$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft File: M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json) Hash identifier: xctKio+7bAAOqrIFP5exKwmKS0TV4mOvFCbGwvl8c70= Subject key identifier: 65:92:6F:5D:76:45:AC:25:4C:C4:0F:E9:DA:E6:F0:0D:A5:FE:4A:98 Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A Certificate issuer: /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft Manifest number: 041F Signing time: Wed 20 Nov 2024 20:45:41 +0000 Manifest this update: Wed 20 Nov 2024 20:45:40 +0000 Manifest next update: Wed 27 Nov 2024 20:45:40 +0000 Files and hashes: 1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: vPYLWtAb6CNQs1YaHVdWYTW+IsYZA/uGagMhhM/u1fM=) 2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: iO0CtDJ9qFmzu7ZUksz7jk8uMnxxqilOr/Tb50/fP1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A Validity Not Before: Nov 20 20:45:40 2024 GMT Not After : Nov 27 20:45:40 2024 GMT Subject: CN=673e4a74-be5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bd:72:c6:92:d9:cf:cd:17:c8:65:cc:34:b5: 6b:bc:27:9a:d4:e6:ec:2f:cc:fb:26:c8:8a:da:be: a9:d2:e4:ed:09:41:31:05:56:bd:49:7b:65:b0:34: 6a:71:fa:c0:30:8a:de:c0:c7:ea:88:3d:fd:5b:b6: f9:24:ed:14:ac:bb:8c:db:39:d3:b4:5b:8f:96:a8: 0c:b2:3d:33:ea:6f:7c:20:94:0c:2f:6a:56:77:28: 7e:9b:13:45:9a:d2:ab:b2:14:25:71:60:43:6f:a8: b3:3a:b9:c7:3d:a5:85:fa:e7:4e:78:b0:e4:68:d2: de:3b:48:14:af:73:3e:ab:f5:67:27:24:75:37:12: 66:3d:47:17:e6:0f:73:50:63:65:53:f8:fa:dd:39: bc:d5:c2:2a:10:7e:25:71:a7:d1:0d:05:a0:42:64: f9:c4:a4:18:65:2b:ac:2d:4d:0a:d0:d0:4d:ca:06: 8e:4e:46:e6:6b:a1:97:10:64:7e:e4:c8:fc:83:a5: f9:1c:09:09:6a:ef:14:37:4a:41:a1:64:51:ed:f6: da:0f:05:8f:b4:90:7d:25:48:a7:2c:5d:e7:e9:44: 6b:3c:b8:0f:7c:62:f2:dd:e2:23:3e:ac:77:28:a4: 2d:ba:4f:02:a8:16:0e:e0:70:ec:02:0d:b7:e1:72: 4d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:92:6F:5D:76:45:AC:25:4C:C4:0F:E9:DA:E6:F0:0D:A5:FE:4A:98 X509v3 Authority Key Identifier: keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7b:17:dd:f7:44:cc:49:91:90:ef:d8:36:ac:65:73:f5:b5: 62:f1:b8:d1:bb:71:99:18:54:c0:f3:fd:89:1a:32:4b:c1:ca: 42:77:71:62:c0:a3:36:a2:d2:48:6e:2e:95:a1:a0:d6:b0:84: ff:8d:58:3b:cc:b5:0d:02:f4:37:7c:31:d8:c2:1b:15:aa:03: c9:74:b9:4e:86:22:27:b5:10:28:1d:31:f7:28:24:d9:38:eb: 36:eb:20:40:13:be:06:77:4b:a3:6a:ed:f1:cc:14:e1:c3:b8: 43:eb:44:ca:43:af:28:61:8c:80:4f:9f:be:4a:ce:78:2b:f3: 3d:7e:f4:b6:10:d7:18:a0:84:d8:ba:37:0e:cb:4d:85:80:e2: 68:b6:17:ca:b2:73:bb:ec:27:de:0b:c8:c6:6e:ed:59:d5:d3: 81:fc:4b:7e:89:17:9c:e3:13:50:58:03:b0:8a:e9:f6:84:11: da:d0:e7:cb:18:48:95:ee:f2:5a:a3:40:10:6c:06:4f:24:06: a2:01:6a:6c:7a:f5:19:12:5a:d9:6d:bb:af:94:9e:e7:f8:56: c6:28:18:d1:c9:95:48:35:ea:a3:3f:92:fa:99:50:02:59:9c: e7:50:0e:2a:88:04:ba:81:f0:fe:34:98:69:60:65:a4:8b:c3: 61:31:f3:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3 RkVEQzAzOUEwHhcNMjQxMTIwMjA0NTQwWhcNMjQxMTI3MjA0NTQwWjAYMRYwFAYD VQQDEw02NzNlNGE3NC1iZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv71yxpLZz80XyGXMNLVrvCea1ObsL8z7JsiK2r6p0uTtCUExBVa9SXtlsDRq cfrAMIrewMfqiD39W7b5JO0UrLuM2znTtFuPlqgMsj0z6m98IJQML2pWdyh+mxNF mtKrshQlcWBDb6izOrnHPaWF+udOeLDkaNLeO0gUr3M+q/VnJyR1NxJmPUcX5g9z UGNlU/j63Tm81cIqEH4lcafRDQWgQmT5xKQYZSusLU0K0NBNygaOTkbma6GXEGR+ 5Mj8g6X5HAkJau8UN0pBoWRR7fbaDwWPtJB9JUinLF3n6URrPLgPfGLy3eIjPqx3 KKQtuk8CqBYO4HDsAg234XJNJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWSb112 RawlTMQP6drm8A2l/kqYMB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3 RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NThERi84NjczNjA4MDQ3RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQ R2hoMzFKNzVmQTVfN2NBNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMexfd90TMSZGQ79g2rGVz9bVi8bjRu3GZGFTA8/2JGjJLwcpCd3Fi wKM2otJIbi6VoaDWsIT/jVg7zLUNAvQ3fDHYwhsVqgPJdLlOhiIntRAoHTH3KCTZ OOs26yBAE74Gd0ujau3xzBThw7hD60TKQ68oYYyAT5++Ss54K/M9fvS2ENcYoITY ujcOy02FgOJothfKsnO77CfeC8jGbu1Z1dOB/Et+iRec4xNQWAOwiun2hBHa0OfL GEiV7vJao0AQbAZPJAaiAWpsevUZElrZbbuvlJ7n+FbGKBjRyZVINeqjP5L6mVAC WZznUA4qiAS6gfD+NJhpYGWki8NhMfOF -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:44 2024 by rpki-client on console-ams.rpki-client.org