$ rpki-client -vvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft File: KTzh3tGmQEsAssDM-z886vshpQg.mft (raw, json) Hash identifier: w2u3qHC4hkEZoVY16KT+QkZ4E08DiSw8oFa4Xwt/7uo= Subject key identifier: D5:E5:0A:63:34:A1:BD:14:13:5E:78:1A:12:8E:47:9D:80:BA:0B:62 Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08 Certificate issuer: /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft Manifest number: 47 Signing time: Sat 23 Nov 2024 05:17:42 +0000 Manifest this update: Sat 23 Nov 2024 05:17:42 +0000 Manifest next update: Sat 30 Nov 2024 05:17:42 +0000 Files and hashes: 1: KTzh3tGmQEsAssDM-z886vshpQg.crl (hash: KxAmlqRAS2TQZCvmDvCuATJxECx2v5e6CrGIA8SkaIk=) 2: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (hash: M9SMB7jrl3DCJBDHj0otMuwBBH52v1DYheoMwHI+3Dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508 Validity Not Before: Nov 23 05:17:42 2024 GMT Not After : Nov 30 05:17:42 2024 GMT Subject: CN=67416576-f24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:9d:44:4f:0c:60:b5:8e:4e:58:38:ba:b4: e0:09:6a:6e:9e:72:30:91:f6:5c:34:fd:36:7e:9a: 32:fd:d2:43:25:ce:76:51:b0:ee:87:48:b4:03:93: a7:d6:3b:4c:f7:d0:f8:02:ce:90:53:49:be:84:6f: 23:8b:2d:90:f6:4b:cc:28:8e:c7:a3:9b:6e:f0:fc: 63:83:6a:e9:28:09:1f:86:e5:0e:9c:bd:51:f7:a8: 52:0e:b7:90:c7:35:5d:41:d6:36:2c:d0:27:d5:10: 2c:82:10:dd:2b:2a:15:b9:40:c6:15:1f:aa:8d:a3: 71:9c:c9:dd:c4:f8:3c:ab:18:2f:1e:6b:10:45:e8: b9:6d:42:35:f3:7f:14:10:1e:ad:21:24:77:57:16: 59:0b:7e:1d:4b:c2:c0:22:3a:60:42:14:1f:0a:bd: e1:bf:e7:dc:63:62:e0:ab:33:83:77:94:94:c8:5e: 35:12:2d:25:24:7d:55:f2:d1:47:03:94:3a:6a:9c: 10:46:05:c8:d4:4b:dd:27:2b:3a:95:39:65:2c:d6: 42:7c:a3:59:cd:17:ba:a7:a0:ac:41:af:aa:69:e1: 80:ef:91:33:e2:f4:e3:db:71:2f:08:a8:62:06:24: 22:c2:94:4c:b1:3e:8e:21:37:42:81:c4:78:a7:27: 38:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E5:0A:63:34:A1:BD:14:13:5E:78:1A:12:8E:47:9D:80:BA:0B:62 X509v3 Authority Key Identifier: keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e6:84:4c:0a:31:fd:cf:7e:de:57:bb:05:8b:61:5c:80:ea: c7:1e:0f:93:96:71:6c:09:aa:c0:f5:d1:df:0c:66:73:2e:06: cc:e9:15:40:cc:be:b0:71:98:f4:4c:64:1b:09:92:5f:49:74: d8:21:f9:00:0f:cf:16:ba:01:6a:92:c5:55:b8:34:5e:9d:84: 49:2d:cc:e4:6c:ed:0b:86:ba:bd:4d:cd:20:bb:15:5b:5a:16: 87:d0:84:71:bf:45:cc:a0:0c:d6:58:5d:24:bc:b8:57:02:df: a7:f8:08:06:70:90:5f:cd:a1:1f:fa:8a:da:65:ed:4a:d6:11: 36:b2:cc:8d:b3:b4:14:3c:f5:2a:59:b2:28:31:da:e8:ca:6d: de:4c:2d:22:73:72:2b:02:86:49:e3:64:5e:31:9e:65:4a:fa: d6:90:a8:f1:7f:0a:81:f5:b0:67:15:94:86:5f:22:03:1c:d4: d9:8f:e5:dc:f4:c0:06:04:77:fd:92:b6:a1:17:da:99:d9:6f: 68:64:91:87:ad:71:17:51:cf:fc:6a:c2:65:bb:51:38:cc:97: 2e:63:56:31:d9:d7:9f:ff:dd:da:18:88:4b:91:a6:9c:30:a6: ea:63:f9:8c:dc:68:85:ba:8f:ce:78:68:06:b0:fb:2b:8d:c3: 24:87:28:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTBFQzExMC8GA1UEBRMoMjkzQ0UxREVEMUE2NDA0QjAwQjJDMENDRkIzRjNDRUFG QjIxQTUwODAeFw0yNDExMjMwNTE3NDJaFw0yNDExMzAwNTE3NDJaMBgxFjAUBgNV BAMTDTY3NDE2NTc2LWYyNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/6p1ETwxgtY5OWDi6tOAJam6ecjCR9lw0/TZ+mjL90kMlznZRsO6HSLQDk6fW O0z30PgCzpBTSb6EbyOLLZD2S8wojsejm27w/GODaukoCR+G5Q6cvVH3qFIOt5DH NV1B1jYs0CfVECyCEN0rKhW5QMYVH6qNo3Gcyd3E+DyrGC8eaxBF6LltQjXzfxQQ Hq0hJHdXFlkLfh1LwsAiOmBCFB8KveG/59xjYuCrM4N3lJTIXjUSLSUkfVXy0UcD lDpqnBBGBcjUS90nKzqVOWUs1kJ8o1nNF7qnoKxBr6pp4YDvkTPi9OPbcS8IqGIG JCLClEyxPo4hN0KBxHinJzibAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1eUKYzSh vRQTXngaEo5HnYC6C2IwHwYDVR0jBBgwFoAUKTzh3tGmQEsAssDM+z886vshpQgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5MEVDLzI0QjhCRkUwM0U1 ODExRUY5OTZEQTMyMUM0RjlBRTAyL0tUemgzdEdtUUVzQXNzRE0tejg4NnZzaHBR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1R6aDN0R21RRXNBc3NETS16ODg2dnNocFFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 MEVDLzI0QjhCRkUwM0U1ODExRUY5OTZEQTMyMUM0RjlBRTAyL0tUemgzdEdtUUVz QXNzRE0tejg4NnZzaHBRZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABHmhEwKMf3Pft5XuwWLYVyA6sceD5OWcWwJqsD10d8MZnMuBszpFUDM vrBxmPRMZBsJkl9JdNgh+QAPzxa6AWqSxVW4NF6dhEktzORs7QuGur1NzSC7FVta FofQhHG/RcygDNZYXSS8uFcC36f4CAZwkF/NoR/6itpl7UrWETayzI2ztBQ89SpZ sigx2ujKbd5MLSJzcisChknjZF4xnmVK+taQqPF/CoH1sGcVlIZfIgMc1NmP5dz0 wAYEd/2StqEX2pnZb2hkkYetcRdRz/xqwmW7UTjMly5jVjHZ15//3doYiEuRppww pupj+YzcaIW6j854aAaw+yuNwySHKBc= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:09 2024 by rpki-client on console-ams.rpki-client.org