$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft File: 45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json) Hash identifier: dG2yHKo/cJo+GpkTfyeHRjoqtezJl0cGKV2shhmqOCA= Subject key identifier: 63:CB:2B:15:4B:2E:64:4D:C9:D8:65:21:A2:81:F1:F1:A5:01:45:C9 Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft Manifest number: D5 Signing time: Sat 23 Nov 2024 03:47:06 +0000 Manifest this update: Sat 23 Nov 2024 03:47:05 +0000 Manifest next update: Sat 30 Nov 2024 03:47:05 +0000 Files and hashes: 1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: 21kiTdax2i6A4K6R2Iei95YyMaXJElK601PZR8whbWc=) 2: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: ZuM6BVmH6niQKuKQ1eCiPR55KnpBaOjGce45jTQXxyE=) 3: 3802AF56829811EEB7C3F322C4F9AE02.roa (hash: /dryDqRy0DH6c/gZr4MBN4BosfeqNmHeRwKmrIx/CX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Nov 23 03:47:05 2024 GMT Not After : Nov 30 03:47:05 2024 GMT Subject: CN=6741503a-c1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:73:62:87:f6:08:44:bd:27:d1:ac:3f:2a: 70:f5:4e:ab:6b:60:05:cf:7d:15:fd:0e:5b:89:b0: 27:9b:e5:1f:58:16:0b:3e:a8:97:b3:fd:cb:8e:93: 2d:46:20:80:5c:e2:24:62:21:97:88:64:38:7e:be: 3c:b8:ef:0c:64:28:56:c2:cc:2f:6b:57:25:f3:ac: 44:21:10:6a:c1:23:30:55:b6:b8:11:34:df:98:b1: fc:e6:07:46:c7:2a:2b:e6:d3:aa:78:e6:de:de:68: 04:79:f8:3c:36:90:f8:49:82:24:81:15:17:24:06: b8:71:69:8b:5d:52:14:76:03:19:61:6d:4a:55:4c: 6d:cf:20:9a:36:fc:80:cd:be:7d:14:57:f8:a6:d1: 5c:05:49:3d:88:46:1a:1f:70:96:af:3a:6c:30:7d: 7b:16:e2:2c:84:7e:5f:e3:f7:eb:fe:44:0c:eb:f8: 4a:3a:b8:6c:56:b7:0f:eb:ff:74:b1:e6:c9:0f:21: 13:02:a2:c7:cd:43:ca:fe:d1:46:d4:1b:e1:37:75: ef:c9:d2:3e:bc:bd:b9:79:f6:d1:e4:d1:78:c7:ff: e5:cd:ec:3f:a4:8c:57:7b:4d:b2:e0:86:b1:b6:1a: 86:bd:18:ab:66:8a:61:61:36:59:4d:b1:88:59:a9: 52:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CB:2B:15:4B:2E:64:4D:C9:D8:65:21:A2:81:F1:F1:A5:01:45:C9 X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ad:c6:00:45:4d:3a:88:18:91:40:b8:db:43:4a:1d:91:58: 18:72:86:59:f6:71:3c:86:ba:21:ac:79:3a:8f:66:1e:5c:ed: f5:89:0e:d7:e0:e9:21:9e:ce:12:4f:56:5a:5a:1d:1b:4d:35: b0:ff:26:37:69:03:69:23:ef:da:06:d4:9f:70:b0:7b:02:c4: d0:bb:42:2b:7a:6a:65:3d:23:17:26:bc:64:02:75:c0:d4:b0: 48:98:c4:9d:9e:c3:db:6c:5f:d1:0d:1f:66:44:36:e6:0c:6d: 2b:fc:95:86:e7:c7:fd:51:94:63:29:8a:e1:b4:49:ca:0a:a6: 2a:c5:54:07:90:53:78:73:79:73:10:4d:fb:7b:02:34:93:f7: 98:c1:71:b2:c7:9f:70:5e:48:d5:59:60:79:cb:6c:d2:ee:33: 4b:11:29:2a:29:b4:96:c5:f2:39:3c:dc:ab:36:ee:5c:6c:fc: ad:eb:44:2e:c2:dc:62:c3:6f:5c:70:9a:12:7d:92:07:dd:da: 62:23:6b:f4:17:91:ba:e9:45:fb:30:a7:99:22:05:c9:4c:ed: ae:3c:c3:da:c4:5c:12:ff:d3:73:9c:73:a3:8a:df:0b:52:e4: c4:f0:93:ee:b0:8e:4c:2a:0f:25:1c:71:98:8d:f2:71:89:bf: 16:94:f2:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3QTIxMTAvBgNVBAUTKEUzOTA3QjQ4RTY5ODdFMkZERkNFRDAxRUQwMUQ0MEIz RjYzREIxMTgwHhcNMjQxMTIzMDM0NzA1WhcNMjQxMTMwMDM0NzA1WjAYMRYwFAYD VQQDEw02NzQxNTAzYS1jMWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8xzYof2CES9J9GsPypw9U6ra2AFz30V/Q5bibAnm+UfWBYLPqiXs/3LjpMt RiCAXOIkYiGXiGQ4fr48uO8MZChWwswva1cl86xEIRBqwSMwVba4ETTfmLH85gdG xyor5tOqeObe3mgEefg8NpD4SYIkgRUXJAa4cWmLXVIUdgMZYW1KVUxtzyCaNvyA zb59FFf4ptFcBUk9iEYaH3CWrzpsMH17FuIshH5f4/fr/kQM6/hKOrhsVrcP6/90 sebJDyETAqLHzUPK/tFG1BvhN3XvydI+vL25efbR5NF4x//lzew/pIxXe02y4Iax thqGvRirZophYTZZTbGIWalSiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGPLKxVL LmRNydhlIaKB8fGlAUXJMB8GA1UdIwQYMBaAFOOQe0jmmH4v387QHtAdQLP2PbEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTdBMi9CM0RGQzg4NDZE NjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZpX2Z6dEFlMEIxQXNfWTlz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTdBMi9CM0RGQzg4NDZENjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZp X2Z6dEFlMEIxQXNfWTlzUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKrcYARU06iBiRQLjbQ0odkVgYcoZZ9nE8hrohrHk6j2YeXO31iQ7X 4Okhns4ST1ZaWh0bTTWw/yY3aQNpI+/aBtSfcLB7AsTQu0IremplPSMXJrxkAnXA 1LBImMSdnsPbbF/RDR9mRDbmDG0r/JWG58f9UZRjKYrhtEnKCqYqxVQHkFN4c3lz EE37ewI0k/eYwXGyx59wXkjVWWB5y2zS7jNLESkqKbSWxfI5PNyrNu5cbPyt60Qu wtxiw29ccJoSfZIH3dpiI2v0F5G66UX7MKeZIgXJTO2uPMPaxFwS/9NznHOjit8L UuTE8JPusI5MKg8lHHGYjfJxib8WlPKn -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:01 2024 by rpki-client on console-ams.rpki-client.org