$ rpki-client -vvf rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft File: _MUE2ks5jGbdvyw5K3UZzJDBoQk.mft (raw, json) Hash identifier: 4LwG0MzufPJbYcSSEBvgWbJmsl93CfzbSM9t7/IRbZw= Subject key identifier: 3E:E3:5C:3B:E4:29:A1:62:96:0B:DD:C9:DB:3D:95:A3:DF:E9:6C:6E Authority key identifier: FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 Certificate issuer: /CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Certificate serial: 0911 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft Manifest number: 090B Signing time: Fri 22 Nov 2024 20:07:08 +0000 Manifest this update: Fri 22 Nov 2024 20:07:07 +0000 Manifest next update: Fri 29 Nov 2024 20:07:07 +0000 Files and hashes: 1: _MUE2ks5jGbdvyw5K3UZzJDBoQk.crl (hash: 95csSIvoPqv7zm2qvwNKQCKV9G0HPnLCJZG6p1NWTmI=) 2: 869CBF5E91DC11EAA5FD4A1CC4F9AE02.roa (hash: 8e98CKDKPlUYkaS3gFpmFg+52wx/pHC0SDMOErN/wvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2321 (0x911) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251EF/serialNumber=FCC504DA4B398C66DDBF2C392B7519CC90C1A109 Validity Not Before: Nov 22 20:07:07 2024 GMT Not After : Nov 29 20:07:07 2024 GMT Subject: CN=6740e46c-34d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:3d:b9:d3:18:24:60:5c:01:2d:44:ff:a4: 8e:2b:98:76:7d:bc:03:44:07:8d:89:c0:16:c0:91: 56:42:65:b4:0e:55:4a:56:f6:73:26:66:b5:6f:7e: b1:4f:b4:0f:46:e8:4d:d4:d1:92:b0:57:2d:71:b9: 7d:39:a7:1f:cb:ec:c7:ff:aa:d5:9b:99:be:e2:83: 14:b9:e1:4e:17:a5:c3:4e:00:9c:26:cc:3e:e4:fb: da:39:7b:0a:95:d2:51:0e:16:b9:70:d2:b9:ab:ce: a8:bc:41:13:85:b3:fa:a1:47:99:af:69:39:15:4e: aa:be:d3:be:4c:8e:a0:ef:31:e5:74:c9:62:4d:ec: c1:dc:94:5d:b2:a4:21:11:8f:05:b6:ac:5b:42:dc: 6c:95:46:03:a9:ca:f0:7a:c8:67:d9:10:78:c2:ce: 2d:ad:31:ff:cd:98:41:b9:49:5f:56:e3:f4:30:bd: 77:ee:e2:1b:fd:da:65:0f:eb:93:21:37:c8:a8:84: f3:61:c9:ea:29:ff:f8:a4:2b:7a:6d:ae:e9:27:87: 0a:f5:b1:15:f4:3f:57:02:e9:1b:8a:92:8e:39:ab: 78:7e:05:b7:39:43:8b:31:57:97:b8:e6:3f:a3:19: ea:dc:09:0a:5e:b8:67:84:8d:a1:67:53:7a:51:d6: be:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E3:5C:3B:E4:29:A1:62:96:0B:DD:C9:DB:3D:95:A3:DF:E9:6C:6E X509v3 Authority Key Identifier: keyid:FC:C5:04:DA:4B:39:8C:66:DD:BF:2C:39:2B:75:19:CC:90:C1:A1:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_MUE2ks5jGbdvyw5K3UZzJDBoQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251EF/2E94874E91DA11EA84CC0515C4F9AE02/_MUE2ks5jGbdvyw5K3UZzJDBoQk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:05:3a:11:33:48:b0:ca:5b:ec:07:06:75:9c:c6:3e:3e:c1: 