$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json) Hash identifier: 7U+BZ1EjHrQLxTlRPEQNoSjKRO8qsC7eN8TvhTUgLk4= Subject key identifier: 29:29:DA:80:03:75:A3:CB:92:D9:20:E3:F7:62:06:A5:E2:DA:22:5B Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Certificate serial: 0335 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft Manifest number: 0331 Signing time: Sat 23 Nov 2024 00:40:14 +0000 Manifest this update: Sat 23 Nov 2024 00:40:13 +0000 Manifest next update: Sat 30 Nov 2024 00:40:13 +0000 Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: R9BxPBaawIB9cjpi43RsVpOma3MSDmy/qMrHItgHDTA=) 2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: lmHWjHWGoDos3ZD/zmSAwKznf6OVOtQspTUkVEJy1Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 821 (0x335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Validity Not Before: Nov 23 00:40:13 2024 GMT Not After : Nov 30 00:40:13 2024 GMT Subject: CN=6741246d-b438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:e2:26:0c:24:66:b2:b5:e5:77:0f:93:45: 26:8d:45:88:ed:d2:f3:fd:b6:ad:ba:57:13:bf:9c: eb:a0:3f:bc:8e:34:f8:9a:5f:44:56:ac:79:b1:9c: 91:89:08:2f:0b:b8:9b:63:5f:66:85:30:89:d0:58: 14:30:2d:3d:6d:19:f1:7e:31:97:7c:da:10:1b:ec: a0:ff:cd:6d:cf:d6:2d:17:2b:e4:aa:d3:84:66:1a: fb:91:46:9c:15:0f:5a:e0:f4:49:6e:e5:09:cb:29: f5:7e:08:38:7d:a5:d8:76:20:af:87:72:5e:f4:35: 9d:ae:18:9c:20:2d:61:2d:b9:f5:cf:db:cc:a2:85: bc:71:63:ab:23:37:d1:dc:fd:75:48:10:37:bb:de: 7b:21:b6:dc:b7:03:e6:0f:6b:eb:14:c7:75:77:ab: eb:dc:ba:73:41:78:70:7c:e1:1e:59:06:2b:8c:f8: e8:24:ca:07:4d:1c:87:c8:91:1b:36:85:19:f7:7d: 60:af:04:cd:42:fc:04:84:97:12:89:2a:07:82:7b: eb:9c:a4:7d:61:2a:04:38:2a:3c:4f:8a:61:67:c9: d2:35:bd:01:00:d0:13:18:78:2e:f5:7f:77:4d:7e: 8b:43:9c:4d:16:6d:dc:16:57:19:43:d0:00:9e:a0: 62:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:29:DA:80:03:75:A3:CB:92:D9:20:E3:F7:62:06:A5:E2:DA:22:5B X509v3 Authority Key Identifier: keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:c6:c7:05:2a:06:31:04:59:3d:da:47:b8:2d:03:58:20:6f: 8c:43:96:af:ee:6d:ca:e9:2e:b0:88:31:b8:0b:cc:af:94:a8: 86:9f:22:b0:48:9a:64:bf:90:5a:31:e0:54:98:f0:68:0e:ed: 1d:fd:42:43:21:c0:0e:5d:bf:eb:1a:2c:b5:5a:6f:1b:e0:81: da:c5:7c:0e:64:60:e8:bf:fc:ad:bd:24:4c:96:98:23:71:65: 12:be:1d:8a:f4:d4:20:14:7e:21:fe:9d:79:2a:ca:5d:29:9a: b2:ed:03:97:8a:30:72:5d:67:e2:3c:22:99:32:57:55:8c:09: bf:4c:9b:f3:76:7e:18:22:11:05:12:ea:1a:8b:ab:f3:5b:aa: dc:5d:ec:69:a3:ac:40:6e:e5:9b:08:ad:54:f4:46:65:3d:f0: 71:0c:d5:de:e2:a5:dd:34:b8:9f:bd:2d:86:87:ec:ec:23:b3: 13:a7:72:d0:ee:c9:7d:af:e7:37:eb:28:0c:f3:ab:76:e6:38: 8e:1b:8f:50:8d:b1:8e:2e:b3:ac:81:56:f6:b5:1f:40:33:bf: af:f5:f6:c0:58:2f:23:e7:3f:44:31:73:d6:6b:56:9a:28:86: db:69:8c:14:f3:ec:f6:91:4b:bf:be:94:a7:7d:9c:3f:cf:86: 24:62:bf:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEyNjI3MkJDQjFD OTZEQkZFNUUwHhcNMjQxMTIzMDA0MDEzWhcNMjQxMTMwMDA0MDEzWjAYMRYwFAYD VQQDEw02NzQxMjQ2ZC1iNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/DiJgwkZrK15XcPk0UmjUWI7dLz/batulcTv5zroD+8jjT4ml9EVqx5sZyR iQgvC7ibY19mhTCJ0FgUMC09bRnxfjGXfNoQG+yg/81tz9YtFyvkqtOEZhr7kUac FQ9a4PRJbuUJyyn1fgg4faXYdiCvh3Je9DWdrhicIC1hLbn1z9vMooW8cWOrIzfR 3P11SBA3u957IbbctwPmD2vrFMd1d6vr3LpzQXhwfOEeWQYrjPjoJMoHTRyHyJEb NoUZ931grwTNQvwEhJcSiSoHgnvrnKR9YSoEOCo8T4phZ8nSNb0BANATGHgu9X93 TX6LQ5xNFm3cFlcZQ9AAnqBi5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkp2oAD daPLktkg4/diBqXi2iJbMB8GA1UdIwQYMBaAFLQpj8sthJ2NTXEqJicryxyW2/5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRS81QUU3ODUyRTlG MjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5ZMU5jU29tSnl2TEhKYmJf bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RDbVB5eTJFblkxTmNTb21KeXZMSEpiYl9sNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5Z MU5jU29tSnl2TEhKYmJfbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCxscFKgYxBFk92ke4LQNYIG+MQ5av7m3K6S6wiDG4C8yvlKiGnyKw SJpkv5BaMeBUmPBoDu0d/UJDIcAOXb/rGiy1Wm8b4IHaxXwOZGDov/ytvSRMlpgj cWUSvh2K9NQgFH4h/p15KspdKZqy7QOXijByXWfiPCKZMldVjAm/TJvzdn4YIhEF Euoai6vzW6rcXexpo6xAbuWbCK1U9EZlPfBxDNXe4qXdNLifvS2Gh+zsI7MTp3LQ 7sl9r+c36ygM86t25jiOG49QjbGOLrOsgVb2tR9AM7+v9fbAWC8j5z9EMXPWa1aa KIbbaYwU8+z2kUu/vpSnfZw/z4YkYr8C -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:29 2024 by rpki-client on console-ams.rpki-client.org