$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft File: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json) Hash identifier: OUNMZwQOSY+64vGdfICDjazy7lgJMJwPlw+ZsqHX0Yc= Subject key identifier: 83:39:60:4A:1F:57:D9:6E:3D:C2:68:60:62:AE:88:16:39:41:3C:3E Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft Manifest number: 0612 Signing time: Fri 22 Nov 2024 22:13:07 +0000 Manifest this update: Fri 22 Nov 2024 22:13:06 +0000 Manifest next update: Fri 29 Nov 2024 22:13:06 +0000 Files and hashes: 1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: HahajIG9Pc1RHJ8QyWS7r4SMjHYtilWYJpGFsYygSnk=) 2: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: S55fbog5DZrTL6CQ8gLDN4CUVpPp3b9gzfe68beFEQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Validity Not Before: Nov 22 22:13:06 2024 GMT Not After : Nov 29 22:13:06 2024 GMT Subject: CN=674101f2-69b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:6a:ec:7c:8b:b7:58:ea:21:0b:a4:ed:e1: c8:dc:3c:76:2d:27:70:34:c0:02:6f:f6:d7:3c:ce: 95:50:ab:ed:77:4d:42:40:ea:fe:16:e4:c4:1a:37: 9b:4d:eb:96:0b:81:40:bc:2d:b1:85:13:9c:40:df: fa:ad:86:62:c1:0e:b5:c5:55:ec:ae:06:a8:fd:14: 76:5e:1f:bd:40:a9:98:12:09:e0:72:26:90:9c:12: b9:5d:fb:a1:25:89:4d:88:71:28:0a:61:80:d1:22: d5:2c:41:58:14:28:7b:7d:da:61:89:c5:42:66:60: 42:2c:27:ca:6c:47:3b:be:f5:c1:29:7f:a8:56:4b: 00:0f:74:29:a7:6a:46:b0:dd:98:64:9e:78:81:d5: 79:b3:21:82:0f:83:b8:a3:8b:37:7f:5c:6e:43:bd: 5c:20:6b:f0:30:76:bc:91:0c:85:cb:90:83:14:00: 76:fc:36:37:d7:08:1d:c0:69:e6:71:10:09:bf:e8: 93:b7:52:f8:fe:dc:42:22:00:b7:df:b9:d9:09:ae: 8c:c4:77:1b:cc:38:2e:26:31:9e:7c:07:31:c3:c1: ad:74:77:59:b6:92:42:ab:d3:2a:af:bc:98:df:c4: bb:e0:b5:4a:89:2d:f8:22:93:5f:e7:45:c6:66:f1: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:39:60:4A:1F:57:D9:6E:3D:C2:68:60:62:AE:88:16:39:41:3C:3E X509v3 Authority Key Identifier: keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5c:f5:1c:69:55:5d:61:39:68:77:8e:d9:25:22:c9:d5:f2: 73:16:68:9b:fa:c7:f2:43:66:c8:3e:c9:8e:74:a7:ba:aa:17: b0:c7:28:3e:4a:83:29:69:f6:82:df:6e:60:40:9d:f7:64:3c: ca:58:c4:95:20:99:c6:44:12:a0:04:43:a3:63:49:0d:40:ad: 33:e7:26:e0:05:57:69:75:7b:09:00:e8:26:f7:9f:41:6d:b9: da:c9:e3:cb:57:fc:73:14:9a:ba:2d:1a:7e:11:8b:ba:66:dc: 12:c2:9a:a3:f8:05:48:67:5d:e2:cb:52:47:06:f9:83:02:0f: c6:b5:67:af:3b:eb:c8:7f:5e:71:66:af:20:44:dd:a3:d7:2d: 88:81:82:13:d2:e7:09:59:12:db:b7:c3:f3:c9:bf:33:b7:e5: 7c:b2:44:83:d3:d0:79:62:8e:56:89:02:d0:d6:78:24:ac:f7: 37:9e:94:81:96:e1:32:1d:43:9a:16:ca:d6:6d:a0:f4:f2:53: 0e:62:ca:9d:75:77:6e:4c:c9:01:b5:42:d9:e3:1d:80:16:61: 41:32:82:f4:4f:19:6b:3f:cb:ed:68:cc:e4:9f:b9:fa:34:ef: c0:2d:a3:a1:18:0e:90:23:c8:4a:c3:28:09:22:3e:7f:a8:f2: db:c8:35:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxQTUxMTAvBgNVBAUTKEU1RTFDRkNBRTFGOUU2RjEyMUNBMTM1NTFCNDBGNjk4 OTg0QjlEOUQwHhcNMjQxMTIyMjIxMzA2WhcNMjQxMTI5MjIxMzA2WjAYMRYwFAYD VQQDEw02NzQxMDFmMi02OWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVFq7HyLt1jqIQuk7eHI3Dx2LSdwNMACb/bXPM6VUKvtd01CQOr+FuTEGjeb TeuWC4FAvC2xhROcQN/6rYZiwQ61xVXsrgao/RR2Xh+9QKmYEgngciaQnBK5Xfuh JYlNiHEoCmGA0SLVLEFYFCh7fdphicVCZmBCLCfKbEc7vvXBKX+oVksAD3Qpp2pG sN2YZJ54gdV5syGCD4O4o4s3f1xuQ71cIGvwMHa8kQyFy5CDFAB2/DY31wgdwGnm cRAJv+iTt1L4/txCIgC337nZCa6MxHcbzDguJjGefAcxw8GtdHdZtpJCq9Mqr7yY 38S74LVKiS34IpNf50XGZvHsVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIM5YEof V9luPcJoYGKuiBY5QTw+MB8GA1UdIwQYMBaAFOXhz8rh+ebxIcoTVRtA9piYS52d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDFBNS84NEI1RDYxQzdE NkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2RWh5aE5WRzBEMm1KaExu WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlSFB5dUg1NXZFaHloTlZHMEQybUpoTG5aMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDFBNS84NEI1RDYxQzdENkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2 RWh5aE5WRzBEMm1KaExuWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeXPUcaVVdYTlod47ZJSLJ1fJzFmib+sfyQ2bIPsmOdKe6qhewxyg+ SoMpafaC325gQJ33ZDzKWMSVIJnGRBKgBEOjY0kNQK0z5ybgBVdpdXsJAOgm959B bbnayePLV/xzFJq6LRp+EYu6ZtwSwpqj+AVIZ13iy1JHBvmDAg/GtWevO+vIf15x Zq8gRN2j1y2IgYIT0ucJWRLbt8Pzyb8zt+V8skSD09B5Yo5WiQLQ1ngkrPc3npSB luEyHUOaFsrWbaD08lMOYsqddXduTMkBtULZ4x2AFmFBMoL0TxlrP8vtaMzkn7n6 NO/ALaOhGA6QI8hKwygJIj5/qPLbyDUh -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:43 2024 by rpki-client on console-ams.rpki-client.org