$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft File: pIqTm2fbIrr3fgB7Id87dFtig5A.mft (raw, json) Hash identifier: zxpLaR2cSH6SOGrUx9bBrp0q4r8moto2U32XyoiLWjQ= Subject key identifier: 50:26:41:75:23:36:F5:97:4A:7A:8B:42:C0:43:22:7E:8E:23:9D:EC Authority key identifier: A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 Certificate issuer: /CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Certificate serial: 0604 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft Manifest number: 05FF Signing time: Fri 22 Nov 2024 22:18:08 +0000 Manifest this update: Fri 22 Nov 2024 22:18:08 +0000 Manifest next update: Fri 29 Nov 2024 22:18:08 +0000 Files and hashes: 1: pIqTm2fbIrr3fgB7Id87dFtig5A.crl (hash: E4QaBjeGSgTYlJm0ViumpGnEZnBGV9GGmosunrQcKcg=) 2: A3AA461082BE11EB93A19A35C4F9AE02.roa (hash: giAuMNdUQbQxU3qFD/XGoGW0oQf3mtKr16RicuaHSew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1540 (0x604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1ED2/serialNumber=A48A939B67DB22BAF77E007B21DF3B745B628390 Validity Not Before: Nov 22 22:18:08 2024 GMT Not After : Nov 29 22:18:08 2024 GMT Subject: CN=67410320-61f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:55:14:4f:b1:c6:99:c9:1e:36:83:40:d8: 51:e7:37:f9:15:0c:3c:a6:83:39:2f:07:85:48:a7: db:f6:b9:8e:46:06:80:52:78:e8:81:61:32:15:f6: a8:1c:b5:2f:fc:99:37:61:f4:05:4e:a7:af:fe:af: 07:6f:9d:86:f2:ef:ac:05:7c:68:48:f3:c3:38:50: 1c:75:8b:7c:d6:ab:15:a0:ca:ef:95:a0:a4:6a:f4: d3:d0:42:ca:67:92:52:10:b3:f7:a8:62:f8:10:90: 52:34:59:3c:f4:60:93:e1:6e:80:e5:25:0e:b4:46: a3:6d:47:c8:7a:0f:37:d5:91:ad:3e:f5:cd:b5:fb: 4e:a4:22:d3:20:6a:e1:b9:4a:50:d9:49:b1:df:6f: 45:32:a0:7a:41:ed:6b:42:69:d5:5d:a2:91:28:00: c8:7b:a3:95:e7:ac:16:05:b1:36:9d:5b:5b:3a:13: 05:0c:f1:30:f5:03:79:ff:35:ce:68:46:2a:8b:0b: 32:ac:21:c5:bc:e9:0e:88:65:b8:88:73:28:71:cb: 20:0f:fb:e4:45:2a:e4:f0:6b:e2:e8:f4:3a:85:ba: 11:81:5b:78:ee:7b:95:6f:88:a2:7b:d7:ce:47:10: a5:82:bf:5e:72:04:e7:25:a4:d9:e2:15:2e:4f:23: 0f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:26:41:75:23:36:F5:97:4A:7A:8B:42:C0:43:22:7E:8E:23:9D:EC X509v3 Authority Key Identifier: keyid:A4:8A:93:9B:67:DB:22:BA:F7:7E:00:7B:21:DF:3B:74:5B:62:83:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pIqTm2fbIrr3fgB7Id87dFtig5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1ED2/3FE8DE6C82BD11EB9BC5D334C4F9AE02/pIqTm2fbIrr3fgB7Id87dFtig5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:03:b7:d1:d1:db:b4:a3:28:36:f0:bb:58:e8:37:6e:41:32: 