$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft File: sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json) Hash identifier: kgx9yIJ6G71Mk2esl27IUN7bBHan/tQeJl5GdHQZnnM= Subject key identifier: 11:82:CE:98:87:24:D7:50:E5:43:55:DD:95:5C:00:89:8B:34:E0:E3 Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A Certificate issuer: /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Certificate serial: 0720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft Manifest number: 0719 Signing time: Fri 22 Nov 2024 21:22:20 +0000 Manifest this update: Fri 22 Nov 2024 21:22:20 +0000 Manifest next update: Fri 29 Nov 2024 21:22:20 +0000 Files and hashes: 1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: mwLrgNZJ55LuTqntuvLhhw8ra1oVR+fJ/6+XjR4nMsQ=) 2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: XKVyEB5gGMdbZZklWgaxiu1Qm2EFMmnpQEz2Juw2PmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Validity Not Before: Nov 22 21:22:20 2024 GMT Not After : Nov 29 21:22:20 2024 GMT Subject: CN=6740f60c-8d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e0:b8:f0:5c:e6:0f:57:4c:9c:56:dc:fd:c6: 3a:f5:d1:55:e3:79:59:3a:68:8d:f6:9e:f3:6f:fe: c1:f6:aa:6a:48:70:a6:dc:8f:84:d2:5d:49:31:70: bf:d4:66:26:de:1e:85:f1:6c:b6:8b:89:4b:58:59: e0:f6:9e:7d:91:10:f0:67:ac:b9:8a:dc:a2:55:f6: 58:36:82:1a:e9:df:ef:9b:5b:44:52:86:d6:80:a8: 3e:db:d5:c1:04:85:82:99:22:42:2a:5c:37:c6:a6: 91:ee:4c:2d:97:b2:fd:bd:26:10:9a:f3:bf:94:09: e0:0f:1b:4c:6c:b0:d2:43:d1:51:b2:55:fe:2c:bf: db:22:a3:22:25:b8:12:06:48:7a:36:c6:1d:b1:78: c1:c0:15:16:1d:c2:59:42:b4:81:0d:6c:67:23:4b: 07:7b:ef:e2:f1:86:ea:19:96:fb:e9:d1:51:2b:cb: 32:79:5c:2d:86:60:d2:6b:a3:43:48:6b:36:13:6c: 25:fb:04:a2:0d:d2:cc:f7:58:38:ed:fd:b2:cd:43: ed:28:19:dc:8c:1c:e0:08:06:f7:6b:cb:8e:6f:38: a6:1d:5e:10:fe:52:d9:b5:09:16:e0:12:4e:8b:eb: 66:34:4e:cf:db:30:6b:44:b7:bf:36:8d:47:f6:99: eb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:82:CE:98:87:24:D7:50:E5:43:55:DD:95:5C:00:89:8B:34:E0:E3 X509v3 Authority Key Identifier: keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:fb:e7:9f:11:14:20:4f:c2:f2:44:52:48:7e:3f:1b:bf:f5: a4:76:eb:3a:b3:53:83:4f:ca:41:59:5a:29:96:b0:a0:46:2d: 1d:29:e9:f4:40:8a:ec:bb:85:d3:d0:5d:b5:ee:5d:e3:d9:a6: 8f:36:66:e5:77:1a:4f:6e:44:a2:f0:7e:d1:c8:54:76:a8:1f: e9:2f:8a:73:49:92:3e:d5:a4:68:dd:64:67:9e:6c:d8:6c:b1: a1:a6:88:f2:0e:53:4d:b1:e6:c7:7d:56:f7:36:a4:3e:d3:c7: 38:7a:12:ee:5c:d2:d8:cf:3c:8a:11:8e:c0:75:1f:eb:c8:10: 77:1d:ae:e4:63:69:1f:64:15:e3:51:65:19:08:9f:39:51:9a: 45:60:09:83:39:fa:25:a6:98:d5:af:0e:ec:46:9f:72:02:a2: 78:47:8d:fa:f0:29:7a:c2:7b:6e:ea:fc:8a:5c:20:d1:ff:65: a3:cf:52:12:33:a5:e0:62:b3:d4:bb:bb:0f:99:ea:74:4c:7d: 3a:e9:55:0e:6d:5f:3d:bb:76:af:2b:d7:76:72:a0:ba:37:d0: 64:9b:f0:74:34:05:84:2c:66:7e:59:fc:dc:12:6b:6a:35:88: bd:9a:d6:6f:af:1e:99:67:e9:0d:35:79:60:60:f9:86:24:6c: ba:12:08:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3QTExMTAvBgNVBAUTKEIyRTk5Mzg5QzRBQzAzNDhEOEFFQzg3NUI3NDY4OUQw NEU3MEM4M0EwHhcNMjQxMTIyMjEyMjIwWhcNMjQxMTI5MjEyMjIwWjAYMRYwFAYD VQQDEw02NzQwZjYwYy04ZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOC48FzmD1dMnFbc/cY69dFV43lZOmiN9p7zb/7B9qpqSHCm3I+E0l1JMXC/ 1GYm3h6F8Wy2i4lLWFng9p59kRDwZ6y5ityiVfZYNoIa6d/vm1tEUobWgKg+29XB BIWCmSJCKlw3xqaR7kwtl7L9vSYQmvO/lAngDxtMbLDSQ9FRslX+LL/bIqMiJbgS Bkh6NsYdsXjBwBUWHcJZQrSBDWxnI0sHe+/i8YbqGZb76dFRK8syeVwthmDSa6ND SGs2E2wl+wSiDdLM91g47f2yzUPtKBncjBzgCAb3a8uObzimHV4Q/lLZtQkW4BJO i+tmNE7P2zBrRLe/No1H9pnrIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGCzpiH JNdQ5UNV3ZVcAImLNODjMB8GA1UdIwQYMBaAFLLpk4nErANI2K7IdbdGidBOcMg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdBMS9CNUMyN0E4QzE2 OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ewallyc2gxdDBhSjBFNXd5 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1bVRpY1NzQTBqWXJzaDF0MGFKMEU1d3lEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdBMS9CNUMyN0E4QzE2OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ew allyc2gxdDBhSjBFNXd5RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7++efERQgT8LyRFJIfj8bv/Wkdus6s1ODT8pBWVoplrCgRi0dKen0 QIrsu4XT0F217l3j2aaPNmbldxpPbkSi8H7RyFR2qB/pL4pzSZI+1aRo3WRnnmzY bLGhpojyDlNNsebHfVb3NqQ+08c4ehLuXNLYzzyKEY7AdR/ryBB3Ha7kY2kfZBXj UWUZCJ85UZpFYAmDOfolppjVrw7sRp9yAqJ4R4368Cl6wntu6vyKXCDR/2Wjz1IS M6XgYrPUu7sPmep0TH066VUObV89u3avK9d2cqC6N9Bkm/B0NAWELGZ+WfzcEmtq NYi9mtZvrx6ZZ+kNNXlgYPmGJGy6Egis -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:52 2024 by rpki-client on console-ams.rpki-client.org