$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft File: eFqwsi3OWhJmUAwQZrT2sF91ysA.mft (raw, json) Hash identifier: tNQTKUaLGdGqbGStkjX9sd1V6wXFoDSwREy7dEd5TyU= Subject key identifier: BA:FB:9F:D3:44:CB:8A:6B:45:83:9E:EE:1D:60:0E:34:90:D4:32:31 Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Certificate serial: 1059 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft Manifest number: 104F Signing time: Fri 22 Nov 2024 17:22:16 +0000 Manifest this update: Fri 22 Nov 2024 17:22:15 +0000 Manifest next update: Fri 29 Nov 2024 17:22:15 +0000 Files and hashes: 1: eFqwsi3OWhJmUAwQZrT2sF91ysA.crl (hash: ffnnwILZeDHRI/fV1aSxFER0b6LbWjd1ukPfu5nvDi4=) 2: B3250BC6307B11E989188B3BC4F9AE02.roa (hash: 3mH1aV+Neu1YqHNEj/xQ7UJeQwo/DqtmJwOVZejG53U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4185 (0x1059) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Validity Not Before: Nov 22 17:22:15 2024 GMT Not After : Nov 29 17:22:15 2024 GMT Subject: CN=6740bdc7-a549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:71:26:bb:7f:5d:0b:9b:10:07:f0:92:f8:25: 3d:7a:d2:2f:9a:30:88:2b:d0:b0:f6:0f:c3:38:f7: 0d:b7:5a:f4:52:d3:49:6b:f5:6f:c3:ea:3e:a2:bd: 20:59:a0:6d:b3:c4:27:6e:37:39:44:8b:6e:e4:c0: 9b:45:3c:32:72:79:fe:39:21:0a:9f:27:a1:fd:67: ec:64:b0:6e:32:9d:41:cd:e5:47:fd:3e:09:e8:4d: bf:d4:36:9c:84:d0:85:0c:e4:47:48:e7:4f:b0:82: 0f:38:92:c2:3a:06:11:a0:ff:0a:76:50:fb:a3:27: 09:e7:48:1b:9a:42:bc:98:c9:b6:02:5f:95:a6:a4: 3d:7f:3d:d3:33:f4:d1:7e:a2:16:ee:0d:c4:32:b3: 15:8c:56:82:8a:73:1d:09:7d:ad:80:f3:f7:1d:e8: 04:7a:bf:1b:44:27:9e:8d:f7:bd:34:23:92:0a:29: a4:72:85:c1:11:8d:a0:c1:48:22:3d:a2:bd:4f:a5: 2d:12:ce:13:c6:c6:2b:40:27:a0:ea:08:d4:f9:d1: 8e:8f:fc:4d:b3:3d:2e:46:9c:d6:ab:35:69:de:c9: f9:ba:bd:1c:6a:6f:7d:e5:07:15:fa:ab:8c:a9:2c: ad:b4:b1:96:66:a5:25:f1:9b:0f:a2:0c:a2:34:31: d4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FB:9F:D3:44:CB:8A:6B:45:83:9E:EE:1D:60:0E:34:90:D4:32:31 X509v3 Authority Key Identifier: keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:9f:d2:08:34:f7:d9:91:81:47:4e:a0:21:23:0f:8c:be:f4: d0:ec:ad:ae:45:f1:d7:e1:ec:8a:c1:4c:6f:fd:c3:07:b5:0a: 28:1c:8f:a1:30:55:33:64:e0:df:83:51:27:8f:9c:14:1f:6c: 83:63:7d:2a:45:44:c0:4f:25:24:f6:3a:06:ed:19:12:c6:ed: 28:92:d3:bd:75:5a:ce:37:60:47:19:ae:f8:46:a5:98:24:de: b7:79:60:dd:86:d0:45:41:5d:5e:a3:9e:e7:f5:fc:b1:84:47: 3b:66:e9:cf:b6:1d:43:ab:a3:05:39:97:ae:57:0a:ca:70:08: 10:7d:99:e1:a3:b3:86:8d:cf:28:5d:1b:57:9a:26:e0:bc:2a: 0d:37:68:78:d1:cc:a8:e1:3b:b8:8b:8b:5f:e7:1d:23:ef:a2: 0a:b4:ce:cc:16:ea:ba:bf:93:01:9e:73:32:0f:1a:a2:24:49: 93:6f:fb:8b:02:e5:53:98:a5:c7:ff:82:f8:a9:47:27:9e:24: ae:a3:0f:e1:40:82:57:8e:6a:17:4d:19:fa:dd:e1:a4:f6:25: 91:f2:24:f9:e8:f4:87:0f:18:c1:6b:1d:c5:40:08:9c:5a:9a: ca:48:65:ec:29:5a:46:91:3b:59:d4:bb:f5:b2:a8:c3:3d:ef: 93:9f:2c:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDRTkxMTAvBgNVBAUTKDc4NUFCMEIyMkRDRTVBMTI2NjUwMEMxMDY2QjRGNkIw NUY3NUNBQzAwHhcNMjQxMTIyMTcyMjE1WhcNMjQxMTI5MTcyMjE1WjAYMRYwFAYD VQQDEw02NzQwYmRjNy1hNTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHEmu39dC5sQB/CS+CU9etIvmjCIK9Cw9g/DOPcNt1r0UtNJa/Vvw+o+or0g WaBts8Qnbjc5RItu5MCbRTwycnn+OSEKnyeh/WfsZLBuMp1BzeVH/T4J6E2/1Dac hNCFDORHSOdPsIIPOJLCOgYRoP8KdlD7oycJ50gbmkK8mMm2Al+VpqQ9fz3TM/TR fqIW7g3EMrMVjFaCinMdCX2tgPP3HegEer8bRCeejfe9NCOSCimkcoXBEY2gwUgi PaK9T6UtEs4TxsYrQCeg6gjU+dGOj/xNsz0uRpzWqzVp3sn5ur0cam995QcV+quM qSyttLGWZqUl8ZsPogyiNDHUhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLr7n9NE y4prRYOe7h1gDjSQ1DIxMB8GA1UdIwQYMBaAFHhasLItzloSZlAMEGa09rBfdcrA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNFOS84NzEwNkQzRTI3 MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1doSm1VQXdRWnJUMnNGOTF5 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGcXdzaTNPV2hKbVVBd1FaclQyc0Y5MXlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNFOS84NzEwNkQzRTI3MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1do Sm1VQXdRWnJUMnNGOTF5c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUn9IINPfZkYFHTqAhIw+MvvTQ7K2uRfHX4eyKwUxv/cMHtQooHI+h MFUzZODfg1Enj5wUH2yDY30qRUTATyUk9joG7RkSxu0oktO9dVrON2BHGa74RqWY JN63eWDdhtBFQV1eo57n9fyxhEc7ZunPth1Dq6MFOZeuVwrKcAgQfZnho7OGjc8o XRtXmibgvCoNN2h40cyo4Tu4i4tf5x0j76IKtM7MFuq6v5MBnnMyDxqiJEmTb/uL AuVTmKXH/4L4qUcnniSuow/hQIJXjmoXTRn63eGk9iWR8iT56PSHDxjBax3FQAic WprKSGXsKVpGkTtZ1Lv1sqjDPe+TnyxG -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org