$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft File: 4j5WiDpuN63lIjxBOzs7D3gbySk.mft (raw, json) Hash identifier: lL2/wxjXsGfjnsoMM5W9i6kXcoxR+hoaLO+lomuaHu8= Subject key identifier: BA:43:B0:F7:88:F6:DF:14:68:73:DC:8E:36:AE:BF:35:B2:73:F6:1C Authority key identifier: E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29 Certificate issuer: /CN=A91DF645/serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929 Certificate serial: 1112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft Manifest number: 1109 Signing time: Fri 22 Nov 2024 17:17:05 +0000 Manifest this update: Fri 22 Nov 2024 17:17:05 +0000 Manifest next update: Fri 29 Nov 2024 17:17:05 +0000 Files and hashes: 1: 4j5WiDpuN63lIjxBOzs7D3gbySk.crl (hash: Mm2wVdqTvgHVPJToBogms56FaY8Gl82MtC7zE0PoH7o=) 2: C5EA2D4801F711E9B44DC70EC4F9AE02.roa (hash: 7GMPsmEhJjvHx88LOtk6/iPjMX5SfWv/q3XixmtcSeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4370 (0x1112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF645/serialNumber=E23E56883A6E37ADE5223C413B3B3B0F781BC929 Validity Not Before: Nov 22 17:17:05 2024 GMT Not After : Nov 29 17:17:05 2024 GMT Subject: CN=6740bc91-e90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a6:70:81:78:ad:88:c2:4d:0f:c0:c8:db:94: c6:80:5a:cf:3c:7e:40:6d:aa:98:b8:05:cc:6b:9b: 01:6f:ba:c2:2a:c9:cb:25:f1:c9:df:96:6b:ef:2c: 3c:8e:c5:e5:5b:1e:ce:1e:25:50:1d:85:3b:b3:16: dc:05:4c:f0:94:48:e7:13:45:30:50:7b:79:25:37: cc:26:92:26:3b:5e:66:2c:9a:94:ac:dc:aa:c9:cc: 5b:70:36:db:53:b8:01:a7:e7:cc:66:d0:ea:a1:29: 05:e9:70:90:b9:8a:49:3e:37:f9:bb:32:9e:d2:69: 9d:6e:ba:8a:af:c0:a9:98:91:3c:15:9d:bc:2f:11: f3:85:4f:6c:73:83:c1:89:c8:da:cf:32:d7:02:f5: eb:2a:dc:4a:f9:0f:59:ce:cb:d9:b7:1e:95:c5:f4: 68:f1:32:2b:76:25:24:d0:1d:79:ed:9a:ee:18:d0: c5:bd:4b:dc:c6:2d:6f:05:29:c1:0e:24:65:d0:4b: d4:fe:73:5e:88:14:ba:a0:66:1c:2a:11:b2:48:42: 15:22:3f:ba:a8:b5:12:2a:d8:3f:45:dd:5a:ed:50: f1:71:0c:d6:01:70:e5:f9:5f:f7:9e:a5:a2:dd:f9: 93:99:55:06:f7:47:da:74:f0:2e:6b:d6:5a:94:93: b3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:43:B0:F7:88:F6:DF:14:68:73:DC:8E:36:AE:BF:35:B2:73:F6:1C X509v3 Authority Key Identifier: keyid:E2:3E:56:88:3A:6E:37:AD:E5:22:3C:41:3B:3B:3B:0F:78:1B:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4j5WiDpuN63lIjxBOzs7D3gbySk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF645/AB16E55201F611E9ABB8870DC4F9AE02/4j5WiDpuN63lIjxBOzs7D3gbySk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:f7:2b:36:8c:80:cb:c4:fc:e8:7d:e5:b8:36:ea:dd:82:dc: 