$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft File: 4USmzKVqqTEokShNJidwYk784uw.mft (raw, json) Hash identifier: gYPhY64KT/ruegSMRXauvtSqkiC+OdD4dfj8UlLa0ew= Subject key identifier: A4:1D:DD:45:48:E7:F4:DB:1B:66:3C:79:17:01:EE:20:71:D6:17:16 Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft Manifest number: 043B Signing time: Fri 22 Nov 2024 23:49:41 +0000 Manifest this update: Fri 22 Nov 2024 23:49:41 +0000 Manifest next update: Fri 29 Nov 2024 23:49:41 +0000 Files and hashes: 1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: Sr3IdoBUysF+x65Y9y0c7cISejED63LsYUB8ErAkGVs=) 2: E7BC076E368A11EC9109BC30C4F9AE02.roa (hash: kbW09UJFsKnL4dHOYrdUOjMo0coDZTCOAj09v2MTtJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC Validity Not Before: Nov 22 23:49:41 2024 GMT Not After : Nov 29 23:49:41 2024 GMT Subject: CN=67411895-c576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:69:b8:35:5e:d9:54:3f:67:a5:58:2a:cb: e8:a5:79:6f:32:52:fc:22:2d:87:dc:88:c4:cf:e0: 77:cc:d0:b9:64:69:6d:35:9e:16:4f:55:35:af:f7: d9:6d:a2:4a:86:5c:ac:37:1e:02:32:f0:7e:46:5e: ff:19:1f:b4:28:e5:ae:8c:71:56:ae:cf:18:7a:62: c2:a8:d7:53:f9:40:1a:88:99:5c:2d:e8:66:2f:6a: 82:95:00:8d:40:bb:3a:26:27:17:be:e9:4d:62:66: be:6c:75:97:03:49:fb:f9:0b:45:fe:38:47:6f:77: 6f:fa:88:15:8a:c1:75:7f:ff:53:83:dd:0f:36:a5: 53:bc:8e:ca:1e:de:dc:7d:1c:c6:25:60:0c:ab:a8: 92:a8:a8:67:fa:ea:14:4e:0e:ce:3b:54:65:0c:40: ad:ac:0a:23:df:2a:a1:69:50:70:b9:6b:94:2e:86: 05:6f:c9:4d:18:68:c2:2e:5e:ac:42:42:67:bb:bf: 99:0f:b6:ae:9a:d7:a9:89:1d:1c:ec:68:ab:b3:40: 9d:15:b4:d7:b2:3a:6b:34:eb:67:da:19:37:3d:ef: af:b4:4e:82:3b:33:84:90:c5:6b:ac:3f:2a:c0:8c: 56:ca:45:c5:eb:bd:e4:1b:8d:da:51:e2:c3:4c:2f: bb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1D:DD:45:48:E7:F4:DB:1B:66:3C:79:17:01:EE:20:71:D6:17:16 X509v3 Authority Key Identifier: keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f8:5b:e6:d4:ef:23:34:4e:7b:78:f5:fc:6a:67:e8:ea:ae: 85:e5:4a:66:3d:24:24:b3:82:52:6b:2b:f2:ea:96:91:5e:8d: 9f:35:d6:39:01:a7:b1:32:f2:07:9f:b6:96:73:8e:11:6d:fe: 97:08:56:a4:ab:46:39:7c:0d:b1:5e:ac:1d:b7:cd:5a:10:bc: dd:7c:9b:53:4d:58:55:0a:71:2e:1e:f6:c4:17:19:e2:1f:b7: 3b:47:92:16:74:5e:fb:99:eb:73:94:24:a3:0a:2a:4a:47:6c: 1d:da:bb:39:24:da:6c:ac:50:0c:6f:73:43:85:dc:21:06:bf: e5:dd:e4:c5:9a:4d:14:69:14:e5:dd:0a:b9:91:bc:ca:1d:4e: 89:35:8c:af:11:6e:ad:7d:f6:e0:a1:d2:6d:66:a7:a1:5e:4f: a5:95:c1:4b:3c:71:f5:c3:ed:47:77:c2:f1:e4:0e:5c:d4:34: 17:b0:9f:ff:c3:ef:05:39:c9:93:17:01:51:af:e9:db:8f:a7: a2:42:49:f8:d8:1c:40:00:58:c7:1a:ac:78:6c:6b:3c:4f:c2: ac:b0:82:8b:50:38:1d:e1:0c:bd:df:7f:cb:98:1f:77:53:dd: 79:65:3a:51:a5:74:79:cd:3b:a7:78:45:a5:79:de:9b:2a:c1: b1:b0:c6:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM0OTMxMTAvBgNVBAUTKEUxNDRBNkNDQTU2QUE5MzEyODkxMjg0RDI2Mjc3MDYy NEVGQ0UyRUMwHhcNMjQxMTIyMjM0OTQxWhcNMjQxMTI5MjM0OTQxWjAYMRYwFAYD VQQDEw02NzQxMTg5NS1jNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdRpuDVe2VQ/Z6VYKsvopXlvMlL8Ii2H3IjEz+B3zNC5ZGltNZ4WT1U1r/fZ baJKhlysNx4CMvB+Rl7/GR+0KOWujHFWrs8YemLCqNdT+UAaiJlcLehmL2qClQCN QLs6JicXvulNYma+bHWXA0n7+QtF/jhHb3dv+ogVisF1f/9Tg90PNqVTvI7KHt7c fRzGJWAMq6iSqKhn+uoUTg7OO1RlDECtrAoj3yqhaVBwuWuULoYFb8lNGGjCLl6s QkJnu7+ZD7aumtepiR0c7Girs0CdFbTXsjprNOtn2hk3Pe+vtE6COzOEkMVrrD8q wIxWykXF673kG43aUeLDTC+7wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQd3UVI 5/TbG2Y8eRcB7iBx1hcWMB8GA1UdIwQYMBaAFOFEpsylaqkxKJEoTSYncGJO/OLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ5My80OUEyRUU2QzM2 ODUxMUVDODBGNTIwMzVDNEY5QUUwMi80VVNtektWcXFURW9rU2hOSmlkd1lrNzg0 dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVU216S1ZxcVRFb2tTaE5KaWR3WWs3ODR1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My80OUEyRUU2QzM2ODUxMUVDODBGNTIwMzVDNEY5QUUwMi80VVNtektWcXFU RW9rU2hOSmlkd1lrNzg0dXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX+Fvm1O8jNE57ePX8amfo6q6F5UpmPSQks4JSayvy6paRXo2fNdY5 AaexMvIHn7aWc44Rbf6XCFakq0Y5fA2xXqwdt81aELzdfJtTTVhVCnEuHvbEFxni H7c7R5IWdF77metzlCSjCipKR2wd2rs5JNpsrFAMb3NDhdwhBr/l3eTFmk0UaRTl 3Qq5kbzKHU6JNYyvEW6tffbgodJtZqehXk+llcFLPHH1w+1Hd8Lx5A5c1DQXsJ// w+8FOcmTFwFRr+nbj6eiQkn42BxAAFjHGqx4bGs8T8KssIKLUDgd4Qy933/LmB93 U915ZTpRpXR5zTuneEWled6bKsGxsMbz -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org