$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: mcrwY5aVut40+YKFhj3sxyR2gBfIZing/27GjpkpujU= Subject key identifier: 71:F9:0B:43:61:65:5D:6D:51:C3:FB:26:7E:88:6E:AD:C0:52:41:48 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0979 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0951 Signing time: Fri 22 Nov 2024 20:10:24 +0000 Manifest this update: Fri 22 Nov 2024 20:10:24 +0000 Manifest next update: Fri 29 Nov 2024 20:10:24 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: ef/rn/SG5XQedzvA6BPftlTC4uHPKS0lc6KPj1CMS18=) 2: 2ABC9DCAE70111EE8CBD5443C4F9AE02.roa (hash: XqCmEMVbctn80tZMWt9KBtSYiAl81CKhVgV+0CIH65c=) 3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: 5hNv554rReK06N20/FH9rDWPnZEfKsGbqYpiIu4Udbg=) 4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: SpBt7sDt3PRONHBV0bfhwVMq6dMRxKdSE97eOEgTO/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2425 (0x979) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Nov 22 20:10:24 2024 GMT Not After : Nov 29 20:10:24 2024 GMT Subject: CN=6740e530-acd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:86:bd:ee:72:8e:ef:aa:6e:e4:33:fd:22: 67:67:a0:67:43:e3:ff:c0:5d:e0:a5:18:2d:fa:1a: fc:19:66:57:da:e7:b6:9f:43:5f:7c:6f:89:bc:ab: 24:c3:b0:80:19:92:e2:21:80:ce:22:25:0b:9d:6a: f1:10:54:ba:49:bb:0d:98:ee:74:07:1c:79:13:8b: fc:5a:2b:79:cc:27:62:c4:2e:4d:44:a1:f6:ce:78: 0d:2b:fd:c8:67:54:6c:d9:01:da:5f:71:53:0d:36: 85:b2:a7:f3:45:2a:dd:21:56:98:3d:24:da:9d:3e: ca:11:6c:75:a6:e4:e6:77:3a:21:32:cc:28:7f:2a: 4f:98:1e:58:ae:18:4c:08:27:8f:2d:bd:50:be:49: 11:4a:8d:4a:2e:85:23:f6:a1:81:ef:5a:bb:b0:39: 81:61:68:98:d8:18:77:8b:ae:da:6c:79:56:8d:1d: 88:5a:22:d0:e6:15:44:e4:5c:aa:3f:06:b0:e5:bf: ce:41:aa:af:cb:5f:78:f6:46:88:69:b2:f1:0d:e6: 80:19:66:78:81:46:e1:1e:27:a1:d6:75:a0:a9:e2: fc:d6:a5:23:f2:bc:13:2e:56:02:19:5d:14:a2:68: 49:2d:2b:81:06:81:92:8a:a2:41:3f:e2:32:4d:2c: db:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F9:0B:43:61:65:5D:6D:51:C3:FB:26:7E:88:6E:AD:C0:52:41:48 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:bb:56:df:30:1a:22:cb:1f:71:88:15:31:a6:71:71:eb:f5: 52:85:e3:bf:34:42:ee:66:23:3a:9f:5c:59:c5:58:cf:62:7b: ce:73:48:1b:dd:ee:d2:4c:0f:75:84:85:84:1a:d3:fe:f0:af: 10:2f:d5:0e:c8:ed:46:e7:52:58:d4:81:28:3a:d3:a5:17:9f: df:fe:e0:6d:7e:a2:82:bf:47:69:84:ba:92:78:73:15:fe:5c: 91:e7:e1:25:44:7d:1b:83:00:52:1e:32:46:e9:6b:65:85:52: 59:a3:42:97:18:55:74:8d:57:95:f0:89:17:b3:06:44:3e:4a: 24:79:b1:ff:f9:37:0b:96:34:bf:57:18:d5:b5:5f:4e:e5:3d: 4f:ff:64:fa:44:41:6c:a5:3f:86:6d:03:ce:6b:95:ce:05:03: 0c:3a:96:c3:ec:2f:14:9c:11:73:82:18:7f:69:17:12:36:b3: 2d:fb:c4:31:10:20:3c:29:41:b1:6e:bf:c7:31:1e:33:01:25: e1:ad:00:82:c3:6b:c9:51:20:53:de:63:88:6b:ef:0e:0e:09: 34:45:9d:7b:22:a6:ef:0c:da:d5:ef:bb:81:ba:a1:61:c8:a4: 5c:79:26:7d:a2:9a:e7:51:41:8c:a2:13:44:d8:00:7a:17:5f: b8:c8:8c:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjQxMTIyMjAxMDI0WhcNMjQxMTI5MjAxMDI0WjAYMRYwFAYD VQQDEw02NzQwZTUzMC1hY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgOGve5yju+qbuQz/SJnZ6BnQ+P/wF3gpRgt+hr8GWZX2ue2n0NffG+JvKsk w7CAGZLiIYDOIiULnWrxEFS6SbsNmO50Bxx5E4v8Wit5zCdixC5NRKH2zngNK/3I Z1Rs2QHaX3FTDTaFsqfzRSrdIVaYPSTanT7KEWx1puTmdzohMswofypPmB5YrhhM CCePLb1QvkkRSo1KLoUj9qGB71q7sDmBYWiY2Bh3i67abHlWjR2IWiLQ5hVE5Fyq Pwaw5b/OQaqvy1949kaIabLxDeaAGWZ4gUbhHieh1nWgqeL81qUj8rwTLlYCGV0U omhJLSuBBoGSiqJBP+IyTSzbMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHH5C0Nh ZV1tUcP7Jn6Ibq3AUkFIMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1u1bfMBoiyx9xiBUxpnFx6/VSheO/NELuZiM6n1xZxVjPYnvOc0gb 3e7STA91hIWEGtP+8K8QL9UOyO1G51JY1IEoOtOlF5/f/uBtfqKCv0dphLqSeHMV /lyR5+ElRH0bgwBSHjJG6WtlhVJZo0KXGFV0jVeV8IkXswZEPkokebH/+TcLljS/ VxjVtV9O5T1P/2T6REFspT+GbQPOa5XOBQMMOpbD7C8UnBFzghh/aRcSNrMt+8Qx ECA8KUGxbr/HMR4zASXhrQCCw2vJUSBT3mOIa+8ODgk0RZ17IqbvDNrV77uBuqFh yKRceSZ9oprnUUGMohNE2AB6F1+4yIx7 -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:37 2024 by rpki-client on console-ams.rpki-client.org