3f:84:53:11:39:cf:43:5b:8a:6b:a5:b9:2d:ad:6a:ff:b3:57: cc:7c:35:41:a4:05:16:0f:a5:15:94:d4:5b:c0:4c:03:d6:a8: fe:27:5c:25:8b:16:f5:b3:b0:44:3b:bc:02:cb:01:4f:78:3c: e0:4f:9b:d7:a0:a9:a8:3d:7e:a4:df:8e:d4:03:55:0b:16:00: e7:9b:03:c3:c4:52:c8:30:d7:88:09:9a:fd:64:bd:2c:d3:0d: 57:b4:c4:9e:bc:ed:70:0d:6e:76:1a:29:bd:6d:4f:15:44:03: 1a:e0:ec:8c:2c:06:7f:d3:26:d6:17:88:4f:cf:59:90:9b:fc: 83:c2:00:08:07:09:cd:01:db:e6:34:dd:7d:3e:cf:75:66:fc: 22:8a:d6:6e:e8:99:cc:76:30:bd:50:4b:0b:ae:e9:f6:f5:11: e8:6a:e4:24:fd:85:ee:c9:36:c4:76:85:ef:2b:d3:1c:d4:71: 71:4b:97:0d:61:4e:ac:83:61:fd:2b:7a:5c:8b:d0:3b:03:f5: 81:c0:8a:4e:97:ea:af:0c:8f:55:f7:48:6a:f9:b3:a9:2e:b1: ce:41:96:3b:96:b9:a0:32:2b:b0:8b:62:0e:5d:da:17:c4:70: 7d:f7:a7:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxRUYxMTAvBgNVBAUTKEZDQzUwNERBNEIzOThDNjZEREJGMkMzOTJCNzUxOUND OTBDMUExMDkwHhcNMjQxMTIyMjAwNzA3WhcNMjQxMTI5MjAwNzA3WjAYMRYwFAYD VQQDEw02NzQwZTQ2Yy0zNGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdI9udMYJGBcAS1E/6SOK5h2fbwDRAeNicAWwJFWQmW0DlVKVvZzJma1b36x T7QPRuhN1NGSsFctcbl9Oacfy+zH/6rVm5m+4oMUueFOF6XDTgCcJsw+5PvaOXsK ldJRDha5cNK5q86ovEEThbP6oUeZr2k5FU6qvtO+TI6g7zHldMliTezB3JRdsqQh EY8FtqxbQtxslUYDqcrweshn2RB4ws4trTH/zZhBuUlfVuP0ML137uIb/dplD+uT ITfIqITzYcnqKf/4pCt6ba7pJ4cK9bEV9D9XAukbipKOOat4fgW3OUOLMVeXuOY/ oxnq3AkKXrhnhI2hZ1N6Uda+DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7jXDvk KaFilgvdyds9laPf6WxuMB8GA1UdIwQYMBaAFPzFBNpLOYxm3b8sOSt1GcyQwaEJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFFRi8yRTk0ODc0RTkx REExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpHYmR2eXc1SzNVWnpKREJv UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19NVUUya3M1akdiZHZ5dzVLM1VaekpEQm9Ray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFFRi8yRTk0ODc0RTkxREExMUVBODRDQzA1MTVDNEY5QUUwMi9fTVVFMmtzNWpH YmR2eXc1SzNVWnpKREJvUWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGBToRM0iwylvsBwZ1nMY+PsE/hFMROc9DW4prpbktrWr/s1fMfDVB pAUWD6UVlNRbwEwD1qj+J1wlixb1s7BEO7wCywFPeDzgT5vXoKmoPX6k347UA1UL FgDnmwPDxFLIMNeICZr9ZL0s0w1XtMSevO1wDW52Gim9bU8VRAMa4OyMLAZ/0ybW F4hPz1mQm/yDwgAIBwnNAdvmNN19Ps91ZvwiitZu6JnMdjC9UEsLrun29RHoauQk /YXuyTbEdoXvK9Mc1HFxS5cNYU6sg2H9K3pci9A7A/WBwIpOl+qvDI9V90hq+bOp LrHOQZY7lrmgMiuwi2IOXdoXxHB996eR -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:22 2024 by rpki-client on console-ams.rpki-client.org