$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft File: A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft (raw, json) Hash identifier: EbJbk7jWbMYBApACTmUf7gHHHJlBgzceF65AtmPhKxQ= Subject key identifier: 67:B8:AB:10:C6:6C:83:38:14:30:3D:1A:30:A3:DC:58:42:64:38:67 Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft Manifest number: 04 Signing time: Mon 25 Nov 2024 06:09:43 +0000 Manifest this update: Mon 25 Nov 2024 06:09:42 +0000 Manifest next update: Mon 02 Dec 2024 06:09:42 +0000 Files and hashes: 1: A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl (hash: RAtDvkc+ES9EWAiMHVB3Pl0+Wj0dCx7BvROCHv2OCOI=) 2: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (hash: wskyOCDE340iqc6+xbxJBMsRJGfe9vODWh/hz8Ga1HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Validity Not Before: Nov 25 06:09:42 2024 GMT Not After : Dec 2 06:09:42 2024 GMT Subject: CN=674414a6-f166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:31:50:c6:75:bb:05:2c:cb:a1:cc:7c:cf:1f: 97:90:d2:0e:5d:cc:d8:87:aa:45:a4:ad:7e:8c:9c: 09:fe:06:7e:e8:32:f1:2e:7b:31:c5:a4:49:fc:b4: 27:56:f2:40:95:d1:16:e7:f7:7b:63:d0:a2:6c:15: d9:99:17:48:84:5a:01:3e:54:91:4a:85:15:25:a5: 9d:94:a9:95:c4:c2:22:ac:19:88:58:42:36:54:a5: d0:b2:f8:1d:b2:8c:31:7c:55:af:84:51:0b:5e:2f: 88:92:3e:38:4a:54:6e:30:f5:94:35:57:d4:2d:dd: 11:17:05:19:51:e7:b1:7d:26:44:a9:2a:77:71:93: ee:33:80:8b:2a:54:e8:fd:85:ea:8c:4e:b2:4f:55: e9:4b:7b:34:73:ff:e3:85:2b:5e:cc:d4:95:4e:da: dd:6a:da:bc:07:4b:87:0f:3a:b9:59:a9:02:c6:38: cc:c8:75:cb:1f:6b:55:e8:1c:9c:fb:6c:1f:20:f2: 7e:42:60:c8:5c:ce:c8:76:57:71:5d:b6:ed:ee:e5: 7c:2a:af:11:64:59:32:6e:7a:46:12:82:90:7c:56: e0:16:39:58:27:82:2a:3c:3e:fe:5d:54:ee:53:c0: 5c:92:75:36:d6:50:6e:7b:01:7d:fa:d5:83:56:50: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B8:AB:10:C6:6C:83:38:14:30:3D:1A:30:A3:DC:58:42:64:38:67 X509v3 Authority Key Identifier: keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:35:f5:c5:7f:b6:d0:aa:c2:33:3a:53:24:2e:8c:f1:68:86: fe:e2:13:34:9b:b6:9e:94:15:d2:44:ae:27:87:98:de:ae:66: b6:7a:17:3d:74:3c:f9:7a:2a:90:20:18:ef:55:d7:f1:f2:dd: 4b:df:19:f3:e7:26:84:b8:28:39:f0:51:50:57:77:80:a4:05: c4:65:6a:3e:86:d8:52:d4:0a:4d:90:9c:07:fb:f5:92:31:96: 13:07:8c:a4:4b:c1:25:cb:f0:23:d1:ff:54:f6:d1:0a:8d:dd: 5f:3d:49:8d:67:d4:24:e7:9b:43:ba:6c:3a:e1:69:7b:16:a1: 61:0b:d5:6f:87:b8:89:bc:4b:ae:7d:ae:93:d9:e0:1b:22:2d: 95:bf:f8:b9:ff:93:d9:e8:d3:dd:c1:dd:07:0a:a0:88:ef:5b: 5f:59:01:37:1e:bc:65:b6:88:35:c0:d1:cd:cb:25:7e:05:b3: 41:c6:b4:a0:1d:45:71:a8:3f:7b:e0:2d:ee:b2:e8:c4:89:24: c3:6c:8a:d6:83:f7:a5:f1:a5:ba:3b:9c:99:8f:69:ec:68:36: 8f:5e:38:6c:d0:65:61:0d:07:95:fd:ff:46:6d:e8:47:5f:c2: c7:5d:ef:b1:d3:a2:d4:54:3c:ad:1d:8f:e1:8b:77:4a:65:27: d9:d1:66:55 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODBGNzExMC8GA1UEBRMoMDM5MUQ5QTcwRTg5M0U3NTFCQzYxMjg5QzU0NDE3Qjg3 QTEwNDU1OTAeFw0yNDExMjUwNjA5NDJaFw0yNDEyMDIwNjA5NDJaMBgxFjAUBgNV BAMTDTY3NDQxNGE2LWYxNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFMVDGdbsFLMuhzHzPH5eQ0g5dzNiHqkWkrX6MnAn+Bn7oMvEuezHFpEn8tCdW 8kCV0Rbn93tj0KJsFdmZF0iEWgE+VJFKhRUlpZ2UqZXEwiKsGYhYQjZUpdCy+B2y jDF8Va+EUQteL4iSPjhKVG4w9ZQ1V9Qt3REXBRlR57F9JkSpKndxk+4zgIsqVOj9 heqMTrJPVelLezRz/+OFK17M1JVO2t1q2rwHS4cPOrlZqQLGOMzIdcsfa1XoHJz7 bB8g8n5CYMhczsh2V3Fdtu3u5XwqrxFkWTJuekYSgpB8VuAWOVgngio8Pv5dVO5T wFySdTbWUG57AX361YNWUMl5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ7irEMZs gzgUMD0aMKPcWEJkOGcwHwYDVR0jBBgwFoAUA5HZpw6JPnUbxhKJxUQXuHoQRVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MEY3L0E3RUJDMUQyQTdG ODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5VYnhoS0p4VVFYdUhvUVJW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTVIWnB3NkpQblVieGhLSnhVUVh1SG9RUlZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 MEY3L0E3RUJDMUQyQTdGODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5V YnhoS0p4VVFYdUhvUVJWay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADE19cV/ttCqwjM6UyQujPFohv7iEzSbtp6UFdJErieHmN6uZrZ6Fz10 PPl6KpAgGO9V1/Hy3UvfGfPnJoS4KDnwUVBXd4CkBcRlaj6G2FLUCk2QnAf79ZIx lhMHjKRLwSXL8CPR/1T20QqN3V89SY1n1CTnm0O6bDrhaXsWoWEL1W+HuIm8S659 rpPZ4BsiLZW/+Ln/k9no093B3QcKoIjvW19ZATcevGW2iDXA0c3LJX4Fs0HGtKAd RXGoP3vgLe6y6MSJJMNsitaD96Xxpbo7nJmPaexoNo9eOGzQZWENB5X9/0Zt6Edf wsdd77HTotRUPK0dj+GLd0plJ9nRZlU= -----END CERTIFICATE-----Generated at Mon Nov 25 07:19:47 2024 by rpki-client on console-ams.rpki-client.org