$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json) Hash identifier: CaJUMaRQLUoaMtj9ikCCEEWy/opjI/wAafb9VdaBMAc= Subject key identifier: 69:E0:FB:31:F4:CE:68:2C:8C:EF:1E:54:52:81:93:B2:E8:16:C5:70 Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Certificate serial: 04EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft Manifest number: 04E4 Signing time: Fri 22 Nov 2024 23:18:18 +0000 Manifest this update: Fri 22 Nov 2024 23:18:17 +0000 Manifest next update: Fri 29 Nov 2024 23:18:17 +0000 Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: +Nuo4rCNJyA2+b9zDdOkpbEgixKqH6FuHvPf75pZphI=) 2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: jezgNWeangYgvRMm1Nco5WCrmwhWUzw/oL8A7ZNwlsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1262 (0x4ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C Validity Not Before: Nov 22 23:18:17 2024 GMT Not After : Nov 29 23:18:17 2024 GMT Subject: CN=6741113a-5bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3d:8a:b5:5a:f2:6e:eb:cd:bd:4e:cf:f6:5e: 33:27:43:ad:f2:51:64:9f:31:a9:fc:81:c1:a8:a5: 75:5c:60:ef:90:5b:f5:e6:4c:74:7a:e7:a0:bf:47: 6b:13:f2:43:a4:fd:6d:d1:25:02:9c:41:2f:2c:30: 5d:81:63:8f:3c:51:12:27:d1:98:62:9c:60:07:83: 22:0e:48:9b:8e:70:33:84:51:7e:1f:06:4c:29:ef: 27:11:0f:bf:60:35:22:a9:9c:a8:e3:87:91:40:52: f8:40:ca:ce:5f:df:43:fa:cb:ba:74:35:8f:1f:59: 91:85:2a:2f:81:0a:6c:69:4e:13:93:7a:9b:a1:fc: cc:b7:e7:ab:96:ff:71:d2:4c:61:9a:a3:f4:df:77: 18:aa:8a:d5:11:e8:84:bc:8d:c2:fa:5c:0c:b5:a5: f3:0b:f9:08:f7:85:82:c4:b7:0f:b2:58:a1:b7:c8: f9:02:fe:7a:f2:36:45:c3:c3:03:87:67:fc:f5:fa: a9:4a:c6:d3:6c:ba:1e:5f:8c:1d:ba:1a:69:7b:2a: 89:33:c0:0d:c1:4a:78:ea:f2:38:73:b0:0f:e6:60: 2d:77:7d:25:70:0b:e8:a5:29:dd:64:e3:c3:60:93: 51:9e:96:c3:c2:e5:0d:b7:7c:20:3d:11:8b:46:69: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E0:FB:31:F4:CE:68:2C:8C:EF:1E:54:52:81:93:B2:E8:16:C5:70 X509v3 Authority Key Identifier: keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:87:19:f0:7b:30:6b:ab:1e:d1:34:f6:29:ee:77:f1:3d:8c: 48:23:f0:99:20:b3:0e:e7:66:94:aa:6b:ee:02:47:c7:80:89: fc:73:f9:b2:5c:b0:b1:5b:fd:5f:da:53:e8:73:21:5a:1c:e2: 5b:26:89:78:d8:95:a6:46:67:24:a8:09:58:a6:f4:95:ec:82: 2f:92:c9:62:63:b5:22:82:61:51:a3:88:c7:db:14:0f:3a:2b: 2a:a6:91:d9:bc:e4:ed:ee:e4:b0:46:96:01:fa:95:b3:db:b6: 50:85:34:10:ef:c0:5f:b7:5f:43:03:ca:e3:b4:50:42:a7:47: a9:d2:2a:3f:14:f4:2e:69:8c:75:7b:39:a6:dc:83:43:da:8e: 12:30:38:35:68:88:8d:c2:28:52:5a:58:92:5a:d1:70:70:82: f5:5c:c1:fc:55:ea:9a:b1:fa:b7:f7:33:16:f2:76:1c:43:1d: 5e:67:67:c6:09:1c:b3:3b:11:cb:53:6c:0e:a2:d0:37:2c:9c: 1c:8a:c5:ef:9f:59:cb:af:fa:8b:20:02:7b:2c:55:24:78:6c: ef:65:e5:af:d2:be:4a:2d:55:d5:89:a8:cc:88:d1:b9:33:d2: c9:ae:6e:d4:08:b6:2e:14:58:3d:3d:5d:87:e0:61:26:56:b5: 52:32:26:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1QzMxMTAvBgNVBAUTKDAxMDgwRTI0MkU0NTA0NjA2NTZGRkZGOUU2QUE0MzJF MUQ0MEUyNUMwHhcNMjQxMTIyMjMxODE3WhcNMjQxMTI5MjMxODE3WjAYMRYwFAYD VQQDEw02NzQxMTEzYS01YmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2j2KtVrybuvNvU7P9l4zJ0Ot8lFknzGp/IHBqKV1XGDvkFv15kx0euegv0dr E/JDpP1t0SUCnEEvLDBdgWOPPFESJ9GYYpxgB4MiDkibjnAzhFF+HwZMKe8nEQ+/ YDUiqZyo44eRQFL4QMrOX99D+su6dDWPH1mRhSovgQpsaU4Tk3qbofzMt+erlv9x 0kxhmqP033cYqorVEeiEvI3C+lwMtaXzC/kI94WCxLcPsliht8j5Av568jZFw8MD h2f89fqpSsbTbLoeX4wduhppeyqJM8ANwUp46vI4c7AP5mAtd30lcAvopSndZOPD YJNRnpbDwuUNt3wgPRGLRmnSGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGng+zH0 zmgsjO8eVFKBk7LoFsVwMB8GA1UdIwQYMBaAFAEIDiQuRQRgZW//+eaqQy4dQOJc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVDMy84QTMzRDcyMEY0 RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJHQmxiX181NXFwRExoMUE0 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FRZ09KQzVGQkdCbGJfXzU1cXBETGgxQTRsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDVDMy84QTMzRDcyMEY0RjkxMUVCOTEyQzJCMjBDNEY5QUUwMi9BUWdPSkM1RkJH QmxiX181NXFwRExoMUE0bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCehxnwezBrqx7RNPYp7nfxPYxII/CZILMO52aUqmvuAkfHgIn8c/my XLCxW/1f2lPocyFaHOJbJol42JWmRmckqAlYpvSV7IIvksliY7UigmFRo4jH2xQP OisqppHZvOTt7uSwRpYB+pWz27ZQhTQQ78Bft19DA8rjtFBCp0ep0io/FPQuaYx1 ezmm3IND2o4SMDg1aIiNwihSWliSWtFwcIL1XMH8Veqasfq39zMW8nYcQx1eZ2fG CRyzOxHLU2wOotA3LJwcisXvn1nLr/qLIAJ7LFUkeGzvZeWv0r5KLVXViajMiNG5 M9LJrm7UCLYuFFg9PV2H4GEmVrVSMiYH -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org