$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft File: 8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json) Hash identifier: iiUbqNjHnk9ZmqbR21OILDvmcGujmoKs1FKnWDv/J5g= Subject key identifier: FB:57:72:3C:44:8E:1A:35:9A:4B:DE:99:C0:38:98:39:B0:07:70:6C Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B Certificate issuer: /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Certificate serial: 0D7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft Manifest number: 0D7A Signing time: Fri 22 Nov 2024 17:54:20 +0000 Manifest this update: Fri 22 Nov 2024 17:54:20 +0000 Manifest next update: Fri 29 Nov 2024 17:54:20 +0000 Files and hashes: 1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: DJkQ/wyRaTReKxUHEqp7xlB1n6D5enVG8etT4MH7oe0=) 2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: RrERgA4WZb4Wa4GmbO3PCvypqKfkRQ0lOSC1wGlAXvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3455 (0xd7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Validity Not Before: Nov 22 17:54:20 2024 GMT Not After : Nov 29 17:54:20 2024 GMT Subject: CN=6740c54c-86c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:7f:93:2c:6a:ed:53:13:ec:a0:c9:b1:ca: ad:c6:33:84:ce:0b:14:47:92:50:57:4c:51:cf:f4: 87:af:29:06:0b:30:8e:a8:39:2d:43:d0:65:88:3f: 2f:d0:cc:17:27:33:3a:87:51:54:22:fc:73:bd:6a: 2f:9a:b5:9f:74:8f:f6:5d:2b:7e:e4:b1:44:f5:16: 95:87:e5:83:7f:db:90:a6:5a:36:d4:98:22:52:5a: 4b:d8:6a:4c:52:82:27:11:5e:ea:64:e0:b9:e1:01: 2c:22:57:97:bf:8a:4f:45:ac:36:ea:52:04:de:22: 27:b8:d9:1a:ee:27:e7:fd:63:a5:f3:a4:9b:15:1f: 85:5c:c0:7d:88:ca:7f:67:9b:5c:25:dd:8d:8a:da: 30:64:b6:20:ca:1a:04:ec:60:77:dc:2a:a4:a4:4e: 78:64:99:76:37:7d:83:53:92:c5:8c:0e:ee:be:fe: 6b:36:8d:b5:97:c9:27:a9:ea:1f:ab:d6:ae:0c:e8: 5a:79:c6:45:0b:66:81:ff:0d:12:fc:78:0d:b3:2a: ff:05:4f:39:4c:65:c4:9e:8b:0d:fb:b6:36:23:84: a8:24:5c:95:6a:9c:31:a4:38:c8:e3:e3:83:10:e1: 3b:70:42:bb:84:05:7b:1f:33:4d:26:e9:da:57:b6: 78:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:57:72:3C:44:8E:1A:35:9A:4B:DE:99:C0:38:98:39:B0:07:70:6C X509v3 Authority Key Identifier: keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:d8:48:0c:3b:7b:12:2b:98:5d:1a:d7:b6:ad:fc:fa:68:05: c4:ee:d3:a7:8a:1c:ab:26:3d:3e:bc:52:b0:41:fb:d7:f9:f4: a4:23:2e:59:47:8b:15:87:16:8c:90:17:8a:6e:b3:af:4d:f1: 22:54:ad:e7:4b:73:f5:9d:f8:86:99:3d:ab:a4:07:11:94:4a: 1b:ce:85:f2:3b:76:ed:c2:ca:47:50:8f:aa:4e:f2:52:ba:5c: 32:32:f1:81:e0:45:67:29:98:09:12:c8:cf:b2:2c:b5:12:89: 32:39:84:77:46:e2:fb:29:b4:72:93:b7:b8:62:10:07:50:4f: 56:a6:20:8f:bc:15:2b:c5:08:1b:f2:fb:c9:a4:f2:17:d1:96: 12:15:cd:17:c6:35:61:29:0b:3a:a3:9d:77:5b:57:77:67:8b: 52:43:f9:df:e6:d6:ca:8f:35:c9:54:ab:6f:9b:05:59:9f:a2: bf:86:7a:79:4c:65:fc:a3:81:8b:ce:bb:0a:a4:e6:b9:eb:be: a0:1b:56:3f:6a:89:0a:0e:f0:12:87:9d:21:af:b8:82:f6:43: 26:44:6b:3f:85:e0:f9:e4:49:27:b2:ad:ef:e7:8f:31:3f:77: 7d:b0:0b:da:58:fe:92:3c:f6:1a:3e:db:dd:3f:56:56:76:ff: 6f:16:f6:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY0RkMxMTAvBgNVBAUTKEYxRTAyQjM5NDZGRUZCRTZGNDY0RjQzNDhFRjIxNTVG NjFEMDdBMUIwHhcNMjQxMTIyMTc1NDIwWhcNMjQxMTI5MTc1NDIwWjAYMRYwFAYD VQQDEw02NzQwYzU0Yy04NmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ct/kyxq7VMT7KDJscqtxjOEzgsUR5JQV0xRz/SHrykGCzCOqDktQ9BliD8v 0MwXJzM6h1FUIvxzvWovmrWfdI/2XSt+5LFE9RaVh+WDf9uQplo21JgiUlpL2GpM UoInEV7qZOC54QEsIleXv4pPRaw26lIE3iInuNka7ifn/WOl86SbFR+FXMB9iMp/ Z5tcJd2NitowZLYgyhoE7GB33CqkpE54ZJl2N32DU5LFjA7uvv5rNo21l8knqeof q9auDOhaecZFC2aB/w0S/HgNsyr/BU85TGXEnosN+7Y2I4SoJFyVapwxpDjI4+OD EOE7cEK7hAV7HzNNJunaV7Z4bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtXcjxE jho1mkvemcA4mDmwB3BsMB8GA1UdIwQYMBaAFPHgKzlG/vvm9GT0NI7yFV9h0Hob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjRGQy8zQjYzNEJCRUI0 NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0tYjBaUFEwanZJVlgySFFl aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhlQXJPVWItLS1iMFpQUTBqdklWWDJIUWVocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjRGQy8zQjYzNEJCRUI0NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0t YjBaUFEwanZJVlgySFFlaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD2EgMO3sSK5hdGte2rfz6aAXE7tOnihyrJj0+vFKwQfvX+fSkIy5Z R4sVhxaMkBeKbrOvTfEiVK3nS3P1nfiGmT2rpAcRlEobzoXyO3btwspHUI+qTvJS ulwyMvGB4EVnKZgJEsjPsiy1EokyOYR3RuL7KbRyk7e4YhAHUE9WpiCPvBUrxQgb 8vvJpPIX0ZYSFc0XxjVhKQs6o513W1d3Z4tSQ/nf5tbKjzXJVKtvmwVZn6K/hnp5 TGX8o4GLzrsKpOa5676gG1Y/aokKDvASh50hr7iC9kMmRGs/heD55Eknsq3v548x P3d9sAvaWP6SPPYaPtvdP1ZWdv9vFvaF -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:23 2024 by rpki-client on console-ams.rpki-client.org