$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft File: 5nV74dIYmt6NdyyclIZDEL45LXA.mft (raw, json) Hash identifier: kQCDw8eG5xOu6YpPQ6VF6g2b1e7FlUS1gQEs9xWd+RE= Subject key identifier: 06:A2:F4:87:BE:8F:89:FB:26:E6:F8:54:E2:12:91:8B:B6:31:03:B8 Authority key identifier: E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 Certificate issuer: /CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Certificate serial: 0402 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft Manifest number: 03FD Signing time: Sat 23 Nov 2024 00:01:57 +0000 Manifest this update: Sat 23 Nov 2024 00:01:57 +0000 Manifest next update: Sat 30 Nov 2024 00:01:57 +0000 Files and hashes: 1: 5nV74dIYmt6NdyyclIZDEL45LXA.crl (hash: qziJ9EaLmPFGsKh2AMTBR/ji23dekwUW85B+XYseUvM=) 2: 2B70BBE889E111EEB5E86A0EC4F9AE02.roa (hash: t8vQxa/52rqt/b8S2ZS30M2W7RkkG9Y+HmsuhsTC7MQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1026 (0x402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F9E/serialNumber=E6757BE1D2189ADE8D772C9C94864310BE392D70 Validity Not Before: Nov 23 00:01:57 2024 GMT Not After : Nov 30 00:01:57 2024 GMT Subject: CN=67411b75-4b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:ff:aa:f7:87:7a:69:a4:f9:21:5a:a4:e6: 58:11:ea:01:9f:53:69:6f:4c:d0:d4:5a:5f:f8:6b: f2:4a:e3:11:ed:9a:da:c9:0b:39:0a:5e:e3:05:1f: 2c:f2:e8:a1:83:83:67:76:41:cf:78:e9:28:61:12: b3:a6:65:ff:1b:e9:09:bc:b2:ce:65:27:da:a1:d9: 0c:35:6c:15:c8:9c:e7:37:e5:bb:14:ca:1a:8a:f2: 8c:a3:d3:0b:8c:e3:58:26:fe:27:0c:ff:6e:3c:78: 74:74:2e:32:73:d4:89:fc:0c:79:a7:2a:25:3f:0e: 43:8d:87:98:18:3a:ec:99:8c:98:00:7f:6e:0b:85: d9:cc:af:76:9a:ed:3b:6b:05:53:ed:09:08:f1:07: a3:7a:b9:34:c3:69:75:6a:9e:3f:aa:69:e0:4d:17: 24:33:3e:ef:28:fb:4b:ee:73:e3:67:54:3c:27:4f: ea:86:d5:0b:d6:19:1b:5c:89:ae:18:dd:1a:22:27: 6b:82:d0:81:ba:f3:68:ac:ec:c8:e3:7d:10:51:58: c2:0d:f4:4e:e3:29:bb:27:2d:53:c2:f1:a3:d3:11: ad:d4:f2:1f:c5:51:19:64:d7:37:28:4a:62:21:c3: f9:85:27:93:b3:fe:71:ee:2c:9f:5d:d5:2f:57:97: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A2:F4:87:BE:8F:89:FB:26:E6:F8:54:E2:12:91:8B:B6:31:03:B8 X509v3 Authority Key Identifier: keyid:E6:75:7B:E1:D2:18:9A:DE:8D:77:2C:9C:94:86:43:10:BE:39:2D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nV74dIYmt6NdyyclIZDEL45LXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F9E/006CE99C500611EC9056CD45C4F9AE02/5nV74dIYmt6NdyyclIZDEL45LXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:44:4d:82:f2:8e:b1:6b:a4:33:3f:d0:d0:3e:1a:ac:38:51: 