8HIeIx1FXgi96xPXipoP2b6zrO5ppfTwIodLVo VTXQD7EMBat/utOWarXyqDgBqhIWCOuM -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:27 2024 by rpki-client on console-ams.rpki-client.org