$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft File: S0w6zHYgyo0mn3fC-L5soNohdic.mft (raw, json) Hash identifier: 0Bp2BOAJ2cZBt4kFqwDsrS3tmItCT1xspwDxl+8mLVo= Subject key identifier: 5C:34:DA:19:1D:B2:0C:AA:E4:7A:1E:93:92:4A:10:53:E8:FC:D3:F1 Authority key identifier: 4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 Certificate issuer: /CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft Manifest number: 03B7 Signing time: Sat 23 Nov 2024 00:16:21 +0000 Manifest this update: Sat 23 Nov 2024 00:16:21 +0000 Manifest next update: Sat 30 Nov 2024 00:16:21 +0000 Files and hashes: 1: S0w6zHYgyo0mn3fC-L5soNohdic.crl (hash: pnvwd0BIsaTURpkkBSk/lzNRtFFvQRY/YkUHbq62lyI=) 2: AE0AFE846ADE11ECADF2FE5DC4F9AE02.roa (hash: KghdCfc9o42iOfQL3hI0MGr1qL+JhgQLoQInt8LXNLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CD5/serialNumber=4B4C3ACC7620CA8D269F77C2F8BE6CA0DA217627 Validity Not Before: Nov 23 00:16:21 2024 GMT Not After : Nov 30 00:16:21 2024 GMT Subject: CN=67411ed5-40f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:11:97:e1:4e:f0:0b:1a:b8:2f:93:16:1e:2a: ca:11:62:a4:9c:34:17:27:92:21:3c:65:75:f5:79: 34:8b:e4:f0:2b:4a:c1:45:b4:fc:43:ad:44:a6:34: 91:d7:85:c8:ef:7a:46:b3:9a:df:f6:d1:78:e6:6d: 92:5a:aa:8c:cf:d7:af:2a:e6:b5:14:2a:1c:2a:e2: 55:30:94:80:4b:27:48:54:e7:9c:48:21:c0:19:be: bd:1e:11:c1:2f:e5:97:cd:9d:e5:c2:4f:8e:49:7d: ff:44:b4:38:c7:71:66:dd:3f:93:6b:3f:ec:17:1f: 86:69:84:8f:a4:1a:61:15:af:6f:9f:7b:11:35:e8: e4:b3:78:b7:9c:4e:1b:2f:c6:51:00:c9:73:4f:5b: b9:b3:c4:52:94:a3:17:93:c3:e2:4c:b9:d8:ed:fc: a6:40:05:c2:e6:a2:33:a7:37:a0:29:8b:d7:06:6f: ec:bf:e8:39:b6:c7:ce:66:d2:e7:22:80:1b:93:a8: c3:14:3b:ed:5f:ff:2d:09:79:60:88:f6:45:90:2b: e2:4e:7c:12:25:8f:e6:aa:f5:0d:38:15:fc:a5:e8: 39:35:ee:0a:83:7f:9e:83:50:bb:70:a3:d4:90:68: 64:55:67:ff:c6:be:a3:47:3e:76:b3:b1:2b:61:f7: 76:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:34:DA:19:1D:B2:0C:AA:E4:7A:1E:93:92:4A:10:53:E8:FC:D3:F1 X509v3 Authority Key Identifier: keyid:4B:4C:3A:CC:76:20:CA:8D:26:9F:77:C2:F8:BE:6C:A0:DA:21:76:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0w6zHYgyo0mn3fC-L5soNohdic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CD5/804B1E926ADA11ECACA7A530C4F9AE02/S0w6zHYgyo0mn3fC-L5soNohdic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:0d:30:00:88:ae:d9:3f:28:f4:a8:8c:d3:25:39:fc:e2:27: 