$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json) Hash identifier: WJKCxzvdX1GMll9ggaRkHtFl6UR5EIESbsJEWs6ixFw= Subject key identifier: 1D:81:72:0D:30:27:E6:23:B5:B9:21:E7:A6:C8:ED:1C:A1:35:F9:E9 Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 344A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft Manifest number: 3436 Signing time: Fri 22 Nov 2024 14:56:59 +0000 Manifest this update: Fri 22 Nov 2024 14:56:59 +0000 Manifest next update: Fri 29 Nov 2024 14:56:59 +0000 Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: Ygu7JoaHrSVLivZqXopdWKpYbTDyDBLdhqEsj/tkfpY=) 2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: HW9R1Ep56SryGIz4W6P5CqXSgSxlXz4KavtGaF387a4=) 3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: AqcTvl3JE8iQmp2mHhzhnxH+2xnTnNkhAQ8gJbtZg+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13386 (0x344a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: Nov 22 14:56:59 2024 GMT Not After : Nov 29 14:56:59 2024 GMT Subject: CN=67409bbb-1d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5c:b3:71:2e:95:5c:94:39:11:8c:e1:fc:d9: ea:7e:93:7f:dc:99:9b:95:dd:72:ca:bc:5d:07:3a: 8d:56:89:d8:01:c2:e9:b1:7a:2f:06:ab:34:e1:ef: 40:ea:33:5e:19:0d:74:54:56:7a:6d:84:19:37:56: 15:dc:81:cf:a1:be:6b:89:cd:be:ef:57:61:8d:c5: 36:e2:78:c1:4b:b1:c1:d4:e0:6a:62:82:02:b6:1c: d2:fc:02:f7:98:db:0e:34:fd:91:e9:31:e5:cc:6d: 1f:83:53:7c:ad:e9:11:e4:55:f0:a8:22:95:21:89: c4:3c:c7:97:1d:5f:c6:ba:72:be:be:1c:1a:bd:94: 16:8e:a2:7f:66:04:ff:40:3a:fd:9a:1d:58:47:a7: 84:77:55:67:d4:a7:61:b4:0a:30:8c:3b:2e:fa:f6: 57:0b:85:f2:57:75:18:f7:a4:9d:3a:96:4c:3e:b3: df:5f:3f:11:2a:fb:92:cd:05:86:42:a0:79:2a:c2: df:2c:e5:35:31:6f:33:05:3d:4b:da:7b:b2:bb:61: 02:7e:74:fe:cd:71:af:e7:8f:b2:e4:27:69:27:85: 79:35:59:bb:f6:01:22:df:c0:33:53:da:f7:f9:db: 4a:be:7b:98:ac:52:58:4a:dc:32:e2:12:d6:86:bf: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:81:72:0D:30:27:E6:23:B5:B9:21:E7:A6:C8:ED:1C:A1:35:F9:E9 X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:67:b5:cc:2a:5e:66:71:a2:a8:b6:6d:5e:3e:f7:d2:f0:34: 78:c4:f0:6a:95:62:16:77:4e:89:d3:a0:6b:d5:29:6a:c5:4e: ea:3f:83:bc:81:ed:b8:3f:b2:bd:68:1e:4e:af:90:7c:04:13: fa:1c:6d:4f:bc:ce:ff:a9:cc:45:74:d5:9a:8e:ff:38:20:20: 0e:41:fb:79:15:b8:f1:a8:c6:fd:30:51:91:53:4f:d4:dd:6f: c7:fb:9f:5e:7b:4a:0b:bb:4c:f7:06:ce:6e:fd:f0:8c:6b:4b: e6:7e:1c:c9:a7:74:68:8e:5d:de:d3:6a:b3:e9:96:ae:5d:86: bb:39:c5:06:44:4d:3d:15:c9:99:ff:23:de:71:58:e7:c6:3f: 91:dd:bd:cf:2a:2d:ee:5c:bd:5f:d9:07:d9:3c:4d:f5:8a:4d: 61:af:06:99:dc:75:6f:55:63:42:e5:40:30:14:40:2e:ea:4d: 3c:e0:5d:84:db:b1:26:5c:85:fb:95:61:28:f2:64:a2:47:ac: 37:57:3c:4a:4a:90:61:b3:81:13:c0:7e:4c:06:35:91:f2:d3: 9c:24:dd:71:87:76:c0:82:d6:1e:0e:e4:75:3c:7e:15:3b:83: ed:ad:27:42:f7:85:04:a8:c5:80:30:06:26:56:87:56:0c:29: eb:7b:99:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjQxMTIyMTQ1NjU5WhcNMjQxMTI5MTQ1NjU5WjAYMRYwFAYD VQQDEw02NzQwOWJiYi0xZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolyzcS6VXJQ5EYzh/NnqfpN/3Jmbld1yyrxdBzqNVonYAcLpsXovBqs04e9A 6jNeGQ10VFZ6bYQZN1YV3IHPob5ric2+71dhjcU24njBS7HB1OBqYoICthzS/AL3 mNsONP2R6THlzG0fg1N8rekR5FXwqCKVIYnEPMeXHV/GunK+vhwavZQWjqJ/ZgT/ QDr9mh1YR6eEd1Vn1KdhtAowjDsu+vZXC4XyV3UY96SdOpZMPrPfXz8RKvuSzQWG QqB5KsLfLOU1MW8zBT1L2nuyu2ECfnT+zXGv54+y5CdpJ4V5NVm79gEi38AzU9r3 +dtKvnuYrFJYStwy4hLWhr+5jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2Bcg0w J+Yjtbkh56bI7RyhNfnpMB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjdGOS82RUQyRUJBQTFEOUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtp bVByQU1xLThtRUNjUkRCRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCZ7XMKl5mcaKotm1ePvfS8DR4xPBqlWIWd06J06Br1SlqxU7qP4O8 ge24P7K9aB5Or5B8BBP6HG1PvM7/qcxFdNWajv84ICAOQft5FbjxqMb9MFGRU0/U 3W/H+59ee0oLu0z3Bs5u/fCMa0vmfhzJp3Rojl3e02qz6ZauXYa7OcUGRE09FcmZ /yPecVjnxj+R3b3PKi3uXL1f2QfZPE31ik1hrwaZ3HVvVWNC5UAwFEAu6k084F2E 27EmXIX7lWEo8mSiR6w3VzxKSpBhs4ETwH5MBjWR8tOcJN1xh3bAgtYeDuR1PH4V O4PtrSdC94UEqMWAMAYmVodWDCnre5nM -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:19 2024 by rpki-client on console-ams.rpki-client.org