$ rpki-client -vvf rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft File: s5MbVo8uudLtLKTWS-vAhvuduJo.mft (raw, json) Hash identifier: bkFUBS0RM5bHzlTK3Dxr02uCoNtotoj82cBNdoi/bV8= Subject key identifier: 94:11:DD:5D:06:34:A7:E6:42:D8:EF:88:1F:24:CE:AE:B6:6A:92:E3 Authority key identifier: B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A Certificate issuer: /CN=A91867F1/serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Certificate serial: 0A35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft Manifest number: 0A2F Signing time: Fri 22 Nov 2024 19:32:24 +0000 Manifest this update: Fri 22 Nov 2024 19:32:24 +0000 Manifest next update: Fri 29 Nov 2024 19:32:24 +0000 Files and hashes: 1: s5MbVo8uudLtLKTWS-vAhvuduJo.crl (hash: TU7Y4JSQwZEAV9NjGkUcM879VE/6vMLV+3NEopFMThw=) 2: 6FEF33E05C2B11EAAE63403FC4F9AE02.roa (hash: 2P+gDOnDDa6VcxpUk48B+SHGopeR5rQDNhRbAWvssIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2613 (0xa35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91867F1/serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Validity Not Before: Nov 22 19:32:24 2024 GMT Not After : Nov 29 19:32:24 2024 GMT Subject: CN=6740dc48-38e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:34:2c:27:61:f0:96:31:2a:b9:92:83:f3:bf: c7:d3:4e:fc:d8:38:87:bb:96:2e:24:17:13:f6:03: e0:8d:a7:43:70:73:1b:40:a1:65:5d:5d:59:52:5f: f5:ad:e4:a2:0b:ea:93:af:fd:b8:34:91:66:49:18: 06:93:a4:fa:ce:25:ee:e0:f4:39:15:b8:31:31:2f: b6:de:d0:c1:4c:bd:91:00:fe:f3:d9:f2:a4:1d:ff: 80:28:02:4c:18:2a:db:f1:96:81:7f:05:0a:cd:30: 59:4d:9c:22:93:7c:0d:1a:4a:cf:f2:5b:1e:3f:53: 1f:d1:05:f8:15:d5:9c:2f:f7:43:d3:70:0b:a2:71: 20:30:c3:5d:ee:49:de:28:5c:ae:e3:d4:5d:93:76: 77:b8:e8:dd:73:21:42:a5:06:e2:40:a7:8c:5a:34: be:3b:46:11:b9:80:81:d1:6c:ce:9d:65:97:bd:5a: 20:63:2a:7d:ab:50:2b:22:c5:5e:8c:5b:99:e6:1c: 81:43:55:49:47:83:a4:5d:9e:c2:33:47:9d:a4:08: db:51:e1:2c:63:de:d8:cb:bb:a5:13:eb:fe:b2:a9: db:b5:b4:68:aa:00:42:1d:6c:a6:dc:e4:ad:dd:f3: 99:6f:d0:3e:8b:ee:63:5a:51:e2:d7:66:e9:e1:9b: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:11:DD:5D:06:34:A7:E6:42:D8:EF:88:1F:24:CE:AE:B6:6A:92:E3 X509v3 Authority Key Identifier: keyid:B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:67:22:44:bf:a8:5e:55:06:bd:db:c0:9e:7d:06:e6:ab:3f: 5e:5c:e3:3d:d8:91:e4:ba:78:58:eb:ea:e4:2e:e9:b4:9d:d2: bd:b4:d1:bb:4f:48:22:02:09:04:72:a0:bb:d4:8f:8b:c8:1b: 2e:f9:b5:b9:e9:4f:c1:cf:3c:fa:15:07:6c:fa:84:d4:38:6f: 8b:0f:b4:7b:12:2c:30:37:b6:8c:ca:37:28:68:ce:c6:5e:3d: 74:d4:13:9f:8f:78:01:61:f1:15:01:21:a9:2a:30:5f:eb:30: 71:4e:a3:76:8e:84:38:13:a4:0c:ae:e3:19:8e:b2:c9:86:c8: 01:bd:c0:79:08:bd:64:bd:cb:1e:87:82:5b:ae:b4:02:bb:65: be:85:d9:8e:26:32:12:61:8f:ea:e1:f7:a2:4e:bf:f8:df:44: f0:2e:ba:fe:31:e7:0b:69:f8:a2:9d:82:f6:d1:98:62:55:09: 3f:a4:92:6f:33:56:9c:1b:85:0d:d9:fc:47:d2:10:7a:c9:c9: 98:f8:a8:fa:b0:f4:b2:6a:f3:cb:1d:fe:87:90:04:fd:8f:07: ec:48:33:f1:bc:df:f2:30:3b:c3:62:a8:fd:a1:9b:8a:77:a4: dc:11:07:a0:b4:7f:39:a4:16:8a:35:e3:04:bf:0e:a8:1c:a3: 51:83:3f:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY3RjExMTAvBgNVBAUTKEIzOTMxQjU2OEYyRUI5RDJFRDJDQTRENjRCRUJDMDg2 RkI5REI4OUEwHhcNMjQxMTIyMTkzMjI0WhcNMjQxMTI5MTkzMjI0WjAYMRYwFAYD VQQDEw02NzQwZGM0OC0zOGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jQsJ2HwljEquZKD87/H00782DiHu5YuJBcT9gPgjadDcHMbQKFlXV1ZUl/1 reSiC+qTr/24NJFmSRgGk6T6ziXu4PQ5FbgxMS+23tDBTL2RAP7z2fKkHf+AKAJM GCrb8ZaBfwUKzTBZTZwik3wNGkrP8lseP1Mf0QX4FdWcL/dD03ALonEgMMNd7kne KFyu49Rdk3Z3uOjdcyFCpQbiQKeMWjS+O0YRuYCB0WzOnWWXvVogYyp9q1ArIsVe jFuZ5hyBQ1VJR4OkXZ7CM0edpAjbUeEsY97Yy7ulE+v+sqnbtbRoqgBCHWym3OSt 3fOZb9A+i+5jWlHi12bp4Zs2bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQR3V0G NKfmQtjviB8kzq62apLjMB8GA1UdIwQYMBaAFLOTG1aPLrnS7Syk1kvrwIb7nbia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjdGMS84MDlENzE1QzU5 MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84dXVkTHRMS1RXUy12QWh2dWR1 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1TWJWbzh1dWRMdExLVFdTLXZBaHZ1ZHVKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjdGMS84MDlENzE1QzU5MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84dXVk THRMS1RXUy12QWh2dWR1Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVZyJEv6heVQa928CefQbmqz9eXOM92JHkunhY6+rkLum0ndK9tNG7 T0giAgkEcqC71I+LyBsu+bW56U/Bzzz6FQds+oTUOG+LD7R7EiwwN7aMyjcoaM7G Xj101BOfj3gBYfEVASGpKjBf6zBxTqN2joQ4E6QMruMZjrLJhsgBvcB5CL1kvcse h4JbrrQCu2W+hdmOJjISYY/q4feiTr/430TwLrr+MecLafiinYL20ZhiVQk/pJJv M1acG4UN2fxH0hB6ycmY+Kj6sPSyavPLHf6HkAT9jwfsSDPxvN/yMDvDYqj9oZuK d6TcEQegtH85pBaKNeMEvw6oHKNRgz89 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:33 2024 by rpki-client on console-ams.rpki-client.org