7a:1e:97:dd:e5:68:bb:d2:30:ff:ab:9b:90:cf:d2:92:b2:cf: f2:60:85:0e:e1:44:f5:0a:10:80:33:d1:4e:69:56:a3:65:2f: bf:7f:c0:56:b9:70:8e:f4:b9:f8:c3:3d:8a:d7:01:3b:2d:16: 77:06:bc:b7:74:8a:47:70:5e:ae:3b:af:27:ac:29:7f:2a:c0: f9:97:0a:7c:af:3a:4a:bf:fc:1e:b1:a2:98:eb:2d:06:90:13: b1:78:d1:8d:5a:a1:e1:d0:27:08:11:f6:45:e8:a1:9a:e6:39: 2a:eb:0d:eb:74:34:6e:f1:3e:57:80:05:42:5b:77:85:3d:2d: 2f:b1:ff:0b:ee:8a:86:d4:16:94:2c:69:01:f3:7c:4b:0e:5c: a2:f1:b6:8c:71:37:e1:a0:25:e1:75:35:85:06:a1:b1:c0:be: 3c:b1:58:0c:52:63:37:bf:4d:ae:c7:5c:29:12:d8:de:2d:ab: 1e:46:ac:65:44:30:8b:a2:74:00:d3:56:a2:ef:b0:bc:97:9e: 1e:51:ce:90:0a:80:1a:53:6f:1a:8f:b8:84:59:d6:8b:4d:40: 4d:ce:3a:77:e5:5b:f0:dc:52:46:62:9e:a3:07:68:08:2b:bb: 90:3a:c7:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDRDUxMTAvBgNVBAUTKDRCNEMzQUNDNzYyMENBOEQyNjlGNzdDMkY4QkU2Q0Ew REEyMTc2MjcwHhcNMjQxMTIzMDAxNjIxWhcNMjQxMTMwMDAxNjIxWjAYMRYwFAYD VQQDEw02NzQxMWVkNS00MGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BGX4U7wCxq4L5MWHirKEWKknDQXJ5IhPGV19Xk0i+TwK0rBRbT8Q61EpjSR 14XI73pGs5rf9tF45m2SWqqMz9evKua1FCocKuJVMJSASydIVOecSCHAGb69HhHB L+WXzZ3lwk+OSX3/RLQ4x3Fm3T+Taz/sFx+GaYSPpBphFa9vn3sRNejks3i3nE4b L8ZRAMlzT1u5s8RSlKMXk8PiTLnY7fymQAXC5qIzpzegKYvXBm/sv+g5tsfOZtLn IoAbk6jDFDvtX/8tCXlgiPZFkCviTnwSJY/mqvUNOBX8peg5Ne4Kg3+eg1C7cKPU kGhkVWf/xr6jRz52s7ErYfd2VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFw02hkd sgyq5Hoek5JKEFPo/NPxMB8GA1UdIwQYMBaAFEtMOsx2IMqNJp93wvi+bKDaIXYn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNENS84MDRCMUU5MjZB REExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lvMG1uM2ZDLUw1c29Ob2hk aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwdzZ6SFlneW8wbW4zZkMtTDVzb05vaGRpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNENS84MDRCMUU5MjZBREExMUVDQUNBN0E1MzBDNEY5QUUwMi9TMHc2ekhZZ3lv MG1uM2ZDLUw1c29Ob2hkaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSDTAAiK7ZPyj0qIzTJTn84id6Hpfd5Wi70jD/q5uQz9KSss/yYIUO 4UT1ChCAM9FOaVajZS+/f8BWuXCO9Ln4wz2K1wE7LRZ3Bry3dIpHcF6uO68nrCl/ KsD5lwp8rzpKv/wesaKY6y0GkBOxeNGNWqHh0CcIEfZF6KGa5jkq6w3rdDRu8T5X gAVCW3eFPS0vsf8L7oqG1BaULGkB83xLDlyi8baMcTfhoCXhdTWFBqGxwL48sVgM UmM3v02ux1wpEtjeLaseRqxlRDCLonQA01ai77C8l54eUc6QCoAaU28aj7iEWdaL TUBNzjp35Vvw3FJGYp6jB2gIK7uQOscP -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:28 2024 by rpki-client on console-ams.rpki-client.org