$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft File: m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json) Hash identifier: HA/A3ye91OaB6NQneTWha93YZCgx0zo2PuFGLQaiaOA= Subject key identifier: 72:FE:A9:F0:13:53:B2:CB:0C:EA:F7:85:1E:8C:2C:E7:E9:5E:7B:0F Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 Certificate issuer: /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft Manifest number: 016E Signing time: Sat 23 Nov 2024 02:13:21 +0000 Manifest this update: Sat 23 Nov 2024 02:13:20 +0000 Manifest next update: Sat 30 Nov 2024 02:13:20 +0000 Files and hashes: 1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: 2Iao52i4cOgy5YpJN3D20I/3c+jhkuDRppcV+khnZto=) 2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: 0fgfwSnBPj1wqSMD+aZskb0Kd5Z6w3jmnUcNUmB5tFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949 Validity Not Before: Nov 23 02:13:20 2024 GMT Not After : Nov 30 02:13:20 2024 GMT Subject: CN=67413a41-50f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5b:c6:38:51:54:d4:ce:22:76:0d:44:a5:01: fd:4a:26:80:15:0e:13:c7:b5:52:9a:d0:16:5b:54: b8:6d:f9:9d:88:0c:26:e3:3c:a2:4f:e0:f2:e3:41: 0b:58:29:f8:9b:e5:34:fb:ff:b3:f2:b8:6d:d3:c4: 74:66:d6:de:71:f7:0a:2c:83:9c:23:5b:88:63:a7: 3c:bb:bf:31:51:7f:24:f7:14:4e:48:84:ba:6b:0f: cc:09:d1:b1:98:c7:51:d3:14:ff:1f:5c:52:21:44: e4:2f:a9:83:22:3c:ca:e5:58:fc:29:25:29:6c:15: 76:f4:99:40:64:43:f0:ee:5f:9c:f6:89:e8:d5:1b: 03:e7:fb:d6:09:03:dd:92:8d:a8:7f:a3:4b:e3:1f: d7:0f:0a:87:9c:f1:31:50:bc:ba:28:ea:83:ea:ab: 34:62:89:ea:ab:9d:8d:3b:ea:0e:fe:42:22:85:bf: cc:ae:a9:29:38:ca:4a:1c:04:79:49:c0:bc:91:f1: 7c:80:71:da:90:51:10:41:0c:de:54:a1:5e:40:cd: 3b:d2:33:50:b6:3e:0d:ca:ff:a8:92:3a:8d:9f:b9: 4c:87:7e:83:cc:c3:d7:c1:b3:60:0f:14:1b:e9:52: d7:bb:20:e9:49:8d:e4:1a:ad:16:f0:ed:f7:b0:87: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FE:A9:F0:13:53:B2:CB:0C:EA:F7:85:1E:8C:2C:E7:E9:5E:7B:0F X509v3 Authority Key Identifier: keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a5:8e:a4:71:6f:78:b7:0f:f1:d0:59:22:9a:92:07:19:5e: 7f:7a:c2:2b:e0:f6:dd:cd:ba:2f:53:0a:04:93:26:b0:01:43: d2:ea:04:23:9d:48:80:17:df:97:f8:9c:89:b8:c1:03:de:ea: 79:10:39:44:de:fd:f3:29:ae:b5:a0:d5:47:4e:02:ab:4b:c9: bb:e9:8c:4b:ef:96:e5:6c:43:1c:81:17:56:c7:7f:f4:62:cf: d7:53:20:4a:f8:87:28:71:49:4c:04:b5:42:85:dd:f9:55:cc: b6:bb:f5:c3:2d:17:d7:62:88:91:82:24:ea:3f:4a:84:62:3e: e5:c9:e4:5c:ba:9c:d1:5f:19:99:ef:f4:75:27:3b:ba:17:2b: c8:18:c4:75:e4:0b:8f:07:77:20:4d:38:79:ab:07:af:fa:11: 87:b7:ec:13:28:b4:97:c4:39:62:50:c1:b7:d2:0d:76:eb:4a: 91:02:ef:53:db:0e:e1:23:7a:7d:ac:5e:f6:9e:06:5e:ad:9f: 97:b5:a2:f1:b1:c6:59:53:00:81:2d:3a:cd:ba:14:a5:b6:07: e8:15:d3:76:33:49:44:4a:92:2a:c7:04:52:3f:53:92:60:7b: d5:77:2b:42:74:2c:03:5c:a6:e8:1f:43:28:ee:f4:40:3a:f7: c6:f9:cc:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MyOEUxMTAvBgNVBAUTKDlCRjY5NjU4RTZDMEZFQTJFQTA4RTNBN0ZERDJBRENB Q0ExMzM5NDkwHhcNMjQxMTIzMDIxMzIwWhcNMjQxMTMwMDIxMzIwWjAYMRYwFAYD VQQDEw02NzQxM2E0MS01MGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lvGOFFU1M4idg1EpQH9SiaAFQ4Tx7VSmtAWW1S4bfmdiAwm4zyiT+Dy40EL WCn4m+U0+/+z8rht08R0ZtbecfcKLIOcI1uIY6c8u78xUX8k9xROSIS6aw/MCdGx mMdR0xT/H1xSIUTkL6mDIjzK5Vj8KSUpbBV29JlAZEPw7l+c9ono1RsD5/vWCQPd ko2of6NL4x/XDwqHnPExULy6KOqD6qs0Yonqq52NO+oO/kIihb/MrqkpOMpKHAR5 ScC8kfF8gHHakFEQQQzeVKFeQM070jNQtj4Nyv+okjqNn7lMh36DzMPXwbNgDxQb 6VLXuyDpSY3kGq0W8O33sIcFdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHL+qfAT U7LLDOr3hR6MLOfpXnsPMB8GA1UdIwQYMBaAFJv2lljmwP6i6gjjp/3SrcrKEzlJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzI4RS9CNUNBODk2ODc2 Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9xTHFDT09uX2RLdHlzb1RP VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21fYVdXT2JBX3FMcUNPT25fZEt0eXNvVE9Vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzI4RS9CNUNBODk2ODc2Q0QxMUVEOERDNjNBNjRDNEY5QUUwMi9tX2FXV09iQV9x THFDT09uX2RLdHlzb1RPVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcpY6kcW94tw/x0FkimpIHGV5/esIr4PbdzbovUwoEkyawAUPS6gQj nUiAF9+X+JyJuMED3up5EDlE3v3zKa61oNVHTgKrS8m76YxL75blbEMcgRdWx3/0 Ys/XUyBK+IcocUlMBLVChd35Vcy2u/XDLRfXYoiRgiTqP0qEYj7lyeRcupzRXxmZ 7/R1Jzu6FyvIGMR15AuPB3cgTTh5qwev+hGHt+wTKLSXxDliUMG30g1260qRAu9T 2w7hI3p9rF72ngZerZ+XtaLxscZZUwCBLTrNuhSltgfoFdN2M0lESpIqxwRSP1OS YHvVdytCdCwDXKboH0Mo7vRAOvfG+cyS -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:51 2024 by rpki-client on console-ams.rpki-client.org