$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft File: -0q1qaTcN7vWXmHkKkJWz5UbjHM.mft (raw, json) Hash identifier: P1OYQSmuJolYwMQcl63cHkQC854C7IxdmmGlp1yVuLE= Subject key identifier: CD:50:B5:A6:66:C7:84:13:5E:57:19:0F:F7:A8:0A:8D:4F:C3:E9:8D Authority key identifier: FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 Certificate issuer: /CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Certificate serial: 0365 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft Manifest number: 035D Signing time: Sat 23 Nov 2024 00:32:42 +0000 Manifest this update: Sat 23 Nov 2024 00:32:41 +0000 Manifest next update: Sat 30 Nov 2024 00:32:41 +0000 Files and hashes: 1: -0q1qaTcN7vWXmHkKkJWz5UbjHM.crl (hash: ScE7GqQAfZRTotE11KGGnHW51uD+tskMlanf7ReL4hI=) 2: B1B6929CCFD611ED8BEF6866C4F9AE02.roa (hash: 2v16xzs8T0RhpUKMCv8QtQXlTp6BGM3VOnNWu+rNWZk=) 3: C657777835BD11EEBBA15F71C4F9AE02.roa (hash: EG5qQuvLslN7FDnITc/noS98l6625Jgy7pSVd97SjEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 869 (0x365) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE567/serialNumber=FB4AB5A9A4DC37BBD65E61E42A4256CF951B8C73 Validity Not Before: Nov 23 00:32:41 2024 GMT Not After : Nov 30 00:32:41 2024 GMT Subject: CN=674122aa-b8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b2:a0:80:b8:75:25:b9:c1:c6:ed:ed:40:d1: b7:93:b3:59:b5:5e:ae:1a:54:4f:66:48:e8:be:40: 84:a1:7b:93:c7:af:dd:64:23:31:e7:84:54:a8:d3: 27:f2:0c:df:52:4e:f1:49:ad:8c:9c:d9:74:5e:46: fa:41:c6:42:18:fc:9e:9d:3a:d5:9e:fc:05:52:a4: 5e:15:40:0f:c6:31:f9:6e:07:7e:da:c9:45:38:82: 1e:77:2f:e7:d3:0f:72:b1:a6:d4:f7:96:cb:3b:18: 4e:fd:62:3b:08:09:88:ed:a3:40:92:9b:29:77:ac: 4f:0b:ac:ad:d0:45:5d:ed:d3:bc:0e:e2:77:98:c8: 07:1a:e6:ce:e3:67:3d:d9:05:00:e1:ec:d6:fe:9c: f4:5b:f8:0d:25:09:74:27:4b:64:98:da:8d:84:d5: 5c:41:26:4f:8b:67:a4:61:af:4d:ae:df:e0:be:88: ff:3b:33:6c:d7:8b:df:62:03:a0:41:9b:30:f4:35: 36:4c:3d:34:1a:c7:e9:ca:51:5d:5c:3b:9f:89:7f: 6e:ab:2e:04:14:e8:fa:b1:3a:96:9d:51:ed:22:4a: 63:63:c7:71:a6:1d:20:bc:e5:ee:86:6e:f8:0a:df: c0:0a:14:80:94:3e:79:bd:a2:84:3c:f4:df:22:3e: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:50:B5:A6:66:C7:84:13:5E:57:19:0F:F7:A8:0A:8D:4F:C3:E9:8D X509v3 Authority Key Identifier: keyid:FB:4A:B5:A9:A4:DC:37:BB:D6:5E:61:E4:2A:42:56:CF:95:1B:8C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0q1qaTcN7vWXmHkKkJWz5UbjHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE567/E67994DE8FF411EC90472F7DC4F9AE02/-0q1qaTcN7vWXmHkKkJWz5UbjHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:0a:6f:b9:59:2e:36:e1:a9:64:1a:7a:56:4b:80:c7:0e:88: 