$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json) Hash identifier: pjxaUVPFb5SX1+C3VW7EWUexXaMskPUFcqJnrrh4EL4= Subject key identifier: 6A:36:A6:61:C0:3F:A5:F1:E2:AE:85:E9:7F:B8:6D:99:05:62:B2:1B Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft Manifest number: FE Signing time: Sat 23 Nov 2024 03:23:18 +0000 Manifest this update: Sat 23 Nov 2024 03:23:18 +0000 Manifest next update: Sat 30 Nov 2024 03:23:18 +0000 Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: regFTcyATBbhJScWuhbMKJuvqdow5MuOkYC1QUZudds=) 2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: AICX9y8wbsNvicm9cDH6zrAHQD3slGc0I+Lc9CGXhmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Validity Not Before: Nov 23 03:23:18 2024 GMT Not After : Nov 30 03:23:18 2024 GMT Subject: CN=67414aa6-c1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:06:b1:35:9f:d5:74:87:32:58:93:60:20:69: ff:0e:fe:a4:7a:83:b0:07:fd:ae:1a:ba:e8:9e:f2: 87:2b:87:c2:58:fd:92:64:ea:ec:a9:ad:8c:ad:3b: 90:66:2e:e3:57:86:88:a6:49:d1:8d:3d:03:90:b1: d2:35:c8:5d:f9:7a:b6:84:05:72:c5:48:a5:bc:d3: c5:c1:ff:29:11:fa:3c:89:53:4c:70:d7:0b:4f:ae: f8:7a:d4:be:ab:f9:df:75:8c:5f:28:c5:a6:05:86: 78:1c:35:52:67:b4:cb:c0:43:b5:10:71:98:36:6d: cd:b2:19:69:06:dc:c6:09:55:21:ce:ba:e1:05:48: 86:e9:42:96:7e:ec:23:a0:16:07:c6:85:97:14:af: da:0c:ca:0a:36:1e:e9:45:c1:ab:01:39:05:f0:6c: 15:f3:bb:49:ae:90:b4:58:a2:3f:7d:e1:c2:f6:85: 80:7e:6f:7e:48:67:59:83:88:bf:84:b8:8c:9e:ce: 4c:be:7e:d4:11:2d:ff:0b:9d:2f:50:f7:a3:0f:e7: 26:79:6d:0b:bf:76:d2:d7:b2:4a:46:35:b4:0f:6a: d4:9f:8a:2e:0d:cd:4b:13:a2:0e:50:9e:a8:d9:42: 2f:58:74:57:10:09:8e:88:41:fa:37:83:9a:da:d3: d7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:36:A6:61:C0:3F:A5:F1:E2:AE:85:E9:7F:B8:6D:99:05:62:B2:1B X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1f:e8:25:58:be:cc:5e:46:76:7d:59:d5:54:37:06:61:c7: ea:69:46:3e:96:13:ad:94:1c:1a:0b:26:55:68:39:38:b4:c1: 1d:ed:f6:5f:bd:7c:05:f3:36:8b:6e:2b:cc:61:0a:d2:7f:62: a9:24:cf:b5:cf:08:e5:79:f2:45:8b:24:bd:c8:16:f0:d0:ab: a2:a9:cf:75:6e:70:e2:a3:2a:93:d8:d1:0a:3b:17:72:f3:7f: c8:9f:97:d9:55:a7:5a:e1:7e:22:d4:6d:27:93:36:a7:e7:13: 03:3b:0a:01:07:51:8d:e7:05:51:91:71:5b:5b:4e:c7:da:a3: b3:46:84:ef:60:c7:41:60:c9:32:ee:b9:ca:c1:db:71:24:92: 36:73:9a:77:b8:5d:fd:f1:c7:b7:18:93:24:d5:24:89:27:b3: 61:3b:b6:b7:13:78:8e:5e:2f:1c:c8:e6:ea:b8:61:df:1a:75: 54:75:7b:68:3b:5e:98:55:cb:e7:c2:2e:f0:ef:f5:36:62:8c: 06:a4:4a:b3:24:dc:61:ba:52:e7:ce:db:8c:70:91:f2:83:0f: 0f:b2:25:8b:3c:4e:3c:9c:85:08:fe:8a:19:f0:0c:e5:1d:a4: 6f:33:9b:92:f6:96:8b:b4:be:81:01:85:d9:d5:bb:e0:de:87: 89:d6:85:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjQxMTIzMDMyMzE4WhcNMjQxMTMwMDMyMzE4WjAYMRYwFAYD VQQDEw02NzQxNGFhNi1jMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QaxNZ/VdIcyWJNgIGn/Dv6keoOwB/2uGrronvKHK4fCWP2SZOrsqa2MrTuQ Zi7jV4aIpknRjT0DkLHSNchd+Xq2hAVyxUilvNPFwf8pEfo8iVNMcNcLT674etS+ q/nfdYxfKMWmBYZ4HDVSZ7TLwEO1EHGYNm3NshlpBtzGCVUhzrrhBUiG6UKWfuwj oBYHxoWXFK/aDMoKNh7pRcGrATkF8GwV87tJrpC0WKI/feHC9oWAfm9+SGdZg4i/ hLiMns5Mvn7UES3/C50vUPejD+cmeW0Lv3bS17JKRjW0D2rUn4ouDc1LE6IOUJ6o 2UIvWHRXEAmOiEH6N4Oa2tPXAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGo2pmHA P6Xx4q6F6X+4bZkFYrIbMB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2 QkJaaHM2NzMySk1yVndKamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdH+glWL7MXkZ2fVnVVDcGYcfqaUY+lhOtlBwaCyZVaDk4tMEd7fZf vXwF8zaLbivMYQrSf2KpJM+1zwjlefJFiyS9yBbw0Kuiqc91bnDioyqT2NEKOxdy 83/In5fZVada4X4i1G0nkzan5xMDOwoBB1GN5wVRkXFbW07H2qOzRoTvYMdBYMky 7rnKwdtxJJI2c5p3uF398ce3GJMk1SSJJ7NhO7a3E3iOXi8cyObquGHfGnVUdXto O16YVcvnwi7w7/U2YowGpEqzJNxhulLnztuMcJHygw8PsiWLPE48nIUI/ooZ8Azl HaRvM5uS9paLtL6BAYXZ1bvg3oeJ1oUF -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:25 2024 by rpki-client on console-ams.rpki-client.org