37:31:d5:b4:13:36:e0:2a:16:dd:3f:de:6a:db:0f:9f:a3:79: 7c:3d:e4:33:d2:6c:79:c2:15:29:96:d4:51:e6:aa:96:40:18: 25:40:99:1e:cb:b3:a7:c8:83:ad:1e:a7:f4:b5:4d:74:9f:41: 3f:5f:9a:15:eb:25:6b:60:4a:46:ad:d2:49:e5:11:b3:bd:b1: 42:db:24:ce:24:b5:52:7b:14:d9:4a:40:1c:cd:4f:4a:f5:fc: a2:2d:e1:64:c6:b3:86:9d:82:75:94:6b:7e:40:19:9b:e1:2a: 15:ba:b6:67:e6:af:e5:eb:bc:d6:7b:6d:52:f8:82:06:7c:a6: 37:e6:bf:f4:43:12:2e:9b:d4:15:ec:ec:ed:93:79:2c:66:4f: 04:80:df:47:1e:70:42:6d:7d:11:9d:8f:5a:28:f4:6e:83:c4: 7f:9e:70:61:57:72:5b:ba:03:2e:aa:1c:8b:2d:1a:7b:94:05: ce:dc:e1:01:7e:48:2e:a9:95:72:d2:f1:8a:f5:45:20:1c:25: 5b:35:30:54:6b:d3:1b:3a:01:6b:16:f0:0a:bf:95:0a:c2:17: 88:37:c9:b7:e8:0e:98:00:92:38:0b:3a:43:03:9e:e2:7d:0f: 1b:c7:8b:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFFRDIxMTAvBgNVBAUTKEE0OEE5MzlCNjdEQjIyQkFGNzdFMDA3QjIxREYzQjc0 NUI2MjgzOTAwHhcNMjQxMTIyMjIxODA4WhcNMjQxMTI5MjIxODA4WjAYMRYwFAYD VQQDEw02NzQxMDMyMC02MWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgZVFE+xxpnJHjaDQNhR5zf5FQw8poM5LweFSKfb9rmORgaAUnjogWEyFfao HLUv/Jk3YfQFTqev/q8Hb52G8u+sBXxoSPPDOFAcdYt81qsVoMrvlaCkavTT0ELK Z5JSELP3qGL4EJBSNFk89GCT4W6A5SUOtEajbUfIeg831ZGtPvXNtftOpCLTIGrh uUpQ2Umx329FMqB6Qe1rQmnVXaKRKADIe6OV56wWBbE2nVtbOhMFDPEw9QN5/zXO aEYqiwsyrCHFvOkOiGW4iHMoccsgD/vkRSrk8Gvi6PQ6hboRgVt47nuVb4iie9fO RxClgr9ecgTnJaTZ4hUuTyMPIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAmQXUj NvWXSnqLQsBDIn6OI53sMB8GA1UdIwQYMBaAFKSKk5tn2yK6934AeyHfO3RbYoOQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUVEMi8zRkU4REU2Qzgy QkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYklycjNmZ0I3SWQ4N2RGdGln NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BJcVRtMmZiSXJyM2ZnQjdJZDg3ZEZ0aWc1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUVEMi8zRkU4REU2QzgyQkQxMUVCOUJDNUQzMzRDNEY5QUUwMi9wSXFUbTJmYkly cjNmZ0I3SWQ4N2RGdGlnNUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuA7fR0du0oyg28LtY6DduQTI3MdW0EzbgKhbdP95q2w+fo3l8PeQz 0mx5whUpltRR5qqWQBglQJkey7OnyIOtHqf0tU10n0E/X5oV6yVrYEpGrdJJ5RGz vbFC2yTOJLVSexTZSkAczU9K9fyiLeFkxrOGnYJ1lGt+QBmb4SoVurZn5q/l67zW e21S+IIGfKY35r/0QxIum9QV7Oztk3ksZk8EgN9HHnBCbX0RnY9aKPRug8R/nnBh V3JbugMuqhyLLRp7lAXO3OEBfkguqZVy0vGK9UUgHCVbNTBUa9MbOgFrFvAKv5UK wheIN8m36A6YAJI4CzpDA57ifQ8bx4vW -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:52 2024 by rpki-client on console-ams.rpki-client.org