$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: VZZtPqoMtAkQ4CT+3ceqScKwxelr3PLF0UclqZZK7Gk= Subject key identifier: D3:F7:78:98:0A:BA:80:2E:39:68:14:34:13:FD:AE:3E:F6:1A:78:80 Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 01A6 Signing time: Sat 23 Nov 2024 01:50:33 +0000 Manifest this update: Sat 23 Nov 2024 01:50:33 +0000 Manifest next update: Sat 30 Nov 2024 01:50:33 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: 3VgDGURW1r8Pzg6mcQCkZapewcJuz67QQYVX6UG55kI=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: TVDVEAcyy/AEflArfcqFC77C1KGTIMHM0wpYYMewUMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 01:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: Nov 23 01:50:33 2024 GMT Not After : Nov 30 01:50:33 2024 GMT Subject: CN=674134e9-4edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:87:6b:75:40:18:80:78:c3:a9:94:69:cf: b2:6a:a9:ce:90:04:04:1d:75:bd:e1:eb:86:5f:71: 71:de:b3:5a:47:d9:09:71:40:62:72:a8:3f:53:8e: 92:6c:f6:35:42:aa:b6:dc:35:04:0a:95:47:a4:3f: 9e:f8:b8:ba:99:1e:f9:75:5a:2c:51:d9:5e:58:d0: 9e:02:aa:71:d8:f0:a1:d3:e7:aa:12:3a:c9:a5:31: 0a:b6:c2:b0:0e:39:50:50:4c:92:10:a2:2f:2c:ef: 82:6f:8e:c4:be:c4:e2:15:b8:6a:10:d4:ba:9e:81: 06:82:24:51:70:34:3c:7c:40:65:53:1b:ca:88:17: ac:39:b1:86:69:da:ab:3a:fc:9f:d0:c8:c6:f7:0a: 8d:ea:65:9b:bb:ad:4c:d6:ad:b8:e6:4a:77:d5:73: d7:d3:f3:95:77:b2:b5:67:7d:d0:30:a8:b1:d8:aa: ae:ab:9e:3f:b5:4d:91:6c:7b:c5:f1:3f:6b:5e:d3: c2:7e:fb:fc:09:1c:e1:8c:19:cc:9a:30:2d:09:8f: eb:b7:05:da:0f:17:6a:c7:a1:6a:01:94:76:7d:f1: a5:b4:e0:59:a5:24:19:6a:aa:59:e3:5c:24:c6:f3: 93:f4:85:4a:eb:5b:73:8f:c7:a6:53:2e:8d:45:8f: 36:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F7:78:98:0A:BA:80:2E:39:68:14:34:13:FD:AE:3E:F6:1A:78:80 X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:61:7b:bc:30:28:bc:b1:2b:68:18:76:2e:a5:26:d3:8d:ee: 3f:43:0e:e1:51:7b:19:d0:19:22:df:ca:95:be:f0:04:6a:19: 84:9b:3d:58:24:01:12:c1:e9:0c:bb:f6:63:ca:f2:43:fe:d1: 11:1c:c8:0b:7b:0e:f4:c1:5a:ea:e2:ad:b5:3e:76:44:e1:e9: 4a:88:11:69:4a:c5:6b:f7:2a:4b:16:5b:a0:1e:46:85:1a:46: 43:d2:a9:4f:a7:f7:87:17:7f:26:20:3b:ed:0a:0d:1f:c1:d2: eb:ff:91:fb:1c:e5:56:78:7f:f7:3f:97:41:26:57:68:c8:3e: a8:de:2a:8e:9d:76:a1:02:39:ee:59:1a:68:1a:45:2e:95:9d: 22:9f:08:6e:7f:8f:1d:46:86:5e:23:94:49:d5:1b:0b:16:b1: 46:4a:77:70:2a:94:84:24:19:c3:e0:24:fd:ca:13:07:03:33: ca:ae:d4:05:66:6a:c5:f9:de:9e:dc:87:79:7b:85:a2:f0:64: 26:25:c8:1c:a1:91:2d:4f:7b:e6:a3:04:87:6c:56:8b:81:87: 66:6b:f8:4d:64:f4:eb:08:57:b9:7a:c1:c7:64:89:a4:29:9c: 57:f1:5a:17:46:64:8f:6d:e6:88:9c:f7:d3:1b:51:41:d2:7a: 86:3b:6d:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjQxMTIzMDE1MDMzWhcNMjQxMTMwMDE1MDMzWjAYMRYwFAYD VQQDEw02NzQxMzRlOS00ZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYGHa3VAGIB4w6mUac+yaqnOkAQEHXW94euGX3Fx3rNaR9kJcUBicqg/U46S bPY1Qqq23DUECpVHpD+e+Li6mR75dVosUdleWNCeAqpx2PCh0+eqEjrJpTEKtsKw DjlQUEySEKIvLO+Cb47EvsTiFbhqENS6noEGgiRRcDQ8fEBlUxvKiBesObGGadqr Ovyf0MjG9wqN6mWbu61M1q245kp31XPX0/OVd7K1Z33QMKix2Kquq54/tU2RbHvF 8T9rXtPCfvv8CRzhjBnMmjAtCY/rtwXaDxdqx6FqAZR2ffGltOBZpSQZaqpZ41wk xvOT9IVK61tzj8emUy6NRY821wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNP3eJgK uoAuOWgUNBP9rj72GniAMB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIYXu8MCi8sStoGHYupSbTje4/Qw7hUXsZ0Bki38qVvvAEahmEmz1Y JAESwekMu/ZjyvJD/tERHMgLew70wVrq4q21PnZE4elKiBFpSsVr9ypLFlugHkaF GkZD0qlPp/eHF38mIDvtCg0fwdLr/5H7HOVWeH/3P5dBJldoyD6o3iqOnXahAjnu WRpoGkUulZ0inwhuf48dRoZeI5RJ1RsLFrFGSndwKpSEJBnD4CT9yhMHAzPKrtQF ZmrF+d6e3Id5e4Wi8GQmJcgcoZEtT3vmowSHbFaLgYdma/hNZPTrCFe5esHHZImk KZxX8VoXRmSPbeaInPfTG1FB0nqGO20L -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:37 2024 by rpki-client on console-ams.rpki-client.org