31:cf:21:af:76:26:0d:3e:0b:ba:8d:3e:fe:7f:98:62:30:d5: ea:8e:63:42:5c:66:31:70:23:44:c0:26:80:20:bd:42:0d:70: d5:55:df:05:6f:a1:a7:72:dc:c4:28:fe:bb:9a:92:d7:5d:57: de:52:0f:18:31:bc:2f:24:12:7b:98:17:35:66:03:d0:c1:bb: 35:f7:ff:c8:ce:c2:1d:4e:ef:9a:60:ec:e6:48:12:6c:63:fe: 9c:ba:97:5d:b8:a1:7b:73:83:4c:b7:6b:61:af:f7:1f:fa:1d: ac:21:4c:d5:5c:77:d9:7d:c1:a7:d1:4f:af:00:ed:39:ff:3c: cf:a3:4b:b9:2e:d0:c4:80:9b:21:3e:8a:0a:c6:43:29:e9:8d: 50:2a:a2:ef:70:74:dd:a2:37:3d:aa:22:22:d5:ba:51:6f:9a: c9:40:3d:b1:c9:a1:e4:63:32:be:76:f3:33:e7:18:df:12:00: 6f:a9:44:58:bf:c8:c0:f2:35:a8:78:8e:ad:55:c5:31:5b:b6: 06:d3:6d:86:7e:5b:fe:85:64:fd:58:8c:5d:1e:f6:16:76:50: ff:69:d6:c1:b0:89:5d:a9:c8:db:55:13:f3:ac:5d:82:71:57: 72:42:d2:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY2NDUxMTAvBgNVBAUTKEUyM0U1Njg4M0E2RTM3QURFNTIyM0M0MTNCM0IzQjBG NzgxQkM5MjkwHhcNMjQxMTIyMTcxNzA1WhcNMjQxMTI5MTcxNzA1WjAYMRYwFAYD VQQDEw02NzQwYmM5MS1lOTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9KZwgXitiMJND8DI25TGgFrPPH5AbaqYuAXMa5sBb7rCKsnLJfHJ35Zr7yw8 jsXlWx7OHiVQHYU7sxbcBUzwlEjnE0UwUHt5JTfMJpImO15mLJqUrNyqycxbcDbb U7gBp+fMZtDqoSkF6XCQuYpJPjf5uzKe0mmdbrqKr8CpmJE8FZ28LxHzhU9sc4PB icjazzLXAvXrKtxK+Q9ZzsvZtx6VxfRo8TIrdiUk0B157ZruGNDFvUvcxi1vBSnB DiRl0EvU/nNeiBS6oGYcKhGySEIVIj+6qLUSKtg/Rd1a7VDxcQzWAXDl+V/3nqWi 3fmTmVUG90fadPAua9ZalJOzmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpDsPeI 9t8UaHPcjjauvzWyc/YcMB8GA1UdIwQYMBaAFOI+Vog6bjet5SI8QTs7Ow94G8kp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjY0NS9BQjE2RTU1MjAx RjYxMUU5QUJCODg3MERDNEY5QUUwMi80ajVXaURwdU42M2xJanhCT3pzN0QzZ2J5 U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqNVdpRHB1TjYzbElqeEJPenM3RDNnYnlTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjY0NS9BQjE2RTU1MjAxRjYxMUU5QUJCODg3MERDNEY5QUUwMi80ajVXaURwdU42 M2xJanhCT3pzN0QzZ2J5U2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDF9ys2jIDLxPzofeW4NurdgtwxzyGvdiYNPgu6jT7+f5hiMNXqjmNC XGYxcCNEwCaAIL1CDXDVVd8Fb6GnctzEKP67mpLXXVfeUg8YMbwvJBJ7mBc1ZgPQ wbs19//IzsIdTu+aYOzmSBJsY/6cupdduKF7c4NMt2thr/cf+h2sIUzVXHfZfcGn 0U+vAO05/zzPo0u5LtDEgJshPooKxkMp6Y1QKqLvcHTdojc9qiIi1bpRb5rJQD2x yaHkYzK+dvMz5xjfEgBvqURYv8jA8jWoeI6tVcUxW7YG022Gflv+hWT9WIxdHvYW dlD/adbBsIldqcjbVRPzrF2CcVdyQtIg -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:19 2024 by rpki-client on console-ams.rpki-client.org