$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft File: M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json) Hash identifier: anw9FWXN4Yf4rYCEN99ZPwsJzD0oBjE7yJuOh4AmmfE= Subject key identifier: B3:77:7E:1C:21:4D:A5:51:CE:DD:66:1B:A8:73:15:CF:D1:9F:D2:3B Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 Certificate issuer: /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft Manifest number: 50 Signing time: Sat 23 Nov 2024 05:11:23 +0000 Manifest this update: Sat 23 Nov 2024 05:11:22 +0000 Manifest next update: Sat 30 Nov 2024 05:11:22 +0000 Files and hashes: 1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: 0ZwjmNbYR00njkxBKoAZNPZaiHMU4J8miBQT7O7SZgM=) 2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: ys7Tf3/LcQFVZYWL3i7WWzdqMmvmM++iU4ympKZhLhE=) 3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: tsoBMusAYtzjMEQt6uZAdSSMkNs5iOHuJdHdIDa6SSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099 Validity Not Before: Nov 23 05:11:22 2024 GMT Not After : Nov 30 05:11:22 2024 GMT Subject: CN=674163fb-ac50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:c7:d7:68:53:e3:21:21:ff:cb:4d:8d:54: e9:0f:68:a7:a5:76:ac:9a:40:c8:7f:fb:96:33:bf: 5a:d4:ec:89:9d:24:e0:ef:54:69:9a:ef:fc:5d:d1: dd:63:9c:5d:2e:ca:57:df:5d:6a:b2:cb:ab:1a:08: fc:26:8a:f2:59:93:a4:fc:42:cf:81:01:49:8d:24: 34:0d:fe:e9:21:1e:58:98:e5:cc:f1:7e:31:25:e2: ef:eb:23:0a:b3:bb:87:50:39:f0:f7:53:5e:71:c5: 7b:35:a5:91:25:12:d5:45:51:b7:27:88:98:13:0a: 38:53:19:fd:34:35:8d:02:6b:6b:51:4b:1c:6b:7c: c5:54:8a:3c:e7:61:9a:79:89:32:c3:5c:31:a3:22: 07:21:b2:37:e5:9c:d2:94:41:d9:71:f3:ff:90:e2: e1:44:e7:82:1c:98:d1:f2:dd:eb:14:c2:5f:a4:35: c6:1c:e1:69:3e:80:d4:0b:11:55:b0:1d:29:4a:f7: 0c:75:8b:b4:11:d3:12:2f:16:f0:7c:73:e6:6b:ea: 76:0a:b5:ea:5c:27:51:3d:de:ac:c9:60:cc:24:66: 60:ee:bd:aa:8f:84:d2:93:b5:03:a9:6d:f1:6e:83: 4b:9f:be:c2:b9:ea:17:07:95:b9:fc:56:8b:82:bf: 96:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:77:7E:1C:21:4D:A5:51:CE:DD:66:1B:A8:73:15:CF:D1:9F:D2:3B X509v3 Authority Key Identifier: keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:cb:c9:21:37:e6:eb:5d:39:b9:33:f7:21:c8:7e:8c:26:fc: 2d:c9:9d:75:75:fc:89:a2:c0:ab:60:18:b1:18:85:2c:97:dc: 3b:3a:5a:11:34:d9:1b:57:ee:d1:18:8c:52:94:b3:d8:f1:16: 34:9c:3c:05:b4:ac:17:dd:ad:ef:76:bb:44:7c:10:24:67:8d: 9a:72:98:f9:e5:52:9c:fe:e0:89:02:b7:48:f2:bb:e8:0d:26: 92:2f:8f:07:63:aa:fd:73:83:5e:e9:dc:b8:82:69:d8:11:0a: fc:eb:f2:ef:d5:2a:e3:97:32:15:66:4d:cc:25:79:b7:59:ad: 32:fa:e8:c3:5c:63:98:c4:cc:11:77:b8:16:24:38:7e:ee:1d: 4c:e8:4e:87:91:c5:b8:27:43:46:1b:30:35:b7:6a:56:10:97: 73:6d:97:d7:57:96:ca:5e:00:e7:7e:ae:28:2d:1a:19:04:59: 64:17:20:fa:b1:e2:0f:41:e6:2f:11:37:a5:2e:f5:88:9f:31: a3:86:58:f3:dc:39:16:53:91:57:8e:71:c3:e4:9e:2d:a6:f2: 8e:af:9c:57:8e:c5:ab:ff:da:ef:57:55:72:3e:2a:f2:cc:fe: 71:71:4d:11:14:69:1c:08:36:d8:3b:c0:8e:64:02:7e:33:77: a1:f6:39:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 REI3MjExMC8GA1UEBRMoMzM5M0Y5RDA3MEIyRTcwOTQ5QUNBMkFBQ0M4RTY1RTg5 MEU3NDA5OTAeFw0yNDExMjMwNTExMjJaFw0yNDExMzAwNTExMjJaMBgxFjAUBgNV BAMTDTY3NDE2M2ZiLWFjNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXgMfXaFPjISH/y02NVOkPaKeldqyaQMh/+5Yzv1rU7ImdJODvVGma7/xd0d1j nF0uylffXWqyy6saCPwmivJZk6T8Qs+BAUmNJDQN/ukhHliY5czxfjEl4u/rIwqz u4dQOfD3U15xxXs1pZElEtVFUbcniJgTCjhTGf00NY0Ca2tRSxxrfMVUijznYZp5 iTLDXDGjIgchsjflnNKUQdlx8/+Q4uFE54IcmNHy3esUwl+kNcYc4Wk+gNQLEVWw HSlK9wx1i7QR0xIvFvB8c+Zr6nYKtepcJ1E93qzJYMwkZmDuvaqPhNKTtQOpbfFu g0ufvsK56hcHlbn8VouCv5aVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs3d+HCFN pVHO3WYbqHMVz9Gf0jswHwYDVR0jBBgwFoAUM5P50HCy5wlJrKKqzI5l6JDnQJkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEQjcyLzg2MTFFNjJFMzFG NDExRUZBRTkxQTAwQ0M0RjlBRTAyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFK ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTVQNTBIQ3k1d2xKcktLcXpJNWw2SkRuUUprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZE QjcyLzg2MTFFNjJFMzFGNDExRUZBRTkxQTAwQ0M0RjlBRTAyL001UDUwSEN5NXds SnJLS3F6STVsNkpEblFKay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEvLySE35utdObkz9yHIfowm/C3JnXV1/ImiwKtgGLEYhSyX3Ds6WhE0 2RtX7tEYjFKUs9jxFjScPAW0rBfdre92u0R8ECRnjZpymPnlUpz+4IkCt0jyu+gN JpIvjwdjqv1zg17p3LiCadgRCvzr8u/VKuOXMhVmTcwlebdZrTL66MNcY5jEzBF3 uBYkOH7uHUzoToeRxbgnQ0YbMDW3alYQl3Ntl9dXlspeAOd+rigtGhkEWWQXIPqx 4g9B5i8RN6Uu9YifMaOGWPPcORZTkVeOccPkni2m8o6vnFeOxav/2u9XVXI+KvLM /nFxTREUaRwINtg7wI5kAn4zd6H2OQc= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:08 2024 by rpki-client on console-ams.rpki-client.org