0c:01:51:49:2e:5a:7a:be:73:73:d4:ac:90:a1:f5:25:fd:de: df:06:88:f2:76:66:71:ea:7a:73:73:9a:d7:9d:7e:17:2d:ef: 66:5a:b1:16:eb:e4:a8:48:8e:9a:a3:b9:ce:e4:d0:60:09:15: 85:99:c8:40:35:3f:a1:4c:24:0a:c5:83:3c:2b:6b:e0:68:5c: 89:6d:15:dc:3e:26:81:af:09:97:28:ca:a0:10:01:b9:de:d7: 24:c9:c0:bc:8a:4b:cc:13:d5:36:c9:f1:89:16:09:2a:1c:a1: 70:c0:ab:6d:91:dc:28:43:ce:03:f7:87:7e:d1:3f:05:31:7d: 00:a9:5a:cd:aa:9f:13:d9:e3:44:9f:f5:dc:c6:e0:69:11:0c: 16:26:8c:d6:f4:43:23:4b:7f:0e:f5:a9:c0:6d:de:77:59:f6: a0:ee:21:60:01:7c:02:3e:46:e0:85:16:1a:3d:b0:07:2b:be: 06:60:e2:dc:4c:8f:53:1c:b8:92:44:d4:38:96:bf:92:0d:06: a2:32:d0:0d:cc:b7:b4:f0:c5:70:fc:37:67:e1:2e:40:91:ca: 3a:d3:a9:16:5d:a1:9e:c4:34:61:0b:cb:fb:5e:13:ff:a2:26: a1:3f:ea:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU1NjcxMTAvBgNVBAUTKEZCNEFCNUE5QTREQzM3QkJENjVFNjFFNDJBNDI1NkNG OTUxQjhDNzMwHhcNMjQxMTIzMDAzMjQxWhcNMjQxMTMwMDAzMjQxWjAYMRYwFAYD VQQDEw02NzQxMjJhYS1iOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLKggLh1JbnBxu3tQNG3k7NZtV6uGlRPZkjovkCEoXuTx6/dZCMx54RUqNMn 8gzfUk7xSa2MnNl0Xkb6QcZCGPyenTrVnvwFUqReFUAPxjH5bgd+2slFOIIedy/n 0w9ysabU95bLOxhO/WI7CAmI7aNAkpspd6xPC6yt0EVd7dO8DuJ3mMgHGubO42c9 2QUA4ezW/pz0W/gNJQl0J0tkmNqNhNVcQSZPi2ekYa9Nrt/gvoj/OzNs14vfYgOg QZsw9DU2TD00GsfpylFdXDufiX9uqy4EFOj6sTqWnVHtIkpjY8dxph0gvOXuhm74 Ct/AChSAlD55vaKEPPTfIj7XrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1QtaZm x4QTXlcZD/eoCo1Pw+mNMB8GA1UdIwQYMBaAFPtKtamk3De71l5h5CpCVs+VG4xz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTU2Ny9FNjc5OTRERThG RjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043dldYbUhrS2tKV3o1VWJq SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wcTFxYVRjTjd2V1htSGtLa0pXejVVYmpITS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTU2Ny9FNjc5OTRERThGRjQxMUVDOTA0NzJGN0RDNEY5QUUwMi8tMHExcWFUY043 dldYbUhrS2tKV3o1VWJqSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgCm+5WS424alkGnpWS4DHDogMAVFJLlp6vnNz1KyQofUl/d7fBojy dmZx6npzc5rXnX4XLe9mWrEW6+SoSI6ao7nO5NBgCRWFmchANT+hTCQKxYM8K2vg aFyJbRXcPiaBrwmXKMqgEAG53tckycC8ikvME9U2yfGJFgkqHKFwwKttkdwoQ84D 94d+0T8FMX0AqVrNqp8T2eNEn/XcxuBpEQwWJozW9EMjS38O9anAbd53Wfag7iFg AXwCPkbghRYaPbAHK74GYOLcTI9THLiSRNQ4lr+SDQaiMtANzLe08MVw/Ddn4S5A kco606kWXaGexDRhC8v7XhP/oiahP+qA -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:27 2024 by rpki-client on console-ams.rpki-client.org