$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft File: V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json) Hash identifier: I5NgXrU4Oh6+acmZai71XwIwPnjq+TibYQ742Pb8CAw= Subject key identifier: 01:B4:BE:9F:8D:2C:4B:BB:FA:5D:24:A7:3F:D5:06:5D:39:47:9A:6B Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 Certificate issuer: /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft Manifest number: FB Signing time: Sat 23 Nov 2024 03:19:08 +0000 Manifest this update: Sat 23 Nov 2024 03:19:08 +0000 Manifest next update: Sat 30 Nov 2024 03:19:08 +0000 Files and hashes: 1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: YxpamvNSo6u4/1epSczmkiveF+S0XxjqX44O/GYD8OM=) 2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: q7jOTproZWiG/PibVmdnyADWbCK3ghnPut/xoR7KaRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Validity Not Before: Nov 23 03:19:08 2024 GMT Not After : Nov 30 03:19:08 2024 GMT Subject: CN=674149ac-09eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:52:8f:aa:50:07:a5:a7:4c:59:c3:01:18:8f: 10:94:cd:18:9d:cb:95:a1:b6:2b:de:06:21:71:dd: 22:ba:32:11:72:b0:b3:0f:36:41:6e:7a:ce:a8:dd: d5:9b:56:7f:53:18:bf:25:8c:7c:f2:6e:11:34:42: ab:9a:b7:26:9f:23:26:62:23:63:05:af:fe:49:84: 15:e6:3e:f6:30:b7:78:f8:1b:6a:63:c1:61:8b:ce: 64:c0:37:69:f2:b0:9e:ff:f9:df:4a:48:e9:12:ec: 1a:b0:ad:ce:1b:51:2b:0c:5d:17:a9:45:b0:3d:11: 2f:7f:86:5d:2a:80:2f:6f:f9:bd:d6:8e:5e:25:95: 58:6b:43:05:cc:af:32:17:1b:63:d3:51:ca:bb:86: a6:11:08:ab:ad:cd:69:ad:39:a6:2a:0a:82:9c:81: 1b:10:72:c2:39:74:6b:05:59:94:0c:62:05:8e:3e: 64:b4:8f:24:e3:73:68:02:18:3e:fa:6e:fe:26:eb: cd:f3:94:cc:4d:36:06:3c:7c:84:fe:ee:56:7c:1c: dc:98:04:19:68:d7:92:47:09:7c:ca:fc:cb:42:df: 2e:bf:02:5a:99:3a:cf:2c:ab:a5:f8:46:1e:35:94: e5:e3:a5:3e:70:3f:e0:fa:2c:0d:f9:da:84:5a:f5: 8b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B4:BE:9F:8D:2C:4B:BB:FA:5D:24:A7:3F:D5:06:5D:39:47:9A:6B X509v3 Authority Key Identifier: keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:73:77:b3:17:f2:f0:3c:65:e8:04:6d:fa:4b:d1:85:6b:e4: 12:e6:97:0d:fd:5f:19:2f:58:0d:7b:a5:61:fd:ed:c3:f3:cb: 0a:5e:d3:df:6f:fc:49:c1:89:a8:fa:19:6f:71:59:e3:20:69: e6:48:15:af:d3:e6:ae:90:2a:9b:53:c2:38:08:6f:49:e6:c9: 15:ac:c3:65:7b:7f:95:b3:4f:73:5d:fb:fe:43:d8:bd:8b:a5: 1a:07:9f:59:de:b6:1e:9f:2c:b8:27:b1:13:ae:12:35:87:cf: 48:5d:5d:e7:dc:e2:7f:70:65:41:38:0b:41:39:2c:1c:d1:13: ef:7a:e5:b1:de:cd:da:7e:9d:44:b4:e9:d5:15:ab:67:0d:d6: 40:8a:bb:96:b3:17:f2:df:51:be:c7:e9:95:a3:d6:ce:43:16: b1:52:1b:cd:2b:ec:e7:d8:bc:24:f9:27:53:32:b7:e6:48:00: b0:6a:3e:50:d7:cd:51:cd:70:95:25:ee:73:90:b3:e4:23:28: 51:cd:4d:06:38:83:79:4f:90:66:1c:cc:1e:4b:a0:ef:b5:ab: 24:16:e9:86:37:e9:a6:53:de:76:63:64:a5:91:3f:b9:97:6e: df:bf:5d:07:75:b4:f2:10:f8:cf:f4:83:4a:a4:20:89:87:39: 79:db:6a:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlEQ0QxMTAvBgNVBAUTKDU3OTM0MzZEMjJBOTZBMDYxMzY4NTEyMDNCQjcyNTk4 NEQ3MEIwMTcwHhcNMjQxMTIzMDMxOTA4WhcNMjQxMTMwMDMxOTA4WjAYMRYwFAYD VQQDEw02NzQxNDlhYy0wOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51KPqlAHpadMWcMBGI8QlM0YncuVobYr3gYhcd0iujIRcrCzDzZBbnrOqN3V m1Z/Uxi/JYx88m4RNEKrmrcmnyMmYiNjBa/+SYQV5j72MLd4+BtqY8Fhi85kwDdp 8rCe//nfSkjpEuwasK3OG1ErDF0XqUWwPREvf4ZdKoAvb/m91o5eJZVYa0MFzK8y Fxtj01HKu4amEQirrc1prTmmKgqCnIEbEHLCOXRrBVmUDGIFjj5ktI8k43NoAhg+ +m7+JuvN85TMTTYGPHyE/u5WfBzcmAQZaNeSRwl8yvzLQt8uvwJamTrPLKul+EYe NZTl46U+cD/g+iwN+dqEWvWLzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAG0vp+N LEu7+l0kpz/VBl05R5prMB8GA1UdIwQYMBaAFFeTQ20iqWoGE2hRIDu3JZhNcLAX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OURDRC9BMDBENzAwNjJD MjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFnWVRhRkVnTzdjbG1FMXdz QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y1TkRiU0twYWdZVGFGRWdPN2NsbUUxd3NCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OURDRC9BMDBENzAwNjJDMjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFn WVRhRkVnTzdjbG1FMXdzQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdc3ezF/LwPGXoBG36S9GFa+QS5pcN/V8ZL1gNe6Vh/e3D88sKXtPf b/xJwYmo+hlvcVnjIGnmSBWv0+aukCqbU8I4CG9J5skVrMNle3+Vs09zXfv+Q9i9 i6UaB59Z3rYenyy4J7ETrhI1h89IXV3n3OJ/cGVBOAtBOSwc0RPveuWx3s3afp1E tOnVFatnDdZAiruWsxfy31G+x+mVo9bOQxaxUhvNK+zn2Lwk+SdTMrfmSACwaj5Q 181RzXCVJe5zkLPkIyhRzU0GOIN5T5BmHMweS6DvtaskFumGN+mmU952Y2SlkT+5 l27fv10HdbTyEPjP9INKpCCJhzl522p2 -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:07 2024 by rpki-client on console-ams.rpki-client.org