$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json) Hash identifier: giErx/FDQIrr+SwdbvxDPICf53+Dpg5pwftSY9uJQv8= Subject key identifier: 18:E8:4A:B0:6C:65:9C:DE:6F:22:DF:74:97:45:B9:B7:2E:CF:FD:B9 Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0E0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft Manifest number: 0E0A Signing time: Fri 22 Nov 2024 17:44:49 +0000 Manifest this update: Fri 22 Nov 2024 17:44:48 +0000 Manifest next update: Fri 29 Nov 2024 17:44:48 +0000 Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: V7QRLXyksHXLkpfDKBP8oU3In0TG/cQrzNVZgvDofq4=) 2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: H8knPIbuLtwUcaByLoJZ9f2Kl4YvVFA0lwHyLpg+7j8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3599 (0xe0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: Nov 22 17:44:48 2024 GMT Not After : Nov 29 17:44:48 2024 GMT Subject: CN=6740c311-a8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:47:c2:a9:91:05:58:da:c4:3a:07:ea:06: ed:dd:11:1b:d7:49:d5:af:d7:a0:c3:d0:96:43:f6: ac:43:a6:57:e2:7a:ce:f0:18:1a:c5:40:a9:43:45: b7:94:23:b1:23:e4:da:4a:03:cc:06:3a:b5:b7:37: 3d:45:e2:0d:d9:f6:0b:5b:21:91:09:0b:db:33:de: 3f:01:98:83:1a:19:3d:06:e0:88:57:9a:c0:8e:d4: 5b:4f:0a:37:1d:41:d8:13:65:aa:65:f5:61:5a:45: c3:1e:32:24:0c:59:80:e3:c1:88:44:bd:29:a6:84: 23:a8:49:da:4b:a8:8a:b1:8c:a6:8c:4b:22:2a:9a: f1:a5:d9:c2:5c:c6:f0:ad:00:b1:1d:26:c1:17:b9: 5f:ec:fb:91:81:29:0c:5f:db:98:af:21:23:70:78: 3f:d8:11:58:de:cb:91:da:76:b4:f6:8b:77:6d:dd: 90:f5:08:1e:39:72:08:12:36:ab:90:e8:d6:99:fc: 2b:70:f3:fe:c0:fa:43:5e:4f:b6:47:53:3e:07:c0: f2:9b:c6:3d:a9:c2:9f:50:5a:5d:40:4a:da:a4:3c: bf:be:6d:2f:31:20:20:ad:4c:39:2b:33:7e:9f:86: 78:1d:b5:c2:d3:8c:4b:1c:8c:ce:57:01:2e:13:9d: ba:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E8:4A:B0:6C:65:9C:DE:6F:22:DF:74:97:45:B9:B7:2E:CF:FD:B9 X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:17:1b:2f:27:04:4b:95:68:f2:aa:cd:3a:bd:cb:e1:d4:6f: cb:8e:2e:0d:ec:45:93:15:2d:0f:cd:74:12:03:b3:e6:07:8b: f0:e3:78:fd:23:71:cf:af:ef:60:cd:61:fb:0a:d5:b4:24:5d: bc:be:c8:c8:02:21:99:78:92:a9:3a:b5:ce:98:3f:77:77:a8: e4:0a:48:41:a5:c5:48:7e:91:c7:4a:c5:d8:ea:be:f8:48:b8: 9d:f1:db:05:a3:9e:b4:99:83:15:26:02:f6:65:92:88:b9:de: 1a:66:27:85:27:5d:06:a3:17:50:73:60:4f:68:a3:ee:63:fe: ce:42:d0:21:b4:0f:82:f6:a8:eb:b3:9d:12:a0:63:6d:83:52: 97:53:10:db:e0:16:d4:75:80:f9:a3:bf:07:84:df:8d:ca:99: 77:e1:d6:e3:c3:f0:36:51:3b:ca:d4:eb:50:98:91:2e:a3:0f: 36:ae:79:1d:cb:23:fe:13:0e:c5:91:09:e1:8a:c1:9a:d8:0d: 5e:f9:fa:72:8d:33:f6:25:7d:22:27:1e:8c:64:a0:8b:d3:7f: c1:85:f0:f2:33:d3:16:be:7e:05:de:bd:11:e9:4f:32:88:9b: 29:72:7c:2f:25:1f:e9:e0:19:4e:b7:2b:ce:85:d2:f5:b0:03: d3:3d:44:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjQxMTIyMTc0NDQ4WhcNMjQxMTI5MTc0NDQ4WjAYMRYwFAYD VQQDEw02NzQwYzMxMS1hOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6hHwqmRBVjaxDoH6gbt3REb10nVr9egw9CWQ/asQ6ZX4nrO8BgaxUCpQ0W3 lCOxI+TaSgPMBjq1tzc9ReIN2fYLWyGRCQvbM94/AZiDGhk9BuCIV5rAjtRbTwo3 HUHYE2WqZfVhWkXDHjIkDFmA48GIRL0ppoQjqEnaS6iKsYymjEsiKprxpdnCXMbw rQCxHSbBF7lf7PuRgSkMX9uYryEjcHg/2BFY3suR2na09ot3bd2Q9QgeOXIIEjar kOjWmfwrcPP+wPpDXk+2R1M+B8Dym8Y9qcKfUFpdQErapDy/vm0vMSAgrUw5KzN+ n4Z4HbXC04xLHIzOVwEuE526jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjoSrBs ZZzebyLfdJdFubcuz/25MB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTYzNy85QkFFQTEzQTk3NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8y alBkaElGRmV5c1l1X2FQa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0FxsvJwRLlWjyqs06vcvh1G/Lji4N7EWTFS0PzXQSA7PmB4vw43j9 I3HPr+9gzWH7CtW0JF28vsjIAiGZeJKpOrXOmD93d6jkCkhBpcVIfpHHSsXY6r74 SLid8dsFo560mYMVJgL2ZZKIud4aZieFJ10GoxdQc2BPaKPuY/7OQtAhtA+C9qjr s50SoGNtg1KXUxDb4BbUdYD5o78HhN+Nypl34dbjw/A2UTvK1OtQmJEuow82rnkd yyP+Ew7FkQnhisGa2A1e+fpyjTP2JX0iJx6MZKCL03/BhfDyM9MWvn4F3r0R6U8y iJspcnwvJR/p4BlOtyvOhdL1sAPTPUQ8 -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:23 2024 by rpki-client on console-ams.rpki-client.org