$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json) Hash identifier: qJQy4ZZxoYo9DDEgd5gef0U00P4hWjddCSsOvQbl+4c= Subject key identifier: 34:3F:92:89:D9:41:50:E2:E3:8A:AA:A8:8B:B8:17:3E:78:44:90:1F Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Certificate serial: 1774 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft Manifest number: 1768 Signing time: Fri 22 Nov 2024 16:36:15 +0000 Manifest this update: Fri 22 Nov 2024 16:36:15 +0000 Manifest next update: Fri 29 Nov 2024 16:36:15 +0000 Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: 4Lh/zCA11fz1yuYfNSy6VkfuZHqHUjcRal9ji6djaO4=) 2: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: veiSAA57yRrgqocVJ9kM0ybPgWzL/JzbGINmTfwNHX8=) 3: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: zCpY8nx1qxvRAvrVO7S1BXfjXPbBU6CC+eJhv6+dkZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6004 (0x1774) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Validity Not Before: Nov 22 16:36:15 2024 GMT Not After : Nov 29 16:36:15 2024 GMT Subject: CN=6740b2ff-770d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:69:e7:c4:61:39:4a:ee:5a:3f:05:fc:f5: 28:78:79:b0:21:f7:c1:2b:88:0e:cd:44:9c:3d:44: 72:12:9d:1a:b0:fe:68:ec:a2:86:bd:9a:ad:4e:c9: fd:3c:e6:7f:e5:b4:d9:cf:da:95:0c:9e:85:4b:76: d8:e4:e9:8d:45:e9:0c:f2:2a:e2:0c:d3:a7:c0:2f: fd:b2:4c:6c:85:c5:6f:37:69:79:86:ba:49:77:1b: b7:07:52:1f:3d:17:ba:87:e2:0c:74:ac:21:74:49: e6:b9:14:52:80:09:7c:09:32:ae:16:c1:c7:87:3f: 70:5a:42:fd:be:cb:30:4b:93:4a:1f:38:67:c5:68: 40:ef:b4:bf:c1:52:92:88:da:36:f0:d4:8a:9d:57: 9d:34:79:cb:6d:9f:88:b1:86:81:a2:24:eb:b0:3f: 7e:19:8c:73:d5:c6:0d:47:55:e5:b8:60:31:43:03: 08:1e:ee:ef:0f:fd:5e:90:24:21:3b:24:33:46:e8: e7:7c:d9:17:6d:7c:ba:6d:9f:b5:ba:55:e4:c6:ff: f2:ad:ee:43:dd:90:e8:07:7f:81:bc:12:e9:c0:35: 46:4a:15:ca:7e:a1:74:2a:b0:52:2c:ea:83:55:ad: 05:be:8e:1b:1e:7a:b1:1d:ff:61:7c:d6:7e:98:39: 3d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3F:92:89:D9:41:50:E2:E3:8A:AA:A8:8B:B8:17:3E:78:44:90:1F X509v3 Authority Key Identifier: keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:73:23:bc:ac:fb:ee:22:a4:89:12:d4:29:b9:3e:d0:fb:99: de:84:2d:cd:31:77:49:5b:88:2c:b0:79:80:9f:1d:7b:db:e5: fc:69:21:3c:34:e7:61:cc:ff:30:f0:db:37:80:f7:ca:d0:f8: a5:40:8c:a4:6a:fd:ae:9b:e0:9b:fc:29:e2:cd:70:05:2f:a3: 72:3c:b8:ca:7d:10:f0:01:80:fc:f7:be:be:fa:1c:65:ea:1a: 1d:56:96:0b:ba:db:f8:83:e4:30:39:83:81:8c:d3:b7:43:3f: 8f:0e:0d:3e:9a:62:e3:90:b2:63:a5:9c:97:51:7b:fe:d6:f8: f0:c4:2c:cd:1c:3c:d7:7e:ee:fd:04:4c:7f:01:c1:11:99:6a: e0:66:c1:c3:76:a7:07:12:a4:d2:41:90:96:75:46:10:c4:8c: 47:9f:2a:10:d7:b3:4e:e6:24:ef:d5:e3:5b:c2:9f:01:92:dc: e5:87:1a:8e:61:e3:cf:a5:49:57:f9:ff:ff:44:69:fb:d3:e9: 51:8f:c6:f8:a5:b6:be:3e:34:80:75:25:f2:80:b9:c2:ae:3c: 59:f3:1d:a5:57:f3:7e:d6:47:08:0e:80:27:14:f9:78:fe:93: 17:d5:d8:a4:68:b2:bb:a0:8e:d9:3d:1e:3c:e3:22:c8:8c:f9: e7:fd:05:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzQ0ExMTAvBgNVBAUTKEJCOTMyNTZFNjA3RDQyRUI2RTM0MjBEQ0M3MTM3RjIw Qjg0RDBDOEEwHhcNMjQxMTIyMTYzNjE1WhcNMjQxMTI5MTYzNjE1WjAYMRYwFAYD VQQDEw02NzQwYjJmZi03NzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybVp58RhOUruWj8F/PUoeHmwIffBK4gOzUScPURyEp0asP5o7KKGvZqtTsn9 POZ/5bTZz9qVDJ6FS3bY5OmNRekM8iriDNOnwC/9skxshcVvN2l5hrpJdxu3B1If PRe6h+IMdKwhdEnmuRRSgAl8CTKuFsHHhz9wWkL9vsswS5NKHzhnxWhA77S/wVKS iNo28NSKnVedNHnLbZ+IsYaBoiTrsD9+GYxz1cYNR1XluGAxQwMIHu7vD/1ekCQh OyQzRujnfNkXbXy6bZ+1ulXkxv/yre5D3ZDoB3+BvBLpwDVGShXKfqF0KrBSLOqD Va0Fvo4bHnqxHf9hfNZ+mDk9nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQ/konZ QVDi44qqqIu4Fz54RJAfMB8GA1UdIwQYMBaAFLuTJW5gfULrbjQg3McTfyC4TQyK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjNDQS9FRjRGOTM3Q0Mz QTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1dHVOQ0RjeHhOX0lMaE5E SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1TWxibUI5UXV0dU5DRGN4eE5fSUxoTkRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjNDQS9FRjRGOTM3Q0MzQTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1 dHVOQ0RjeHhOX0lMaE5ESW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9cyO8rPvuIqSJEtQpuT7Q+5nehC3NMXdJW4gssHmAnx172+X8aSE8 NOdhzP8w8Ns3gPfK0PilQIykav2um+Cb/CnizXAFL6NyPLjKfRDwAYD8976++hxl 6hodVpYLutv4g+QwOYOBjNO3Qz+PDg0+mmLjkLJjpZyXUXv+1vjwxCzNHDzXfu79 BEx/AcERmWrgZsHDdqcHEqTSQZCWdUYQxIxHnyoQ17NO5iTv1eNbwp8BktzlhxqO YePPpUlX+f//RGn70+lRj8b4pba+PjSAdSXygLnCrjxZ8x2lV/N+1kcIDoAnFPl4 /pMX1dikaLK7oI7ZPR484yLIjPnn/QVL -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org