$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json) Hash identifier: R7AcuIPmNyN9jTEvpxWrvGHCOWyW7jwASfwisIBfXrE= Subject key identifier: 6B:CE:78:5A:BF:F4:87:24:6E:70:5F:95:69:27:73:54:06:3F:D1:F1 Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft Manifest number: 61 Signing time: Thu 21 Nov 2024 05:10:46 +0000 Manifest this update: Thu 21 Nov 2024 05:10:46 +0000 Manifest next update: Thu 28 Nov 2024 05:10:46 +0000 Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: HzM7imraBHfJSV4UKFjQTZ2y/MooHMCvc2gnwADKxyY=) 2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: MjGt04itAcx8gNx2WflFnwPVZOKhZPX7R3K5xPavI28=) 3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: erN7f1B2CkGS1+dEWje+lQKXL/zVRbw1MSrnrEP1M7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Validity Not Before: Nov 21 05:10:46 2024 GMT Not After : Nov 28 05:10:46 2024 GMT Subject: CN=673ec0d6-776b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7f:74:84:3b:a9:a1:67:65:67:fd:1b:e7:c7: 37:b5:b0:11:0e:52:71:ec:54:2b:47:fc:81:d6:83: 27:5b:a5:04:8b:5b:03:37:f8:87:c4:5d:39:08:56: 3f:5c:79:f6:41:bb:02:bf:56:3d:e0:54:a4:84:7e: 44:c1:15:84:b7:8d:63:d2:3e:ea:e5:46:83:34:61: ec:03:ae:d6:d9:5d:48:6f:6c:ea:7e:a3:b6:d9:a9: 70:4a:cb:37:2d:79:4a:f9:ab:98:ff:b8:37:2e:f1: 7d:26:f3:bc:e0:f5:99:dd:94:97:ed:5d:a8:38:86: f9:ff:62:83:ea:ec:dd:07:cd:9a:35:24:32:2e:51: 80:6a:2e:bb:20:49:98:cc:9a:93:be:4a:24:6e:d5: aa:ae:d1:2a:00:9f:9f:2e:ea:da:32:41:41:2d:47: 93:9d:14:0e:08:55:98:c7:30:60:27:fc:b4:e6:53: 75:7b:04:e1:0a:f6:d8:2f:49:ed:72:61:2a:ea:9b: 4a:a2:13:46:8e:3b:c7:27:97:ec:26:b1:12:5b:5a: 99:3e:b2:05:1b:b4:76:12:b1:f5:eb:81:28:8e:7b: 37:66:aa:06:21:eb:65:e2:fd:73:dc:01:fe:6e:12: f4:d1:52:fd:6b:8d:be:a2:b2:3f:bc:b4:ee:79:aa: c3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CE:78:5A:BF:F4:87:24:6E:70:5F:95:69:27:73:54:06:3F:D1:F1 X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c9:85:a3:e5:9c:50:63:98:30:f3:e2:98:15:36:44:7e:32: 79:bb:2c:96:5d:40:de:78:a9:57:e3:47:ee:15:16:13:44:71: 65:fe:82:6f:a0:f4:0c:71:02:65:e5:c2:8e:29:d4:ce:4a:c1: a9:2b:49:4f:13:47:e7:16:be:9f:1b:31:2b:d6:e0:c9:e1:4d: f7:2c:e8:f5:2c:a5:3c:42:3b:95:23:3c:79:4d:f0:fa:55:da: 0b:a2:10:4c:66:80:96:f5:b7:fc:75:89:58:9e:bc:0b:ea:f7: 3b:26:74:68:5b:de:39:e8:fb:09:85:3f:9f:8a:56:b4:c9:ea: f3:52:34:12:65:7b:f3:60:8a:4c:50:1f:3f:ad:d0:67:5d:d3: c3:33:19:b6:3a:b0:82:88:f1:15:ec:54:e8:67:71:7e:0b:bf: 7c:80:01:19:68:e3:60:2b:04:f6:c3:9e:75:e0:ba:e0:40:bf: 89:dc:58:a1:8d:b6:5c:bb:ff:6a:fe:96:09:02:3a:58:35:ef: 83:5c:66:d7:70:79:5f:72:c0:88:4f:ce:eb:83:dd:97:d5:86: 16:dd:83:e8:27:bd:06:31:29:5a:07:30:93:50:fb:c4:38:a5: 79:9c:5d:39:14:7e:be:82:05:aa:c3:99:03:bf:9b:ae:82:c4: 60:6e:d0:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OThFQzExMC8GA1UEBRMoRTU4RjBGNTJBNEQyRDFERTQ0Njc1QUNBMTc1NTdCRjk4 MkVDN0Q3OTAeFw0yNDExMjEwNTEwNDZaFw0yNDExMjgwNTEwNDZaMBgxFjAUBgNV BAMTDTY3M2VjMGQ2LTc3NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIf3SEO6mhZ2Vn/Rvnxze1sBEOUnHsVCtH/IHWgydbpQSLWwM3+IfEXTkIVj9c efZBuwK/Vj3gVKSEfkTBFYS3jWPSPurlRoM0YewDrtbZXUhvbOp+o7bZqXBKyzct eUr5q5j/uDcu8X0m87zg9ZndlJftXag4hvn/YoPq7N0HzZo1JDIuUYBqLrsgSZjM mpO+SiRu1aqu0SoAn58u6toyQUEtR5OdFA4IVZjHMGAn/LTmU3V7BOEK9tgvSe1y YSrqm0qiE0aOO8cnl+wmsRJbWpk+sgUbtHYSsfXrgSiOezdmqgYh62Xi/XPcAf5u EvTRUv1rjb6isj+8tO55qsPXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa854Wr/0 hyRucF+VaSdzVAY/0fEwHwYDVR0jBBgwFoAU5Y8PUqTS0d5EZ1rKF1V7+YLsfXkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5OEVDLzIxRTVBMzBBMUVF MTExRUY5M0Y5ODUzREM0RjlBRTAyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZY ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVk4UFVxVFMwZDVFWjFyS0YxVjctWUxzZlhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 OEVDLzIxRTVBMzBBMUVFMTExRUY5M0Y5ODUzREM0RjlBRTAyLzVZOFBVcVRTMGQ1 RVoxcktGMVY3LVlMc2ZYay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFvJhaPlnFBjmDDz4pgVNkR+Mnm7LJZdQN54qVfjR+4VFhNEcWX+gm+g 9AxxAmXlwo4p1M5KwakrSU8TR+cWvp8bMSvW4MnhTfcs6PUspTxCO5UjPHlN8PpV 2guiEExmgJb1t/x1iVievAvq9zsmdGhb3jno+wmFP5+KVrTJ6vNSNBJle/NgikxQ Hz+t0Gdd08MzGbY6sIKI8RXsVOhncX4Lv3yAARlo42ArBPbDnnXguuBAv4ncWKGN tly7/2r+lgkCOlg174NcZtdweV9ywIhPzuuD3ZfVhhbdg+gnvQYxKVoHMJNQ+8Q4 pXmcXTkUfr6CBarDmQO/m66CxGBu0LY= -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org