52:c7:c0:3a:ca:4d:35:34:70:1e:ac:54:69:1f:06:da:47:a1: 56:a1:11:6e:e4:48:dc:1b:85:84:f0:f9:90:14:3e:a8:3a:e5: 81:ee:90:ec:b5:41:ca:44:47:d6:b3:3f:f2:ba:90:42:31:62: a5:c3:0b:22:99:47:eb:90:55:e2:62:c8:58:5b:ef:d2:78:b4: a4:25:59:f9:20:20:f4:2d:7c:4e:71:f6:0d:be:7f:ca:ad:60: f5:3c:2a:e6:71:28:cc:d1:42:a0:21:1d:6d:c8:e2:3c:79:f9: 82:74:6c:14:4b:bd:82:1f:49:ce:2b:3b:d7:da:a6:f7:06:21: ec:49:cb:4a:ac:5a:09:24:22:98:47:3c:38:7d:0f:69:62:ad: 52:a6:f8:75:f6:25:a7:70:31:9a:42:55:88:c9:b6:6f:13:fc: 8d:e5:5e:16:a0:48:01:f5:27:22:e9:64:ac:1e:9b:fd:1a:b0: 1e:e4:d1:a8:bb:af:1c:72:19:2c:eb:70:11:bd:d3:ce:91:ef: 7f:5e:a3:60:8c:90:5a:8a:2d:38:4d:03:f1:e0:d8:22:ae:cd: 12:5b:d6:ff:97:df:45:e8:e5:67:3c:17:94:0e:3e:d0:92:b7: fa:c8:11:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGOUUxMTAvBgNVBAUTKEU2NzU3QkUxRDIxODlBREU4RDc3MkM5Qzk0ODY0MzEw QkUzOTJENzAwHhcNMjQxMTIzMDAwMTU3WhcNMjQxMTMwMDAwMTU3WjAYMRYwFAYD VQQDEw02NzQxMWI3NS00YjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskH/qveHemmk+SFapOZYEeoBn1Npb0zQ1Fpf+GvySuMR7ZrayQs5Cl7jBR8s 8uihg4NndkHPeOkoYRKzpmX/G+kJvLLOZSfaodkMNWwVyJznN+W7FMoaivKMo9ML jONYJv4nDP9uPHh0dC4yc9SJ/Ax5pyolPw5DjYeYGDrsmYyYAH9uC4XZzK92mu07 awVT7QkI8Qejerk0w2l1ap4/qmngTRckMz7vKPtL7nPjZ1Q8J0/qhtUL1hkbXImu GN0aIidrgtCBuvNorOzI430QUVjCDfRO4ym7Jy1TwvGj0xGt1PIfxVEZZNc3KEpi IcP5hSeTs/5x7iyfXdUvV5dt8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAai9Ie+ j4n7Jub4VOISkYu2MQO4MB8GA1UdIwQYMBaAFOZ1e+HSGJrejXcsnJSGQxC+OS1w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY5RS8wMDZDRTk5QzUw MDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10Nk5keXljbElaREVMNDVM WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuVjc0ZElZbXQ2TmR5eWNsSVpERUw0NUxYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY5RS8wMDZDRTk5QzUwMDYxMUVDOTA1NkNENDVDNEY5QUUwMi81blY3NGRJWW10 Nk5keXljbElaREVMNDVMWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQRE2C8o6xa6QzP9DQPhqsOFFSx8A6yk01NHAerFRpHwbaR6FWoRFu 5EjcG4WE8PmQFD6oOuWB7pDstUHKREfWsz/yupBCMWKlwwsimUfrkFXiYshYW+/S eLSkJVn5ICD0LXxOcfYNvn/KrWD1PCrmcSjM0UKgIR1tyOI8efmCdGwUS72CH0nO KzvX2qb3BiHsSctKrFoJJCKYRzw4fQ9pYq1Spvh19iWncDGaQlWIybZvE/yN5V4W oEgB9Sci6WSsHpv9GrAe5NGou68cchks63ARvdPOke9/XqNgjJBaii04TQPx4Ngi rs0SW9b/l99F6OVnPBeUDj7Qkrf6yBE3 -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org