$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json) Hash identifier: 0E4mLyIYuJ6fZ6Wfu+tH5DHbjJ1P0drjl3tNeP96pB4= Subject key identifier: E0:C2:E1:C2:65:73:57:57:06:4D:3B:35:8C:98:66:B7:4B:9E:CD:A0 Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft Manifest number: 0450 Signing time: Fri 22 Nov 2024 23:48:12 +0000 Manifest this update: Fri 22 Nov 2024 23:48:12 +0000 Manifest next update: Fri 29 Nov 2024 23:48:12 +0000 Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: PCllQX3s6XScTGEA+RWobY1ZDNz/rxs/guN3PMAElJ8=) 2: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: q1neCCft+Zr05hq6G1aFek9AaQMcQFbFqs59rfeUCOs=) 3: 1295B5943FA611EF94664041C4F9AE02.roa (hash: 9y28Ro744mk64orsKu+XqRMBjQXuQzIproIHRZgXM3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Validity Not Before: Nov 22 23:48:12 2024 GMT Not After : Nov 29 23:48:12 2024 GMT Subject: CN=6741183c-d9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:da:5c:ca:9d:3a:a9:fa:5c:ba:95:c1:bf: b5:be:24:97:f8:af:30:e9:14:4c:98:f5:74:dd:77: 5e:6b:f9:36:4c:46:c9:cf:4b:9a:ef:4b:a5:56:a0: d9:ad:fe:00:c8:21:7e:d6:f3:2f:25:f2:b5:e5:13: 4e:91:c2:43:37:ad:76:b9:ad:7e:2e:d8:3e:66:94: 59:32:00:e0:96:8b:c3:49:f1:8c:ed:ec:bb:c6:89: 18:f8:48:01:8e:58:b4:e0:c1:7b:d8:2f:e6:3c:2f: 7e:fc:9e:90:29:c8:6f:d6:00:df:1e:c5:55:a8:95: 4f:1d:06:2a:ef:1f:43:d0:23:28:99:d6:d7:87:f2: 23:1e:28:9c:e6:a4:33:a5:d9:a7:d2:0e:9f:7f:f3: 4a:62:43:d0:50:7c:03:16:bd:4f:73:79:e2:4a:bc: e3:8c:3c:81:2e:0b:b0:81:03:80:99:e0:2b:86:f6: f1:5f:50:ab:4f:88:75:ed:73:60:2e:4c:88:cd:eb: c4:7f:3c:21:ec:16:94:70:6d:32:5d:96:9f:80:e1: a5:78:86:94:5d:9b:de:89:cd:40:e3:1e:62:4c:9f: 0a:91:c6:c2:c3:93:93:6f:54:f0:ff:b2:24:9e:f7: 69:2d:7d:4a:9b:f2:fe:05:86:22:19:d3:1f:7f:4f: 18:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C2:E1:C2:65:73:57:57:06:4D:3B:35:8C:98:66:B7:4B:9E:CD:A0 X509v3 Authority Key Identifier: keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:fd:e7:d0:9a:ed:7c:0d:54:79:46:ff:a3:63:b7:58:97:16: bf:d4:2c:96:13:ba:76:79:00:81:da:8c:8a:c7:91:b9:a0:48: 28:0d:86:8e:55:f8:9c:d4:df:35:33:87:43:75:f2:61:b5:2f: cb:24:59:db:9f:88:ef:4e:81:98:02:96:42:04:19:e3:ba:18: 42:28:51:d4:5a:86:7e:56:1b:36:e0:0e:9c:86:9b:84:b7:d9: a3:23:76:67:cd:4e:80:aa:33:6e:04:c4:39:16:6f:09:74:36: c4:15:53:bf:e8:64:7a:72:c2:98:b6:bc:4b:cb:80:5d:12:00: 56:92:0c:ac:31:13:ac:9b:05:eb:e2:ae:69:0f:ab:92:af:7a: 93:97:4b:c3:2d:c1:a8:50:5f:de:ee:51:e7:94:0f:c5:17:17: 4f:bd:1c:00:28:3b:10:e8:49:48:51:e2:15:f2:c7:a7:4d:72: 70:9c:04:07:4a:26:8c:fc:29:64:b5:f7:59:fc:11:d9:4e:fa: 5e:d8:9c:fc:80:0c:bf:c5:bd:a0:33:fe:22:dd:d8:0c:3e:0b: a0:93:0f:77:1f:f9:de:75:92:0a:b4:0f:af:01:a6:5e:f0:fb: c0:c2:97:9b:18:79:22:67:03:1b:1f:f8:af:a5:80:54:2c:ef: d4:ec:4d:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE MjM5MzU5MkEwHhcNMjQxMTIyMjM0ODEyWhcNMjQxMTI5MjM0ODEyWjAYMRYwFAYD VQQDEw02NzQxMTgzYy1kOWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaraXMqdOqn6XLqVwb+1viSX+K8w6RRMmPV03Xdea/k2TEbJz0ua70ulVqDZ rf4AyCF+1vMvJfK15RNOkcJDN612ua1+Ltg+ZpRZMgDglovDSfGM7ey7xokY+EgB jli04MF72C/mPC9+/J6QKchv1gDfHsVVqJVPHQYq7x9D0CMomdbXh/IjHiic5qQz pdmn0g6ff/NKYkPQUHwDFr1Pc3niSrzjjDyBLguwgQOAmeArhvbxX1CrT4h17XNg LkyIzevEfzwh7BaUcG0yXZafgOGleIaUXZveic1A4x5iTJ8KkcbCw5OTb1Tw/7Ik nvdpLX1Km/L+BYYiGdMff08YSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODC4cJl c1dXBk07NYyYZrdLns2gMB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUNBQy9CM0JEQTU2NDMxRDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRK Si11MzVHSElCWURTT1RXU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU/efQmu18DVR5Rv+jY7dYlxa/1CyWE7p2eQCB2oyKx5G5oEgoDYaO Vfic1N81M4dDdfJhtS/LJFnbn4jvToGYApZCBBnjuhhCKFHUWoZ+Vhs24A6chpuE t9mjI3ZnzU6AqjNuBMQ5Fm8JdDbEFVO/6GR6csKYtrxLy4BdEgBWkgysMROsmwXr 4q5pD6uSr3qTl0vDLcGoUF/e7lHnlA/FFxdPvRwAKDsQ6ElIUeIV8senTXJwnAQH SiaM/ClktfdZ/BHZTvpe2Jz8gAy/xb2gM/4i3dgMPgugkw93H/nedZIKtA+vAaZe 8PvAwpebGHkiZwMbH/ivpYBULO/U7E3y -----END CERTIFICATE-----Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org