$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft File: EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json) Hash identifier: u3gQ2ba1LFPOMVIO+GumQonZDqpQ9alDEOhIzt88dWQ= Subject key identifier: 19:CC:1E:37:72:6C:C5:47:49:CE:E0:28:CF:9B:E8:CD:2B:70:75:3C Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80 Certificate issuer: /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft Manifest number: 82 Signing time: Sat 23 Nov 2024 04:40:47 +0000 Manifest this update: Sat 23 Nov 2024 04:40:47 +0000 Manifest next update: Sat 30 Nov 2024 04:40:46 +0000 Files and hashes: 1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: buTxixlzDODPM32qOJ7++8ojEy/mI1TH9v/wB4RmLAA=) 2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: 6duqYPlVAYgFYXyMYfQRt0UOQZ9fwNVTaTSO3qscAF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380 Validity Not Before: Nov 23 04:40:47 2024 GMT Not After : Nov 30 04:40:46 2024 GMT Subject: CN=67415ccf-c7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ab:24:53:c8:bd:0d:c7:43:27:ff:15:77:e6: 01:b4:c3:23:2b:3c:4d:00:0e:32:f4:7d:3f:16:54: 71:2e:92:c5:06:32:43:78:53:b8:78:c9:07:98:02: d0:0a:ca:2d:24:2d:27:61:8f:2d:0d:b1:99:8c:7b: 77:8d:b3:f6:a8:a7:bc:af:72:13:51:94:2e:d9:10: 28:c4:92:7d:97:c1:31:89:77:fc:09:54:7b:37:33: 36:d9:94:cf:2a:56:94:fb:33:17:3a:55:66:2d:7c: 6c:d9:b7:4a:34:5a:00:2f:66:9e:11:84:27:7f:fd: c9:2f:36:06:f4:af:a1:1a:c2:be:3f:5e:8f:79:4f: a8:7e:95:f0:79:57:8c:6a:c2:8a:46:6b:23:c8:f3: 91:0a:f0:88:5d:ef:27:a7:bf:7f:8d:d5:b8:86:3a: d3:5a:c6:97:a4:e5:7a:a9:85:2c:b1:d4:38:e1:ef: 2b:86:76:3b:6c:ef:8b:72:57:35:ba:26:d8:d1:7f: 75:d8:27:ae:d9:cb:c9:2a:6d:86:c5:f2:69:97:c7: 56:59:03:dc:ba:6d:d8:d6:0c:16:05:47:55:69:98: ab:0b:3a:0d:86:a6:63:71:50:f5:2e:dd:57:80:df: ab:68:0c:34:9a:b8:93:45:9f:1d:c3:5b:59:ba:af: d2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CC:1E:37:72:6C:C5:47:49:CE:E0:28:CF:9B:E8:CD:2B:70:75:3C X509v3 Authority Key Identifier: keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:88:52:6a:bf:01:9a:bb:39:6c:fb:40:6d:e9:19:cd:03:00: 35:f7:c5:13:05:cb:0a:8f:0e:b5:65:14:75:92:2a:98:5e:83: e3:16:46:5d:c4:99:84:53:bc:34:69:7a:7b:9c:b7:e2:b3:55: 7b:d3:18:8c:b7:ed:10:56:06:8b:98:f5:f2:79:02:3b:1a:84: 9f:5c:0b:6f:67:fc:a8:bc:c4:c3:a0:c9:3d:48:9b:8d:81:78: dd:07:d4:1d:5d:25:a3:a9:00:36:5b:7e:7c:77:2b:ef:11:41: 29:de:32:2c:b9:51:48:59:59:76:2a:0c:a3:1d:e9:b4:12:0b: 18:2b:c9:38:a6:9d:f4:1c:be:66:15:89:91:16:a1:0a:ca:77: 30:2b:f2:47:fd:b5:1e:3b:b3:2e:f7:38:7f:93:92:c9:ed:da: 08:a9:f9:06:b0:a1:32:35:25:13:26:e3:8a:ba:6e:03:c2:c8: fd:48:4c:19:c0:c3:e3:4d:e2:b8:c5:49:c2:33:c2:c2:80:da: 57:b8:f3:83:fc:5a:0d:d2:90:42:b9:e9:0f:51:fc:89:84:91: 2b:89:84:27:2d:37:d0:00:6a:04:61:8e:9c:6b:29:14:bf:56: b0:62:e5:77:ac:3c:72:f0:5d:9a:06:c2:4b:dd:87:13:59:ed: d7:07:08:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCREExMTAvBgNVBAUTKDEwN0EzOUMxQ0MwNEYyN0NDNzI2NjNEQkY3QkFFNkQ5 MkE5NTAzODAwHhcNMjQxMTIzMDQ0MDQ3WhcNMjQxMTMwMDQ0MDQ2WjAYMRYwFAYD VQQDEw02NzQxNWNjZi1jN2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2askU8i9DcdDJ/8Vd+YBtMMjKzxNAA4y9H0/FlRxLpLFBjJDeFO4eMkHmALQ CsotJC0nYY8tDbGZjHt3jbP2qKe8r3ITUZQu2RAoxJJ9l8ExiXf8CVR7NzM22ZTP KlaU+zMXOlVmLXxs2bdKNFoAL2aeEYQnf/3JLzYG9K+hGsK+P16PeU+ofpXweVeM asKKRmsjyPORCvCIXe8np79/jdW4hjrTWsaXpOV6qYUssdQ44e8rhnY7bO+Lclc1 uibY0X912Ceu2cvJKm2GxfJpl8dWWQPcum3Y1gwWBUdVaZirCzoNhqZjcVD1Lt1X gN+raAw0mriTRZ8dw1tZuq/S3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnMHjdy bMVHSc7gKM+b6M0rcHU8MB8GA1UdIwQYMBaAFBB6OcHMBPJ8xyZj2/e65tkqlQOA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkJEQS82QUQzNzRBQUU2 NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThuekhKbVBiOTdybTJTcVZB NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIbzV3Y3dFOG56SEptUGI5N3JtMlNxVkE0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkJEQS82QUQzNzRBQUU2NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThu ekhKbVBiOTdybTJTcVZBNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJiFJqvwGauzls+0Bt6RnNAwA198UTBcsKjw61ZRR1kiqYXoPjFkZd xJmEU7w0aXp7nLfis1V70xiMt+0QVgaLmPXyeQI7GoSfXAtvZ/yovMTDoMk9SJuN gXjdB9QdXSWjqQA2W358dyvvEUEp3jIsuVFIWVl2KgyjHem0EgsYK8k4pp30HL5m FYmRFqEKyncwK/JH/bUeO7Mu9zh/k5LJ7doIqfkGsKEyNSUTJuOKum4Dwsj9SEwZ wMPjTeK4xUnCM8LCgNpXuPOD/FoN0pBCuekPUfyJhJEriYQnLTfQAGoEYY6caykU v1awYuV3rDxy8F2aBsJL3YcTWe3XBwiY -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:20 2024 by rpki-client on console-ams.rpki-client.org