$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft File: 5EZZ6m_c00PGwef_0BSlsHgYlos.mft (raw, json) Hash identifier: G/+G04OKYTD6P7w1JPHLVrKnzA4+Lmb7p4yJF9ndngE= Subject key identifier: D2:BE:6D:76:36:0A:15:55:D3:AE:E7:26:B5:B4:7F:FA:03:27:0A:4B Authority key identifier: E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B Certificate issuer: /CN=A91B3062/serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft Manifest number: 0654 Signing time: Fri 22 Nov 2024 21:59:51 +0000 Manifest this update: Fri 22 Nov 2024 21:59:51 +0000 Manifest next update: Fri 29 Nov 2024 21:59:51 +0000 Files and hashes: 1: 5EZZ6m_c00PGwef_0BSlsHgYlos.crl (hash: Bc2TGsSOqDm3Qk/hq7YXBkSJ0yZREmZy8IWyYHj8aLQ=) 2: C8FB0DB8616D11EB928F0250C4F9AE02.roa (hash: wvBpCoANMp6HM7/0VPGZvZaF4FC0qm23TRsKibzPLZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3062/serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B Validity Not Before: Nov 22 21:59:51 2024 GMT Not After : Nov 29 21:59:51 2024 GMT Subject: CN=6740fed7-4953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:8d:71:cd:b7:03:a0:00:a9:9b:6f:f1:27: 84:85:2f:96:45:38:d0:e9:ba:75:64:65:88:48:9f: 92:d9:ac:d8:ba:c8:a2:4b:6b:ed:7a:af:65:65:dd: 83:7f:7c:0e:92:bd:a7:bd:c6:1c:04:11:e9:7f:7d: 5b:2d:53:0e:26:52:c0:56:90:4b:42:7d:c7:55:7d: d8:18:ab:57:a3:0b:46:56:63:0a:02:91:ee:df:8a: ac:c0:09:71:ca:d6:32:5b:9e:db:3d:8e:85:d4:98: e0:b1:aa:59:62:07:e7:b5:b7:06:fc:91:39:63:cf: 06:21:63:81:82:42:08:be:23:29:73:90:c9:be:7c: 90:55:f4:df:01:e1:cb:79:02:c4:f0:2f:c5:94:04: 34:ac:10:03:67:57:30:83:40:bc:de:21:07:18:aa: c4:ce:97:fd:bc:cc:f5:59:74:09:89:8b:62:2f:68: 35:9c:17:d6:34:c7:76:2a:1e:cc:de:2a:79:fa:96: 1d:16:c5:38:6f:51:f3:da:46:c0:a3:3e:14:44:44: a7:f0:68:a4:df:ae:45:a8:3d:f1:4a:a3:b3:09:b1: 14:05:4f:06:92:30:b4:81:de:b1:8b:a4:47:ff:88: 04:87:ab:45:e3:b7:0e:e8:b0:e0:56:fd:bb:81:60: b2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BE:6D:76:36:0A:15:55:D3:AE:E7:26:B5:B4:7F:FA:03:27:0A:4B X509v3 Authority Key Identifier: keyid:E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:c8:f8:80:89:68:39:92:6d:ef:fb:a2:24:08:e0:eb:7a:a2: c2:99:d0:52:c4:c6:d1:b0:67:be:c9:eb:27:ca:42:1e:92:e1: dd:f1:cb:73:53:9d:77:13:a6:09:8a:05:9e:23:c9:7d:b0:d0: 3f:e6:8c:c6:0e:06:bb:92:8f:e9:d4:0d:11:d3:f7:44:00:58: 43:ee:8e:17:2d:bf:98:5d:9d:10:3c:9d:75:a5:9e:61:52:68: 33:da:35:24:2d:0c:e3:8c:b0:37:10:58:b1:2b:97:cc:13:26: 5f:eb:0e:f7:71:dd:c1:77:e4:33:8a:1e:8a:73:e2:8a:1b:74: a9:03:15:3c:b1:a6:43:1c:a4:49:c6:55:74:44:96:0e:ed:b0: f6:ec:f6:ee:78:db:67:b0:38:77:ac:84:86:7c:a6:2a:49:35: 1e:78:b9:37:bb:eb:0a:a3:34:a6:03:60:9c:85:f8:31:3e:8e: b0:94:bf:c4:c0:2f:23:68:f9:5a:d1:39:c8:2e:4c:ae:7f:3a: 45:6f:08:db:96:7f:fa:c1:5b:e4:6f:5e:11:58:cb:dd:70:26: 48:80:9f:7c:d1:3d:8b:a9:29:85:3a:4a:c6:54:f9:e5:da:3f: e4:c3:c6:48:51:52:d7:98:05:52:55:e4:8f:f7:f3:e2:ad:6e: 7c:53:fd:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwNjIxMTAvBgNVBAUTKEU0NDY1OUVBNkZEQ0QzNDNDNkMxRTdGRkQwMTRBNUIw NzgxODk2OEIwHhcNMjQxMTIyMjE1OTUxWhcNMjQxMTI5MjE1OTUxWjAYMRYwFAYD VQQDEw02NzQwZmVkNy00OTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0KNcc23A6AAqZtv8SeEhS+WRTjQ6bp1ZGWISJ+S2azYusiiS2vteq9lZd2D f3wOkr2nvcYcBBHpf31bLVMOJlLAVpBLQn3HVX3YGKtXowtGVmMKApHu34qswAlx ytYyW57bPY6F1JjgsapZYgfntbcG/JE5Y88GIWOBgkIIviMpc5DJvnyQVfTfAeHL eQLE8C/FlAQ0rBADZ1cwg0C83iEHGKrEzpf9vMz1WXQJiYtiL2g1nBfWNMd2Kh7M 3ip5+pYdFsU4b1Hz2kbAoz4URESn8Gik365FqD3xSqOzCbEUBU8GkjC0gd6xi6RH /4gEh6tF47cO6LDgVv27gWCy/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNK+bXY2 ChVV067nJrW0f/oDJwpLMB8GA1UdIwQYMBaAFORGWepv3NNDxsHn/9AUpbB4GJaL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA2Mi85ODgwODlFNDYx NkIxMUVCQTY0Nzg3NEFDNEY5QUUwMi81RVpaNm1fYzAwUEd3ZWZfMEJTbHNIZ1ls b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFWlo2bV9jMDBQR3dlZl8wQlNsc0hnWWxvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzA2Mi85ODgwODlFNDYxNkIxMUVCQTY0Nzg3NEFDNEY5QUUwMi81RVpaNm1fYzAw UEd3ZWZfMEJTbHNIZ1lsb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSyPiAiWg5km3v+6IkCODreqLCmdBSxMbRsGe+yesnykIekuHd8ctz U513E6YJigWeI8l9sNA/5ozGDga7ko/p1A0R0/dEAFhD7o4XLb+YXZ0QPJ11pZ5h Umgz2jUkLQzjjLA3EFixK5fMEyZf6w73cd3Bd+Qzih6Kc+KKG3SpAxU8saZDHKRJ xlV0RJYO7bD27PbueNtnsDh3rISGfKYqSTUeeLk3u+sKozSmA2CchfgxPo6wlL/E wC8jaPla0TnILkyufzpFbwjbln/6wVvkb14RWMvdcCZIgJ980T2LqSmFOkrGVPnl 2j/kw8ZIUVLXmAVSVeSP9/PirW58U/0g -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:48 2024 by rpki-client on console-ams.rpki-client.org